Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a3a2f33322d3332203d3e20323638383432.roa
File:                     323830343a356236633a3a2f33322d3332203d3e20323638383432.roa (raw, json)
Hash identifier:          rKQ8g0pf27A1/PZChx95SVxZPJgpnqzdFg9Q8ONvQEA=
Subject key identifier:   C3:90:E4:0A:BA:8B:D6:AD:87:72:37:6B:69:31:0B:A8:E0:9E:31:BC
Certificate issuer:       /CN=56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D
Certificate serial:       5CD1AE2AB070E96F182CE0A523B852C0E3125584
Authority key identifier: 56:EC:3C:FD:56:D8:A2:A7:E9:EA:72:5F:1A:F5:D8:4C:59:CC:56:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a3a2f33322d3332203d3e20323638383432.roa
Signing time:             Thu 06 Mar 2025 01:33:06 +0000
ROA not before:           Thu 06 Mar 2025 01:28:06 +0000
ROA not after:            Thu 05 Mar 2026 01:33:06 +0000
asID:                     268842
IP address blocks:        2804:5b6c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.crl
                          rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d1:ae:2a:b0:70:e9:6f:18:2c:e0:a5:23:b8:52:c0:e3:12:55:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D
        Validity
            Not Before: Mar  6 01:28:06 2025 GMT
            Not After : Mar  5 01:33:06 2026 GMT
        Subject: CN=C390E40ABA8BD6AD8772376B69310BA8E09E31BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:32:41:40:ca:4c:c1:96:27:d3:c8:89:3b:
                    6c:69:f7:2c:a7:bf:1d:74:48:f7:a5:08:69:b8:08:
                    e2:d2:7d:6b:c9:50:83:91:ee:5b:39:b7:2f:a4:32:
                    b5:20:bf:94:aa:42:9d:00:a9:fa:88:be:c3:eb:92:
                    ab:21:e0:f1:22:bc:65:f3:66:94:7c:76:e8:27:60:
                    d9:32:1e:b6:06:fa:8b:73:7f:03:a0:4b:dd:06:ed:
                    c3:b4:3a:7b:1c:63:8e:94:e8:22:e0:f6:b2:b9:e3:
                    48:b4:14:58:ab:22:f2:cb:cb:d3:3f:3c:73:75:f4:
                    72:3f:e1:9b:79:4b:0e:d6:8f:86:d4:8a:10:4a:d4:
                    52:3b:b9:86:a4:2a:ae:cf:22:97:5a:1a:ce:81:fc:
                    b2:da:da:89:35:df:c9:70:2e:42:6d:82:3f:23:e1:
                    9e:20:1d:56:0d:93:73:8c:52:6d:3d:08:0f:8e:de:
                    6c:ef:66:99:01:8a:7a:45:3d:6c:0a:16:d6:42:e3:
                    c7:51:00:da:66:0f:48:4e:62:af:1e:69:89:80:c9:
                    6b:61:a2:e8:a5:7e:db:30:27:db:22:08:59:20:a8:
                    0c:3c:40:b0:33:1c:96:d6:23:3d:fe:9b:b2:fe:77:
                    7a:04:99:c0:94:c4:d1:2c:06:ff:ec:18:71:54:05:
                    47:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:90:E4:0A:BA:8B:D6:AD:87:72:37:6B:69:31:0B:A8:E0:9E:31:BC
            X509v3 Authority Key Identifier:
                keyid:56:EC:3C:FD:56:D8:A2:A7:E9:EA:72:5F:1A:F5:D8:4C:59:CC:56:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/323830343a356236633a3a2f33322d3332203d3e20323638383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:21:8a:b6:85:e1:e9:68:6d:3b:23:f5:6f:5f:d7:ed:6a:b9:
