Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          1PGudNSzSh14o/3YG7xRNwDw6uxKcBqj0onHXb5M5IA=
Subject key identifier:   58:3C:2D:47:B4:A4:0D:38:0E:2C:CC:11:D2:6C:D9:A6:3B:78:2E:67
Certificate issuer:       /CN=3FF4610BF1D06106BA50D14E85900089D08C658F
Certificate serial:       58AA0D96A46E53C55F15F356C5C3BF9A8C30FD7C
Authority key identifier: 3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Wed 26 Mar 2025 14:09:25 +0000
ROA not before:           Wed 26 Mar 2025 14:04:25 +0000
ROA not after:            Wed 25 Mar 2026 14:09:25 +0000
asID:                     268009
IP address blocks:        2804:5690::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:aa:0d:96:a4:6e:53:c5:5f:15:f3:56:c5:c3:bf:9a:8c:30:fd:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF4610BF1D06106BA50D14E85900089D08C658F
        Validity
            Not Before: Mar 26 14:04:25 2025 GMT
            Not After : Mar 25 14:09:25 2026 GMT
        Subject: CN=583C2D47B4A40D380E2CCC11D26CD9A63B782E67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:7c:da:96:41:03:f0:8f:b4:57:bd:15:89:
                    a5:9a:3b:bb:4f:13:d6:c3:4c:d4:93:8c:ae:79:59:
                    45:2c:95:fe:e6:0a:43:6a:36:41:2a:8d:24:c3:08:
                    73:b2:57:e1:83:73:53:d5:71:6b:7b:00:11:ac:6d:
                    05:b0:65:dc:af:c6:00:f6:c3:8e:31:15:30:4d:d9:
                    e0:62:1b:09:81:6f:b2:39:24:2b:38:a9:58:57:88:
                    52:d1:1b:c4:37:ee:d6:f5:1b:72:b8:c1:37:50:ad:
                    2f:28:ec:99:dd:f6:9c:93:43:03:d3:fb:d3:38:85:
                    61:e5:30:20:5a:72:7d:d6:52:37:23:23:50:e3:d0:
                    3c:2b:be:c0:22:b8:81:fe:41:98:00:bf:28:52:f4:
                    90:52:4e:03:91:ef:ce:b4:65:cf:db:70:74:c3:90:
                    b4:09:a8:8c:57:e2:d6:53:1f:8c:f2:e9:9d:40:3d:
                    6e:b7:28:69:cc:4f:8a:7b:95:3a:36:67:d3:14:25:
                    20:39:ea:42:8f:20:e3:ed:7b:0e:a7:69:1d:a5:d9:
                    60:ca:20:97:2c:6b:15:68:f6:7a:a0:ef:5a:cc:2f:
                    0f:bc:76:0b:4e:98:c7:45:42:7a:60:4c:f5:03:72:
                    dd:cb:c2:9b:3c:bd:0d:84:ba:f9:3b:c1:10:f5:d1:
                    6c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3C:2D:47:B4:A4:0D:38:0E:2C:CC:11:D2:6C:D9:A6:3B:78:2E:67
            X509v3 Authority Key Identifier:
                keyid:3F:F4:61:0B:F1:D0:61:06:BA:50:D1:4E:85:90:00:89:D0:8C:65:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/3FF4610BF1D06106BA50D14E85900089D08C658F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF4610BF1D06106BA50D14E85900089D08C658F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690::/36

    Signature Algorithm: sha256WithRSAEncryption
