Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a666666663a3a2f34382d3438203d3e20323636353434.roa
File:                     323830343a336461343a666666663a3a2f34382d3438203d3e20323636353434.roa (raw, json)
Hash identifier:          GS2xXRNMwHse9m4AUjP2BjRHrpXrXQJ6LsBNXTcSD6o=
Subject key identifier:   19:BD:4B:CC:7C:60:C3:DF:51:4C:FF:D7:AD:B8:F1:29:4A:6C:C3:31
Certificate issuer:       /CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
Certificate serial:       11F6CAF442441FF96EE73B17F644C729F23448A7
Authority key identifier: 2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a666666663a3a2f34382d3438203d3e20323636353434.roa
Signing time:             Fri 14 Feb 2025 17:48:30 +0000
ROA not before:           Fri 14 Feb 2025 17:43:30 +0000
ROA not after:            Fri 13 Feb 2026 17:48:30 +0000
asID:                     266544
IP address blocks:        2804:3da4:ffff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl
                          rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f6:ca:f4:42:44:1f:f9:6e:e7:3b:17:f6:44:c7:29:f2:34:48:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
        Validity
            Not Before: Feb 14 17:43:30 2025 GMT
            Not After : Feb 13 17:48:30 2026 GMT
        Subject: CN=19BD4BCC7C60C3DF514CFFD7ADB8F1294A6CC331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:78:e3:6c:5a:43:47:bf:fa:cb:22:ad:c8:cc:
                    c4:5d:7f:39:5c:2b:c4:a4:bf:46:b9:38:4b:93:1c:
                    e7:db:98:ac:52:c9:d9:1d:a0:c3:b6:8d:57:a8:db:
                    93:70:3b:a5:f8:94:f1:ed:ea:7b:51:39:b8:f7:82:
                    17:c1:28:0d:f7:a1:26:85:71:0f:56:cb:47:ea:89:
                    c8:fb:4a:69:b5:6e:5a:78:9a:c3:f7:f0:e3:ed:1a:
                    95:38:83:47:62:ec:6a:ef:30:f7:f3:f9:ec:e9:90:
                    7e:9e:93:77:1a:5c:e2:24:5e:10:23:cb:19:2e:8b:
                    d5:0a:5d:d3:d6:eb:38:f1:d8:17:8b:94:56:3e:60:
                    aa:9d:57:3e:7a:76:2b:be:f1:dc:c3:ba:3c:8c:af:
                    ac:b6:b8:ab:93:a5:9e:41:c7:8d:f9:c3:ed:71:18:
                    6b:1d:0c:2f:7e:69:de:8e:5c:f4:a6:e8:1c:09:4f:
                    f7:25:e0:40:d5:db:9e:30:8d:6e:58:3f:f8:4b:6e:
                    64:3e:41:c1:3a:1d:52:1a:29:11:5c:66:9a:72:b1:
                    80:5b:e1:7d:50:b2:13:8b:9f:ed:f5:3c:8e:65:e4:
                    6b:e5:b2:52:3d:83:74:bc:19:ec:31:7d:8c:6a:6a:
                    a0:aa:1b:b2:c2:4b:87:74:bb:c7:6c:61:09:9d:be:
                    1d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BD:4B:CC:7C:60:C3:DF:51:4C:FF:D7:AD:B8:F1:29:4A:6C:C3:31
            X509v3 Authority Key Identifier:
                keyid:2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a666666663a3a2f34382d3438203d3e20323636353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3da4:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:48:fd:d0:29:0f:fa:e2:f5:6d:1b:7a:65:ef:ba:3e:04:0c:
