Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3a2f34302d3430203d3e203533303437.roa
File:                     323830343a3666303a3a2f34302d3430203d3e203533303437.roa (raw, json)
Hash identifier:          W+29oA70T/42wJvi9+qUQani0QC7f47ya+oK26d+Uto=
Subject key identifier:   E5:3C:C1:67:E1:CF:9C:B2:2A:88:44:4F:85:FC:F8:D5:D7:9C:3B:DE
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       1FD8406F8CAF1F39209DE80E4771658C542EB445
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3a2f34302d3430203d3e203533303437.roa
Signing time:             Thu 05 Dec 2024 12:56:42 +0000
ROA not before:           Thu 05 Dec 2024 12:51:42 +0000
ROA not after:            Thu 04 Dec 2025 12:56:42 +0000
asID:                     53047
IP address blocks:        2804:6f0::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 13:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d8:40:6f:8c:af:1f:39:20:9d:e8:0e:47:71:65:8c:54:2e:b4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Dec  5 12:51:42 2024 GMT
            Not After : Dec  4 12:56:42 2025 GMT
        Subject: CN=E53CC167E1CF9CB22A88444F85FCF8D5D79C3BDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:af:62:8a:da:51:d0:e1:fa:cf:ef:1f:8f:cd:
                    f3:b9:3f:23:47:dd:98:fb:2a:7c:2c:e9:4e:a4:af:
                    f1:c6:bd:42:f5:86:8c:8b:fe:ed:5c:27:4b:de:0d:
                    b0:38:6a:03:b1:2b:10:a0:14:69:95:96:dc:35:79:
                    38:13:43:1f:09:c5:77:39:10:fc:1d:ea:c2:9a:1b:
                    fa:56:f5:8e:a5:8c:a3:56:66:65:0f:66:a0:16:c4:
                    c1:c8:5c:55:44:26:f1:f2:c1:9a:5f:7c:df:38:3e:
                    24:27:2b:8b:0a:0d:d0:86:89:f9:fd:f6:7e:e1:7b:
                    da:9d:d5:a7:da:38:82:d7:1d:13:b9:1b:45:79:f6:
                    fa:2b:7f:3c:bb:55:79:75:5e:78:ae:05:58:26:65:
                    92:81:d0:59:69:84:9e:a5:bb:b2:c2:3c:29:02:8c:
                    d0:ca:68:6a:4b:cb:20:68:a5:fa:80:e1:a0:fa:a2:
                    42:ea:fb:e3:bd:48:ef:5c:22:6b:56:4b:de:5c:68:
                    a5:6c:54:87:b4:cd:da:bb:19:6b:07:ab:93:42:02:
                    25:9e:cd:32:53:44:7f:6f:cc:45:06:eb:31:52:3f:
                    23:69:18:e3:37:3d:bf:e8:59:34:47:ae:84:c9:2a:
                    dd:c1:59:7e:1b:8a:11:cf:da:99:23:bf:4a:eb:ae:
                    a4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3C:C1:67:E1:CF:9C:B2:2A:88:44:4F:85:FC:F8:D5:D7:9C:3B:DE
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3a2f34302d3430203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f0::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:26:8c:d6:aa:6e:b8:60:79:ad:ad:6b:7f:a6:61:7e:e9:5c:
         51:d5:8c:38:e0:8b:22:78:e1:0e:f1:29:12:b8:da:0b:eb:7b:
         94:4d:80:c9:4f:2e:65:b4:03:d7:66:38:81:27:33:a7:20:5f:
         6f:bc:b7:db:b4:35:db:16:38:af:dd:ba:a1:ce:fb:a8:c8:19:
         98:0f:bc:7c:f7:a1:15:54:40:f9:b0:51:5c:9c:8f:ec:5c:bb:
         2c:1e:a8:88:7c:0f:89:32:c5:a8:51:60:94:ba:25:db:8a:7a:
         8d:25:a9:59:34:34:c8:d0:3c:06:50:27:d8:dd:1b:7d:99:58:
         96:92:1e:54:85:14:9e:f9:04:4b:67:d7:ae:ed:3f:4e:c1:07:
         2b:14:30:ae:b9:46:51:be:8a:40:50:82:d8:7a:25:5b:d5:68:
         c6:d9:78:c2:04:22:be:4f:a3:0b:d6:e6:6d:48:75:95:d7:3f:
         bc:bc:4d:ed:d2:56:93:91:4e:3b:af:90:eb:ef:d4:89:60:0d:
         34:85:4e:e7:d0:16:8b:01:b1:e1:8b:e9:7f:27:7c:0d:ae:da:
         54:c6:06:61:bf:2d:c9:eb:82:c5:11:5b:b5:9b:2e:f2:41:f7:
         89:d4:07:67:64:eb:64:d0:d3:d4:19:f4:d5:3c:de:56:da:08:
         62:41:fa:31
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUH9hAb4yvHzkgnegOR3FljFQutEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1MDMzOEE0QzQ3QkQ5NUE3RUVCNDhCRERBNUMxQjk3
NjUyMjZGMTAeFw0yNDEyMDUxMjUxNDJaFw0yNTEyMDQxMjU2NDJaMDMxMTAvBgNV
BAMTKEU1M0NDMTY3RTFDRjlDQjIyQTg4NDQ0Rjg1RkNGOEQ1RDc5QzNCREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlr2KK2lHQ4frP7x+PzfO5PyNH
3Zj7Knws6U6kr/HGvUL1hoyL/u1cJ0veDbA4agOxKxCgFGmVltw1eTgTQx8JxXc5
EPwd6sKaG/pW9Y6ljKNWZmUPZqAWxMHIXFVEJvHywZpffN84PiQnK4sKDdCGifn9
9n7he9qd1afaOILXHRO5G0V59vorfzy7VXl1XniuBVgmZZKB0FlphJ6lu7LCPCkC
jNDKaGpLyyBopfqA4aD6okLq++O9SO9cImtWS95caKVsVIe0zdq7GWsHq5NCAiWe
zTJTRH9vzEUG6zFSPyNpGOM3Pb/oWTRHroTJKt3BWX4bihHP2pkjv0rrrqQBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU5TzBZ+HPnLIqiERPhfz41decO94wHwYDVR0j
BBgwFoAU1FAzikxHvZWn7rSL3aXBuXZSJvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9ENDUwMzM4QTRDNDdCRDk1QTdFRUI0OEJEREE1QzFCOTc2NTIyNkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NTAzMzhBNEM0N0JEOTVB
N0VFQjQ4QkREQTVDMUI5NzY1MjI2RjEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzIzODMwMzQzYTM2NjYzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM1MzMzMDM0
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgAoBAbwADANBgkqhkiG9w0BAQsFAAOCAQEAUiaM1qpuuGB5
ra1rf6ZhfulcUdWMOOCLInjhDvEpErjaC+t7lE2AyU8uZbQD12Y4gSczpyBfb7y3
27Q12xY4r926oc77qMgZmA+8fPehFVRA+bBRXJyP7Fy7LB6oiHwPiTLFqFFglLol
24p6jSWpWTQ0yNA8BlAn2N0bfZlYlpIeVIUUnvkES2fXru0/TsEHKxQwrrlGUb6K
QFCC2HolW9Voxtl4wgQivk+jC9bmbUh1ldc/vLxN7dJWk5FOO6+Q6+/UiWANNIVO
59AWiwGx4Yvpfyd8Da7aVMYGYb8tyeuCxRFbtZsu8kH3idQHZ2TrZNDT1Bn01Tze
VtoIYkH6MQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:14 2025 by rpki-client on console.sobornost.net