Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/323830343a363937383a3a2f33322d3438203d3e20323730323732.roa
File:                     323830343a363937383a3a2f33322d3438203d3e20323730323732.roa (raw, json)
Hash identifier:          BYRlmZbpsIimzsdCW8XG3Ew4/blRX6gQIdI9hBJ9ePM=
Subject key identifier:   E9:2F:CD:37:A7:EB:9C:98:87:35:0E:7A:D0:B0:9D:FC:58:2B:7A:2E
Certificate issuer:       /CN=650CDA051146F7753756149BDB6B92197765D95E
Certificate serial:       4B946DDDC2C568AD5448DA441A70A3545A0A6592
Authority key identifier: 65:0C:DA:05:11:46:F7:75:37:56:14:9B:DB:6B:92:19:77:65:D9:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/323830343a363937383a3a2f33322d3438203d3e20323730323732.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     270272
IP address blocks:        2804:6978::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl
                          rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:94:6d:dd:c2:c5:68:ad:54:48:da:44:1a:70:a3:54:5a:0a:65:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=650CDA051146F7753756149BDB6B92197765D95E
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=E92FCD37A7EB9C9887350E7AD0B09DFC582B7A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e9:3c:b8:b3:a4:b9:f4:14:ac:66:9e:ea:61:
                    73:1e:4c:df:64:27:34:6c:f6:67:31:aa:5a:c3:be:
                    a9:46:a7:fc:54:1b:42:33:27:6b:4c:16:e7:d7:44:
                    72:41:51:f1:3a:27:9d:cc:f3:2d:e7:2c:3f:2e:92:
                    7d:b7:63:86:f0:90:e6:30:f6:39:13:6d:ca:00:74:
                    3f:70:8c:79:15:01:da:98:2a:f1:08:60:78:88:b7:
                    20:01:87:90:89:94:a2:be:9d:fe:0a:67:a6:a3:6c:
                    0d:22:d4:dc:96:29:2b:b9:51:1f:7e:35:6c:0e:f2:
                    a2:f9:87:02:c6:53:14:33:12:e3:c4:35:17:08:38:
                    81:7f:f0:3c:01:ab:c9:32:89:de:b2:8d:09:67:05:
                    ea:24:39:c0:69:9e:ab:5e:71:4a:51:31:cb:ef:df:
                    89:64:bc:73:87:72:56:e0:e9:59:19:70:99:b0:5e:
                    d5:30:a5:4f:14:d3:40:1a:6a:ab:1c:c0:48:30:c7:
                    f3:8f:c2:82:8d:a0:cb:9e:34:c3:eb:6e:00:ed:f7:
                    12:5a:03:aa:90:87:1e:f2:6a:a9:ac:07:56:05:0f:
                    fb:c2:ae:c9:f8:9b:3a:c0:e8:a4:60:6b:6d:8a:3b:
                    87:97:cf:85:e7:97:79:e6:0e:16:d8:fb:f7:49:a6:
                    0c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2F:CD:37:A7:EB:9C:98:87:35:0E:7A:D0:B0:9D:FC:58:2B:7A:2E
            X509v3 Authority Key Identifier:
                keyid:65:0C:DA:05:11:46:F7:75:37:56:14:9B:DB:6B:92:19:77:65:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/323830343a363937383a3a2f33322d3438203d3e20323730323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6978::/32

