Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/323830343a326430633a3a2f33322d3332203d3e20323632343038.roa
File:                     323830343a326430633a3a2f33322d3332203d3e20323632343038.roa (raw, json)
Hash identifier:          I/xjLRtE0sns2aDZvy2RT2f40WrXsCM4pXsxx+HtLKQ=
Subject key identifier:   F7:1A:46:33:9A:24:12:63:C8:E0:94:20:9E:32:0E:25:63:EE:48:64
Certificate issuer:       /CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
Certificate serial:       40CA16E978C97B7A04310BA8700D8F6A45342C9F
Authority key identifier: 1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/323830343a326430633a3a2f33322d3332203d3e20323632343038.roa
Signing time:             Thu 06 Mar 2025 02:42:47 +0000
ROA not before:           Thu 06 Mar 2025 02:37:47 +0000
ROA not after:            Thu 05 Mar 2026 02:42:47 +0000
asID:                     262408
IP address blocks:        2804:2d0c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl
                          rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 05:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ca:16:e9:78:c9:7b:7a:04:31:0b:a8:70:0d:8f:6a:45:34:2c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555
        Validity
            Not Before: Mar  6 02:37:47 2025 GMT
            Not After : Mar  5 02:42:47 2026 GMT
        Subject: CN=F71A46339A241263C8E094209E320E2563EE4864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b0:66:8e:4f:00:55:f9:ab:55:2c:80:77:69:
                    d5:c7:9f:ae:3d:de:9f:2d:27:a8:8a:d3:5d:f5:92:
                    93:cd:74:6b:2c:2c:1d:32:d8:09:96:3f:ba:e8:c0:
                    80:e1:11:53:7f:01:5d:6c:a9:5c:62:1b:90:b6:36:
                    0c:6f:0b:3c:31:5e:e5:65:17:30:03:3a:ce:93:a4:
                    c0:81:ac:9d:1d:75:c2:bb:99:fc:34:11:a9:14:c9:
                    16:c4:7b:cb:07:a9:74:10:3e:98:4d:36:aa:56:04:
                    e6:f4:84:ca:47:60:cf:d9:24:b4:10:17:0f:94:1e:
                    0b:ad:2c:05:6c:3d:fa:5f:65:cd:dd:e1:3b:bd:dd:
                    58:f8:8a:98:fa:4a:be:84:68:8d:8d:c6:7d:d7:d5:
                    f6:6d:79:bc:7b:a1:02:09:10:54:00:02:d5:b9:6a:
                    e1:5d:38:88:89:d5:6a:0e:95:e1:c2:c7:36:91:0d:
                    88:d4:5b:7a:dd:aa:b0:24:3a:0f:ec:2f:71:f5:41:
                    20:d9:44:26:49:f4:b5:51:be:c0:f3:f7:2d:c6:cc:
                    47:83:a4:33:c4:3c:7a:18:7a:bd:1c:29:9e:83:2e:
                    72:d8:14:30:30:dc:58:81:7f:ec:0d:9e:7a:df:c9:
                    8e:3d:57:d7:4a:73:5a:9f:6c:b0:0e:73:f9:22:4c:
                    66:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1A:46:33:9A:24:12:63:C8:E0:94:20:9E:32:0E:25:63:EE:48:64
            X509v3 Authority Key Identifier:
