Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/323830343a313034383a3a2f33322d3438203d3e20323633363238.roa
File:                     323830343a313034383a3a2f33322d3438203d3e20323633363238.roa (raw, json)
Hash identifier:          WAyOnj8AKGlR6rPplsCGE92JQFfgvEdIbiM//cnZXe4=
Subject key identifier:   17:AB:C7:54:CB:D1:E4:C0:F2:74:9D:C0:7E:D0:AA:F2:4C:18:EC:D8
Certificate issuer:       /CN=82570D137F4A2CB963DFFC57F5D09035250E3A33
Certificate serial:       1FFEF270B3742519E8332213A842B5D26356A16F
Authority key identifier: 82:57:0D:13:7F:4A:2C:B9:63:DF:FC:57:F5:D0:90:35:25:0E:3A:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/323830343a313034383a3a2f33322d3438203d3e20323633363238.roa
Signing time:             Thu 06 Mar 2025 16:40:32 +0000
ROA not before:           Thu 06 Mar 2025 16:35:32 +0000
ROA not after:            Thu 05 Mar 2026 16:40:32 +0000
asID:                     263628
IP address blocks:        2804:1048::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.crl
                          rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 19:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fe:f2:70:b3:74:25:19:e8:33:22:13:a8:42:b5:d2:63:56:a1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82570D137F4A2CB963DFFC57F5D09035250E3A33
        Validity
            Not Before: Mar  6 16:35:32 2025 GMT
            Not After : Mar  5 16:40:32 2026 GMT
        Subject: CN=17ABC754CBD1E4C0F2749DC07ED0AAF24C18ECD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:66:89:d4:a3:90:6a:d4:64:4c:4d:10:74:
                    ac:c1:e3:31:31:8d:89:dd:8f:8a:9e:60:03:57:47:
                    1d:d6:55:68:21:da:71:89:f8:24:8e:19:c9:f3:8d:
                    40:67:64:a8:f3:27:1b:8b:8e:4c:45:94:4f:71:32:
                    d4:4e:58:cb:6c:08:fe:30:c0:5a:36:89:c7:9b:64:
                    59:9b:da:b9:b7:fe:31:e1:fd:6c:2a:58:75:ea:c5:
                    d0:be:c5:e2:d4:b6:31:d2:e9:6a:b4:43:b3:c6:4f:
                    d6:1b:66:66:87:65:2d:c0:8c:c0:81:24:61:d5:9b:
                    01:16:e4:18:73:86:d2:c2:8c:e9:8a:1a:cf:b2:14:
                    e0:20:f2:67:d0:e4:d4:73:05:60:c3:bd:d7:ce:18:
                    1a:fb:85:a7:f6:a7:3b:7f:79:05:46:21:5b:ca:6a:
                    ea:2c:3f:95:4d:6d:56:ce:35:4a:ab:f3:1b:7a:c7:
                    63:e3:e9:78:8b:11:ed:a0:0f:12:09:4a:6f:6a:46:
                    46:fd:13:76:da:93:5d:ba:f5:23:69:f3:7c:11:57:
                    d4:d0:15:49:68:fa:97:bc:05:f2:be:d0:90:ca:a1:
                    e9:4e:b9:64:41:39:b2:a8:32:87:28:48:e5:10:6d:
                    70:bf:bb:78:8c:a7:a9:b6:42:13:1b:b3:ae:58:5a:
                    c0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AB:C7:54:CB:D1:E4:C0:F2:74:9D:C0:7E:D0:AA:F2:4C:18:EC:D8
            X509v3 Authority Key Identifier:
