Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a3a2f33322d3332203d3e20323636393833.roa
File:                     323830343a343635343a3a2f33322d3332203d3e20323636393833.roa (raw, json)
Hash identifier:          VlmakA7lhnhUjG9z1qOn1Ts3i0EaMxPTE2mvVgiNg8o=
Subject key identifier:   CC:CF:FA:F6:22:AA:B3:17:72:37:0F:CA:FF:59:33:29:37:7F:BE:00
Certificate issuer:       /CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
Certificate serial:       2E2045DA8B2451E2961782E2B8A2D95FBB4BC77B
Authority key identifier: FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a3a2f33322d3332203d3e20323636393833.roa
Signing time:             Thu 10 Apr 2025 12:10:33 +0000
ROA not before:           Thu 10 Apr 2025 12:05:33 +0000
ROA not after:            Thu 09 Apr 2026 12:10:33 +0000
asID:                     266983
IP address blocks:        2804:4654::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.crl
                          rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:20:45:da:8b:24:51:e2:96:17:82:e2:b8:a2:d9:5f:bb:4b:c7:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC7B655C6372CB73D708B42D83FE2B62B3EEF17D
        Validity
            Not Before: Apr 10 12:05:33 2025 GMT
            Not After : Apr  9 12:10:33 2026 GMT
        Subject: CN=CCCFFAF622AAB31772370FCAFF593329377FBE00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:9e:ee:f4:6e:c5:38:32:ae:9c:ef:25:20:
                    cf:76:73:10:05:7a:2c:13:b6:48:68:b0:d4:e9:4a:
                    b2:84:8a:f4:3b:f7:08:43:28:32:f5:4c:80:3e:8a:
                    15:b4:6f:64:4c:b9:51:93:08:21:a1:a5:7b:8d:0b:
                    95:8f:81:e2:4e:77:d2:49:7e:25:51:57:6e:f8:b7:
                    5d:c9:99:81:c3:52:99:3d:bb:b9:b1:cc:8f:3e:e9:
                    15:86:3a:e3:9c:59:d7:17:da:c6:6f:b8:e6:60:85:
                    8d:a3:1f:3c:c2:ea:27:71:d2:de:f1:c7:bb:82:38:
                    95:96:0a:a4:5c:c9:74:67:4c:29:14:c1:42:c3:c9:
                    57:ac:cc:ec:2d:3b:33:3b:48:d4:9f:6c:51:bf:17:
                    62:0d:8e:4c:f0:ec:01:33:b1:7b:aa:3a:3c:40:fb:
                    74:d9:23:ce:76:a5:3b:39:c0:b5:70:d7:a5:27:52:
                    2c:ed:a0:66:95:6a:93:98:f2:b0:18:a9:35:a6:8b:
                    cf:a1:81:a8:13:c9:9d:54:03:23:8e:09:64:42:f3:
                    a6:b6:32:81:7f:30:ce:54:78:eb:a6:85:70:11:86:
                    10:14:56:08:0e:fd:6d:9f:8e:75:94:5a:cb:18:bc:
                    51:cb:31:f5:fb:4f:f6:fb:f1:2e:e9:66:e5:b9:dc:
                    45:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CF:FA:F6:22:AA:B3:17:72:37:0F:CA:FF:59:33:29:37:7F:BE:00
            X509v3 Authority Key Identifier:
                keyid:FC:7B:65:5C:63:72:CB:73:D7:08:B4:2D:83:FE:2B:62:B3:EE:F1:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC7B655C6372CB73D708B42D83FE2B62B3EEF17D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a3a2f33322d3332203d3e20323636393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4654::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:7a:4a:df:a3:43:d3:56:d6:80:61:7b:65:82:2f:fd:eb:17:
         0f:51:a9:00:77:2d:78:6f:67:b4:58:16:35:17:4c:56:0b:f5:
         02:bd:af:18:35:88:93:f1:dd:58:96:0b:ca:20:ea:2b:62:88:
         c7:95:58:fa:5d:ae:8f:66:79:e6:70:f2:6a:4c:57:e0:fb:e5:
         05:80:09:c6:35:4a:32:8b:99:d9:b6:ab:cf:92:8f:04:92:d5:
         7a:c0:1d:00:38:4f:91:ff:cc:42:a6:0f:b9:4b:d9:4c:81:76:
         37:6d:67:28:2c:e7:dc:18:41:f8:b8:d0:3e:50:c7:68:c0:ed:
         95:1c:97:0f:54:3c:8b:fe:f2:5a:57:54:34:8f:fb:d3:bf:d1:
         3c:8a:df:4d:54:68:dc:dc:1f:4c:6e:74:14:40:62:40:c1:7b:
         61:2a:43:f3:9f:e4:77:e1:b0:2d:c4:43:8f:fc:5e:e4:92:13:
         f5:2b:b0:83:72:91:bd:d1:0b:4d:71:1d:c2:3e:84:a6:bb:fc:
         56:28:66:7a:7a:c1:08:e5:22:fd:c4:9e:39:7b:6f:73:f6:a5:
         7a:e7:78:fe:9a:dd:2f:bc:63:6d:eb:ee:50:05:dd:a3:d4:7e:
         97:fe:ba:4a:8c:a3:e9:87:a2:f3:c8:e8:cd:0f:dd:2f:96:f8:
         c8:c2:c3:9c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULiBF2oskUeKWF4LiuKLZX7tLx3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM3QjY1NUM2MzcyQ0I3M0Q3MDhCNDJEODNGRTJCNjJC
M0VFRjE3RDAeFw0yNTA0MTAxMjA1MzNaFw0yNjA0MDkxMjEwMzNaMDMxMTAvBgNV
BAMTKENDQ0ZGQUY2MjJBQUIzMTc3MjM3MEZDQUZGNTkzMzI5Mzc3RkJFMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3gp7u9G7FODKunO8lIM92cxAF
eiwTtkhosNTpSrKEivQ79whDKDL1TIA+ihW0b2RMuVGTCCGhpXuNC5WPgeJOd9JJ
fiVRV274t13JmYHDUpk9u7mxzI8+6RWGOuOcWdcX2sZvuOZghY2jHzzC6idx0t7x
x7uCOJWWCqRcyXRnTCkUwULDyVeszOwtOzM7SNSfbFG/F2INjkzw7AEzsXuqOjxA
+3TZI852pTs5wLVw16UnUiztoGaVapOY8rAYqTWmi8+hgagTyZ1UAyOOCWRC86a2
MoF/MM5UeOumhXARhhAUVggO/W2fjnWUWssYvFHLMfX7T/b78S7pZuW53EU7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUzM/69iKqsxdyNw/K/1kzKTd/vgAwHwYDVR0j
BBgwFoAU/HtlXGNyy3PXCLQtg/4rYrPu8X0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ01KaHRWOE5kbUdYcXRYWnlaTHVoQXdRWmtYTk1vQlBQaTJDN2N4SFlW
WWgvMC9GQzdCNjU1QzYzNzJDQjczRDcwOEI0MkQ4M0ZFMkI2MkIzRUVGMTdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDN0I2NTVDNjM3MkNCNzNE
NzA4QjQyRDgzRkUyQjYyQjNFRUYxN0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NNSmh0VjhOZG1HWHF0WFp5Wkx1aEF3UVprWE5Nb0JQUGkyQzdjeEhZVlloLzAv
MzIzODMwMzQzYTM0MzYzNTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzkzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARGVDANBgkqhkiG9w0BAQsFAAOCAQEAPXpK36ND
01bWgGF7ZYIv/esXD1GpAHcteG9ntFgWNRdMVgv1Ar2vGDWIk/HdWJYLyiDqK2KI
x5VY+l2uj2Z55nDyakxX4PvlBYAJxjVKMouZ2barz5KPBJLVesAdADhPkf/MQqYP
uUvZTIF2N21nKCzn3BhB+LjQPlDHaMDtlRyXD1Q8i/7yWldUNI/707/RPIrfTVRo
3NwfTG50FEBiQMF7YSpD85/kd+GwLcRDj/xe5JIT9Suwg3KRvdELTXEdwj6Eprv8
VihmenrBCOUi/cSeOXtvc/aleud4/prdL7xjbevuUAXdo9R+l/66Soyj6Yei88jo
zQ/dL5b4yMLDnA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:52 2025 by rpki-client on console.sobornost.net