Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030333a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a653030333a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          dkzJR49elwP0pRBOx6edTlUjX9m8228ZjLctJJRtzlI=
Subject key identifier:   D0:06:AE:E3:5E:E4:5F:B4:44:54:83:7F:C3:4B:AB:70:EB:D3:49:12
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       5550D20072CD0E4F5B0077AA7F76571AF50BFEE5
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030333a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:43 +0000
ROA not before:           Wed 16 Apr 2025 15:00:43 +0000
ROA not after:            Wed 15 Apr 2026 15:05:43 +0000
asID:                     264422
IP address blocks:        2804:1e58:e003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:50:d2:00:72:cd:0e:4f:5b:00:77:aa:7f:76:57:1a:f5:0b:fe:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:43 2025 GMT
            Not After : Apr 15 15:05:43 2026 GMT
        Subject: CN=D006AEE35EE45FB44454837FC34BAB70EBD34912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:85:0a:20:93:75:47:0e:9f:d4:2a:b0:11:af:
                    73:58:52:bb:69:76:04:b5:5c:06:87:be:60:55:d4:
                    a3:15:28:22:3e:66:33:8d:ba:18:b2:1f:99:c7:49:
                    25:fe:d5:1e:70:a1:fc:60:ed:fa:c2:99:85:d5:fa:
                    9f:d9:6a:5d:44:6e:22:48:dd:6c:2e:53:9f:a3:25:
                    7b:bd:8b:5d:8c:4c:d8:92:d2:77:e0:8d:4d:22:5a:
                    0f:70:27:88:68:7c:a4:50:f4:d7:49:10:77:e0:48:
                    79:55:e0:c2:0b:67:2d:6f:2f:87:6d:bf:0e:b5:14:
                    bf:e3:55:5f:81:95:16:2c:2f:39:ba:b4:85:89:3a:
                    d7:9e:b9:7b:94:42:8f:f3:c0:7d:30:9b:7e:46:f3:
                    bb:a2:b6:c6:df:5b:f3:50:f5:1b:e2:06:90:78:53:
                    8b:69:f9:22:a7:fa:5b:a1:c2:f3:b8:aa:c5:b1:d6:
                    8f:12:d0:bd:e2:41:e1:2f:ba:a3:4f:38:7f:16:75:
                    65:b4:11:ba:b8:c8:fb:f6:9f:b4:07:74:38:74:66:
                    c8:47:5a:da:10:c0:2d:e2:96:77:64:aa:ba:56:73:
                    26:bc:26:ea:4c:03:55:12:c3:2e:6d:dc:2a:37:f9:
                    98:21:2f:11:91:aa:e9:03:9a:d9:bb:71:e9:2a:5b:
                    5f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:06:AE:E3:5E:E4:5F:B4:44:54:83:7F:C3:4B:AB:70:EB:D3:49:12
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a653030333a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:e003::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:e7:3b:10:ed:25:2b:31:69:32:17:c6:41:29:db:6f:b4:7e:
         42:16:fd:d0:2d:3e:9c:f4:e4:62:bb:60:a2:5a:e7:78:12:a5:
         cb:0e:2c:0a:02:5a:e5:0b:c8:a7:a4:8a:b9:c6:1c:b5:85:74:
         b5:4d:5f:07:93:49:f9:ec:3e:62:7a:21:f3:4d:23:32:be:cf:
         8f:2e:a4:fe:44:c7:c7:68:c7:c9:4e:c2:20:90:e3:24:30:bc:
         c1:94:8f:38:d4:8b:8d:b3:d4:a5:87:84:e3:88:ab:b8:df:30:
         fc:7c:d0:f1:1f:0c:13:f9:9f:3c:d2:ec:3d:fc:df:60:1f:89:
         86:78:60:a8:6a:05:0f:98:51:88:ca:9d:c7:c2:f8:e2:b7:29:
         06:63:80:ab:12:95:70:7e:27:59:ba:8c:72:a7:67:2f:26:88:
         c5:1d:39:72:0f:2f:b8:36:74:f1:f4:e1:0b:fe:df:c6:73:a2:
         2e:6f:5a:7d:e6:64:ed:e6:ff:e2:21:49:81:76:d1:eb:cd:30:
         42:10:ca:80:7e:d4:6e:64:11:56:cc:51:95:69:1f:ed:1c:20:
         6c:e9:d2:00:54:5f:ee:17:69:97:11:fb:62:86:fa:5f:e6:70:
         2b:68:df:ff:cc:ba:17:e5:60:39:c2:49:e7:1e:c5:90:15:b6:
         dd:7f:bc:4a
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUVVDSAHLNDk9bAHeqf3ZXGvUL/uUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q0Q0Q4RTY0MDg4Nzk0OUIxQjYzOEE0M0E5NzRBQ0FE
NTlEQjkxMzAeFw0yNTA0MTYxNTAwNDNaFw0yNjA0MTUxNTA1NDNaMDMxMTAvBgNV
BAMTKEQwMDZBRUUzNUVFNDVGQjQ0NDU0ODM3RkMzNEJBQjcwRUJEMzQ5MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hQogk3VHDp/UKrARr3NYUrtp
dgS1XAaHvmBV1KMVKCI+ZjONuhiyH5nHSSX+1R5wofxg7frCmYXV+p/Zal1EbiJI
3WwuU5+jJXu9i12MTNiS0nfgjU0iWg9wJ4hofKRQ9NdJEHfgSHlV4MILZy1vL4dt
vw61FL/jVV+BlRYsLzm6tIWJOteeuXuUQo/zwH0wm35G87uitsbfW/NQ9RviBpB4
U4tp+SKn+luhwvO4qsWx1o8S0L3iQeEvuqNPOH8WdWW0Ebq4yPv2n7QHdDh0ZshH
WtoQwC3ilndkqrpWcya8JupMA1USwy5t3Co3+ZghLxGRqukDmtm7cekqW19rAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU0Aau417kX7REVIN/w0urcOvTSRIwHwYDVR0j
BBgwFoAUfUzY5kCIeUmxtjikOpdKytWduRMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMC83RDRDRDhFNjQwODg3OTQ5QjFCNjM4QTQzQTk3NEFDQUQ1OURCOTEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdENENEOEU2NDA4ODc5NDlC
MUI2MzhBNDNBOTc0QUNBRDU5REI5MTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzAv
MzIzODMwMzQzYTMxNjUzNTM4M2E2NTMwMzAzMzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEHljgAzANBgkqhkiG9w0BAQsF
AAOCAQEAr+c7EO0lKzFpMhfGQSnbb7R+Qhb90C0+nPTkYrtgolrneBKlyw4sCgJa
5QvIp6SKucYctYV0tU1fB5NJ+ew+Ynoh800jMr7Pjy6k/kTHx2jHyU7CIJDjJDC8
wZSPONSLjbPUpYeE44iruN8w/HzQ8R8ME/mfPNLsPfzfYB+JhnhgqGoFD5hRiMqd
x8L44rcpBmOAqxKVcH4nWbqMcqdnLyaIxR05cg8vuDZ08fThC/7fxnOiLm9afeZk
7eb/4iFJgXbR680wQhDKgH7UbmQRVsxRlWkf7RwgbOnSAFRf7hdplxH7Yob6X+Zw
K2jf/8y6F+VgOcJJ5x7FkBW23X+8Sg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net