Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33322d313238203d3e20323637393931.roa
File:                     323830343a353635343a3a2f33322d313238203d3e20323637393931.roa (raw, json)
Hash identifier:          qFHYAd+xUE0YQlcoC9qdS4Uu6gfV0poQZdz9LueGsfE=
Subject key identifier:   4B:AF:24:A5:59:DB:41:BF:DE:9E:02:83:9B:0A:8C:63:16:A1:42:F0
Certificate issuer:       /CN=B34B813BD07DD631ACD8AE3270BDB4117422DF51
Certificate serial:       013C00277EB7B0A90E5CAD87FC826051E93538A5
Authority key identifier: B3:4B:81:3B:D0:7D:D6:31:AC:D8:AE:32:70:BD:B4:11:74:22:DF:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B34B813BD07DD631ACD8AE3270BDB4117422DF51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33322d313238203d3e20323637393931.roa
Signing time:             Tue 15 Apr 2025 14:37:20 +0000
ROA not before:           Tue 15 Apr 2025 14:32:20 +0000
ROA not after:            Tue 14 Apr 2026 14:37:20 +0000
asID:                     267991
IP address blocks:        2804:5654::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/B34B813BD07DD631ACD8AE3270BDB4117422DF51.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/B34B813BD07DD631ACD8AE3270BDB4117422DF51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B34B813BD07DD631ACD8AE3270BDB4117422DF51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3c:00:27:7e:b7:b0:a9:0e:5c:ad:87:fc:82:60:51:e9:35:38:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B34B813BD07DD631ACD8AE3270BDB4117422DF51
        Validity
            Not Before: Apr 15 14:32:20 2025 GMT
            Not After : Apr 14 14:37:20 2026 GMT
        Subject: CN=4BAF24A559DB41BFDE9E02839B0A8C6316A142F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:43:22:f2:bf:fd:96:f8:3f:95:99:60:bc:82:
                    5a:4b:a1:de:b5:ba:eb:77:8b:2a:53:46:f9:a9:4a:
                    00:b2:1e:a1:1d:dc:6d:fc:c4:80:54:85:28:e8:88:
                    fd:18:f9:53:96:f1:d9:62:a2:b7:eb:1f:55:82:ce:
                    a2:4a:09:f4:85:4f:f2:99:d4:6f:0b:b0:d2:b8:ca:
                    a5:5d:e9:03:a4:38:81:b9:1b:59:c4:9b:5e:90:75:
                    80:bc:2f:34:2b:af:25:cf:d2:83:2b:00:e9:b2:c3:
                    03:fa:3c:42:92:6f:21:78:17:f7:9e:b1:16:09:82:
                    62:0c:58:b2:76:b9:ed:a4:48:1c:61:e5:cf:a3:fc:
                    03:d3:1f:22:d6:2a:92:65:c1:af:bd:d7:08:20:f6:
                    d8:e8:e9:78:0b:5f:24:c5:af:e5:98:c2:58:5f:14:
                    e9:43:cc:36:ce:36:19:d1:d7:bd:f9:4d:0f:7b:bb:
                    46:9d:b4:3e:8c:b2:6b:ab:5a:f1:5f:8c:a0:75:95:
                    88:f9:50:cb:3e:78:82:64:64:45:51:04:ed:58:a1:
                    d1:f0:62:a0:64:36:18:22:3f:e0:dd:c0:7a:98:c8:
                    13:08:8f:7e:95:37:e6:3e:a9:39:08:5f:06:e5:9a:
                    b8:b4:94:11:7f:84:22:9b:87:7a:53:f8:fd:ad:1a:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AF:24:A5:59:DB:41:BF:DE:9E:02:83:9B:0A:8C:63:16:A1:42:F0
            X509v3 Authority Key Identifier:
