Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/323830343a376566343a3a2f33322d3332203d3e20323731363537.roa
File:                     323830343a376566343a3a2f33322d3332203d3e20323731363537.roa (raw, json)
Hash identifier:          KCj7i0SbaiZmnGWJWoZjNJmUeRbdrtNqTMdFqA+76ms=
Subject key identifier:   41:93:E7:7F:B9:E3:A5:89:13:CB:C9:B6:D3:13:56:B9:FA:98:6F:64
Certificate issuer:       /CN=2114B3B965382FA7393E772A6837B5B8D7173834
Certificate serial:       07297ECA1C0E89E40E1F5BE68B61C5F342EC2208
Authority key identifier: 21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/323830343a376566343a3a2f33322d3332203d3e20323731363537.roa
Signing time:             Tue 22 Apr 2025 14:38:51 +0000
ROA not before:           Tue 22 Apr 2025 14:33:51 +0000
ROA not after:            Tue 21 Apr 2026 14:38:51 +0000
asID:                     271657
IP address blocks:        2804:7ef4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.crl
                          rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 04:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:29:7e:ca:1c:0e:89:e4:0e:1f:5b:e6:8b:61:c5:f3:42:ec:22:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2114B3B965382FA7393E772A6837B5B8D7173834
        Validity
            Not Before: Apr 22 14:33:51 2025 GMT
            Not After : Apr 21 14:38:51 2026 GMT
        Subject: CN=4193E77FB9E3A58913CBC9B6D31356B9FA986F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:25:82:0c:3e:a9:62:12:53:f1:c4:cd:ff:ae:
                    d4:a6:a7:1c:2f:26:29:08:d7:33:14:50:2b:62:b2:
                    40:03:83:23:5e:88:40:cd:fc:df:27:e3:b5:bf:d9:
                    bd:9d:2f:5e:7b:29:a2:45:dc:57:48:8c:27:29:46:
                    e7:78:6c:ff:e9:b0:2a:19:04:ba:c1:ad:3a:9a:79:
                    45:3c:c4:ea:72:1f:96:14:b5:36:f9:7a:1d:ce:a2:
                    de:e4:0f:91:9b:e0:b2:47:27:ec:27:2e:ad:e9:47:
                    1d:50:1c:7b:29:06:88:40:d8:ef:b4:0e:e6:c4:e8:
                    f7:70:3c:3f:04:30:92:06:10:c6:c0:86:af:69:f7:
                    8f:2b:4d:f1:36:d4:d0:23:dc:50:36:ee:60:a7:0f:
                    eb:43:f3:5f:2e:74:66:a3:40:64:3c:9e:58:dd:ca:
                    58:d7:ae:55:f9:5f:94:6f:5b:46:57:d7:88:75:8f:
                    3d:09:e2:92:57:4b:ac:d3:7a:dc:2b:53:0f:5d:ac:
                    69:34:4c:1b:28:b6:b4:87:63:46:41:ac:8e:d9:19:
                    fe:fa:af:7c:ad:e8:61:a2:c2:51:84:52:aa:57:36:
                    37:31:7f:0c:d8:f2:fb:2d:2f:79:82:cb:1e:3c:1c:
                    9b:fe:f6:34:bd:f9:4f:79:ef:f8:f6:5d:47:21:bf:
                    57:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:93:E7:7F:B9:E3:A5:89:13:CB:C9:B6:D3:13:56:B9:FA:98:6F:64
            X509v3 Authority Key Identifier:
