Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/323830343a373234633a3a2f33322d313238203d3e20323730383435.roa
File:                     323830343a373234633a3a2f33322d313238203d3e20323730383435.roa (raw, json)
Hash identifier:          Z0vCvj+Vim0ac3Yt33tPoV2KdykezukadC/aeq1aNbs=
Subject key identifier:   25:A5:16:33:74:50:63:CA:B1:43:EA:01:0D:B8:AF:EF:59:ED:A3:B8
Certificate issuer:       /CN=44D163BB7C285498620FF487902FE788F88F4349
Certificate serial:       7AD5752C6B398F662F5064F9C72380B70949A45A
Authority key identifier: 44:D1:63:BB:7C:28:54:98:62:0F:F4:87:90:2F:E7:88:F8:8F:43:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/323830343a373234633a3a2f33322d313238203d3e20323730383435.roa
Signing time:             Thu 06 Mar 2025 17:49:29 +0000
ROA not before:           Thu 06 Mar 2025 17:44:29 +0000
ROA not after:            Thu 05 Mar 2026 17:49:29 +0000
asID:                     270845
IP address blocks:        2804:724c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.crl
                          rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d5:75:2c:6b:39:8f:66:2f:50:64:f9:c7:23:80:b7:09:49:a4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D163BB7C285498620FF487902FE788F88F4349
        Validity
            Not Before: Mar  6 17:44:29 2025 GMT
            Not After : Mar  5 17:49:29 2026 GMT
        Subject: CN=25A51633745063CAB143EA010DB8AFEF59EDA3B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:17:41:33:6e:a1:87:10:42:d4:43:5c:3e:f9:
                    05:11:d9:b3:18:ba:99:9c:f7:8b:3c:c5:13:ed:f5:
                    19:9a:5a:60:1f:bc:c9:48:5b:55:7b:e9:f5:18:8e:
                    b2:16:68:81:95:d2:01:29:d6:f6:78:8a:f2:55:52:
                    fb:54:ba:77:2f:91:e0:d1:8a:b7:37:f9:3b:f8:fe:
                    ff:07:d5:4c:68:65:0f:10:d2:4e:38:d5:30:7f:3a:
                    c4:94:c8:c3:24:4c:bc:4c:ab:ae:f9:b4:d5:13:77:
                    85:18:ef:90:24:85:b4:14:60:a6:90:50:9c:6e:80:
                    7c:9d:c0:f0:2e:58:a7:27:63:61:b7:0d:e5:a0:dc:
                    b2:74:29:03:5d:2b:b7:82:e4:7a:42:73:23:60:e5:
                    dd:44:0c:80:0b:e0:4f:20:73:94:75:e2:d2:45:d1:
                    e5:38:27:78:8e:77:14:d0:b8:f2:9f:bf:6e:26:9a:
                    52:e8:7d:b9:67:06:22:18:17:4d:fa:1a:fa:28:16:
                    d1:a4:dc:4c:91:49:3e:50:9f:32:93:c9:c9:be:66:
                    94:e3:ed:1f:66:38:32:d4:42:87:c2:cb:34:74:45:
                    d8:40:7a:e5:61:ef:48:45:08:c5:cb:1a:7b:94:d2:
                    00:3d:ce:09:f9:6c:96:45:34:78:a0:91:22:fd:0d:
                    28:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A5:16:33:74:50:63:CA:B1:43:EA:01:0D:B8:AF:EF:59:ED:A3:B8
            X509v3 Authority Key Identifier:
                keyid:44:D1:63:BB:7C:28:54:98:62:0F:F4:87:90:2F:E7:88:F8:8F:43:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/323830343a373234633a3a2f33322d313238203d3e20323730383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:724c::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:3e:a6:b7:93:a2:d2:0a:df:68:9f:38:3e:48:33:03:87:a1:
         1d:bc:8b:23:5c:69:6f:ef:58:25:58:aa:00:1e:cb:49:52:fc:
         84:0b:3c:93:cf:d3:b9:ec:73:81:1b:56:3f:d0:8a:08:9f:eb:
         17:0c:ad:4e:91:1e:51:6d:0d:12:4d:41:d4:2d:75:6f:76:99:
         e3:6e:af:9c:b6:d2:47:42:11:f1:13:21:97:8a:5f:b5:5d:8b:
         38:cc:c7:41:17:fc:9e:11:eb:be:89:a9:25:66:be:39:a6:d7:
         56:22:11:c0:cb:bd:23:7e:c9:5e:62:11:d0:4c:6f:f3:52:71:
         50:47:a7:23:87:4c:ea:c3:66:8a:6a:11:62:9a:7b:22:b5:5f:
         fe:e9:bf:72:57:97:74:f9:91:c2:0b:48:b4:ea:96:8c:45:d7:
         3b:14:62:48:7e:6a:d3:c1:fe:19:d3:7b:b9:53:d2:f5:32:5e:
         7a:e5:d6:37:e0:3a:48:79:94:42:7b:29:37:e3:82:79:c1:06:
         f3:c1:0a:36:08:f5:97:99:fc:56:2e:03:9e:7e:7c:db:8e:0a:
         8e:8f:29:95:01:73:6d:11:9e:34:53:51:ac:ab:2a:bb:d5:3b:
         86:7e:00:e9:06:d9:9b:ae:73:99:91:dc:3a:1b:88:7a:d9:6f:
         3f:3b:6c:ae
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUetV1LGs5j2YvUGT5xyOAtwlJpFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDREMTYzQkI3QzI4NTQ5ODYyMEZGNDg3OTAyRkU3ODhG
ODhGNDM0OTAeFw0yNTAzMDYxNzQ0MjlaFw0yNjAzMDUxNzQ5MjlaMDMxMTAvBgNV
BAMTKDI1QTUxNjMzNzQ1MDYzQ0FCMTQzRUEwMTBEQjhBRkVGNTlFREEzQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsF0EzbqGHEELUQ1w++QUR2bMY
upmc94s8xRPt9RmaWmAfvMlIW1V76fUYjrIWaIGV0gEp1vZ4ivJVUvtUuncvkeDR
irc3+Tv4/v8H1UxoZQ8Q0k441TB/OsSUyMMkTLxMq675tNUTd4UY75AkhbQUYKaQ
UJxugHydwPAuWKcnY2G3DeWg3LJ0KQNdK7eC5HpCcyNg5d1EDIAL4E8gc5R14tJF
0eU4J3iOdxTQuPKfv24mmlLofblnBiIYF036GvooFtGk3EyRST5QnzKTycm+ZpTj
7R9mODLUQofCyzR0RdhAeuVh70hFCMXLGnuU0gA9zgn5bJZFNHigkSL9DSgDAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUJaUWM3RQY8qxQ+oBDbiv71nto7gwHwYDVR0j
BBgwFoAURNFju3woVJhiD/SHkC/niPiPQ0kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODRwOVVucVlVdDF0cVY0b3o4ZUh0b1lpWHA5em10U2lTeDdCZFVtQzhl
Wk0vMS80NEQxNjNCQjdDMjg1NDk4NjIwRkY0ODc5MDJGRTc4OEY4OEY0MzQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0RDE2M0JCN0MyODU0OTg2
MjBGRjQ4NzkwMkZFNzg4Rjg4RjQzNDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg0cDlVbnFZVXQxdHFWNG96OGVIdG9ZaVhwOXptdFNpU3g3QmRVbUM4ZVpNLzEv
MzIzODMwMzQzYTM3MzIzNDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzODM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHJMMA0GCSqGSIb3DQEBCwUAA4IBAQCEPqa3
k6LSCt9onzg+SDMDh6EdvIsjXGlv71glWKoAHstJUvyECzyTz9O57HOBG1Y/0IoI
n+sXDK1OkR5RbQ0STUHULXVvdpnjbq+cttJHQhHxEyGXil+1XYs4zMdBF/yeEeu+
iaklZr45ptdWIhHAy70jfsleYhHQTG/zUnFQR6cjh0zqw2aKahFimnsitV/+6b9y
V5d0+ZHCC0i06paMRdc7FGJIfmrTwf4Z03u5U9L1Ml565dY34DpIeZRCeyk344J5
wQbzwQo2CPWXmfxWLgOefnzbjgqOjymVAXNtEZ40U1Gsqyq71TuGfgDpBtmbrnOZ
kdw6G4h62W8/O2yu
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:12 2025 by rpki-client on console.sobornost.net