Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          IdGvaUUhyxV3jDAzEOBZm/GsEqNwcrNLu3gOdHLmxN8=
Subject key identifier:   45:41:B0:F9:7C:52:73:CC:B2:8A:DD:6F:A3:B3:0B:82:DA:BA:AE:7A
Certificate issuer:       /CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
Certificate serial:       3176378AFDA2E90CD0DD9397CCE19E0A9B6C4BFC
Authority key identifier: 62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Thu 13 Feb 2025 20:50:12 +0000
ROA not before:           Thu 13 Feb 2025 20:45:12 +0000
ROA not after:            Thu 12 Feb 2026 20:50:12 +0000
asID:                     263059
IP address blocks:        2804:934::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 12:23:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:76:37:8a:fd:a2:e9:0c:d0:dd:93:97:cc:e1:9e:0a:9b:6c:4b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62EBCE2DBD62515337C9AC2D25F417000E1B53E0
        Validity
            Not Before: Feb 13 20:45:12 2025 GMT
            Not After : Feb 12 20:50:12 2026 GMT
        Subject: CN=4541B0F97C5273CCB28ADD6FA3B30B82DABAAE7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ab:74:5d:7d:d0:4a:ec:e3:c1:58:11:40:1d:
                    05:0a:09:5c:f7:22:b6:0c:c5:52:59:e9:9f:0e:46:
                    fa:3b:ad:af:49:02:2f:53:fb:86:66:da:4c:21:78:
                    38:46:17:d7:34:29:93:4c:f5:c9:f1:a5:e6:dd:93:
                    f3:2d:6e:62:42:15:48:26:5a:8b:67:1f:96:d8:b9:
                    e4:dc:77:6e:fd:69:b9:f6:ea:e5:d4:22:e8:14:21:
                    75:0a:be:e0:75:04:10:10:b1:00:13:01:05:5d:66:
                    a2:1e:bd:bc:49:e0:2f:25:28:3c:fc:10:e1:e5:15:
                    19:67:6b:a5:4f:a1:0d:37:df:7c:e6:9b:15:7c:e6:
                    df:d2:17:c8:b6:cd:35:2c:e7:d1:0d:65:5d:8a:34:
                    52:c6:27:99:7a:34:d0:11:e2:88:42:b0:34:95:6c:
                    00:74:a6:91:98:76:9c:90:0e:a2:b3:18:ca:0c:cb:
                    bd:49:f2:6e:5d:a1:d9:5e:d6:83:11:4d:26:dc:6a:
                    a0:ff:56:79:91:e3:de:6c:e9:cd:cf:d8:c3:d3:84:
                    e9:e7:ec:ee:71:a8:a9:80:2d:9e:f6:1f:11:0f:27:
                    0f:6e:8b:22:70:3d:5c:05:6d:7a:85:c5:86:fb:e1:
                    e1:60:ff:ea:ce:46:37:a9:bc:54:83:c6:18:a1:8b:
                    90:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:41:B0:F9:7C:52:73:CC:B2:8A:DD:6F:A3:B3:0B:82:DA:BA:AE:7A
            X509v3 Authority Key Identifier:
                keyid:62:EB:CE:2D:BD:62:51:53:37:C9:AC:2D:25:F4:17:00:0E:1B:53:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62EBCE2DBD62515337C9AC2D25F417000E1B53E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934::/36

