Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a353030303a3a2f33362d3336203d3e20323634343232.roa
File:                     323830343a316535383a353030303a3a2f33362d3336203d3e20323634343232.roa (raw, json)
Hash identifier:          Gp1dNJokqaLVf7aNQ5/02qeyVotLPhuvrtCxJG4QLnc=
Subject key identifier:   73:33:5B:01:F3:7F:2A:65:66:C9:CF:4D:2B:C5:55:2D:E7:63:6A:91
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       08143A279F3D300A2446F2F200DF6806527F1DDE
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a353030303a3a2f33362d3336203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:35 +0000
ROA not before:           Wed 16 Apr 2025 15:00:35 +0000
ROA not after:            Wed 15 Apr 2026 15:05:35 +0000
asID:                     264422
IP address blocks:        2804:1e58:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:14:3a:27:9f:3d:30:0a:24:46:f2:f2:00:df:68:06:52:7f:1d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:35 2025 GMT
            Not After : Apr 15 15:05:35 2026 GMT
        Subject: CN=73335B01F37F2A6566C9CF4D2BC5552DE7636A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2a:41:8d:0d:dd:ab:eb:01:a0:c3:bd:c5:7c:
                    e4:3f:0e:06:09:31:f4:71:c6:08:45:1c:8a:2f:a3:
                    09:87:70:7d:8c:ef:f7:82:6e:4f:3f:4a:f9:7e:0f:
                    4c:70:d4:d5:4b:d5:15:97:74:36:b9:91:29:44:03:
                    cc:2d:0d:73:93:82:84:0f:bc:c4:3d:d4:fe:65:fc:
                    75:92:68:72:f5:6a:dd:04:cc:b2:6e:c8:a2:1d:d2:
                    b4:8f:59:b8:a1:0a:8d:c5:c6:af:f8:93:8a:70:29:
                    55:92:7a:32:ff:64:20:13:27:9f:2d:ee:4c:b4:c7:
                    00:52:80:a7:de:f3:02:e4:35:a8:70:1a:64:59:2e:
                    2c:ed:02:74:2d:a5:a2:d6:ba:4c:db:15:a5:ac:bb:
                    fb:76:23:a1:79:66:13:42:00:69:eb:99:df:06:02:
                    35:5b:b7:de:bb:c4:63:4c:38:4f:11:a5:a5:4e:09:
                    33:00:00:b0:60:7b:22:8d:21:43:45:29:25:75:f6:
                    5a:d3:97:54:12:39:16:b0:bd:34:b4:9c:b9:b4:c8:
                    b1:06:e3:1b:71:18:ac:60:de:3f:71:46:ea:b9:1f:
                    b9:6e:61:6d:b8:1a:8c:e4:f1:f4:4d:08:43:d9:d4:
                    8b:8f:fb:f0:21:0d:73:b9:bf:08:6f:f3:a5:3e:30:
                    67:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:33:5B:01:F3:7F:2A:65:66:C9:CF:4D:2B:C5:55:2D:E7:63:6A:91
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a353030303a3a2f33362d3336203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1d:15:5a:18:ea:07:47:b8:42:75:e9:de:b6:92:95:67:d4:22:
         c3:02:79:5d:9f:7d:de:6e:b9:07:7d:26:0f:55:1b:73:ef:72:
         9b:30:29:5d:60:9e:c9:35:a7:a4:e3:1d:4d:2d:c7:e8:45:70:
         74:96:26:e3:9a:6f:5b:7b:5c:e8:b4:28:23:39:37:47:2f:64:
         48:25:d9:90:7e:19:46:3a:9f:90:68:6e:7b:86:09:50:91:4c:
         b0:13:e7:32:b4:4d:81:71:29:80:27:cb:e0:9e:0a:10:42:35:
         db:f2:30:aa:36:84:4d:03:8f:91:e9:35:94:52:aa:2e:c2:f0:
         48:cd:14:58:f8:09:f8:03:71:a6:8b:93:fe:2c:2b:18:4f:88:
         c4:f5:8b:3a:af:df:b7:19:ed:cb:31:69:99:95:e1:c8:bc:c5:
         bf:59:5e:48:66:fc:ec:c8:fe:2a:00:a6:71:31:45:7a:cd:af:
         39:12:b2:d5:b7:ce:23:d4:09:53:e1:f4:a0:b1:99:47:96:e3:
         be:f3:e9:52:80:1d:b5:72:38:26:05:b2:50:fa:c3:4f:91:48:
         7a:7e:a8:ca:7e:33:27:9c:bd:e4:72:39:c4:62:64:b0:62:13:
         ba:be:92:ec:84:a4:fd:6d:a4:07:73:2a:ab:df:72:63:4f:b4:
         63:b5:e6:ee
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCBQ6J589MAokRvLyAN9oBlJ/Hd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q0Q0Q4RTY0MDg4Nzk0OUIxQjYzOEE0M0E5NzRBQ0FE
NTlEQjkxMzAeFw0yNTA0MTYxNTAwMzVaFw0yNjA0MTUxNTA1MzVaMDMxMTAvBgNV
BAMTKDczMzM1QjAxRjM3RjJBNjU2NkM5Q0Y0RDJCQzU1NTJERTc2MzZBOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZKkGNDd2r6wGgw73FfOQ/DgYJ
MfRxxghFHIovowmHcH2M7/eCbk8/Svl+D0xw1NVL1RWXdDa5kSlEA8wtDXOTgoQP
vMQ91P5l/HWSaHL1at0EzLJuyKId0rSPWbihCo3Fxq/4k4pwKVWSejL/ZCATJ58t
7ky0xwBSgKfe8wLkNahwGmRZLiztAnQtpaLWukzbFaWsu/t2I6F5ZhNCAGnrmd8G
AjVbt967xGNMOE8RpaVOCTMAALBgeyKNIUNFKSV19lrTl1QSORawvTS0nLm0yLEG
4xtxGKxg3j9xRuq5H7luYW24Gozk8fRNCEPZ1IuP+/AhDXO5vwhv86U+MGfhAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUczNbAfN/KmVmyc9NK8VVLedjapEwHwYDVR0j
BBgwFoAUfUzY5kCIeUmxtjikOpdKytWduRMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMC83RDRDRDhFNjQwODg3OTQ5QjFCNjM4QTQzQTk3NEFDQUQ1OURCOTEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdENENEOEU2NDA4ODc5NDlC
MUI2MzhBNDNBOTc0QUNBRDU5REI5MTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzAv
MzIzODMwMzQzYTMxNjUzNTM4M2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEHlhQMA0GCSqGSIb3DQEBCwUA
A4IBAQAdFVoY6gdHuEJ16d62kpVn1CLDAnldn33ebrkHfSYPVRtz73KbMCldYJ7J
Naek4x1NLcfoRXB0libjmm9be1zotCgjOTdHL2RIJdmQfhlGOp+QaG57hglQkUyw
E+cytE2BcSmAJ8vgngoQQjXb8jCqNoRNA4+R6TWUUqouwvBIzRRY+An4A3Gmi5P+
LCsYT4jE9Ys6r9+3Ge3LMWmZleHIvMW/WV5IZvzsyP4qAKZxMUV6za85ErLVt84j
1AlT4fSgsZlHluO+8+lSgB21cjgmBbJQ+sNPkUh6fqjKfjMnnL3kcjnEYmSwYhO6
vpLshKT9baQHcyqr33JjT7Rjtebu
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net