                keyid:B3:4B:81:3B:D0:7D:D6:31:AC:D8:AE:32:70:BD:B4:11:74:22:DF:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/B34B813BD07DD631ACD8AE3270BDB4117422DF51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B34B813BD07DD631ACD8AE3270BDB4117422DF51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33322d313238203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:3f:4f:b9:fc:6a:9f:9c:b0:ac:7f:30:e5:1a:84:02:76:1e:
         18:a3:02:94:65:fc:71:09:90:ea:03:46:62:2b:5f:82:de:fe:
         6b:75:02:e1:55:3b:6d:39:9d:76:20:7b:e9:60:b7:f6:bd:9a:
         d2:cf:b1:49:c6:6e:c4:a7:c2:29:d0:eb:04:1f:51:aa:cc:be:
         95:6d:2e:68:fd:25:bc:70:3b:00:05:af:9d:bf:2e:2c:67:ad:
         fa:4e:50:00:9a:e1:6d:e1:77:29:ee:9e:fa:d7:7b:23:e4:89:
         4b:de:5b:c9:cc:98:f8:1b:76:0a:11:7a:e5:b9:d9:ed:49:6b:
         42:c8:05:5d:59:36:0a:19:b3:00:4d:c2:09:74:2d:54:a7:d0:
         0a:4f:53:4b:13:e4:30:82:06:02:6f:83:79:84:06:c7:82:a7:
         82:84:80:40:9b:e0:a6:02:22:1c:7b:ee:84:ac:56:e8:7f:4b:
         6b:ba:d0:fe:73:28:5f:d0:df:a9:7a:03:4b:e7:42:47:2a:93:
         66:21:f2:b8:f1:2e:52:e5:78:25:17:0d:46:55:42:ca:a9:23:
         87:e3:78:37:bb:75:7d:59:91:9d:ea:13:26:e0:4b:5d:f1:11:
         17:6d:14:a8:2e:66:f8:bd:bf:c3:b2:59:0f:c6:49:20:e9:c5:
         10:1f:4b:8d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUATwAJ363sKkOXK2H/IJgUek1OKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM0QjgxM0JEMDdERDYzMUFDRDhBRTMyNzBCREI0MTE3
NDIyREY1MTAeFw0yNTA0MTUxNDMyMjBaFw0yNjA0MTQxNDM3MjBaMDMxMTAvBgNV
BAMTKDRCQUYyNEE1NTlEQjQxQkZERTlFMDI4MzlCMEE4QzYzMTZBMTQyRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQyLyv/2W+D+VmWC8glpLod61
uut3iypTRvmpSgCyHqEd3G38xIBUhSjoiP0Y+VOW8dliorfrH1WCzqJKCfSFT/KZ
1G8LsNK4yqVd6QOkOIG5G1nEm16QdYC8LzQrryXP0oMrAOmywwP6PEKSbyF4F/ee
sRYJgmIMWLJ2ue2kSBxh5c+j/APTHyLWKpJlwa+91wgg9tjo6XgLXyTFr+WYwlhf
FOlDzDbONhnR1735TQ97u0adtD6MsmurWvFfjKB1lYj5UMs+eIJkZEVRBO1YodHw
YqBkNhgiP+DdwHqYyBMIj36VN+Y+qTkIXwblmri0lBF/hCKbh3pT+P2tGgPTAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUS68kpVnbQb/engKDmwqMYxahQvAwHwYDVR0j
BBgwFoAUs0uBO9B91jGs2K4ycL20EXQi31EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5
Mk4vMC9CMzRCODEzQkQwN0RENjMxQUNEOEFFMzI3MEJEQjQxMTc0MjJERjUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzNEI4MTNCRDA3REQ2MzFB
Q0Q4QUUzMjcwQkRCNDExNzQyMkRGNTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv
MzIzODMwMzQzYTM1MzYzNTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczOTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFZUMA0GCSqGSIb3DQEBCwUAA4IBAQAyP0+5
/GqfnLCsfzDlGoQCdh4YowKUZfxxCZDqA0ZiK1+C3v5rdQLhVTttOZ12IHvpYLf2
vZrSz7FJxm7Ep8Ip0OsEH1GqzL6VbS5o/SW8cDsABa+dvy4sZ636TlAAmuFt4Xcp
7p7613sj5IlL3lvJzJj4G3YKEXrludntSWtCyAVdWTYKGbMATcIJdC1Up9AKT1NL
E+QwggYCb4N5hAbHgqeChIBAm+CmAiIce+6ErFbof0trutD+cyhf0N+pegNL50JH
KpNmIfK48S5S5XglFw1GVULKqSOH43g3u3V9WZGd6hMm4Etd8REXbRSoLmb4vb/D
slkPxkkg6cUQH0uN
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:31 2025 by rpki-client on console.sobornost.net