Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/323830343a343430633a3a2f33322d3438203d3e20323637363138.roa
File:                     323830343a343430633a3a2f33322d3438203d3e20323637363138.roa (raw, json)
Hash identifier:          JThm13vt5TbRKIfTnx4P4C68eawxbCLIHMV3BTISSQA=
Subject key identifier:   D7:D7:33:CF:CA:78:6E:F3:07:46:97:2F:30:1C:C4:74:49:DC:74:44
Certificate issuer:       /CN=2A13E54025F9AF5EB95F1FB0CB069BC443107936
Certificate serial:       14C26195899C43F302DDA0452DB61D330241B733
Authority key identifier: 2A:13:E5:40:25:F9:AF:5E:B9:5F:1F:B0:CB:06:9B:C4:43:10:79:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/323830343a343430633a3a2f33322d3438203d3e20323637363138.roa
Signing time:             Thu 10 Apr 2025 12:43:15 +0000
ROA not before:           Thu 10 Apr 2025 12:38:15 +0000
ROA not after:            Thu 09 Apr 2026 12:43:15 +0000
asID:                     267618
IP address blocks:        2804:440c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.crl
                          rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c2:61:95:89:9c:43:f3:02:dd:a0:45:2d:b6:1d:33:02:41:b7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A13E54025F9AF5EB95F1FB0CB069BC443107936
        Validity
            Not Before: Apr 10 12:38:15 2025 GMT
            Not After : Apr  9 12:43:15 2026 GMT
        Subject: CN=D7D733CFCA786EF30746972F301CC47449DC7444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b3:28:7f:37:51:53:4c:ba:db:e4:a2:6e:df:
                    1e:5b:c0:af:6e:90:3f:51:a3:bb:df:fd:17:29:c5:
                    e9:33:fe:7a:76:fa:35:e1:5d:34:75:04:bd:25:45:
                    d1:4d:76:93:8b:66:2e:da:b9:7d:be:0a:f7:9b:f4:
                    53:fc:67:25:71:8a:0c:f5:2a:ea:2b:b4:cf:a8:d6:
                    e5:c2:1b:23:ae:3a:b8:1e:24:4f:6f:42:c0:c8:55:
                    dd:06:b8:a1:9c:95:72:35:cb:42:16:a0:a4:be:d1:
                    66:65:e8:d1:f1:db:a3:36:01:cc:7b:59:0d:90:9d:
                    67:e5:79:2f:c9:6b:63:1c:41:a6:a6:a4:da:ae:7d:
                    37:b7:64:17:26:47:ec:41:3e:5e:20:09:a5:54:35:
                    7c:f2:58:14:1e:89:ca:fa:00:9c:3f:95:66:c3:2b:
                    77:d0:7f:b6:02:60:b8:ba:00:8e:f9:e1:dc:5b:b9:
                    71:4a:ee:42:95:b9:5e:b5:01:de:d6:bf:d9:24:e5:
                    a5:fa:bf:c6:53:7e:36:95:13:68:0a:09:a1:25:1d:
                    fd:25:02:6f:c0:a8:e9:38:40:5e:c9:f1:87:0c:ba:
                    02:7b:c1:39:2e:c0:16:12:19:e2:f4:4d:21:8b:7a:
                    9e:68:ca:63:62:b5:1c:5b:4d:5c:d4:1d:77:ac:e7:
                    77:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D7:33:CF:CA:78:6E:F3:07:46:97:2F:30:1C:C4:74:49:DC:74:44
            X509v3 Authority Key Identifier:
                keyid:2A:13:E5:40:25:F9:AF:5E:B9:5F:1F:B0:CB:06:9B:C4:43:10:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A13E54025F9AF5EB95F1FB0CB069BC443107936.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/1/323830343a343430633a3a2f33322d3438203d3e20323637363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:440c::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:6b:bf:2f:d7:2b:17:69:00:2a:e3:58:46:75:03:4a:f3:e8:
         75:7e:9f:a3:a1:d5:f0:d3:4d:53:17:54:62:95:d4:5d:3b:93:
         06:5d:ef:cf:f2:70:68:f5:0d:34:60:68:27:9b:04:56:fa:9f:
         30:a2:a2:9a:63:9f:3f:5f:c9:ef:0b:84:19:f0:30:b6:17:ed:
         33:f7:24:37:f7:e4:76:55:35:4a:0c:4d:06:0d:43:2c:bc:e7:
         91:5a:59:73:4f:7c:4c:55:90:e1:17:cc:48:6f:7f:f6:fb:e3:
         84:ff:93:21:90:16:88:f1:ab:b2:c9:c7:41:59:fd:bb:c0:88:
         ee:5b:f4:13:de:c2:88:0b:a9:ce:c9:fa:2c:67:f5:fa:2c:f4:
         10:e2:06:25:78:4b:93:ca:d6:d8:f6:e3:ed:5a:aa:27:76:80:
         31:9f:b3:54:c3:07:57:2c:b7:8e:4d:70:fb:e9:ae:7c:a0:4e:
         b8:7e:43:3d:21:4e:4a:f4:90:01:91:5f:e1:12:d8:f3:b1:87:
         08:27:92:7a:5b:f6:1d:9d:87:74:ed:df:85:e2:72:b9:e2:5c:
         65:25:7f:45:95:66:2d:a7:eb:d1:d1:4f:67:f3:47:c2:60:d5:
         99:f1:25:28:c0:f5:4b:24:09:83:40:63:e9:27:d7:c8:5d:f0:
         ec:5d:af:b3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFMJhlYmcQ/MC3aBFLbYdMwJBtzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkExM0U1NDAyNUY5QUY1RUI5NUYxRkIwQ0IwNjlCQzQ0
MzEwNzkzNjAeFw0yNTA0MTAxMjM4MTVaFw0yNjA0MDkxMjQzMTVaMDMxMTAvBgNV
BAMTKEQ3RDczM0NGQ0E3ODZFRjMwNzQ2OTcyRjMwMUNDNDc0NDlEQzc0NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBsyh/N1FTTLrb5KJu3x5bwK9u
kD9Ro7vf/Rcpxekz/np2+jXhXTR1BL0lRdFNdpOLZi7auX2+Cveb9FP8ZyVxigz1
KuortM+o1uXCGyOuOrgeJE9vQsDIVd0GuKGclXI1y0IWoKS+0WZl6NHx26M2Acx7
WQ2QnWfleS/Ja2McQaampNqufTe3ZBcmR+xBPl4gCaVUNXzyWBQeicr6AJw/lWbD
K3fQf7YCYLi6AI754dxbuXFK7kKVuV61Ad7Wv9kk5aX6v8ZTfjaVE2gKCaElHf0l
Am/AqOk4QF7J8YcMugJ7wTkuwBYSGeL0TSGLep5oymNitRxbTVzUHXes53eHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU19czz8p4bvMHRpcvMBzEdEncdEQwHwYDVR0j
BBgwFoAUKhPlQCX5r165Xx+wywabxEMQeTYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3FLU3V3RHd0N0JxVDI5eG1ZOHN1Snk0enAxbUJVRno1aVBjQ3BvZGRH
QlUvMS8yQTEzRTU0MDI1RjlBRjVFQjk1RjFGQjBDQjA2OUJDNDQzMTA3OTM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMTNFNTQwMjVGOUFGNUVC
OTVGMUZCMENCMDY5QkM0NDMxMDc5MzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NxS1N1d0R3dDdCcVQyOXhtWThzdUp5NHpwMW1CVUZ6NWlQY0Nwb2RkR0JVLzEv
MzIzODMwMzQzYTM0MzQzMDYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAREDDANBgkqhkiG9w0BAQsFAAOCAQEAl2u/L9cr
F2kAKuNYRnUDSvPodX6fo6HV8NNNUxdUYpXUXTuTBl3vz/JwaPUNNGBoJ5sEVvqf
MKKimmOfP1/J7wuEGfAwthftM/ckN/fkdlU1SgxNBg1DLLznkVpZc098TFWQ4RfM
SG9/9vvjhP+TIZAWiPGrssnHQVn9u8CI7lv0E97CiAupzsn6LGf1+iz0EOIGJXhL
k8rW2Pbj7VqqJ3aAMZ+zVMMHVyy3jk1w++mufKBOuH5DPSFOSvSQAZFf4RLY87GH
CCeSelv2HZ2HdO3fheJyueJcZSV/RZVmLafr0dFPZ/NHwmDVmfElKMD1SyQJg0Bj
6SfXyF3w7F2vsw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:05 2025 by rpki-client on console.sobornost.net