         9d:0d:a3:f0:87:2b:d5:0c:c6:7a:1d:3f:6f:73:ed:e7:a1:d5:
         04:b9:df:89:ce:6a:4e:e4:64:5a:22:28:25:a2:d2:c0:4e:9d:
         0d:ce:3f:49:89:51:a3:4f:5a:aa:f9:bb:60:1f:40:45:23:50:
         16:a3:8b:b3:28:69:bc:a8:60:21:df:6e:82:93:39:62:69:ad:
         09:b4:00:6d:8b:38:63:59:58:41:d1:c3:de:d8:d5:9e:1d:86:
         15:e5:3e:fe:55:26:ad:54:d1:9d:39:4a:fa:08:7f:39:b2:87:
         75:56:eb:8a:d3:39:ac:d0:0f:77:55:26:49:87:10:1c:b3:ad:
         2c:33:cb:63:77:a1:42:ab:12:a0:3d:bd:60:f5:c2:c5:c3:df:
         61:36:9f:79:ad:a2:de:79:51:e1:64:97:d6:c3:11:b9:66:61:
         a5:3f:62:91:8c:61:e2:49:86:d7:6a:77:0e:9c:77:eb:ce:01:
         0a:cb:02:47:b7:31:d0:a0:f8:6b:74:8b:3c:97:32:cb:fe:ad:
         4d:eb:39:92:1f:4c:15:b0:ae:98:c3:2a:a0:4b:53:d3:f3:49:
         f1:66:2b:42:0b:18:1e:84:3c:1b:49:62:ab:e4:4f:6e:05:74:
         7e:c6:c0:85
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUEfbK9EJEH/lu5zsX9kTHKfI0SKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQxQkMzN0Q4NDdENTFGQzc2Nzc2QThFMkEzMkM4NTFC
MzkxRERFRjAeFw0yNTAyMTQxNzQzMzBaFw0yNjAyMTMxNzQ4MzBaMDMxMTAvBgNV
BAMTKDE5QkQ0QkNDN0M2MEMzREY1MTRDRkZEN0FEQjhGMTI5NEE2Q0MzMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHeONsWkNHv/rLIq3IzMRdfzlc
K8Skv0a5OEuTHOfbmKxSydkdoMO2jVeo25NwO6X4lPHt6ntRObj3ghfBKA33oSaF
cQ9Wy0fqicj7Smm1blp4msP38OPtGpU4g0di7GrvMPfz+ezpkH6ek3caXOIkXhAj
yxkui9UKXdPW6zjx2BeLlFY+YKqdVz56diu+8dzDujyMr6y2uKuTpZ5Bx435w+1x
GGsdDC9+ad6OXPSm6BwJT/cl4EDV254wjW5YP/hLbmQ+QcE6HVIaKRFcZppysYBb
4X1QshOLn+31PI5l5GvlslI9g3S8GewxfYxqaqCqG7LCS4d0u8dsYQmdvh3pAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUGb1LzHxgw99RTP/XrbjxKUpswzEwHwYDVR0j
BBgwFoAULRvDfYR9Ufx2d2qOKjLIUbOR3e8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVg1TDdWZUhjSHROMTlwRVpyV3VMNkdpZjNEdk1SbzNBUVNKOWdMWTZ4
TG4vMC8yRDFCQzM3RDg0N0Q1MUZDNzY3NzZBOEUyQTMyQzg1MUIzOTFEREVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEMUJDMzdEODQ3RDUxRkM3
Njc3NkE4RTJBMzJDODUxQjM5MURERUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVYNUw3VmVIY0h0TjE5cEVacld1TDZHaWYzRHZNUm8zQVFTSjlnTFk2eExuLzAv
MzIzODMwMzQzYTMzNjQ2MTM0M2E2NjY2NjY2NjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNjM1MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEPaT//zANBgkqhkiG9w0BAQsF
AAOCAQEATkj90CkP+uL1bRt6Ze+6PgQMnQ2j8Icr1QzGeh0/b3Pt56HVBLnfic5q
TuRkWiIoJaLSwE6dDc4/SYlRo09aqvm7YB9ARSNQFqOLsyhpvKhgId9ugpM5Ymmt
CbQAbYs4Y1lYQdHD3tjVnh2GFeU+/lUmrVTRnTlK+gh/ObKHdVbritM5rNAPd1Um
SYcQHLOtLDPLY3ehQqsSoD29YPXCxcPfYTafea2i3nlR4WSX1sMRuWZhpT9ikYxh
4kmG12p3Dpx3684BCssCR7cx0KD4a3SLPJcyy/6tTes5kh9MFbCumMMqoEtT0/NJ
8WYrQgsYHoQ8G0liq+RPbgV0fsbAhQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:07 2025 by rpki-client on console.sobornost.net