Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/323830343a3431343a3a2f33322d3438203d3e20323632373630.roa
File:                     323830343a3431343a3a2f33322d3438203d3e20323632373630.roa (raw, json)
Hash identifier:          rhGmZWpV3+rCPOLR9z3NOTOlzPVgRujjPLlblwdZTb0=
Subject key identifier:   CD:24:41:D8:FF:60:74:34:4F:0F:77:89:EB:D0:C1:F1:E9:33:06:0B
Certificate issuer:       /CN=B69F04A56302F33CF21A166C862CB615F9EB1C0F
Certificate serial:       34839CDBB717CBE62CF9A3B0AE8EA880908C45B9
Authority key identifier: B6:9F:04:A5:63:02:F3:3C:F2:1A:16:6C:86:2C:B6:15:F9:EB:1C:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B69F04A56302F33CF21A166C862CB615F9EB1C0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/323830343a3431343a3a2f33322d3438203d3e20323632373630.roa
Signing time:             Fri 11 Apr 2025 17:49:23 +0000
ROA not before:           Fri 11 Apr 2025 17:44:23 +0000
ROA not after:            Fri 10 Apr 2026 17:49:23 +0000
asID:                     262760
IP address blocks:        2804:414::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/B69F04A56302F33CF21A166C862CB615F9EB1C0F.crl
                          rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/B69F04A56302F33CF21A166C862CB615F9EB1C0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B69F04A56302F33CF21A166C862CB615F9EB1C0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 10:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:83:9c:db:b7:17:cb:e6:2c:f9:a3:b0:ae:8e:a8:80:90:8c:45:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B69F04A56302F33CF21A166C862CB615F9EB1C0F
        Validity
            Not Before: Apr 11 17:44:23 2025 GMT
            Not After : Apr 10 17:49:23 2026 GMT
        Subject: CN=CD2441D8FF6074344F0F7789EBD0C1F1E933060B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:89:83:b7:93:88:2f:b8:a7:67:92:6d:97:15:
                    05:32:ed:78:9b:01:2f:e3:3d:65:5d:9f:54:a9:2e:
                    c5:4f:27:bb:cb:97:23:57:4a:69:2b:4c:27:0e:b0:
                    b2:c9:18:b6:8f:64:90:5e:b4:dc:3b:62:be:84:50:
                    ae:81:17:ef:4f:9f:9a:58:58:45:f2:1d:28:de:94:
                    d9:5a:58:31:5f:22:f0:6b:85:5d:07:67:4b:ff:4a:
                    50:22:e8:13:56:20:a1:c4:7f:b3:7f:bc:c9:a9:5b:
                    f3:fa:fc:4a:6e:5b:c0:ed:67:49:3a:ad:56:c6:f7:
                    fd:9e:8f:d5:d1:b2:b1:94:f6:46:83:36:b0:ad:48:
                    52:97:5d:85:07:90:c9:43:35:14:2d:04:d0:27:0b:
                    b7:47:f5:7f:d8:14:85:eb:23:91:c9:1e:fa:9f:e4:
                    07:76:b4:d4:8e:3f:5e:7c:8f:61:17:a0:0b:e2:b2:
                    71:53:72:5f:0c:a2:3d:03:e4:67:23:8c:10:10:b1:
                    80:34:c9:7f:08:7e:57:04:4e:14:56:70:6b:65:79:
                    4e:ff:25:2e:b7:5b:b5:32:99:8d:ac:e4:2c:75:fb:
                    83:5a:23:6f:89:07:8f:da:ae:96:b7:e5:d4:30:ea:
                    6b:91:08:70:e2:26:d4:e1:3d:e9:43:75:0c:11:01:
                    c0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:24:41:D8:FF:60:74:34:4F:0F:77:89:EB:D0:C1:F1:E9:33:06:0B
            X509v3 Authority Key Identifier:
