Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313030303a3a2f34302d3430203d3e20323732353439.roa
File:                     323830343a383466383a313030303a3a2f34302d3430203d3e20323732353439.roa (raw, json)
Hash identifier:          fQMLDKNtYQ2TopGPimFS4OOXFrsmUpOC4jnXswrVWuE=
Subject key identifier:   4E:B2:20:F6:4D:4F:6F:FB:3A:D4:B6:A4:B3:10:85:A9:BB:FA:43:2C
Certificate issuer:       /CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
Certificate serial:       7E5984A5B648A2B184F1C51E3DB4285C6DEA8797
Authority key identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313030303a3a2f34302d3430203d3e20323732353439.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     272549
IP address blocks:        2804:84f8:1000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl
                          rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 14:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:59:84:a5:b6:48:a2:b1:84:f1:c5:1e:3d:b4:28:5c:6d:ea:87:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4c:d9:f3:cd:72:e4:58:65:3b:c5:91:c2:11:
                    c0:fc:07:f3:d1:ed:02:f6:ea:69:b4:f1:9d:13:4a:
                    c1:51:0e:df:7d:b5:8a:3d:07:10:98:ad:1c:86:27:
                    dd:73:0f:0b:49:6e:8f:b4:28:0e:21:85:d8:f9:ca:
                    e0:fa:d0:ed:eb:5a:e1:23:bd:a1:16:a2:84:d1:21:
                    18:62:8b:04:24:0b:78:7a:a0:ce:db:0f:68:ed:b7:
                    03:47:80:8e:df:a3:6e:53:37:b1:3b:8c:78:03:21:
                    5a:b2:50:af:6e:4b:c6:3f:5a:e6:76:b1:41:cc:69:
                    42:19:dc:be:a4:1a:c2:fd:4d:5b:77:b6:df:01:79:
                    a4:7b:7a:5b:b2:93:8c:cf:bf:37:d6:d9:11:bf:56:
                    0b:e6:98:68:51:94:f4:eb:0b:c3:76:8c:8e:c1:ef:
                    2b:dc:3d:89:91:b5:92:57:f4:7d:bd:41:70:c3:fd:
                    f0:3c:34:f8:6e:f7:67:9e:11:55:20:6f:8a:51:fb:
                    96:d4:fb:f2:26:9a:d3:8f:75:a9:a5:d8:0c:47:9d:
                    6b:55:70:a9:c0:c7:d9:bb:73:9e:c0:fa:6b:7c:6c:
                    3a:1d:a3:05:dc:3c:7c:ce:05:32:ad:90:c1:b0:75:
                    ec:f5:0b:d3:c1:8d:6a:40:87:2f:0b:02:64:cc:40:
                    4c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B2:20:F6:4D:4F:6F:FB:3A:D4:B6:A4:B3:10:85:A9:BB:FA:43:2C
            X509v3 Authority Key Identifier:
                keyid:2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313030303a3a2f34302d3430203d3e20323732353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84f8:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:75:be:7a:4e:73:5b:e7:d4:98:23:bd:f3:b1:4a:6a:ac:5d:
         06:ff:9b:07:13:77:d5:73:0c:21:d0:b5:ae:34:46:5b:6b:05:
         5c:3c:38:3c:7e:e0:14:f8:b8:c3:0c:68:df:45:2d:46:86:5f:
         f2:c9:98:82:f1:6f:ef:72:6d:d5:d6:32:3d:f5:3b:4c:8f:dc:
         03:df:3e:a1:3a:88:f4:55:7b:54:30:23:27:77:75:a3:84:19:
         d4:c7:f1:a3:b8:0d:99:a6:32:38:52:4f:6e:75:9a:d6:fc:df:
         63:6c:ad:86:fa:f1:ef:ee:17:6f:27:15:3e:27:8c:4a:db:ca:
         4d:54:b2:2a:b6:23:50:2d:3b:1e:cd:9d:77:1e:5d:56:b6:57:
         8d:d7:cb:a8:75:49:2b:25:72:48:5d:51:1f:2f:d1:06:a7:6f:
         ec:47:ca:43:1f:6d:f1:ed:c4:ef:7a:f9:5f:a5:b6:2e:56:52:
         7d:3e:2f:82:c3:96:89:5c:e6:be:9d:17:42:ea:96:11:b7:70:
         ac:25:5e:da:9d:aa:cc:03:05:c6:b8:aa:67:ff:39:a6:9c:4c:
         62:af:c2:7b:a3:64:fb:6a:64:b9:c6:de:d3:22:38:0e:85:86:
         66:93:8a:5d:c0:45:7a:0f:bb:05:18:7a:f3:18:da:82:58:28:
         35:55:1b:64
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUflmEpbZIorGE8cUePbQoXG3qh5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM0MjUyNTdBRTdCNjM1MjlFQjg4MTA4QUM3REVBNjA2
NDhCNDNFNTAeFw0yNTAzMDUxODU1MDJaFw0yNjAzMDQxOTAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUI0Q0Q5RjNDRDcyRTQ1ODY1
M0JDNTkxQzIxMUMwRkMwN0YzRDFFRDAyRjZFQTY5QjRGMTlEMTM0QUMxNTEwRURG
N0RCNThBM0QwNzEwOThBRDFDODYyN0RENzMwRjBCNDk2RThGQjQyODBFMjE4NUQ4
RjlDQUUwRkFEMEVERUI1QUUxMjNCREExMTZBMjg0RDEyMTE4NjI4QjA0MjQwQjc4
N0FBMENFREIwRjY4RURCNzAzNDc4MDhFREZBMzZFNTMzN0IxM0I4Qzc4MDMyMTVB
QjI1MEFGNkU0QkM2M0Y1QUU2NzZCMTQxQ0M2OTQyMTlEQ0JFQTQxQUMyRkQ0RDVC
NzdCNkRGMDE3OUE0N0I3QTVCQjI5MzhDQ0ZCRjM3RDZEOTExQkY1NjBCRTY5ODY4
NTE5NEY0RUIwQkMzNzY4QzhFQzFFRjJCREMzRDg5OTFCNTkyNTdGNDdEQkQ0MTcw
QzNGREYwM0MzNEY4NkVGNzY3OUUxMTU1MjA2RjhBNTFGQjk2RDRGQkYyMjY5QUQz
OEY3NUE5QTVEODBDNDc5RDZCNTU3MEE5QzBDN0Q5QkI3MzlFQzBGQTZCN0M2QzNB
MURBMzA1REMzQzdDQ0UwNTMyQUQ5MEMxQjA3NUVDRjUwQkQzQzE4RDZBNDA4NzJG
MEIwMjY0Q0M0MDRDMEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA60zZ881y5FhlO8WRwhHA/Afz0e0C9upptPGdE0rBUQ7ffbWKPQcQ
mK0chifdcw8LSW6PtCgOIYXY+crg+tDt61rhI72hFqKE0SEYYosEJAt4eqDO2w9o
7bcDR4CO36NuUzexO4x4AyFaslCvbkvGP1rmdrFBzGlCGdy+pBrC/U1bd7bfAXmk
e3pbspOMz7831tkRv1YL5phoUZT06wvDdoyOwe8r3D2JkbWSV/R9vUFww/3wPDT4
bvdnnhFVIG+KUfuW1PvyJprTj3WppdgMR51rVXCpwMfZu3OewPprfGw6HaMF3Dx8
zgUyrZDBsHXs9QvTwY1qQIcvCwJkzEBMDQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FE6yIPZNT2/7OtS2pLMQham7+kMsMB8GA1UdIwQYMBaAFCxCUleue2NSnriBCKx9
6mBki0PlMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhkaU5tWktkdlBBR3JH
cWhyNXVaN21mQVRnaXpuRnlQbm5zc1lMcGZYZHJMLzEvMkM0MjUyNTdBRTdCNjM1
MjlFQjg4MTA4QUM3REVBNjA2NDhCNDNFNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yQzQyNTI1N0FFN0I2MzUyOUVCODgxMDhBQzdERUE2MDY0OEI0
M0U1LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84ZGlObVpLZHZQQUdyR3FocjV1
WjdtZkFUZ2l6bkZ5UG5uc3NZTHBmWGRyTC8xLzMyMzgzMDM0M2EzODM0NjYzODNh
MzEzMDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM3MzIzNTM0Mzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBIT4EDANBgkqhkiG9w0BAQsFAAOCAQEAP3W+ek5zW+fUmCO987FK
aqxdBv+bBxN31XMMIdC1rjRGW2sFXDw4PH7gFPi4wwxo30UtRoZf8smYgvFv73Jt
1dYyPfU7TI/cA98+oTqI9FV7VDAjJ3d1o4QZ1Mfxo7gNmaYyOFJPbnWa1vzfY2yt
hvrx7+4XbycVPieMStvKTVSyKrYjUC07Hs2ddx5dVrZXjdfLqHVJKyVySF1RHy/R
Bqdv7EfKQx9t8e3E73r5X6W2LlZSfT4vgsOWiVzmvp0XQuqWEbdwrCVe2p2qzAMF
xriqZ/85ppxMYq/Ce6Nk+2pkucbe0yI4DoWGZpOKXcBFeg+7BRh68xjaglgoNVUb
ZA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:16 2025 by rpki-client on console.sobornost.net