                keyid:82:57:0D:13:7F:4A:2C:B9:63:DF:FC:57:F5:D0:90:35:25:0E:3A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82570D137F4A2CB963DFFC57F5D09035250E3A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/66Racr86XFkPboVSwfCsfeCSoMjVah8GzLzgZDuKQguC/1/323830343a313034383a3a2f33322d3438203d3e20323633363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1048::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:bc:30:16:ce:b6:0e:2f:08:ab:59:a4:9f:1a:12:ee:ef:b1:
         fd:58:eb:f3:13:eb:06:2b:48:c5:5a:73:18:91:c6:0b:12:f6:
         2c:42:1e:fe:e3:5c:f3:01:0e:b9:35:2d:c1:73:8b:eb:09:c7:
         6a:79:fb:b5:67:f5:16:a4:cf:a9:2a:d5:4f:d1:6f:be:c7:70:
         69:1e:93:cb:b0:94:d5:05:93:ef:ef:d4:b4:c4:15:a9:d1:44:
         d2:aa:2c:3d:ca:d6:24:cd:4a:7a:b4:36:9f:b8:67:68:73:ac:
         d3:cf:3c:f5:8a:08:8d:0a:3a:9a:ab:9c:da:cd:a2:49:ae:e3:
         09:a7:d6:f7:18:21:f6:97:25:e4:a1:ad:15:e8:08:14:4f:e3:
         22:8f:c6:10:3d:df:52:0c:6b:63:40:2a:e2:33:11:1e:db:6b:
         8f:4f:00:47:da:6b:9a:32:55:dc:1d:86:d4:1c:bf:e3:35:6b:
         48:5f:04:86:b4:51:d9:df:71:11:4c:39:92:05:67:c8:61:41:
         0a:cd:25:5c:be:b4:13:fe:22:28:97:87:96:fa:30:36:02:a4:
         fc:6e:ed:9b:cc:bd:c5:65:32:77:53:7c:fb:73:f4:41:e1:6a:
         e5:fc:70:70:db:0d:5c:c5:ee:2b:16:6a:dc:bb:16:3e:db:43:
         ea:13:39:1f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUH/7ycLN0JRnoMyITqEK10mNWoW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1NzBEMTM3RjRBMkNCOTYzREZGQzU3RjVEMDkwMzUy
NTBFM0EzMzAeFw0yNTAzMDYxNjM1MzJaFw0yNjAzMDUxNjQwMzJaMDMxMTAvBgNV
BAMTKDE3QUJDNzU0Q0JEMUU0QzBGMjc0OURDMDdFRDBBQUYyNEMxOEVDRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCuGaJ1KOQatRkTE0QdKzB4zEx
jYndj4qeYANXRx3WVWgh2nGJ+CSOGcnzjUBnZKjzJxuLjkxFlE9xMtROWMtsCP4w
wFo2icebZFmb2rm3/jHh/WwqWHXqxdC+xeLUtjHS6Wq0Q7PGT9YbZmaHZS3AjMCB
JGHVmwEW5BhzhtLCjOmKGs+yFOAg8mfQ5NRzBWDDvdfOGBr7haf2pzt/eQVGIVvK
auosP5VNbVbONUqr8xt6x2Pj6XiLEe2gDxIJSm9qRkb9E3bak1269SNp83wRV9TQ
FUlo+pe8BfK+0JDKoelOuWRBObKoMocoSOUQbXC/u3iMp6m2QhMbs65YWsDRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUF6vHVMvR5MDydJ3AftCq8kwY7NgwHwYDVR0j
BBgwFoAUglcNE39KLLlj3/xX9dCQNSUOOjMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjZSYWNyODZYRmtQYm9WU3dmQ3NmZUNTb01qVmFoOEd6THpnWkR1S1Fn
dUMvMS84MjU3MEQxMzdGNEEyQ0I5NjNERkZDNTdGNUQwOTAzNTI1MEUzQTMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgyNTcwRDEzN0Y0QTJDQjk2
M0RGRkM1N0Y1RDA5MDM1MjUwRTNBMzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY2UmFjcjg2WEZrUGJvVlN3ZkNzZmVDU29NalZhaDhHekx6Z1pEdUtRZ3VDLzEv
MzIzODMwMzQzYTMxMzAzNDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzYzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQQSDANBgkqhkiG9w0BAQsFAAOCAQEAZLwwFs62
Di8Iq1mknxoS7u+x/Vjr8xPrBitIxVpzGJHGCxL2LEIe/uNc8wEOuTUtwXOL6wnH
ann7tWf1FqTPqSrVT9FvvsdwaR6Ty7CU1QWT7+/UtMQVqdFE0qosPcrWJM1KerQ2
n7hnaHOs08889YoIjQo6mquc2s2iSa7jCafW9xgh9pcl5KGtFegIFE/jIo/GED3f
UgxrY0Aq4jMRHttrj08AR9prmjJV3B2G1By/4zVrSF8EhrRR2d9xEUw5kgVnyGFB
Cs0lXL60E/4iKJeHlvowNgKk/G7tm8y9xWUyd1N8+3P0QeFq5fxwcNsNXMXuKxZq
3LsWPttD6hM5Hw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:07 2025 by rpki-client on console.sobornost.net