                keyid:1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/323830343a326430633a3a2f33322d3332203d3e20323632343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:ce:e0:5e:72:b8:3e:53:63:9f:cf:5e:2f:af:cc:7b:ef:4c:
         ce:49:23:f5:86:11:ef:44:e7:87:da:34:6f:45:9e:ac:cb:d3:
         94:d1:ca:14:22:38:17:b3:6b:af:c7:22:13:f2:8b:2f:f4:ab:
         86:66:db:37:45:6a:7d:35:ce:98:dc:4c:6b:09:ad:75:35:39:
         45:f3:69:26:a9:7d:04:32:ca:e5:ae:e9:ed:81:ef:a4:7d:25:
         bd:85:c2:f0:b8:b2:24:a6:a8:9e:31:87:0c:0a:26:c5:03:76:
         e2:e7:10:c2:8a:59:ed:ca:be:26:d0:c3:65:ff:50:c3:2f:66:
         fa:09:ce:2d:b2:7e:82:7b:19:2c:13:1e:e2:f2:49:42:00:b2:
         eb:b2:b6:26:e3:e1:b4:d9:03:ae:ff:e9:57:fd:3a:dc:64:0a:
         54:f6:6f:29:d2:11:8f:eb:bc:18:8d:8e:76:00:51:7f:58:87:
         69:2f:cf:e8:74:20:01:93:66:f7:5f:38:07:d4:d6:48:04:d7:
         4c:fb:19:bf:8e:0d:9b:5b:6b:82:4f:aa:f1:83:13:ca:11:bf:
         22:2a:6c:01:12:9d:0d:ac:8b:ae:94:35:85:ae:30:e5:01:ac:
         92:40:bc:e6:11:6c:9b:a5:f2:52:f3:f1:8d:9d:6f:e5:c8:f2:
         04:52:60:a8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQMoW6XjJe3oEMQuocA2PakU0LJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFGRkZGMUUzM0VBQkYyOThFOUIwNUYxNzcxNjZDOTZG
MkMzQjU1NTAeFw0yNTAzMDYwMjM3NDdaFw0yNjAzMDUwMjQyNDdaMDMxMTAvBgNV
BAMTKEY3MUE0NjMzOUEyNDEyNjNDOEUwOTQyMDlFMzIwRTI1NjNFRTQ4NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXsGaOTwBV+atVLIB3adXHn649
3p8tJ6iK0131kpPNdGssLB0y2AmWP7rowIDhEVN/AV1sqVxiG5C2NgxvCzwxXuVl
FzADOs6TpMCBrJ0ddcK7mfw0EakUyRbEe8sHqXQQPphNNqpWBOb0hMpHYM/ZJLQQ
Fw+UHgutLAVsPfpfZc3d4Tu93Vj4ipj6Sr6EaI2Nxn3X1fZtebx7oQIJEFQAAtW5
auFdOIiJ1WoOleHCxzaRDYjUW3rdqrAkOg/sL3H1QSDZRCZJ9LVRvsDz9y3GzEeD
pDPEPHoYer0cKZ6DLnLYFDAw3FiBf+wNnnrfyY49V9dKc1qfbLAOc/kiTGYLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU9xpGM5okEmPI4JQgnjIOJWPuSGQwHwYDVR0j
BBgwFoAUGv//HjPqvymOmwXxdxZslvLDtVUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmQzU1p5cXhlc2pMTUQ1QTd5R3dYZlA0WHBiNDh0QmpRcEZwa2NiRWQx
c0MvMS8xQUZGRkYxRTMzRUFCRjI5OEU5QjA1RjE3NzE2NkM5NkYyQzNCNTU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBRkZGRjFFMzNFQUJGMjk4
RTlCMDVGMTc3MTY2Qzk2RjJDM0I1NTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JkM1NaeXF4ZXNqTE1ENUE3eUd3WGZQNFhwYjQ4dEJqUXBGcGtjYkVkMXNDLzEv
MzIzODMwMzQzYTMyNjQzMDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMy
MzQzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQtDDANBgkqhkiG9w0BAQsFAAOCAQEAC87gXnK4
PlNjn89eL6/Me+9Mzkkj9YYR70Tnh9o0b0WerMvTlNHKFCI4F7Nrr8ciE/KLL/Sr
hmbbN0VqfTXOmNxMawmtdTU5RfNpJql9BDLK5a7p7YHvpH0lvYXC8LiyJKaonjGH
DAomxQN24ucQwopZ7cq+JtDDZf9Qwy9m+gnOLbJ+gnsZLBMe4vJJQgCy67K2JuPh
tNkDrv/pV/063GQKVPZvKdIRj+u8GI2OdgBRf1iHaS/P6HQgAZNm9184B9TWSATX
TPsZv44Nm1trgk+q8YMTyhG/IipsARKdDayLrpQ1ha4w5QGskkC85hFsm6XyUvPx
jZ1v5cjyBFJgqA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:03 2025 by rpki-client on console.sobornost.net