         2b:26:f4:07:19:62:b8:7d:a1:c4:09:c5:b4:f2:70:26:8d:7f:
         13:e8:30:2b:8d:b6:2a:49:ca:a8:53:1e:b6:0c:db:7e:8f:65:
         8d:27:40:f5:ad:43:92:51:7f:df:8d:19:34:e7:dc:49:e4:de:
         8c:e8:f7:fc:1e:47:7c:35:5b:81:5d:ef:dc:fa:ed:74:50:64:
         9d:c3:6d:d4:ce:29:31:44:3c:73:81:b1:7c:05:10:3d:2a:ec:
         1c:6c:c5:cf:2d:04:32:3e:6b:84:75:0b:a6:03:e5:f2:54:2e:
         19:7f:fb:e8:1c:a4:86:83:b9:b3:9a:b5:78:5e:23:a8:3a:74:
         dd:2c:dc:26:21:f8:e3:33:89:db:f0:03:fa:d7:3f:6f:95:09:
         91:d2:af:b9:92:4a:df:d0:f5:7c:dd:cb:b4:d2:9a:32:9b:ed:
         5b:dc:f4:1e:5d:35:45:8c:39:fb:64:3d:dc:71:c4:50:03:7f:
         d4:0d:66:0d:ea:9b:cc:0b:13:e2:f2:d1:0c:36:78:bb:a4:a7:
         70:a8:22:0e:02:39:ab:68:f5:3b:9f:c7:8d:24:17:c4:8d:75:
         6e:15:f0:39:7a:0c:92:96:5f:d8:ad:43:9b:b6:03:33:e8:0e:
         b8:bd:8e:68
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXNGuKrBw6W8YLOClI7hSwOMSVYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZFQzNDRkQ1NkQ4QTJBN0U5RUE3MjVGMUFGNUQ4NEM1
OUNDNTYxRDAeFw0yNTAzMDYwMTI4MDZaFw0yNjAzMDUwMTMzMDZaMDMxMTAvBgNV
BAMTKEMzOTBFNDBBQkE4QkQ2QUQ4NzcyMzc2QjY5MzEwQkE4RTA5RTMxQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ojJBQMpMwZYn08iJO2xp9yyn
vx10SPelCGm4COLSfWvJUIOR7ls5ty+kMrUgv5SqQp0AqfqIvsPrkqsh4PEivGXz
ZpR8dugnYNkyHrYG+otzfwOgS90G7cO0OnscY46U6CLg9rK540i0FFirIvLLy9M/
PHN19HI/4Zt5Sw7Wj4bUihBK1FI7uYakKq7PIpdaGs6B/LLa2ok138lwLkJtgj8j
4Z4gHVYNk3OMUm09CA+O3mzvZpkBinpFPWwKFtZC48dRANpmD0hOYq8eaYmAyWth
ouilftswJ9siCFkgqAw8QLAzHJbWIz3+m7L+d3oEmcCUxNEsBv/sGHFUBUcXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUw5DkCrqL1q2HcjdraTELqOCeMbwwHwYDVR0j
BBgwFoAUVuw8/VbYoqfp6nJfGvXYTFnMVh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjNlVGhOTDhRS0YzU2F4cGhuUDNvalJMaERBQmZaaG9vaTJIUUgyMXg4
SHEvMS81NkVDM0NGRDU2RDhBMkE3RTlFQTcyNUYxQUY1RDg0QzU5Q0M1NjFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2RUMzQ0ZENTZEOEEyQTdF
OUVBNzI1RjFBRjVEODRDNTlDQzU2MUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYzZVRoTkw4UUtGM1NheHBoblAzb2pSTGhEQUJmWmhvb2kySFFIMjF4OEhxLzEv
MzIzODMwMzQzYTM1NjIzNjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzgzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARbbDANBgkqhkiG9w0BAQsFAAOCAQEAVCGKtoXh
6WhtOyP1b1/X7Wq5Kyb0BxliuH2hxAnFtPJwJo1/E+gwK422KknKqFMetgzbfo9l
jSdA9a1DklF/340ZNOfcSeTejOj3/B5HfDVbgV3v3PrtdFBkncNt1M4pMUQ8c4Gx
fAUQPSrsHGzFzy0EMj5rhHULpgPl8lQuGX/76BykhoO5s5q1eF4jqDp03SzcJiH4
4zOJ2/AD+tc/b5UJkdKvuZJK39D1fN3LtNKaMpvtW9z0Hl01RYw5+2Q93HHEUAN/
1A1mDeqbzAsT4vLRDDZ4u6SncKgiDgI5q2j1O5/HjSQXxI11bhXwOXoMkpZf2K1D
m7YDM+gOuL2OaA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:15 2025 by rpki-client on console.sobornost.net