Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a3a2f33322d3332203d3e20323634343232.roa
File:                     323830343a316535383a3a2f33322d3332203d3e20323634343232.roa (raw, json)
Hash identifier:          YAXqFoz4N0JB/21M0kcTBFh68WIBaR/t//zfksBZ6zs=
Subject key identifier:   65:3E:19:C2:E0:E4:7D:70:4A:49:F2:FF:C5:4B:B9:FC:4B:45:97:DD
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       47882A5AF900939A647C541C0C085328C1C41CA5
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a3a2f33322d3332203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:38 +0000
ROA not before:           Wed 16 Apr 2025 15:00:38 +0000
ROA not after:            Wed 15 Apr 2026 15:05:38 +0000
asID:                     264422
IP address blocks:        2804:1e58::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:88:2a:5a:f9:00:93:9a:64:7c:54:1c:0c:08:53:28:c1:c4:1c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:38 2025 GMT
            Not After : Apr 15 15:05:38 2026 GMT
        Subject: CN=653E19C2E0E47D704A49F2FFC54BB9FC4B4597DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2e:1c:5d:a0:33:8c:da:e3:40:f1:2a:ce:e3:
                    65:e7:5e:9a:c5:97:94:41:2e:12:c3:77:b4:12:f0:
                    94:01:67:5c:83:04:e2:0e:7f:ec:70:fa:86:cb:06:
                    6c:1e:a8:c4:8d:e4:51:6c:38:48:99:f9:77:1e:ca:
                    70:6f:51:6d:88:be:19:57:93:6d:04:39:91:7c:8f:
                    6e:05:91:76:3c:83:10:58:48:1e:1e:96:65:7f:aa:
                    a7:f3:51:ab:6e:3d:22:05:e4:a4:b6:c1:42:69:21:
                    ae:3f:4b:2a:6e:a9:ff:d8:00:50:19:92:64:6b:e6:
                    d9:c9:6f:e7:f9:72:29:2c:35:88:c2:7f:16:dc:55:
                    9d:2a:a2:1b:3f:1b:9c:df:2e:12:0f:55:70:d2:97:
                    f9:19:28:ce:f8:ed:7f:67:e3:7f:5f:71:0b:3f:6f:
                    e9:bc:c7:8d:51:94:39:98:9d:fd:95:d8:fc:ce:c5:
                    2a:55:93:84:5a:d4:29:4d:5d:94:87:42:c4:2d:29:
                    af:86:ad:89:7d:60:0c:5d:01:aa:a5:07:41:b7:f7:
                    bd:71:f6:0f:7a:fd:f8:6c:05:5c:15:e3:59:ab:37:
                    0c:12:2d:42:d2:4b:b1:e1:ce:84:5a:7a:b5:8a:0f:
                    15:b3:76:a9:4a:e6:f9:01:dd:78:de:4e:a6:47:f3:
                    40:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3E:19:C2:E0:E4:7D:70:4A:49:F2:FF:C5:4B:B9:FC:4B:45:97:DD
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a3a2f33322d3332203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:f1:ce:79:0d:5d:f5:40:1b:54:0a:13:02:f3:35:e2:5b:b0:
         70:1c:a3:a6:b9:a0:3c:fe:a7:bc:d4:62:cc:5b:13:b8:5d:5a:
         99:a7:0e:8a:65:aa:9d:29:f9:ee:78:a6:07:f1:23:7f:6e:73:
         23:6f:f7:92:8d:c1:02:47:cb:84:e6:74:33:7f:a6:e0:e9:0d:
         d1:d0:ad:82:f0:1e:35:43:bd:f8:77:c3:18:41:38:3f:79:1f:
         6e:b9:13:10:6e:e4:be:92:dc:f8:0f:c0:ba:7a:82:ac:ad:1d:
         c5:8b:11:c7:72:b7:bf:99:98:57:31:6e:66:b4:08:43:f1:f8:
         ca:7d:e2:34:d0:3a:c9:05:a1:73:53:f3:f8:9f:72:37:4f:54:
         23:22:74:e4:d8:ee:70:2e:4c:d9:79:4c:a7:75:04:39:a1:86:
         ca:cc:27:b9:d2:04:7a:59:27:b4:9b:f6:0d:5a:c2:7c:10:63:
         59:cf:6b:9d:ee:7f:93:92:8c:b2:d5:ed:41:3d:a1:9a:ac:ae:
         aa:fc:15:11:62:86:2b:53:41:b8:f5:b6:ab:4d:34:0e:9f:d2:
         1b:22:05:cb:02:c7:44:3b:72:d6:a7:6d:7f:7f:d5:eb:78:23:
         9d:23:34:83:9d:91:d6:45:75:5a:08:7f:76:66:20:f5:bc:6f:
         ea:0b:c3:e7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUR4gqWvkAk5pkfFQcDAhTKMHEHKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q0Q0Q4RTY0MDg4Nzk0OUIxQjYzOEE0M0E5NzRBQ0FE
NTlEQjkxMzAeFw0yNTA0MTYxNTAwMzhaFw0yNjA0MTUxNTA1MzhaMDMxMTAvBgNV
BAMTKDY1M0UxOUMyRTBFNDdENzA0QTQ5RjJGRkM1NEJCOUZDNEI0NTk3REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0LhxdoDOM2uNA8SrO42XnXprF
l5RBLhLDd7QS8JQBZ1yDBOIOf+xw+obLBmweqMSN5FFsOEiZ+XceynBvUW2IvhlX
k20EOZF8j24FkXY8gxBYSB4elmV/qqfzUatuPSIF5KS2wUJpIa4/Sypuqf/YAFAZ
kmRr5tnJb+f5ciksNYjCfxbcVZ0qohs/G5zfLhIPVXDSl/kZKM747X9n439fcQs/
b+m8x41RlDmYnf2V2PzOxSpVk4Ra1ClNXZSHQsQtKa+GrYl9YAxdAaqlB0G3971x
9g96/fhsBVwV41mrNwwSLULSS7HhzoRaerWKDxWzdqlK5vkB3XjeTqZH80CXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUZT4ZwuDkfXBKSfL/xUu5/EtFl90wHwYDVR0j
BBgwFoAUfUzY5kCIeUmxtjikOpdKytWduRMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMC83RDRDRDhFNjQwODg3OTQ5QjFCNjM4QTQzQTk3NEFDQUQ1OURCOTEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdENENEOEU2NDA4ODc5NDlC
MUI2MzhBNDNBOTc0QUNBRDU5REI5MTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzAv
MzIzODMwMzQzYTMxNjUzNTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzQzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQeWDANBgkqhkiG9w0BAQsFAAOCAQEAqPHOeQ1d
9UAbVAoTAvM14luwcByjprmgPP6nvNRizFsTuF1amacOimWqnSn57nimB/Ejf25z
I2/3ko3BAkfLhOZ0M3+m4OkN0dCtgvAeNUO9+HfDGEE4P3kfbrkTEG7kvpLc+A/A
unqCrK0dxYsRx3K3v5mYVzFuZrQIQ/H4yn3iNNA6yQWhc1Pz+J9yN09UIyJ05Nju
cC5M2XlMp3UEOaGGyswnudIEelkntJv2DVrCfBBjWc9rne5/k5KMstXtQT2hmqyu
qvwVEWKGK1NBuPW2q000Dp/SGyIFywLHRDty1qdtf3/V63gjnSM0g52R1kV1Wgh/
dmYg9bxv6gvD5w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net