Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/323830343a323538343a3a2f33322d3336203d3e20323634323835.roa
File:                     323830343a323538343a3a2f33322d3336203d3e20323634323835.roa (raw, json)
Hash identifier:          hC/MtWNmOMhyMi232IO3cKz1CkF4OEViSFzLMgZkuao=
Subject key identifier:   5A:E1:4A:EB:A0:E2:FB:27:76:94:0A:75:7E:25:4D:14:D3:76:9D:B6
Certificate issuer:       /CN=17A303D8E6A89A6A5148E842F9400F754E558ED5
Certificate serial:       7C2DE5618B4C5C55833AE16990A01ABDB54B98AF
Authority key identifier: 17:A3:03:D8:E6:A8:9A:6A:51:48:E8:42:F9:40:0F:75:4E:55:8E:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/323830343a323538343a3a2f33322d3336203d3e20323634323835.roa
Signing time:             Thu 06 Mar 2025 18:05:37 +0000
ROA not before:           Thu 06 Mar 2025 18:00:37 +0000
ROA not after:            Thu 05 Mar 2026 18:05:37 +0000
asID:                     264285
IP address blocks:        2804:2584::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.crl
                          rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 12:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2d:e5:61:8b:4c:5c:55:83:3a:e1:69:90:a0:1a:bd:b5:4b:98:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17A303D8E6A89A6A5148E842F9400F754E558ED5
        Validity
            Not Before: Mar  6 18:00:37 2025 GMT
            Not After : Mar  5 18:05:37 2026 GMT
        Subject: CN=5AE14AEBA0E2FB2776940A757E254D14D3769DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f0:25:4b:06:e7:10:b2:81:c7:9a:e2:a4:7c:
                    36:00:65:15:77:35:d0:9e:51:72:2b:5e:9e:41:dc:
                    a6:24:4e:b9:42:ea:86:19:7b:dd:90:8c:2f:5a:45:
                    d3:76:b4:83:d3:ce:ec:e8:95:86:f3:b7:aa:af:99:
                    45:38:1d:14:24:49:8e:97:44:26:c6:d5:0f:cc:b5:
                    8f:2c:93:c9:01:ee:e7:c2:46:e7:d3:a4:ea:2f:f2:
                    05:2a:42:1f:89:17:91:d7:f4:46:11:c8:0c:8a:14:
                    8e:f3:1d:a3:7a:f1:5d:9a:ca:f0:d9:8c:48:14:52:
                    06:40:04:7e:ca:33:16:ad:86:d8:aa:ed:00:20:ee:
                    c4:8e:75:f5:2d:17:0e:39:f5:ba:4d:be:d9:40:1b:
                    bc:3c:e9:b2:a5:89:7a:49:9e:4b:28:df:b0:ec:b1:
                    0e:38:80:dc:b5:87:c8:e0:89:8e:da:b3:c7:c0:9b:
                    00:e3:78:ec:d5:a7:1d:50:52:d0:b6:56:00:75:f1:
                    3b:64:06:6c:6c:12:93:45:c2:df:8a:ce:5e:39:2f:
                    32:88:e2:3a:2e:f8:30:55:43:72:ef:9a:05:c9:af:
                    70:b5:87:c0:30:1d:71:81:6d:65:28:9c:f4:f7:2f:
                    e7:aa:4a:74:a7:49:59:16:82:a9:d2:47:ab:25:cc:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E1:4A:EB:A0:E2:FB:27:76:94:0A:75:7E:25:4D:14:D3:76:9D:B6
            X509v3 Authority Key Identifier:
