Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/323830343a333433343a3a2f33322d3334203d3e20323635343432.roa
File:                     323830343a333433343a3a2f33322d3334203d3e20323635343432.roa (raw, json)
Hash identifier:          74bVtsCsLHHhwtYBJpHR3qmKSfhUa8fCEjwqHxP0QVw=
Subject key identifier:   39:79:6E:B6:FE:D6:32:3C:DD:88:E8:A2:90:E9:4E:11:6C:19:26:39
Certificate issuer:       /CN=7C4E9246B15A5293F06E721B4412675ED1159708
Certificate serial:       296B3B945E27F54FE6C78B78CB1FE090474E7658
Authority key identifier: 7C:4E:92:46:B1:5A:52:93:F0:6E:72:1B:44:12:67:5E:D1:15:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C4E9246B15A5293F06E721B4412675ED1159708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/323830343a333433343a3a2f33322d3334203d3e20323635343432.roa
Signing time:             Thu 06 Mar 2025 22:01:34 +0000
ROA not before:           Thu 06 Mar 2025 21:56:34 +0000
ROA not after:            Thu 05 Mar 2026 22:01:34 +0000
asID:                     265442
IP address blocks:        2804:3434::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/7C4E9246B15A5293F06E721B4412675ED1159708.crl
                          rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/7C4E9246B15A5293F06E721B4412675ED1159708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C4E9246B15A5293F06E721B4412675ED1159708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 04:15:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6b:3b:94:5e:27:f5:4f:e6:c7:8b:78:cb:1f:e0:90:47:4e:76:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C4E9246B15A5293F06E721B4412675ED1159708
        Validity
            Not Before: Mar  6 21:56:34 2025 GMT
            Not After : Mar  5 22:01:34 2026 GMT
        Subject: CN=39796EB6FED6323CDD88E8A290E94E116C192639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:46:81:95:47:89:ca:b6:35:9a:ae:aa:91:
                    2d:0a:19:08:2d:ce:6c:7f:dc:27:88:ed:bc:69:30:
                    2d:54:94:03:00:af:6e:2b:dc:76:b4:4f:4b:c7:7f:
                    74:b4:e9:8b:d9:d3:66:c6:2f:92:77:c1:a0:3f:a5:
                    3d:8e:bc:0a:62:85:fe:8d:b2:69:f5:0c:77:36:e1:
                    cb:28:bf:9b:53:8e:3c:ed:2f:b5:63:3e:10:39:ff:
                    5c:59:df:ce:11:94:df:4b:7c:a8:59:ce:8b:92:17:
                    50:d6:73:7b:da:9b:62:b1:ef:d3:75:ae:fb:d0:6a:
                    39:91:25:7c:7c:d5:78:bd:fc:41:79:c5:99:4f:ec:
                    b7:d2:bb:ff:95:42:cb:97:ff:eb:2d:67:3f:c6:a3:
                    d6:1a:9e:fb:1b:af:ad:a6:59:d0:ad:17:bd:d5:61:
                    e9:eb:c2:48:e8:5e:57:49:3b:8b:4f:8e:c1:68:25:
                    e7:39:33:b9:78:a7:36:af:66:5e:73:ec:e9:fd:00:
                    ba:73:93:2c:6a:9b:7b:44:75:8b:00:c9:45:77:ca:
                    2c:26:2d:a2:4a:f5:11:d2:91:ad:23:71:81:55:00:
                    a3:fb:c9:d3:6b:b4:09:59:ba:5c:ec:15:1c:5b:32:
                    24:a5:36:fc:ed:bf:23:65:39:c5:83:6f:a0:86:4d:
                    3d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:79:6E:B6:FE:D6:32:3C:DD:88:E8:A2:90:E9:4E:11:6C:19:26:39
            X509v3 Authority Key Identifier:
                keyid:7C:4E:92:46:B1:5A:52:93:F0:6E:72:1B:44:12:67:5E:D1:15:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/7C4E9246B15A5293F06E721B4412675ED1159708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C4E9246B15A5293F06E721B4412675ED1159708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/323830343a333433343a3a2f33322d3334203d3e20323635343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3434::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:29:d3:9c:89:00:12:50:14:2d:eb:49:8e:75:62:26:1a:df:
         a5:7d:d3:8c:3e:2a:4b:ac:11:2e:ca:37:23:b6:8b:e5:69:ed:
         42:5f:f5:6d:64:35:f4:d8:9d:f7:fc:2b:27:46:c3:4e:dd:d3:
         ce:46:41:58:87:10:00:5c:9e:b2:2e:54:8f:e0:1b:04:ef:cd:
         8b:52:84:f3:be:07:8b:fe:2c:64:95:52:16:bd:7e:d7:4a:c4:
         cb:77:49:9d:d1:3d:b2:3a:17:0c:ad:9d:84:28:49:22:dd:99:
         b6:89:08:24:68:4c:80:d8:84:06:05:e1:d2:83:9d:a6:65:37:
         24:05:dc:bd:33:94:ed:df:2d:d6:74:41:c3:36:3a:8a:4f:48:
         2c:42:3d:9d:81:02:28:4f:08:be:ef:57:27:f4:5d:95:54:01:
         f2:8f:c4:7a:00:a8:29:ce:b4:c8:a1:00:78:da:f9:fe:0c:96:
         1c:61:29:62:d5:aa:38:33:fc:77:a3:99:66:8e:dc:dc:bc:c4:
         1c:bc:9c:80:04:6a:cc:58:89:b1:30:d1:d8:8f:df:c9:41:22:
         0a:e8:3a:a9:69:7b:e2:1e:00:3d:2d:50:26:39:b6:89:df:48:
         5e:0b:ba:b7:eb:17:d0:5c:93:2d:29:b5:9f:ca:2c:c1:90:89:
         2f:db:25:64
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKWs7lF4n9U/mx4t4yx/gkEdOdlgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0M0RTkyNDZCMTVBNTI5M0YwNkU3MjFCNDQxMjY3NUVE
MTE1OTcwODAeFw0yNTAzMDYyMTU2MzRaFw0yNjAzMDUyMjAxMzRaMDMxMTAvBgNV
BAMTKDM5Nzk2RUI2RkVENjMyM0NERDg4RThBMjkwRTk0RTExNkMxOTI2MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4bUaBlUeJyrY1mq6qkS0KGQgt
zmx/3CeI7bxpMC1UlAMAr24r3Ha0T0vHf3S06YvZ02bGL5J3waA/pT2OvApihf6N
smn1DHc24csov5tTjjztL7VjPhA5/1xZ384RlN9LfKhZzouSF1DWc3vam2Kx79N1
rvvQajmRJXx81Xi9/EF5xZlP7LfSu/+VQsuX/+stZz/Go9Yanvsbr62mWdCtF73V
YenrwkjoXldJO4tPjsFoJec5M7l4pzavZl5z7On9ALpzkyxqm3tEdYsAyUV3yiwm
LaJK9RHSka0jcYFVAKP7ydNrtAlZulzsFRxbMiSlNvztvyNlOcWDb6CGTT0FAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUOXlutv7WMjzdiOiikOlOEWwZJjkwHwYDVR0j
BBgwFoAUfE6SRrFaUpPwbnIbRBJnXtEVlwgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFVvN2syOVN5QUhIUWUzdnNXMjZHSmMyQ3pYd3lBRnI1a1hGZEZOSmlZ
bzIvMS83QzRFOTI0NkIxNUE1MjkzRjA2RTcyMUI0NDEyNjc1RUQxMTU5NzA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDNEU5MjQ2QjE1QTUyOTNG
MDZFNzIxQjQ0MTI2NzVFRDExNTk3MDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhVbzdrMjlTeUFISFFlM3ZzVzI2R0pjMkN6WHd5QUZyNWtYRmRGTkppWW8yLzEv
MzIzODMwMzQzYTMzMzQzMzM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM1
MzQzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ0NDANBgkqhkiG9w0BAQsFAAOCAQEAFynTnIkA
ElAULetJjnViJhrfpX3TjD4qS6wRLso3I7aL5WntQl/1bWQ19Nid9/wrJ0bDTt3T
zkZBWIcQAFyesi5Uj+AbBO/Ni1KE874Hi/4sZJVSFr1+10rEy3dJndE9sjoXDK2d
hChJIt2ZtokIJGhMgNiEBgXh0oOdpmU3JAXcvTOU7d8t1nRBwzY6ik9ILEI9nYEC
KE8Ivu9XJ/RdlVQB8o/EegCoKc60yKEAeNr5/gyWHGEpYtWqODP8d6OZZo7c3LzE
HLycgARqzFiJsTDR2I/fyUEiCug6qWl74h4APS1QJjm2id9IXgu6t+sX0FyTLSm1
n8oswZCJL9slZA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:55 2025 by rpki-client on console.sobornost.net