Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/323830343a313238383a316666303a3a2f34342d3434203d3e20323633343832.roa
File:                     323830343a313238383a316666303a3a2f34342d3434203d3e20323633343832.roa (raw, json)
Hash identifier:          b3Mxa09biE7viYKOLJ+XxJBPY/7XrSSeXbF/D18MFX4=
Subject key identifier:   38:7A:18:A4:8F:EE:91:F9:37:C4:DD:FA:B0:3F:7E:CB:F4:D2:2F:13
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       3CFC0DF8CA7711F7A938424AA8CE7BF62F55643B
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/323830343a313238383a316666303a3a2f34342d3434203d3e20323633343832.roa
Signing time:             Mon 31 Mar 2025 17:13:31 +0000
ROA not before:           Mon 31 Mar 2025 17:08:31 +0000
ROA not after:            Mon 30 Mar 2026 17:13:31 +0000
asID:                     263482
IP address blocks:        2804:1288:1ff0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 12:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:fc:0d:f8:ca:77:11:f7:a9:38:42:4a:a8:ce:7b:f6:2f:55:64:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Mar 31 17:08:31 2025 GMT
            Not After : Mar 30 17:13:31 2026 GMT
        Subject: CN=387A18A48FEE91F937C4DDFAB03F7ECBF4D22F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3a:70:76:3d:ea:19:66:31:7a:e5:09:18:40:
                    7e:b6:d7:c3:e9:58:45:1b:38:1b:0c:0a:ed:9b:8a:
                    2f:bc:37:51:10:d3:04:a6:e8:88:68:a6:83:60:0e:
                    c8:0a:fa:df:d2:17:97:f0:d9:93:76:06:e8:e4:88:
                    8d:c0:3a:9b:2e:f8:0f:41:08:e4:c8:b4:d1:78:61:
                    54:89:be:80:d2:12:75:30:9e:c5:01:e0:45:5e:2b:
                    da:93:90:12:ce:2f:34:53:6b:5a:64:ac:e9:8d:ce:
                    9d:89:d7:e8:4f:9a:05:76:9b:22:6b:f8:69:85:8e:
                    01:81:9d:16:a7:23:f7:bb:62:c0:b4:e3:d4:b6:b8:
                    ff:2c:60:24:8c:ea:7e:05:16:87:b0:18:2d:e8:d5:
                    5b:80:e8:00:d5:e0:c4:64:ae:d4:65:42:8b:59:ab:
                    87:c6:69:e9:68:92:53:88:b8:62:8d:c0:13:8d:10:
                    2c:08:39:ac:0d:a6:a8:30:06:fb:91:a0:55:4d:74:
                    19:fb:d5:37:5d:c2:1c:56:c4:5a:43:73:46:e0:0c:
                    d6:3e:98:25:c0:b5:21:0a:01:67:96:bf:f7:84:6c:
                    71:30:7a:21:14:db:73:57:96:18:c5:40:7a:25:98:
                    1b:71:8d:18:76:ce:07:3c:70:b8:82:f8:ea:d2:ce:
                    2e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7A:18:A4:8F:EE:91:F9:37:C4:DD:FA:B0:3F:7E:CB:F4:D2:2F:13
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/323830343a313238383a316666303a3a2f34342d3434203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1288:1ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         24:53:79:75:9a:71:58:d2:72:98:d7:83:6e:df:d0:11:5b:b1:
