Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a666666633a3a2f34362d3436203d3e20323634343232.roa
File:                     323830343a316535383a666666633a3a2f34362d3436203d3e20323634343232.roa (raw, json)
Hash identifier:          czJ9VaWvYTtik8zMf5UL7c1HTugVXby1uYGKChldS60=
Subject key identifier:   04:98:B0:1D:DF:A5:45:95:00:58:F3:82:6C:16:8D:7F:D0:31:F6:CF
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       17BDA4D8E2EDDEF0D8B90DB1D3DB40E7C19C75B7
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a666666633a3a2f34362d3436203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:39 +0000
ROA not before:           Wed 16 Apr 2025 15:00:39 +0000
ROA not after:            Wed 15 Apr 2026 15:05:39 +0000
asID:                     264422
IP address blocks:        2804:1e58:fffc::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bd:a4:d8:e2:ed:de:f0:d8:b9:0d:b1:d3:db:40:e7:c1:9c:75:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:39 2025 GMT
            Not After : Apr 15 15:05:39 2026 GMT
        Subject: CN=0498B01DDFA545950058F3826C168D7FD031F6CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6b:44:ea:81:6e:33:ff:66:0d:ae:5d:b6:a7:
                    1f:86:cf:e4:0b:5a:3e:68:76:8f:93:4c:3a:75:bf:
                    35:91:e7:2e:6e:71:9e:3f:8a:b5:35:e4:48:c8:19:
                    14:a3:2f:c6:dc:a4:93:b4:7a:63:d2:4b:b3:49:dd:
                    b0:ab:8f:45:42:00:fe:38:51:24:a2:9b:f7:59:58:
                    ce:a7:a5:2f:2e:72:a7:3c:f2:17:2a:54:ec:2e:80:
                    1d:2a:f9:62:f1:f7:bc:3d:1f:82:70:ba:96:8d:e5:
                    a9:38:d8:54:67:4e:c6:bd:df:18:46:a5:61:07:93:
                    bf:bf:8d:73:c0:4f:7b:c9:9f:eb:ca:70:c1:d0:36:
                    96:a2:e3:4e:c2:69:8f:ce:51:88:0b:fc:a5:bd:b5:
                    0a:cd:d6:88:10:34:eb:a8:5d:d3:ff:47:5c:70:12:
                    f1:73:cc:21:d6:aa:0e:5a:e5:d9:9d:47:70:27:7d:
                    b6:c1:fc:ab:14:70:28:06:cb:25:80:81:bf:fa:71:
                    13:fa:80:11:31:db:51:3b:20:f2:a2:33:c9:82:b7:
                    c6:ba:0e:e2:b8:f2:88:5e:94:b7:63:d2:d8:66:b2:
                    f8:f5:1c:62:20:22:70:03:93:68:a0:20:90:4d:c0:
                    fd:57:48:0a:fd:87:4f:1b:20:be:7d:7f:b0:3f:01:
                    e7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:98:B0:1D:DF:A5:45:95:00:58:F3:82:6C:16:8D:7F:D0:31:F6:CF
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a666666633a3a2f34362d3436203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:fffc::/46

    Signature Algorithm: sha256WithRSAEncryption
