Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/323830343a363939383a3a2f33322d3438203d3e20323632353734.roa
File:                     323830343a363939383a3a2f33322d3438203d3e20323632353734.roa (raw, json)
Hash identifier:          0Jx9utwU9hiVdcUpVAyOLGszm/dYC8rJMgLz2EuG3z0=
Subject key identifier:   87:DA:27:BE:C3:F1:00:38:52:29:FE:DB:03:04:3D:35:B9:1A:A0:3D
Certificate issuer:       /CN=748787010CE9A73A6FC8B212C63184EE1F098B46
Certificate serial:       1D3E044564997433357440E1E1880CCC8E430A01
Authority key identifier: 74:87:87:01:0C:E9:A7:3A:6F:C8:B2:12:C6:31:84:EE:1F:09:8B:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748787010CE9A73A6FC8B212C63184EE1F098B46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/323830343a363939383a3a2f33322d3438203d3e20323632353734.roa
Signing time:             Mon 21 Apr 2025 14:04:55 +0000
ROA not before:           Mon 21 Apr 2025 13:59:55 +0000
ROA not after:            Mon 20 Apr 2026 14:04:55 +0000
asID:                     262574
IP address blocks:        2804:6998::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/748787010CE9A73A6FC8B212C63184EE1F098B46.crl
                          rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/748787010CE9A73A6FC8B212C63184EE1F098B46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748787010CE9A73A6FC8B212C63184EE1F098B46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 07:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3e:04:45:64:99:74:33:35:74:40:e1:e1:88:0c:cc:8e:43:0a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=748787010CE9A73A6FC8B212C63184EE1F098B46
        Validity
            Not Before: Apr 21 13:59:55 2025 GMT
            Not After : Apr 20 14:04:55 2026 GMT
        Subject: CN=87DA27BEC3F100385229FEDB03043D35B91AA03D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1a:28:bf:ce:d0:e5:c8:17:ab:d1:8a:5b:73:
                    47:09:3f:77:56:8d:e7:8a:50:d3:eb:24:ba:a5:8d:
                    56:fe:03:cb:53:08:2c:5e:22:3b:b4:24:bf:48:52:
                    ee:95:c9:72:d1:86:f0:7c:8e:38:ab:4f:0b:6f:5d:
                    1e:42:3b:b3:30:f2:c0:d1:9a:6b:56:a6:74:27:1b:
                    0d:0b:82:97:32:5b:be:3b:6f:88:78:6c:e2:b5:19:
                    ac:c8:75:82:24:05:e5:0e:7c:74:e3:ff:ed:f0:67:
                    c9:0a:3d:df:5a:6c:f0:f4:f8:76:81:3c:c4:c3:24:
                    19:a9:80:e0:c9:49:a2:c3:65:da:63:62:35:5f:c4:
                    80:0d:e4:6c:98:3c:66:31:26:db:9a:4d:3f:ef:67:
                    bd:4e:e7:1b:6c:5b:d0:43:d7:70:4c:17:54:03:2b:
                    a3:13:64:bf:b7:47:c3:29:3e:72:8b:e7:36:b6:4d:
                    ba:be:e2:8e:cd:1b:ff:e7:bf:12:65:24:21:3e:c8:
                    74:0d:b2:90:e9:36:ec:45:d2:a6:d7:eb:36:a1:4c:
                    fd:fd:01:68:92:6f:14:04:41:bd:16:c9:81:18:f9:
                    3c:b9:54:5d:41:17:c5:3e:72:7f:94:cb:a6:49:9b:
                    63:4f:89:4d:1a:a5:63:06:e0:ce:3f:e4:a6:9c:f1:
                    d9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DA:27:BE:C3:F1:00:38:52:29:FE:DB:03:04:3D:35:B9:1A:A0:3D
            X509v3 Authority Key Identifier:
                keyid:74:87:87:01:0C:E9:A7:3A:6F:C8:B2:12:C6:31:84:EE:1F:09:8B:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/748787010CE9A73A6FC8B212C63184EE1F098B46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748787010CE9A73A6FC8B212C63184EE1F098B46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/323830343a363939383a3a2f33322d3438203d3e20323632353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6998::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:70:25:37:90:5c:ac:d3:d7:bf:c8:bb:c1:b8:61:17:aa:e5:
         b4:fb:e2:c4:71:3e:88:04:ed:6f:81:02:99:ac:43:14:6b:9e:
         dc:6e:65:42:fb:75:48:40:19:8b:e9:40:e9:ad:de:b9:3d:1e:
         4f:9f:ae:fc:a1:2d:bd:13:e5:8f:d7:65:4a:9f:14:3e:2b:e4:
         03:69:b8:57:d5:26:c6:b6:fd:df:3b:23:78:48:7a:33:d9:b2:
         0e:e8:e0:74:5a:99:59:61:01:13:64:0d:89:33:b4:62:76:e2:
         86:e7:fa:9d:6a:0b:1e:eb:0b:fc:e9:3a:27:43:8b:8c:b5:da:
         9b:fd:94:5a:8c:98:51:41:16:d6:a5:f8:5c:95:ad:1d:c9:2e:
         82:f5:28:d5:b0:2c:db:ee:0d:f7:25:4a:5b:9e:39:b9:64:80:
         e4:7e:84:c9:37:0f:26:bd:b0:5c:7d:e9:6c:e0:75:83:a8:8b:
         0c:76:9d:0f:81:80:78:a1:d7:6a:73:8e:34:d4:f3:73:69:60:
         45:f3:a9:09:16:d4:22:87:1d:f4:24:76:ae:79:df:6d:2b:10:
         ee:ac:86:e3:d8:c5:db:a3:2d:2b:bc:fe:05:c0:8c:19:b5:7d:
         16:f3:89:43:d2:72:a5:66:39:05:75:c4:37:0e:29:76:09:57:
         c8:ed:ae:5d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHT4ERWSZdDM1dEDh4YgMzI5DCgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ4Nzg3MDEwQ0U5QTczQTZGQzhCMjEyQzYzMTg0RUUx
RjA5OEI0NjAeFw0yNTA0MjExMzU5NTVaFw0yNjA0MjAxNDA0NTVaMDMxMTAvBgNV
BAMTKDg3REEyN0JFQzNGMTAwMzg1MjI5RkVEQjAzMDQzRDM1QjkxQUEwM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiGii/ztDlyBer0Ypbc0cJP3dW
jeeKUNPrJLqljVb+A8tTCCxeIju0JL9IUu6VyXLRhvB8jjirTwtvXR5CO7Mw8sDR
mmtWpnQnGw0LgpcyW747b4h4bOK1GazIdYIkBeUOfHTj/+3wZ8kKPd9abPD0+HaB
PMTDJBmpgODJSaLDZdpjYjVfxIAN5GyYPGYxJtuaTT/vZ71O5xtsW9BD13BMF1QD
K6MTZL+3R8MpPnKL5za2Tbq+4o7NG//nvxJlJCE+yHQNspDpNuxF0qbX6zahTP39
AWiSbxQEQb0WyYEY+Ty5VF1BF8U+cn+Uy6ZJm2NPiU0apWMG4M4/5Kac8dmzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUh9onvsPxADhSKf7bAwQ9NbkaoD0wHwYDVR0j
BBgwFoAUdIeHAQzppzpvyLISxjGE7h8Ji0YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBFNHNhRGhYWktzY3RYYndUekZSTkFtS0FWeHgyUG5QNjJ2eW1Yb3lt
aW0vMS83NDg3ODcwMTBDRTlBNzNBNkZDOEIyMTJDNjMxODRFRTFGMDk4QjQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0ODc4NzAxMENFOUE3M0E2
RkM4QjIxMkM2MzE4NEVFMUYwOThCNDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwRTRzYURoWFpLc2N0WGJ3VHpGUk5BbUtBVnh4MlBuUDYydnltWG95bWltLzEv
MzIzODMwMzQzYTM2MzkzOTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMy
MzUzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARpmDANBgkqhkiG9w0BAQsFAAOCAQEAwHAlN5Bc
rNPXv8i7wbhhF6rltPvixHE+iATtb4ECmaxDFGue3G5lQvt1SEAZi+lA6a3euT0e
T5+u/KEtvRPlj9dlSp8UPivkA2m4V9Umxrb93zsjeEh6M9myDujgdFqZWWEBE2QN
iTO0Ynbihuf6nWoLHusL/Ok6J0OLjLXam/2UWoyYUUEW1qX4XJWtHckugvUo1bAs
2+4N9yVKW545uWSA5H6EyTcPJr2wXH3pbOB1g6iLDHadD4GAeKHXanOONNTzc2lg
RfOpCRbUIocd9CR2rnnfbSsQ7qyG49jF26MtK7z+BcCMGbV9FvOJQ9JypWY5BXXE
Nw4pdglXyO2uXQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:06 2025 by rpki-client on console.sobornost.net