                keyid:17:A3:03:D8:E6:A8:9A:6A:51:48:E8:42:F9:40:0F:75:4E:55:8E:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/323830343a323538343a3a2f33322d3336203d3e20323634323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2584::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:2e:e2:e0:3d:54:ad:93:aa:d7:f8:41:46:05:a7:35:ce:40:
         49:8f:63:1f:8b:c7:8a:32:58:f9:e1:74:c2:32:18:4b:b9:7c:
         28:5e:53:28:60:f1:7c:d2:00:cb:a9:b2:2c:41:0f:2b:d5:c9:
         5d:c2:44:19:1a:7a:8c:38:bf:0e:10:6d:f3:35:0b:08:4f:fb:
         1d:2d:a1:73:c2:86:1c:bd:e6:79:27:5c:fa:04:fc:fb:b9:7c:
         45:1a:bf:4e:6f:cd:a6:7e:90:28:1d:26:e2:f7:05:2d:c0:f0:
         d6:1f:9f:f8:be:a8:64:14:88:d3:80:f6:db:3c:f6:d6:6b:5d:
         a8:e5:7e:34:57:4a:2d:a5:7c:81:76:5a:55:76:c2:d8:7c:e9:
         ed:52:3f:bd:ef:f0:35:9d:c0:e3:13:9a:fd:7d:16:63:22:ad:
         07:6f:e8:e6:30:c3:88:91:fe:27:91:99:d0:ff:ec:50:74:70:
         74:3c:cb:20:0d:ea:2e:46:c8:12:e2:73:79:27:e3:09:7e:37:
         9f:f9:43:6c:ce:15:00:fc:5a:e3:b0:13:ed:3a:14:aa:af:09:
         17:85:2f:90:12:34:23:d6:e3:dc:60:b7:b0:3b:c4:59:ba:50:
         da:2f:72:1e:7c:54:a6:1f:31:6e:89:a3:81:28:b6:3b:7e:1d:
         63:b4:4c:68
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfC3lYYtMXFWDOuFpkKAavbVLmK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdBMzAzRDhFNkE4OUE2QTUxNDhFODQyRjk0MDBGNzU0
RTU1OEVENTAeFw0yNTAzMDYxODAwMzdaFw0yNjAzMDUxODA1MzdaMDMxMTAvBgNV
BAMTKDVBRTE0QUVCQTBFMkZCMjc3Njk0MEE3NTdFMjU0RDE0RDM3NjlEQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD58CVLBucQsoHHmuKkfDYAZRV3
NdCeUXIrXp5B3KYkTrlC6oYZe92QjC9aRdN2tIPTzuzolYbzt6qvmUU4HRQkSY6X
RCbG1Q/MtY8sk8kB7ufCRufTpOov8gUqQh+JF5HX9EYRyAyKFI7zHaN68V2ayvDZ
jEgUUgZABH7KMxathtiq7QAg7sSOdfUtFw459bpNvtlAG7w86bKliXpJnkso37Ds
sQ44gNy1h8jgiY7as8fAmwDjeOzVpx1QUtC2VgB18TtkBmxsEpNFwt+Kzl45LzKI
4jou+DBVQ3LvmgXJr3C1h8AwHXGBbWUonPT3L+eqSnSnSVkWgqnSR6slzAvBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUWuFK66Di+yd2lAp1fiVNFNN2nbYwHwYDVR0j
BBgwFoAUF6MD2OaommpRSOhC+UAPdU5VjtUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0ZEVkJKQ2ZOa2lIcnRlMmFoYzFOQXVHbnprOXZGbW9FTGNnQ1FOV3ND
eXIvMS8xN0EzMDNEOEU2QTg5QTZBNTE0OEU4NDJGOTQwMEY3NTRFNTU4RUQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3QTMwM0Q4RTZBODlBNkE1
MTQ4RTg0MkY5NDAwRjc1NEU1NThFRDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdGRFZCSkNmTmtpSHJ0ZTJhaGMxTkF1R256azl2Rm1vRUxjZ0NRTldzQ3lyLzEv
MzIzODMwMzQzYTMyMzUzODM0M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM0
MzIzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQlhDANBgkqhkiG9w0BAQsFAAOCAQEALi7i4D1U
rZOq1/hBRgWnNc5ASY9jH4vHijJY+eF0wjIYS7l8KF5TKGDxfNIAy6myLEEPK9XJ
XcJEGRp6jDi/DhBt8zULCE/7HS2hc8KGHL3meSdc+gT8+7l8RRq/Tm/Npn6QKB0m
4vcFLcDw1h+f+L6oZBSI04D22zz21mtdqOV+NFdKLaV8gXZaVXbC2Hzp7VI/ve/w
NZ3A4xOa/X0WYyKtB2/o5jDDiJH+J5GZ0P/sUHRwdDzLIA3qLkbIEuJzeSfjCX43
n/lDbM4VAPxa47AT7ToUqq8JF4UvkBI0I9bj3GC3sDvEWbpQ2i9yHnxUph8xbomj
gSi2O34dY7RMaA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:43 2025 by rpki-client on console.sobornost.net