         62:c6:40:cb:a1:34:fd:ca:7f:3e:4f:1b:e6:2a:a5:ce:47:a7:
         f1:f6:ae:62:0e:40:86:f5:f9:66:de:1b:be:95:85:c2:39:09:
         e8:4a:11:ba:8b:d5:b2:1e:cf:c0:45:d0:c7:47:58:ed:de:05:
         48:e8:e3:aa:0f:69:1f:98:a6:f6:90:a1:94:7a:84:5a:84:5f:
         99:5b:3e:85:a9:24:1d:a1:71:0e:b5:56:5f:99:a4:7a:d9:14:
         b2:25:a5:32:e6:6e:a7:d7:25:17:14:0c:83:2f:00:54:fe:4a:
         e2:56:de:8b:5f:b3:05:0a:bd:6b:e7:cd:d0:1f:20:21:fa:22:
         7a:19:e3:de:c1:ba:49:2e:e7:a3:48:49:cd:a3:59:d9:4a:86:
         d5:eb:b2:15:29:ed:47:6d:30:57:06:f3:4e:cf:91:62:9b:64:
         d2:29:1c:ec:cf:73:7b:71:e9:0c:4d:e9:5f:d2:54:f0:1c:aa:
         7b:eb:19:21:90:74:37:0e:d9:0e:97:e2:e6:6b:54:46:8b:74:
         b0:38:03:5f:de:02:f6:5b:14:4f:2e:4e:5a:61:48:bc:fe:da:
         ab:7d:ea:71:54:16:a6:1b:5e:f2:0f:d4:5b:de:78:72:64:89:
         7f:6b:07:09:01:55:c4:04:ab:64:fa:e3:ac:b1:3b:be:c8:5b:
         20:55:33:24
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUF72k2OLt3vDYuQ2x09tA58GcdbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q0Q0Q4RTY0MDg4Nzk0OUIxQjYzOEE0M0E5NzRBQ0FE
NTlEQjkxMzAeFw0yNTA0MTYxNTAwMzlaFw0yNjA0MTUxNTA1MzlaMDMxMTAvBgNV
BAMTKDA0OThCMDFEREZBNTQ1OTUwMDU4RjM4MjZDMTY4RDdGRDAzMUY2Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEa0TqgW4z/2YNrl22px+Gz+QL
Wj5odo+TTDp1vzWR5y5ucZ4/irU15EjIGRSjL8bcpJO0emPSS7NJ3bCrj0VCAP44
USSim/dZWM6npS8ucqc88hcqVOwugB0q+WLx97w9H4JwupaN5ak42FRnTsa93xhG
pWEHk7+/jXPAT3vJn+vKcMHQNpai407CaY/OUYgL/KW9tQrN1ogQNOuoXdP/R1xw
EvFzzCHWqg5a5dmdR3AnfbbB/KsUcCgGyyWAgb/6cRP6gBEx21E7IPKiM8mCt8a6
DuK48ohelLdj0thmsvj1HGIgInADk2igIJBNwP1XSAr9h08bIL59f7A/AeeVAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUBJiwHd+lRZUAWPOCbBaNf9Ax9s8wHwYDVR0j
BBgwFoAUfUzY5kCIeUmxtjikOpdKytWduRMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMC83RDRDRDhFNjQwODg3OTQ5QjFCNjM4QTQzQTk3NEFDQUQ1OURCOTEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdENENEOEU2NDA4ODc5NDlC
MUI2MzhBNDNBOTc0QUNBRDU5REI5MTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzAv
MzIzODMwMzQzYTMxNjUzNTM4M2E2NjY2NjY2MzNhM2EyZjM0MzYyZDM0MzYyMDNk
M2UyMDMyMzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAigEHlj//DANBgkqhkiG9w0BAQsF
AAOCAQEAYsZAy6E0/cp/Pk8b5iqlzken8fauYg5AhvX5Zt4bvpWFwjkJ6EoRuovV
sh7PwEXQx0dY7d4FSOjjqg9pH5im9pChlHqEWoRfmVs+hakkHaFxDrVWX5mketkU
siWlMuZup9clFxQMgy8AVP5K4lbei1+zBQq9a+fN0B8gIfoiehnj3sG6SS7no0hJ
zaNZ2UqG1euyFSntR20wVwbzTs+RYptk0ikc7M9ze3HpDE3pX9JU8Byqe+sZIZB0
Nw7ZDpfi5mtURot0sDgDX94C9lsUTy5OWmFIvP7aq33qcVQWphte8g/UW954cmSJ
f2sHCQFVxASrZPrjrLE7vshbIFUzJA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net