Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/323830343a336264633a3a2f33322d3332203d3e20323636313736.roa
File:                     323830343a336264633a3a2f33322d3332203d3e20323636313736.roa (raw, json)
Hash identifier:          oYcp44bLibhjBd34YNYWnpWyJNcqoWLaR+cmxg2Pk48=
Subject key identifier:   13:75:4D:FE:5C:C1:24:83:35:98:65:E7:14:D4:BC:E7:39:87:56:70
Certificate issuer:       /CN=39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E
Certificate serial:       771683BADB72431191583B8FFEE756734C01AF6E
Authority key identifier: 39:DB:9E:8B:0D:7E:2A:74:C7:FA:D5:FB:DF:12:55:B5:5A:8F:DD:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/323830343a336264633a3a2f33322d3332203d3e20323636313736.roa
Signing time:             Thu 17 Apr 2025 13:21:10 +0000
ROA not before:           Thu 17 Apr 2025 13:16:10 +0000
ROA not after:            Thu 16 Apr 2026 13:21:10 +0000
asID:                     266176
IP address blocks:        2804:3bdc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.crl
                          rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 04:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:16:83:ba:db:72:43:11:91:58:3b:8f:fe:e7:56:73:4c:01:af:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E
        Validity
            Not Before: Apr 17 13:16:10 2025 GMT
            Not After : Apr 16 13:21:10 2026 GMT
        Subject: CN=13754DFE5CC12483359865E714D4BCE739875670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4f:80:86:88:9e:fe:9d:b5:35:21:cc:e0:75:
                    32:36:32:1a:78:07:91:c0:06:39:21:77:84:06:d4:
                    40:10:4f:06:61:ad:05:c5:e3:3d:8d:63:aa:79:94:
                    99:92:02:e7:36:4a:20:7a:ab:62:67:5b:35:9e:e1:
                    99:37:eb:a6:b1:07:0d:08:fb:d8:f7:84:fb:31:c3:
                    5d:be:da:2f:6b:b2:7d:f1:4b:e2:c6:49:6e:4d:d5:
                    a6:e3:df:bd:42:a1:ce:cc:f1:dc:7a:3b:26:86:72:
                    dc:cd:da:ed:2e:b7:9b:0d:df:7d:b8:f9:25:5d:2f:
                    64:1e:6f:be:50:a4:8c:79:1c:a8:52:0a:a4:59:cb:
                    21:43:64:e8:23:7c:41:04:28:65:4a:a8:a3:17:21:
                    5f:50:df:b5:fe:86:e7:17:cc:a7:59:7c:8c:5f:1e:
                    02:fd:b9:8a:b9:90:a8:e0:2b:bf:33:c7:61:f0:b4:
                    ea:2c:bb:1e:36:db:99:20:d6:c8:b9:c7:db:17:1b:
                    45:f4:f2:0d:68:12:d0:5c:d7:6c:04:e0:2e:e6:b5:
                    ae:7b:e3:c1:cf:9c:72:a3:d4:fb:7e:98:2e:9f:da:
                    e7:fc:ff:e2:2b:9d:b3:5a:8f:15:02:83:e6:bb:77:
                    f3:fd:63:f4:59:04:97:26:bd:1f:1a:12:95:23:af:
                    ef:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:75:4D:FE:5C:C1:24:83:35:98:65:E7:14:D4:BC:E7:39:87:56:70
            X509v3 Authority Key Identifier:
                keyid:39:DB:9E:8B:0D:7E:2A:74:C7:FA:D5:FB:DF:12:55:B5:5A:8F:DD:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/323830343a336264633a3a2f33322d3332203d3e20323636313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:ac:aa:7e:b6:b4:2e:1b:1e:b4:35:4c:ff:73:0c:fa:c3:ed:
         97:7b:c5:9d:7f:cb:5c:cc:6f:a3:b1:5d:7e:24:64:f3:e5:4f:
         2c:4e:29:da:de:1d:b8:bc:0e:1c:66:c1:44:8e:c4:3d:86:38:
         06:db:30:e0:86:a6:f1:5a:ae:58:76:72:f2:93:0f:d7:e6:e5:
         73:b1:33:e9:f9:69:48:41:95:0b:96:dc:e9:7a:2e:ab:0b:96:
         0f:67:cb:a4:a1:b1:94:21:2f:71:22:bf:73:4d:5a:c3:51:9c:
         5d:1d:41:1d:89:cd:e5:c1:57:37:1c:f1:dd:e8:59:40:ec:be:
         a1:ac:c3:7c:f6:b6:99:e9:93:ee:04:29:13:44:9e:c0:7d:d7:
         50:50:1b:e0:48:db:0c:e6:2f:6e:c1:bd:ea:a4:2d:d5:84:89:
         78:0b:db:5a:0f:a8:9a:36:1f:5d:52:e2:e6:27:fe:44:74:f6:
         9a:ff:79:7f:bf:13:d8:91:d4:17:6d:10:06:c2:e2:60:29:29:
         58:d2:f8:7e:4c:cc:10:f1:91:b6:2a:6c:47:0a:d9:0a:21:fc:
         c9:a6:64:7a:b5:58:c3:85:67:f4:a5:04:83:2f:c5:53:8c:2b:
         39:6f:78:a7:91:68:8b:f5:62:11:c4:76:fb:58:a9:12:41:3c:
         01:4c:53:c0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdxaDuttyQxGRWDuP/udWc0wBr24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlEQjlFOEIwRDdFMkE3NEM3RkFENUZCREYxMjU1QjU1
QThGREQ1RTAeFw0yNTA0MTcxMzE2MTBaFw0yNjA0MTYxMzIxMTBaMDMxMTAvBgNV
BAMTKDEzNzU0REZFNUNDMTI0ODMzNTk4NjVFNzE0RDRCQ0U3Mzk4NzU2NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwT4CGiJ7+nbU1IczgdTI2Mhp4
B5HABjkhd4QG1EAQTwZhrQXF4z2NY6p5lJmSAuc2SiB6q2JnWzWe4Zk366axBw0I
+9j3hPsxw12+2i9rsn3xS+LGSW5N1abj371Coc7M8dx6OyaGctzN2u0ut5sN3324
+SVdL2Qeb75QpIx5HKhSCqRZyyFDZOgjfEEEKGVKqKMXIV9Q37X+hucXzKdZfIxf
HgL9uYq5kKjgK78zx2HwtOosux4225kg1si5x9sXG0X08g1oEtBc12wE4C7mta57
48HPnHKj1Pt+mC6f2uf8/+IrnbNajxUCg+a7d/P9Y/RZBJcmvR8aEpUjr++5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUE3VN/lzBJIM1mGXnFNS85zmHVnAwHwYDVR0j
BBgwFoAUOdueiw1+KnTH+tX73xJVtVqP3V4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmRjdDdHUDZydXJUY3p5RlQ5N3JTZ3FIOTlUTjJudmNxaHlxdEx2RVRQ
NEUvMC8zOURCOUU4QjBEN0UyQTc0QzdGQUQ1RkJERjEyNTVCNTVBOEZERDVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5REI5RThCMEQ3RTJBNzRD
N0ZBRDVGQkRGMTI1NUI1NUE4RkRENUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZkY3Q3R1A2cnVyVGN6eUZUOTdyU2dxSDk5VE4ybnZjcWh5cXRMdkVUUDRFLzAv
MzIzODMwMzQzYTMzNjI2NDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzEzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ73DANBgkqhkiG9w0BAQsFAAOCAQEApKyqfra0
LhsetDVM/3MM+sPtl3vFnX/LXMxvo7FdfiRk8+VPLE4p2t4duLwOHGbBRI7EPYY4
Btsw4Iam8VquWHZy8pMP1+blc7Ez6flpSEGVC5bc6XouqwuWD2fLpKGxlCEvcSK/
c01aw1GcXR1BHYnN5cFXNxzx3ehZQOy+oazDfPa2memT7gQpE0SewH3XUFAb4Ejb
DOYvbsG96qQt1YSJeAvbWg+omjYfXVLi5if+RHT2mv95f78T2JHUF20QBsLiYCkp
WNL4fkzMEPGRtipsRwrZCiH8yaZkerVYw4Vn9KUEgy/FU4wrOW94p5Foi/ViEcR2
+1ipEkE8AUxTwA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:48 2025 by rpki-client on console.sobornost.net