Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/323830343a313335633a3a2f33322d3335203d3e20323633353330.roa
File:                     323830343a313335633a3a2f33322d3335203d3e20323633353330.roa (raw, json)
Hash identifier:          1leuXLfSVDD6Gm1Ss0EJbvGcihufv7rqI4WVO8zOzp0=
Subject key identifier:   9F:12:66:B9:34:86:E9:33:2C:3B:7A:59:85:88:49:60:8F:E3:1F:45
Certificate issuer:       /CN=F7C4DEB12240FF8688C32C67939C04C380824025
Certificate serial:       04EB24DDC2F7BCE8ED312A9895FC234726ED70F9
Authority key identifier: F7:C4:DE:B1:22:40:FF:86:88:C3:2C:67:93:9C:04:C3:80:82:40:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/323830343a313335633a3a2f33322d3335203d3e20323633353330.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     263530
IP address blocks:        2804:135c::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.crl
                          rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:eb:24:dd:c2:f7:bc:e8:ed:31:2a:98:95:fc:23:47:26:ed:70:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7C4DEB12240FF8688C32C67939C04C380824025
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:22:0d:ba:b3:5c:8a:97:fe:19:be:21:0d:5a:
                    0c:6c:9a:67:a0:38:1e:98:44:c3:e9:c0:dc:2a:b8:
                    a1:65:8f:a8:8a:ff:be:30:66:2a:26:7c:37:23:27:
                    73:64:fe:b5:ff:e3:09:30:25:31:eb:4c:29:95:1e:
                    cc:52:ed:7b:0b:37:a6:8b:8d:4a:4e:cb:1a:1a:64:
                    12:6a:46:9d:d6:1d:57:b6:6f:c9:39:f3:5b:f7:82:
                    26:f6:33:79:20:67:de:15:92:8a:b7:c6:93:b8:04:
                    57:47:73:e2:c4:16:e3:51:87:46:82:df:bf:20:f1:
                    fa:2d:4a:44:f4:1c:a4:05:67:10:40:e5:04:3a:2e:
                    93:6c:96:d1:12:a8:7a:37:4d:f3:f2:69:a3:ce:ae:
                    73:fd:34:74:ed:ce:af:22:12:7d:40:69:ed:74:5d:
                    1c:e5:cd:a8:6f:1c:65:7f:ed:2b:cb:da:56:04:06:
                    96:eb:00:cc:61:65:77:bd:ec:38:2a:d2:70:96:7a:
                    c7:c9:9c:1e:01:27:be:33:36:2a:e0:5b:ad:74:69:
                    18:4d:56:18:06:7a:e2:03:aa:22:68:df:84:bd:e4:
                    3b:60:a5:ca:55:eb:b2:de:be:87:6c:89:08:7f:d6:
                    62:1a:0b:f2:bd:39:a3:20:07:8d:6e:58:b8:dd:35:
                    71:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:12:66:B9:34:86:E9:33:2C:3B:7A:59:85:88:49:60:8F:E3:1F:45
            X509v3 Authority Key Identifier:
                keyid:F7:C4:DE:B1:22:40:FF:86:88:C3:2C:67:93:9C:04:C3:80:82:40:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/323830343a313335633a3a2f33322d3335203d3e20323633353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:135c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:3e:eb:ba:50:c7:e5:93:ee:55:36:78:56:30:b8:93:66:e7:
         09:58:5d:56:d2:4f:0e:f4:17:1f:43:4e:1e:68:c6:7c:ab:ad:
         02:e4:a6:6b:25:dc:25:91:68:49:01:6d:8e:ec:1a:4e:11:5d:
         b4:e4:d0:26:30:f6:5a:bd:0f:d6:08:0a:87:ce:3a:0f:ce:26:
         42:c5:fb:7e:d1:a7:13:7f:20:27:c1:aa:47:13:2a:88:a2:c6:
         d4:61:39:a1:97:5d:56:7e:76:64:51:a8:b2:0f:25:98:22:d2:
         7f:e4:3f:7a:be:eb:9c:a9:96:b3:c1:44:90:36:dc:64:86:44:
         d6:ca:4b:9f:b3:f9:41:17:70:c9:a3:d0:2b:4b:11:13:3c:ac:
         be:e6:0b:ff:0e:ca:b9:49:9a:99:95:c3:90:74:bb:37:45:d8:
         79:eb:d0:a6:b4:09:9e:69:98:17:5c:7d:95:f4:ec:d5:e8:ce:
         ec:36:fb:51:4e:93:9c:4e:07:3e:5b:04:65:30:6c:93:c2:be:
         78:8c:b8:73:87:d2:da:22:bb:d0:78:9f:45:06:83:c3:08:f0:
         fa:15:d1:8e:4d:11:a7:ea:c7:d4:d6:98:e1:45:f6:4a:03:fd:
         1e:0b:34:13:31:87:47:2c:c7:27:f5:e5:48:b7:22:af:1c:eb:
         5d:01:6b:59
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUBOsk3cL3vOjtMSqYlfwjRybtcPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdDNERFQjEyMjQwRkY4Njg4QzMyQzY3OTM5QzA0QzM4
MDgyNDAyNTAeFw0yNTAzMDUxODU1MDVaFw0yNjAzMDQxOTAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDcyMjBEQkFCMzVDOEE5N0ZF
MTlCRTIxMEQ1QTBDNkM5QTY3QTAzODFFOTg0NEMzRTlDMERDMkFCOEExNjU4RkE4
OEFGRkJFMzA2NjJBMjY3QzM3MjMyNzczNjRGRUI1RkZFMzA5MzAyNTMxRUI0QzI5
OTUxRUNDNTJFRDdCMEIzN0E2OEI4RDRBNEVDQjFBMUE2NDEyNkE0NjlERDYxRDU3
QjY2RkM5MzlGMzVCRjc4MjI2RjYzMzc5MjA2N0RFMTU5MjhBQjdDNjkzQjgwNDU3
NDc3M0UyQzQxNkUzNTE4NzQ2ODJERkJGMjBGMUZBMkQ0QTQ0RjQxQ0E0MDU2NzEw
NDBFNTA0M0EyRTkzNkM5NkQxMTJBODdBMzc0REYzRjI2OUEzQ0VBRTczRkQzNDc0
RURDRUFGMjIxMjdENDA2OUVENzQ1RDFDRTVDREE4NkYxQzY1N0ZFRDJCQ0JEQTU2
MDQwNjk2RUIwMENDNjE2NTc3QkRFQzM4MkFEMjcwOTY3QUM3Qzk5QzFFMDEyN0JF
MzMzNjJBRTA1QkFENzQ2OTE4NEQ1NjE4MDY3QUUyMDNBQTIyNjhERjg0QkRFNDNC
NjBBNUNBNTVFQkIyREVCRTg3NkM4OTA4N0ZENjYyMUEwQkYyQkQzOUEzMjAwNzhE
NkU1OEI4REQzNTcxQTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1yINurNcipf+Gb4hDVoMbJpnoDgemETD6cDcKrihZY+oiv++MGYq
Jnw3IydzZP61/+MJMCUx60wplR7MUu17Czemi41KTssaGmQSakad1h1Xtm/JOfNb
94Im9jN5IGfeFZKKt8aTuARXR3PixBbjUYdGgt+/IPH6LUpE9BykBWcQQOUEOi6T
bJbREqh6N03z8mmjzq5z/TR07c6vIhJ9QGntdF0c5c2obxxlf+0ry9pWBAaW6wDM
YWV3vew4KtJwlnrHyZweASe+MzYq4FutdGkYTVYYBnriA6oiaN+EveQ7YKXKVeuy
3r6HbIkIf9ZiGgvyvTmjIAeNbli43TVxowIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FJ8SZrk0hukzLDt6WYWISWCP4x9FMB8GA1UdIwQYMBaAFPfE3rEiQP+GiMMsZ5Oc
BMOAgkAlMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhpajVORDNVY1ZUWTVw
WE5kOEFqeHRIOFZUcXFTbXNCTTZQYTRIODFSYWVNLzEvRjdDNERFQjEyMjQwRkY4
Njg4QzMyQzY3OTM5QzA0QzM4MDgyNDAyNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GN0M0REVCMTIyNDBGRjg2ODhDMzJDNjc5MzlDMDRDMzgwODI0
MDI1LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84aWo1TkQzVWNWVFk1cFhOZDhB
anh0SDhWVHFxU21zQk02UGE0SDgxUmFlTS8xLzMyMzgzMDM0M2EzMTMzMzU2MzNh
M2EyZjMzMzIyZDMzMzUyMDNkM2UyMDMyMzYzMzM1MzMzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
E1wwDQYJKoZIhvcNAQELBQADggEBAGo+67pQx+WT7lU2eFYwuJNm5wlYXVbSTw70
Fx9DTh5oxnyrrQLkpmsl3CWRaEkBbY7sGk4RXbTk0CYw9lq9D9YICofOOg/OJkLF
+37RpxN/ICfBqkcTKoiixtRhOaGXXVZ+dmRRqLIPJZgi0n/kP3q+65yplrPBRJA2
3GSGRNbKS5+z+UEXcMmj0CtLERM8rL7mC/8OyrlJmpmVw5B0uzdF2Hnr0Ka0CZ5p
mBdcfZX07NXozuw2+1FOk5xOBz5bBGUwbJPCvniMuHOH0toiu9B4n0UGg8MI8PoV
0Y5NEafqx9TWmOFF9koD/R4LNBMxh0csxyf15Ui3Iq8c610Ba1k=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:18 2025 by rpki-client on console.sobornost.net