    Signature Algorithm: sha256WithRSAEncryption
         d2:42:d0:43:ba:91:6d:fa:df:4e:3a:50:c2:cf:6b:22:aa:7f:
         b0:dd:5d:0b:e9:1a:4f:8e:31:ff:23:ab:77:a8:09:4a:da:38:
         40:f7:4d:66:2b:15:36:44:5c:77:ba:92:46:09:31:e1:2a:a5:
         13:8a:83:59:e6:97:09:26:30:01:1a:d6:6d:ed:16:7e:63:5e:
         d1:ab:fe:59:88:e9:81:f9:fa:1d:eb:6d:45:fe:fb:8c:57:55:
         56:06:2a:91:56:66:81:ae:46:6a:b5:b0:8b:b4:3e:4b:cc:44:
         8f:6e:c2:25:bf:f7:e6:6e:c0:4e:a7:1f:83:9f:c7:fa:4f:31:
         3f:f2:0b:d0:a1:d7:a4:fe:8d:24:bd:15:00:2f:d0:0c:ff:24:
         fb:24:24:41:96:c4:86:19:f0:02:3f:9a:12:32:d7:fb:76:1b:
         27:3e:62:ca:8e:87:63:b0:b1:ca:3c:0f:f1:67:ad:f9:1e:8f:
         c5:60:87:25:f2:d1:8f:ab:86:eb:8d:49:03:95:d6:cc:bc:2e:
         fd:fb:c3:29:dc:d9:1a:c7:3d:83:cc:6f:e7:25:de:35:9c:eb:
         af:89:2a:e8:51:29:f1:fd:47:4a:f6:db:42:f7:e6:7f:1b:8c:
         48:02:f5:b3:0f:b9:df:fa:ff:7c:8e:f9:58:d3:0b:bb:ca:5f:
         36:f5:4b:5c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUS5Rt3cLFaK1USNpEGnCjVFoKZZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjUwQ0RBMDUxMTQ2Rjc3NTM3NTYxNDlCREI2QjkyMTk3
NzY1RDk1RTAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKEU5MkZDRDM3QTdFQjlDOTg4NzM1MEU3QUQwQjA5REZDNTgyQjdBMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6Ty4s6S59BSsZp7qYXMeTN9k
JzRs9mcxqlrDvqlGp/xUG0IzJ2tMFufXRHJBUfE6J53M8y3nLD8ukn23Y4bwkOYw
9jkTbcoAdD9wjHkVAdqYKvEIYHiItyABh5CJlKK+nf4KZ6ajbA0i1NyWKSu5UR9+
NWwO8qL5hwLGUxQzEuPENRcIOIF/8DwBq8kyid6yjQlnBeokOcBpnqtecUpRMcvv
34lkvHOHclbg6VkZcJmwXtUwpU8U00AaaqscwEgwx/OPwoKNoMueNMPrbgDt9xJa
A6qQhx7yaqmsB1YFD/vCrsn4mzrA6KRga22KO4eXz4Xnl3nmDhbY+/dJpgzDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6S/NN6frnJiHNQ560LCd/Fgrei4wHwYDVR0j
BBgwFoAUZQzaBRFG93U3VhSb22uSGXdl2V4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWR1THBnNE5YVWdBeFZvcXdCcG1KbktrNDM4QXhib2VVTTFLUFJ5WlY3
cWYvMS82NTBDREEwNTExNDZGNzc1Mzc1NjE0OUJEQjZCOTIxOTc3NjVEOTVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MENEQTA1MTE0NkY3NzUz
NzU2MTQ5QkRCNkI5MjE5Nzc2NUQ5NUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FkdUxwZzROWFVnQXhWb3F3QnBtSm5LazQzOEF4Ym9lVU0xS1BSeVpWN3FmLzEv
MzIzODMwMzQzYTM2MzkzNzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzIzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARpeDANBgkqhkiG9w0BAQsFAAOCAQEA0kLQQ7qR
bfrfTjpQws9rIqp/sN1dC+kaT44x/yOrd6gJSto4QPdNZisVNkRcd7qSRgkx4Sql
E4qDWeaXCSYwARrWbe0WfmNe0av+WYjpgfn6HettRf77jFdVVgYqkVZmga5GarWw
i7Q+S8xEj27CJb/35m7ATqcfg5/H+k8xP/IL0KHXpP6NJL0VAC/QDP8k+yQkQZbE
hhnwAj+aEjLX+3YbJz5iyo6HY7CxyjwP8Wet+R6PxWCHJfLRj6uG641JA5XWzLwu
/fvDKdzZGsc9g8xv5yXeNZzrr4kq6FEp8f1HSvbbQvfmfxuMSAL1sw+53/r/fI75
WNMLu8pfNvVLXA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:28 2025 by rpki-client on console.sobornost.net