                keyid:21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/323830343a376566343a3a2f33322d3332203d3e20323731363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ef4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:42:84:b4:1a:fc:b0:bc:5c:77:34:0e:c6:b8:08:9c:42:30:
         71:fd:f3:5f:c2:31:f2:4e:4f:ec:46:92:a3:2c:90:46:6a:4b:
         65:e5:75:f3:39:27:cb:2d:c6:62:75:c4:c7:12:50:45:f8:8b:
         8b:83:c5:63:cd:f8:73:a1:b2:03:a1:84:f2:61:4b:a0:14:1d:
         e2:32:4c:aa:fb:21:e9:60:78:e6:6b:be:30:4b:c2:bb:ee:5d:
         dd:74:12:bb:f5:32:bf:e7:54:6d:7d:b5:10:4c:f7:9e:48:44:
         11:e7:d3:a6:62:2d:67:8b:15:df:c6:34:ff:f8:67:73:da:56:
         7e:31:a7:49:af:78:37:73:c2:6a:9f:0e:67:31:3f:c2:bd:fa:
         e7:e9:99:55:ce:17:ab:c1:a2:76:d1:b0:1f:6d:64:b4:4d:c4:
         21:db:c0:70:56:fd:83:10:8d:a0:be:d0:31:c3:5e:2d:01:a4:
         98:4f:1a:87:db:75:78:e2:96:3b:28:a4:d9:fa:17:5a:f5:f7:
         12:eb:b3:0c:e3:bc:c8:16:44:42:9c:a4:ba:39:e6:09:c1:ee:
         10:05:6e:37:98:e0:79:84:46:13:56:ea:a4:af:8e:03:05:a5:
         f1:ab:c2:fd:fe:49:32:4c:22:77:0f:2d:5b:38:80:54:6f:ab:
         eb:e0:90:0e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUByl+yhwOieQOH1vmi2HF80LsIggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExNEIzQjk2NTM4MkZBNzM5M0U3NzJBNjgzN0I1QjhE
NzE3MzgzNDAeFw0yNTA0MjIxNDMzNTFaFw0yNjA0MjExNDM4NTFaMDMxMTAvBgNV
BAMTKDQxOTNFNzdGQjlFM0E1ODkxM0NCQzlCNkQzMTM1NkI5RkE5ODZGNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiJYIMPqliElPxxM3/rtSmpxwv
JikI1zMUUCtiskADgyNeiEDN/N8n47W/2b2dL157KaJF3FdIjCcpRud4bP/psCoZ
BLrBrTqaeUU8xOpyH5YUtTb5eh3Oot7kD5Gb4LJHJ+wnLq3pRx1QHHspBohA2O+0
DubE6PdwPD8EMJIGEMbAhq9p948rTfE21NAj3FA27mCnD+tD818udGajQGQ8nljd
yljXrlX5X5RvW0ZX14h1jz0J4pJXS6zTetwrUw9drGk0TBsotrSHY0ZBrI7ZGf76
r3yt6GGiwlGEUqpXNjcxfwzY8vstL3mCyx48HJv+9jS9+U957/j2XUchv1eDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUQZPnf7njpYkTy8m20xNWufqYb2QwHwYDVR0j
BBgwFoAUIRSzuWU4L6c5PncqaDe1uNcXODQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnZtZG04Q1pmbXhEcGNmZkpncWQzN1U1NlptZlhteGVOUzdXVENjV3g1
UUovMC8yMTE0QjNCOTY1MzgyRkE3MzkzRTc3MkE2ODM3QjVCOEQ3MTczODM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMTRCM0I5NjUzODJGQTcz
OTNFNzcyQTY4MzdCNUI4RDcxNzM4MzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J2bWRtOENaZm14RHBjZmZKZ3FkMzdVNTZabWZYbXhlTlM3V1RDY1d4NVFKLzAv
MzIzODMwMzQzYTM3NjU2NjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzYzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR+9DANBgkqhkiG9w0BAQsFAAOCAQEAqEKEtBr8
sLxcdzQOxrgInEIwcf3zX8Ix8k5P7EaSoyyQRmpLZeV18zknyy3GYnXExxJQRfiL
i4PFY834c6GyA6GE8mFLoBQd4jJMqvsh6WB45mu+MEvCu+5d3XQSu/Uyv+dUbX21
EEz3nkhEEefTpmItZ4sV38Y0//hnc9pWfjGnSa94N3PCap8OZzE/wr365+mZVc4X
q8GidtGwH21ktE3EIdvAcFb9gxCNoL7QMcNeLQGkmE8ah9t1eOKWOyik2foXWvX3
EuuzDOO8yBZEQpykujnmCcHuEAVuN5jgeYRGE1bqpK+OAwWl8avC/f5JMkwidw8t
WziAVG+r6+CQDg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:08 2025 by rpki-client on console.sobornost.net