Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030303a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a653030303a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          dXIk1fLHT8XK5keZB9SbBDRkbb29C21emrJ4GjOK+F8=
Subject key identifier:   43:55:10:97:62:30:50:DA:5E:B9:E5:BC:35:22:C5:5F:FD:F1:B7:36
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       60D2D4473621593F2EFF832631E60559216E71B4
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030303a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:43 +0000
ROA not before:           Wed 16 Apr 2025 15:00:43 +0000
ROA not after:            Wed 15 Apr 2026 15:05:43 +0000
asID:                     264422
IP address blocks:        2804:1e58:e000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d2:d4:47:36:21:59:3f:2e:ff:83:26:31:e6:05:59:21:6e:71:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:43 2025 GMT
            Not After : Apr 15 15:05:43 2026 GMT
        Subject: CN=43551097623050DA5EB9E5BC3522C55FFDF1B736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:16:1d:94:bc:5b:a2:24:96:57:9d:3d:2e:c5:
                    a3:2d:ef:c1:90:05:58:8c:d6:53:36:d3:46:9f:82:
                    39:44:33:99:fb:73:76:e4:88:b3:8d:fa:22:51:9e:
                    87:66:fd:14:fc:42:19:67:c6:b1:59:d6:c5:73:70:
                    2b:05:3c:4a:02:53:24:ec:18:5f:a4:bc:cb:40:e4:
                    84:2c:bb:db:f0:5d:13:ab:6d:63:dc:2b:f0:1f:fe:
                    6f:8d:bc:e3:27:4d:98:e0:06:0f:a8:d8:0b:f2:4b:
                    b4:bc:ae:97:b0:d3:ea:8c:02:dd:c7:8b:6d:e4:90:
                    c5:dc:59:c9:5c:d2:61:6c:10:e9:68:e7:9b:ea:2b:
                    aa:4e:c6:bc:e9:7f:7d:48:c5:ef:f7:4a:ad:b8:81:
                    b1:d2:84:c3:b4:63:8d:89:a5:a9:b2:14:93:0d:4c:
                    f7:bc:3e:18:ec:83:40:63:fc:f2:b3:2e:80:01:26:
                    98:1b:2f:dd:dc:ea:f9:9c:0d:f9:20:ea:db:4a:0a:
                    e5:cc:f6:b5:19:41:99:3a:c3:9a:c2:5b:01:2a:66:
                    ad:11:30:b0:80:0b:fa:6c:ea:22:dc:fa:0c:d8:c1:
                    ef:cd:73:27:c0:35:00:de:66:c5:73:f3:ea:e8:f9:
                    ef:da:da:c2:ea:01:fc:16:f1:5b:ae:1e:c0:6f:9e:
                    c9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:55:10:97:62:30:50:DA:5E:B9:E5:BC:35:22:C5:5F:FD:F1:B7:36
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030303a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:ee:bc:ea:ea:0c:5f:c8:10:c7:11:b3:21:a4:ba:d7:90:1b:
         9b:f2:b5:41:c2:a9:76:36:d3:37:93:c3:6a:41:bc:50:98:8f:
         56:09:23:e4:84:b2:67:24:60:f5:69:c1:58:15:02:49:56:54:
         be:3e:9f:a8:93:f1:27:54:7a:d7:08:da:55:58:76:8f:ad:0d:
         1e:6b:2b:fe:53:5a:df:2e:e0:8b:5d:0c:6b:59:d5:74:71:85:
         1f:04:b6:53:be:57:27:97:26:6c:cc:b2:fd:59:df:a9:ac:1a:
         16:2a:b1:05:c7:cf:eb:f7:ba:62:cc:24:56:30:38:c1:08:ce:
         6a:1f:e9:b9:6c:76:dc:c5:56:b6:87:3b:6f:46:2d:b4:a8:e9:
         00:c0:55:b5:18:37:dc:41:f6:d1:ad:b8:9e:12:8a:14:41:bc:
         b1:aa:c1:93:42:59:86:2b:14:21:10:f7:a0:a3:05:29:e8:79:
         b7:8f:c9:3e:ae:61:fc:e2:4e:cc:b3:60:dd:0d:57:28:14:f1:
         2b:99:62:07:ff:b7:73:65:fd:d4:09:2f:4a:e9:16:8b:1e:a3:
         dd:59:16:b4:c0:b0:7c:c0:86:78:3e:ef:42:77:33:5f:2d:10:
         62:c4:83:96:55:11:c8:6c:dc:0b:9b:a5:fa:ad:d0:28:c8:50:
         1a:63:eb:80
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUYNLURzYhWT8u/4MmMeYFWSFucbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q0Q0Q4RTY0MDg4Nzk0OUIxQjYzOEE0M0E5NzRBQ0FE
NTlEQjkxMzAeFw0yNTA0MTYxNTAwNDNaFw0yNjA0MTUxNTA1NDNaMDMxMTAvBgNV
BAMTKDQzNTUxMDk3NjIzMDUwREE1RUI5RTVCQzM1MjJDNTVGRkRGMUI3MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcFh2UvFuiJJZXnT0uxaMt78GQ
BViM1lM200afgjlEM5n7c3bkiLON+iJRnodm/RT8QhlnxrFZ1sVzcCsFPEoCUyTs
GF+kvMtA5IQsu9vwXROrbWPcK/Af/m+NvOMnTZjgBg+o2AvyS7S8rpew0+qMAt3H
i23kkMXcWclc0mFsEOlo55vqK6pOxrzpf31Ixe/3Sq24gbHShMO0Y42JpamyFJMN
TPe8Phjsg0Bj/PKzLoABJpgbL93c6vmcDfkg6ttKCuXM9rUZQZk6w5rCWwEqZq0R
MLCAC/ps6iLc+gzYwe/NcyfANQDeZsVz8+ro+e/a2sLqAfwW8VuuHsBvnsndAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUQ1UQl2IwUNpeueW8NSLFX/3xtzYwHwYDVR0j
BBgwFoAUfUzY5kCIeUmxtjikOpdKytWduRMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMC83RDRDRDhFNjQwODg3OTQ5QjFCNjM4QTQzQTk3NEFDQUQ1OURCOTEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdENENEOEU2NDA4ODc5NDlC
MUI2MzhBNDNBOTc0QUNBRDU5REI5MTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzAv
MzIzODMwMzQzYTMxNjUzNTM4M2E2NTMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEHljgADANBgkqhkiG9w0BAQsF
AAOCAQEAm+686uoMX8gQxxGzIaS615Abm/K1QcKpdjbTN5PDakG8UJiPVgkj5ISy
ZyRg9WnBWBUCSVZUvj6fqJPxJ1R61wjaVVh2j60NHmsr/lNa3y7gi10Ma1nVdHGF
HwS2U75XJ5cmbMyy/VnfqawaFiqxBcfP6/e6YswkVjA4wQjOah/puWx23MVWtoc7
b0YttKjpAMBVtRg33EH20a24nhKKFEG8sarBk0JZhisUIRD3oKMFKeh5t4/JPq5h
/OJOzLNg3Q1XKBTxK5liB/+3c2X91AkvSukWix6j3VkWtMCwfMCGeD7vQnczXy0Q
YsSDllURyGzcC5ul+q3QKMhQGmPrgA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net