Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a313861613a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a313861613a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          K1Clq1AckHea/5Z0fIjbvq1RX3VJdp3tWNJ0+HfPmEI=
Subject key identifier:   EE:BC:BD:1D:FF:9E:1C:DA:26:70:20:57:77:E6:CF:16:EF:E4:F7:29
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       6D6862FCEFAD0FF458DF8C70CAEEE2FDCEE00B0F
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a313861613a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 05 Mar 2025 19:00:12 +0000
ROA not before:           Wed 05 Mar 2025 18:55:12 +0000
ROA not after:            Wed 04 Mar 2026 19:00:12 +0000
asID:                     266623
IP address blocks:        2804:3ed4:18aa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:68:62:fc:ef:ad:0f:f4:58:df:8c:70:ca:ee:e2:fd:ce:e0:0b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Mar  5 18:55:12 2025 GMT
            Not After : Mar  4 19:00:12 2026 GMT
        Subject: CN=EEBCBD1DFF9E1CDA2670205777E6CF16EFE4F729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:d8:c7:0a:80:05:59:fa:8c:31:32:4a:45:
                    fa:76:20:34:41:03:da:bc:eb:25:c4:49:71:22:44:
                    43:b5:7f:5f:96:c7:a3:85:14:8d:9e:52:db:03:3b:
                    1b:fc:5b:46:57:a8:1b:c2:15:f1:45:6f:00:23:66:
                    5b:eb:17:a4:33:59:43:b3:9e:a6:fc:aa:2b:2d:92:
                    39:12:c7:f1:d5:a2:af:b2:b2:54:c8:4c:3f:30:1a:
                    df:c7:57:8d:d5:93:b8:4b:93:9b:17:07:e0:99:06:
                    9f:1d:6e:a8:79:d2:51:b4:97:d6:d6:74:86:5e:6a:
                    6c:b5:88:77:3e:15:0a:10:ee:28:ed:05:f9:78:ac:
                    4d:1d:57:21:ee:bf:a3:a4:c8:cb:4f:d2:c8:c3:fd:
                    05:cd:cd:00:43:d5:55:ae:5c:52:fe:63:56:14:36:
                    fe:e4:1c:a6:48:dc:23:67:2b:78:53:15:72:3b:b9:
                    39:3b:ac:50:03:4a:8f:7d:dc:13:de:ac:9b:25:6f:
                    d9:d6:a9:74:51:f8:49:31:d7:74:16:d2:59:d4:5d:
                    1c:a3:73:f3:e6:f5:fc:d1:3e:3b:9e:64:28:13:73:
                    04:89:79:2f:19:2c:97:2b:45:7c:c9:3c:01:f6:7a:
                    2c:cb:46:40:2c:de:02:ba:ea:d0:48:92:e4:bc:37:
                    71:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BC:BD:1D:FF:9E:1C:DA:26:70:20:57:77:E6:CF:16:EF:E4:F7:29
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a313861613a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:18aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:00:69:ee:e5:a9:ae:72:7b:dc:1f:a7:9a:4e:b4:55:1f:11:
         f4:da:7e:35:6a:86:85:42:51:f9:83:22:60:8c:10:96:91:bc:
         2a:88:1b:86:72:74:65:8c:e4:6e:6f:7d:8e:7c:05:93:ae:99:
         f7:69:13:9a:0b:65:94:61:0b:27:6b:96:09:42:95:ac:9e:cb:
         57:f8:c5:89:8e:57:c1:e6:af:c4:e0:9c:32:8c:6d:aa:d2:f3:
         46:7f:57:61:d5:b9:d6:82:fa:cf:ad:ea:dc:8f:0e:b5:ab:b3:
         05:79:52:cf:49:bb:7d:53:af:42:3a:2e:b9:4a:c8:55:45:cb:
         b6:28:22:ae:c6:f3:43:d6:e2:bf:09:d4:65:44:78:84:07:89:
         3b:38:8c:1d:d8:24:eb:b4:0a:ef:ed:97:b4:21:f5:14:26:aa:
         bb:91:61:7b:e5:64:09:ae:78:16:aa:60:e8:20:6b:e3:3b:f6:
         ae:1c:db:1f:e8:be:8f:40:af:de:5b:97:43:ec:94:60:5a:eb:
         b3:0b:9d:37:ad:79:91:1a:cc:36:6a:18:4c:e3:6a:a7:fb:52:
         f6:9d:92:21:aa:59:48:48:b0:46:90:d6:29:d7:ae:ce:7c:9d:
         14:bc:7e:b0:23:a7:3c:49:b5:d6:79:cf:cd:6d:9c:e3:70:36:
         e2:64:53:fd
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUbWhi/O+tD/RY34xwyu7i/c7gCw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEzNzY2RUQ3MDNBNEE5RTlDQTQzN0YzRTdGREIyREI1
RThDOEE3ODAeFw0yNTAzMDUxODU1MTJaFw0yNjAzMDQxOTAwMTJaMDMxMTAvBgNV
BAMTKEVFQkNCRDFERkY5RTFDREEyNjcwMjA1Nzc3RTZDRjE2RUZFNEY3MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWFdjHCoAFWfqMMTJKRfp2IDRB
A9q86yXESXEiREO1f1+Wx6OFFI2eUtsDOxv8W0ZXqBvCFfFFbwAjZlvrF6QzWUOz
nqb8qistkjkSx/HVoq+yslTITD8wGt/HV43Vk7hLk5sXB+CZBp8dbqh50lG0l9bW
dIZeamy1iHc+FQoQ7ijtBfl4rE0dVyHuv6OkyMtP0sjD/QXNzQBD1VWuXFL+Y1YU
Nv7kHKZI3CNnK3hTFXI7uTk7rFADSo993BPerJslb9nWqXRR+Ekx13QW0lnUXRyj
c/Pm9fzRPjueZCgTcwSJeS8ZLJcrRXzJPAH2eizLRkAs3gK66tBIkuS8N3HbAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU7ry9Hf+eHNomcCBXd+bPFu/k9ykwHwYDVR0j
BBgwFoAUQTdm7XA6Sp6cpDfz5/2y216MingwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk3OWlvcm5VWE1yTUw3VG1EcDJGdnJ6a0VuVlBDUkRmaHN2OUY1ZzN3
bUcvMS80MTM3NjZFRDcwM0E0QTlFOUNBNDM3RjNFN0ZEQjJEQjVFOEM4QTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxMzc2NkVENzAzQTRBOUU5
Q0E0MzdGM0U3RkRCMkRCNUU4QzhBNzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5Nzlpb3JuVVhNck1MN1RtRHAyRnZyemtFblZQQ1JEZmhzdjlGNWczd21HLzEv
MzIzODMwMzQzYTMzNjU2NDM0M2EzMTM4NjE2MTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNjM2MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEPtQYqjANBgkqhkiG9w0BAQsF
AAOCAQEAggBp7uWprnJ73B+nmk60VR8R9Np+NWqGhUJR+YMiYIwQlpG8KogbhnJ0
ZYzkbm99jnwFk66Z92kTmgtllGELJ2uWCUKVrJ7LV/jFiY5XweavxOCcMoxtqtLz
Rn9XYdW51oL6z63q3I8OtauzBXlSz0m7fVOvQjouuUrIVUXLtigirsbzQ9bivwnU
ZUR4hAeJOziMHdgk67QK7+2XtCH1FCaqu5Fhe+VkCa54Fqpg6CBr4zv2rhzbH+i+
j0Cv3luXQ+yUYFrrswudN615kRrMNmoYTONqp/tS9p2SIapZSEiwRpDWKdeuznyd
FLx+sCOnPEm11nnPzW2c43A24mRT/Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:48 2025 by rpki-client on console.sobornost.net