    Signature Algorithm: sha256WithRSAEncryption
         95:4a:09:c4:94:6a:83:2e:3c:a0:f8:6c:a0:d9:97:4c:fb:9b:
         d8:0c:42:77:53:67:4a:a8:5d:7b:7b:f5:bb:9d:53:16:07:70:
         6c:59:3d:86:0c:c4:bf:5a:38:61:ae:f3:32:e2:26:f6:6b:04:
         cf:95:57:0c:a5:45:48:21:54:bf:89:bd:77:7b:71:81:98:f3:
         b1:90:09:13:1d:88:35:9e:a4:3d:f1:6b:ae:17:ee:82:f7:3c:
         8a:5e:bc:75:ee:d1:18:1c:8e:5b:00:86:f6:c2:47:5c:1d:ff:
         88:28:97:10:51:5b:76:8b:73:4d:49:a2:3e:43:03:11:7d:81:
         8e:20:9d:f0:8a:67:11:9a:e6:bb:71:ef:c2:1b:d0:6d:d5:bd:
         38:bc:7d:43:e9:92:92:63:90:cb:74:1b:37:ec:df:df:6f:bd:
         00:3e:2a:b4:aa:96:4b:6e:3b:e6:70:d8:c5:b3:e6:64:4a:52:
         12:1a:3e:63:ab:85:6f:f0:0a:79:9d:92:25:f9:58:d6:80:2f:
         03:63:a8:db:87:1e:ec:4f:97:2a:c0:8b:f1:e5:18:62:de:c6:
         e3:a3:2b:1c:56:10:32:f5:f2:c7:ca:7b:95:4c:f3:9d:e1:87:
         cd:69:d7:24:ea:72:37:66:7c:4e:28:85:02:97:75:c5:df:6b:
         ac:00:f2:35
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMXY3iv2i6QzQ3ZOXzOGeCptsS/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJFQkNFMkRCRDYyNTE1MzM3QzlBQzJEMjVGNDE3MDAw
RTFCNTNFMDAeFw0yNTAyMTMyMDQ1MTJaFw0yNjAyMTIyMDUwMTJaMDMxMTAvBgNV
BAMTKDQ1NDFCMEY5N0M1MjczQ0NCMjhBREQ2RkEzQjMwQjgyREFCQUFFN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0q3RdfdBK7OPBWBFAHQUKCVz3
IrYMxVJZ6Z8ORvo7ra9JAi9T+4Zm2kwheDhGF9c0KZNM9cnxpebdk/MtbmJCFUgm
WotnH5bYueTcd279abn26uXUIugUIXUKvuB1BBAQsQATAQVdZqIevbxJ4C8lKDz8
EOHlFRlna6VPoQ0333zmmxV85t/SF8i2zTUs59ENZV2KNFLGJ5l6NNAR4ohCsDSV
bAB0ppGYdpyQDqKzGMoMy71J8m5dodle1oMRTSbcaqD/VnmR495s6c3P2MPThOnn
7O5xqKmALZ72HxEPJw9uiyJwPVwFbXqFxYb74eFg/+rORjepvFSDxhihi5CNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURUGw+XxSc8yyit1vo7MLgtq6rnowHwYDVR0j
BBgwFoAUYuvOLb1iUVM3yawtJfQXAA4bU+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u
NnQvMC82MkVCQ0UyREJENjI1MTUzMzdDOUFDMkQyNUY0MTcwMDBFMUI1M0UwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyRUJDRTJEQkQ2MjUxNTMz
N0M5QUMyRDI1RjQxNzAwMEUxQjUzRTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv
MzIzODMwMzQzYTM5MzMzNDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzYzMzMw
MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBCgECTQAMA0GCSqGSIb3DQEBCwUAA4IBAQCVSgnElGqD
Ljyg+Gyg2ZdM+5vYDEJ3U2dKqF17e/W7nVMWB3BsWT2GDMS/WjhhrvMy4ib2awTP
lVcMpUVIIVS/ib13e3GBmPOxkAkTHYg1nqQ98WuuF+6C9zyKXrx17tEYHI5bAIb2
wkdcHf+IKJcQUVt2i3NNSaI+QwMRfYGOIJ3wimcRmua7ce/CG9Bt1b04vH1D6ZKS
Y5DLdBs37N/fb70APiq0qpZLbjvmcNjFs+ZkSlISGj5jq4Vv8Ap5nZIl+VjWgC8D
Y6jbhx7sT5cqwIvx5Rhi3sbjoyscVhAy9fLHynuVTPOd4YfNadck6nI3ZnxOKIUC
l3XF32usAPI1
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:15 2025 by rpki-client on console.sobornost.net