                keyid:B6:9F:04:A5:63:02:F3:3C:F2:1A:16:6C:86:2C:B6:15:F9:EB:1C:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/B69F04A56302F33CF21A166C862CB615F9EB1C0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B69F04A56302F33CF21A166C862CB615F9EB1C0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/323830343a3431343a3a2f33322d3438203d3e20323632373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:414::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:49:6d:a4:27:11:22:11:2d:2f:79:ed:62:9c:be:e1:b5:6d:
         95:6f:ae:18:dd:1d:0e:f5:cb:46:bd:a9:ca:8f:5f:a9:9b:09:
         ed:12:9c:c0:7a:e8:aa:42:bc:67:b3:ed:d1:fd:de:df:4c:a0:
         ca:7b:0c:85:05:42:a7:ee:00:5b:54:4f:37:35:8f:e0:d8:2c:
         97:d5:6a:26:78:68:55:ad:c0:20:eb:b7:cd:a9:ff:31:28:5f:
         2e:0e:9f:ff:68:98:42:b0:61:56:79:2b:93:a0:ca:4c:3e:e5:
         63:dd:54:f0:bf:33:94:30:40:da:56:56:48:27:0f:dc:4a:f9:
         d0:1d:f1:6d:83:2b:f7:6c:79:33:87:c5:a9:17:1a:d6:b3:55:
         cb:a2:df:9f:fa:ba:de:8a:f2:6e:cd:93:4f:d5:2d:26:e8:10:
         49:7e:05:75:0e:bc:59:5b:3a:82:28:1d:71:ff:e5:13:42:0f:
         4f:fc:eb:de:bf:c5:19:ab:7c:f6:7b:08:47:42:2f:d0:5e:18:
         61:7c:db:70:71:9a:5f:fb:dd:e5:94:1d:00:17:b9:3a:94:93:
         73:cb:7d:25:c5:0c:9c:c2:82:94:a9:3f:1e:08:2f:57:1a:85:
         71:b2:17:01:6e:72:be:98:38:75:9f:09:02:7e:85:08:bf:01:
         63:e3:cc:8d
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUNIOc27cXy+Ys+aOwro6ogJCMRbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY5RjA0QTU2MzAyRjMzQ0YyMUExNjZDODYyQ0I2MTVG
OUVCMUMwRjAeFw0yNTA0MTExNzQ0MjNaFw0yNjA0MTAxNzQ5MjNaMDMxMTAvBgNV
BAMTKENEMjQ0MUQ4RkY2MDc0MzQ0RjBGNzc4OUVCRDBDMUYxRTkzMzA2MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDviYO3k4gvuKdnkm2XFQUy7Xib
AS/jPWVdn1SpLsVPJ7vLlyNXSmkrTCcOsLLJGLaPZJBetNw7Yr6EUK6BF+9Pn5pY
WEXyHSjelNlaWDFfIvBrhV0HZ0v/SlAi6BNWIKHEf7N/vMmpW/P6/EpuW8DtZ0k6
rVbG9/2ej9XRsrGU9kaDNrCtSFKXXYUHkMlDNRQtBNAnC7dH9X/YFIXrI5HJHvqf
5Ad2tNSOP158j2EXoAvisnFTcl8Moj0D5GcjjBAQsYA0yX8IflcEThRWcGtleU7/
JS63W7UymY2s5Cx1+4NaI2+JB4/arpa35dQw6muRCHDiJtThPelDdQwRAcABAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUzSRB2P9gdDRPD3eJ69DB8ekzBgswHwYDVR0j
BBgwFoAUtp8EpWMC8zzyGhZshiy2FfnrHA8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpYTjQzdUY2SFF1RkhicUhNaW5EU25pVkZoOVBIeDlBd241REFtVXhT
MjkvMC9CNjlGMDRBNTYzMDJGMzNDRjIxQTE2NkM4NjJDQjYxNUY5RUIxQzBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2OUYwNEE1NjMwMkYzM0NG
MjFBMTY2Qzg2MkNCNjE1RjlFQjFDMEYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6WE40M3VGNkhRdUZIYnFITWluRFNuaVZGaDlQSHg5QXduNURBbVV4UzI5LzAv
MzIzODMwMzQzYTM0MzEzNDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjM3
MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBBQwDQYJKoZIhvcNAQELBQADggEBABtJbaQnESIR
LS957WKcvuG1bZVvrhjdHQ71y0a9qcqPX6mbCe0SnMB66KpCvGez7dH93t9MoMp7
DIUFQqfuAFtUTzc1j+DYLJfVaiZ4aFWtwCDrt82p/zEoXy4On/9omEKwYVZ5K5Og
ykw+5WPdVPC/M5QwQNpWVkgnD9xK+dAd8W2DK/dseTOHxakXGtazVcui35/6ut6K
8m7Nk0/VLSboEEl+BXUOvFlbOoIoHXH/5RNCD0/8696/xRmrfPZ7CEdCL9BeGGF8
23Bxml/73eWUHQAXuTqUk3PLfSXFDJzCgpSpPx4IL1cahXGyFwFucr6YOHWfCQJ+
hQi/AWPjzI0=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:59 2025 by rpki-client on console.sobornost.net