         57:28:0a:30:41:d0:59:d2:42:79:38:91:e0:aa:c5:06:7a:e7:
         a3:5c:63:af:67:3d:50:6c:b5:53:12:20:86:8b:52:68:dd:21:
         8e:b8:5c:57:80:d8:a9:98:f6:f1:6f:0b:cc:dd:01:a7:ed:95:
         ab:f9:4f:ee:be:0f:6f:d5:d9:62:67:80:6e:8d:09:fa:6f:b5:
         01:49:28:1e:c9:ee:21:80:c9:4b:fc:11:2b:f8:c3:f5:18:80:
         65:d7:69:c2:23:77:6e:cc:e2:df:d7:49:e4:48:2d:ac:89:26:
         d5:b9:44:25:58:51:cb:ca:2d:9b:0b:de:8c:14:fb:27:2f:4f:
         d6:d4:2f:0d:6c:38:a6:fb:d8:2a:34:91:c2:88:9e:c3:49:f0:
         72:be:fd:e4:ee:78:8a:33:4e:9b:dd:93:4a:74:b6:4f:36:ce:
         58:bd:7a:2b:91:9f:11:17:9f:31:37:d5:62:d0:80:91:54:99:
         4e:10:5a:d9:17:6e:0e:ae:8b:a0:06:b8:62:77:e6:01:8a:1c:
         3b:b9:4a:84:34:04:85:d5:5f:77:1a:f3:35:6a:77:49:f9:9b:
         d7:fa:49:50:3c:d4:5d:94:ea:85:7a:42:83:8c:bd:80:55:c8:
         12:ad:a5:bb:d1:c1:77:ad:74:f4:da:23:98:0f:d6:01:8e:12:
         82:4c:ac:f8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWKoNlqRuU8VfFfNWxcO/moww/XwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGNDYxMEJGMUQwNjEwNkJBNTBEMTRFODU5MDAwODlE
MDhDNjU4RjAeFw0yNTAzMjYxNDA0MjVaFw0yNjAzMjUxNDA5MjVaMDMxMTAvBgNV
BAMTKDU4M0MyRDQ3QjRBNDBEMzgwRTJDQ0MxMUQyNkNEOUE2M0I3ODJFNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH1XzalkED8I+0V70ViaWaO7tP
E9bDTNSTjK55WUUslf7mCkNqNkEqjSTDCHOyV+GDc1PVcWt7ABGsbQWwZdyvxgD2
w44xFTBN2eBiGwmBb7I5JCs4qVhXiFLRG8Q37tb1G3K4wTdQrS8o7Jnd9pyTQwPT
+9M4hWHlMCBacn3WUjcjI1Dj0DwrvsAiuIH+QZgAvyhS9JBSTgOR7860Zc/bcHTD
kLQJqIxX4tZTH4zy6Z1APW63KGnMT4p7lTo2Z9MUJSA56kKPIOPtew6naR2l2WDK
IJcsaxVo9nqg71rMLw+8dgtOmMdFQnpgTPUDct3Lwps8vQ2Euvk7wRD10WxXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWDwtR7SkDTgOLMwR0mzZpjt4LmcwHwYDVR0j
BBgwFoAUP/RhC/HQYQa6UNFOhZAAidCMZY8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHFkZXZYaHRaenpkYVZpa0hkVG5jdVpuRURDUFdCYWM1Ym1YRVhBcTd5
NDMvMC8zRkY0NjEwQkYxRDA2MTA2QkE1MEQxNEU4NTkwMDA4OUQwOEM2NThGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGRjQ2MTBCRjFEMDYxMDZC
QTUwRDE0RTg1OTAwMDg5RDA4QzY1OEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhxZGV2WGh0Wnp6ZGFWaWtIZFRuY3VabkVEQ1BXQmFjNWJtWEVYQXE3eTQzLzAv
MzIzODMwMzQzYTM1MzYzOTMwM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNjM4
MzAzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKARWkAAwDQYJKoZIhvcNAQELBQADggEBAFcoCjBB
0FnSQnk4keCqxQZ656NcY69nPVBstVMSIIaLUmjdIY64XFeA2KmY9vFvC8zdAaft
lav5T+6+D2/V2WJngG6NCfpvtQFJKB7J7iGAyUv8ESv4w/UYgGXXacIjd27M4t/X
SeRILayJJtW5RCVYUcvKLZsL3owU+ycvT9bULw1sOKb72Co0kcKInsNJ8HK+/eTu
eIozTpvdk0p0tk82zli9eiuRnxEXnzE31WLQgJFUmU4QWtkXbg6ui6AGuGJ35gGK
HDu5SoQ0BIXVX3ca8zVqd0n5m9f6SVA81F2U6oV6QoOMvYBVyBKtpbvRwXetdPTa
I5gP1gGOEoJMrPg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:54 2025 by rpki-client on console.sobornost.net