         fe:ab:86:4b:34:fc:3c:38:c7:ee:88:af:1d:7a:cf:99:b7:51:
         46:29:d0:68:93:d1:3c:4c:c2:fb:67:5b:6f:57:25:f2:7d:09:
         9e:83:e2:14:4e:76:01:6f:c0:5a:f2:89:5e:21:4d:1a:d3:46:
         07:2e:7c:7a:9d:d6:06:b3:e4:96:7f:a0:4f:f9:f0:a2:35:0a:
         ee:21:27:c6:b5:64:4f:b3:d4:30:4a:9c:73:32:f3:8e:0d:b4:
         95:ce:78:f5:7b:1d:20:7c:e5:25:b4:19:f9:c1:6b:11:40:f8:
         b9:64:22:d1:08:29:91:bf:66:e3:5d:76:e7:97:30:bc:7c:4c:
         33:4c:fd:d7:2d:58:a3:28:81:4c:1d:0f:f3:c9:b2:68:4e:3a:
         cf:12:58:10:5d:d9:ac:00:95:74:ef:b7:45:93:29:63:41:3b:
         78:a8:df:97:9e:0e:30:8a:b1:f5:d8:28:23:22:b5:39:64:04:
         a8:55:85:ee:d2:f4:49:29:60:5a:84:f8:3a:b4:b3:65:37:78:
         55:03:4e:f4:8c:34:45:88:1b:84:d0:69:a3:b5:09:61:d4:bf:
         e2:74:48:0d:f6:de:64:de:50:0f:93:6b:c8:b2:fa:8d:8b:c1:
         57:ab:be:a3
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUPPwN+Mp3EfepOEJKqM579i9VZDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBEQkQzQTBCNTREMTlFMTM1QkE1M0IzMUM0NTg4NDJD
ODlENDlGMzAeFw0yNTAzMzExNzA4MzFaFw0yNjAzMzAxNzEzMzFaMDMxMTAvBgNV
BAMTKDM4N0ExOEE0OEZFRTkxRjkzN0M0RERGQUIwM0Y3RUNCRjREMjJGMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlOnB2PeoZZjF65QkYQH6218Pp
WEUbOBsMCu2bii+8N1EQ0wSm6IhopoNgDsgK+t/SF5fw2ZN2BujkiI3AOpsu+A9B
COTItNF4YVSJvoDSEnUwnsUB4EVeK9qTkBLOLzRTa1pkrOmNzp2J1+hPmgV2myJr
+GmFjgGBnRanI/e7YsC049S2uP8sYCSM6n4FFoewGC3o1VuA6ADV4MRkrtRlQotZ
q4fGaeloklOIuGKNwBONECwIOawNpqgwBvuRoFVNdBn71TddwhxWxFpDc0bgDNY+
mCXAtSEKAWeWv/eEbHEweiEU23NXlhjFQHolmBtxjRh2zgc8cLiC+OrSzi79AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUOHoYpI/ukfk3xN36sD9+y/TSLxMwHwYDVR0j
BBgwFoAUINvToLVNGeE1ulOzHEWIQsidSfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFE
VnMvMC8yMERCRDNBMEI1NEQxOUUxMzVCQTUzQjMxQzQ1ODg0MkM4OUQ0OUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwREJEM0EwQjU0RDE5RTEz
NUJBNTNCMzFDNDU4ODQyQzg5RDQ5RjMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RITVFQQjdLRlREM1JXblFNUUR6a1hTcDJmQ1Foa0VGWlNLM05ZbzVRRFZzLzAv
MzIzODMwMzQzYTMxMzIzODM4M2EzMTY2NjYzMDNhM2EyZjM0MzQyZDM0MzQyMDNk
M2UyMDMyMzYzMzM0MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEEogf8DANBgkqhkiG9w0BAQsF
AAOCAQEAJFN5dZpxWNJymNeDbt/QEVux/quGSzT8PDjH7oivHXrPmbdRRinQaJPR
PEzC+2dbb1cl8n0JnoPiFE52AW/AWvKJXiFNGtNGBy58ep3WBrPkln+gT/nwojUK
7iEnxrVkT7PUMEqcczLzjg20lc549XsdIHzlJbQZ+cFrEUD4uWQi0Qgpkb9m4112
55cwvHxMM0z91y1YoyiBTB0P88myaE46zxJYEF3ZrACVdO+3RZMpY0E7eKjfl54O
MIqx9dgoIyK1OWQEqFWF7tL0SSlgWoT4OrSzZTd4VQNO9Iw0RYgbhNBpo7UJYdS/
4nRIDfbeZN5QD5NryLL6jYvBV6u+ow==
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:21 2025 by rpki-client on console.sobornost.net