Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/323830343a313962343a3a2f33322d3438203d3e203631383133.roa
File:                     323830343a313962343a3a2f33322d3438203d3e203631383133.roa (raw, json)
Hash identifier:          AM/mNLDTXwLh2g8b+r6l4a/01ThmpdyzXeaEjiNF0ZY=
Subject key identifier:   F2:23:8C:8F:97:BD:4B:7B:07:06:37:8F:99:F2:48:A9:B8:C1:EF:E4
Certificate issuer:       /CN=36ED969D92322E6C7F28A050D3ABC47947497160
Certificate serial:       4ADF09D1425D5B28C3863BBDF06B5B3F857B79E4
Authority key identifier: 36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/323830343a313962343a3a2f33322d3438203d3e203631383133.roa
Signing time:             Fri 18 Apr 2025 14:30:50 +0000
ROA not before:           Fri 18 Apr 2025 14:25:50 +0000
ROA not after:            Fri 17 Apr 2026 14:30:50 +0000
asID:                     61813
IP address blocks:        2804:19b4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl
                          rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:df:09:d1:42:5d:5b:28:c3:86:3b:bd:f0:6b:5b:3f:85:7b:79:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ED969D92322E6C7F28A050D3ABC47947497160
        Validity
            Not Before: Apr 18 14:25:50 2025 GMT
            Not After : Apr 17 14:30:50 2026 GMT
        Subject: CN=F2238C8F97BD4B7B0706378F99F248A9B8C1EFE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:50:96:9b:85:b7:da:d4:78:4f:b9:62:7f:ee:
                    8a:d2:07:3c:2e:e3:d5:2d:9d:5a:76:af:b8:22:43:
                    15:01:a9:ee:8e:3a:5a:4d:73:f5:20:4c:7a:2a:cb:
                    69:38:f0:a2:71:0b:63:4e:c2:3c:4f:db:7e:6a:77:
                    60:d3:96:d3:7a:9e:b9:9b:ec:ca:09:d3:af:06:ec:
                    03:77:b4:94:97:29:d6:06:ff:6d:75:df:e0:1d:46:
                    45:28:e5:71:63:a1:f1:58:61:cc:1a:2e:83:51:cd:
                    df:96:59:5b:aa:5c:47:b9:4b:83:9b:22:67:84:5c:
                    df:0f:57:d8:44:3b:19:cb:16:9d:a3:6d:4b:28:7c:
                    7e:9e:c7:ea:1e:74:d8:56:0c:6c:4f:f1:9c:a4:5e:
                    a3:89:87:76:ce:b8:c4:bd:17:c3:06:bc:df:22:68:
                    9a:8a:66:9f:90:42:24:33:05:f0:15:95:e3:6a:bf:
                    b9:2a:7a:e5:39:32:23:f4:e7:36:77:1f:2f:95:8e:
                    71:a1:72:c1:5e:05:4e:c8:7d:8d:f5:44:a2:02:31:
                    20:9c:ba:0a:d9:82:5b:0b:1c:10:78:0e:43:a0:d3:
                    89:a2:16:1d:8d:ef:d6:e4:41:06:bd:a6:65:c1:43:
                    7f:a2:41:b6:50:da:20:1c:f1:8a:f9:10:e7:14:f9:
                    8d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:23:8C:8F:97:BD:4B:7B:07:06:37:8F:99:F2:48:A9:B8:C1:EF:E4
            X509v3 Authority Key Identifier:
                keyid:36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/323830343a313962343a3a2f33322d3438203d3e203631383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:19b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:d8:8b:e8:a1:7c:37:51:9e:32:f2:a8:00:c5:94:97:06:a4:
         14:a1:91:c4:4f:16:53:b3:fb:ed:f0:50:42:dc:f4:fb:2e:19:
         3f:a3:a0:58:98:b8:65:0b:9e:c9:64:22:cc:33:32:d4:5f:1b:
         4b:fd:19:42:51:35:cd:58:92:57:63:83:85:6f:5d:99:6a:00:
         29:7a:36:60:45:49:78:b8:1e:40:fa:b5:6c:cd:01:30:d8:ab:
         7f:3f:df:f3:86:63:c0:c6:bc:86:f1:06:96:d4:9c:7e:6a:62:
         a4:34:f0:3a:73:bc:99:18:4e:0f:85:ef:bf:8b:a0:fe:66:0c:
         88:d9:6e:35:ee:18:9e:2c:09:04:95:83:3f:38:72:fc:ea:ae:
         4e:ff:a4:73:fc:5c:48:2f:ed:fb:0d:f6:04:91:ab:b2:39:a8:
         7f:3c:ed:1a:cf:f0:96:85:6c:62:c4:c7:56:b5:4d:70:3a:0f:
         9e:c9:60:82:8e:93:17:69:48:8d:3f:cf:b8:39:8f:d5:de:c5:
         7d:a2:ff:71:42:ef:1f:13:3a:57:7e:78:94:d3:f0:2c:7b:3f:
         2c:19:2e:0d:56:ea:72:59:0e:cf:87:a0:4b:ca:6c:82:73:41:
         f3:bb:94:ee:6b:92:84:87:62:1c:68:00:1a:05:51:73:97:96:
         8a:fa:33:fe
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUSt8J0UJdWyjDhju98GtbP4V7eeQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZFRDk2OUQ5MjMyMkU2QzdGMjhBMDUwRDNBQkM0Nzk0
NzQ5NzE2MDAeFw0yNTA0MTgxNDI1NTBaFw0yNjA0MTcxNDMwNTBaMDMxMTAvBgNV
BAMTKEYyMjM4QzhGOTdCRDRCN0IwNzA2Mzc4Rjk5RjI0OEE5QjhDMUVGRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2UJabhbfa1HhPuWJ/7orSBzwu
49UtnVp2r7giQxUBqe6OOlpNc/UgTHoqy2k48KJxC2NOwjxP235qd2DTltN6nrmb
7MoJ068G7AN3tJSXKdYG/2113+AdRkUo5XFjofFYYcwaLoNRzd+WWVuqXEe5S4Ob
ImeEXN8PV9hEOxnLFp2jbUsofH6ex+oedNhWDGxP8ZykXqOJh3bOuMS9F8MGvN8i
aJqKZp+QQiQzBfAVleNqv7kqeuU5MiP05zZ3Hy+VjnGhcsFeBU7IfY31RKICMSCc
ugrZglsLHBB4DkOg04miFh2N79bkQQa9pmXBQ3+iQbZQ2iAc8Yr5EOcU+Y0TAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU8iOMj5e9S3sHBjePmfJIqbjB7+QwHwYDVR0j
BBgwFoAUNu2WnZIyLmx/KKBQ06vEeUdJcWAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFhVeUYyVm00YVpXY0RjenMzSk1SaDRydUdCUzF0bk10UE5jdkNGZXQ2
emUvMC8zNkVEOTY5RDkyMzIyRTZDN0YyOEEwNTBEM0FCQzQ3OTQ3NDk3MTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2RUQ5NjlEOTIzMjJFNkM3
RjI4QTA1MEQzQUJDNDc5NDc0OTcxNjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RYVXlGMlZtNGFaV2NEY3pzM0pNUmg0cnVHQlMxdG5NdFBOY3ZDRmV0NnplLzAv
MzIzODMwMzQzYTMxMzk2MjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM4
MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGbQwDQYJKoZIhvcNAQELBQADggEBAI7Yi+ihfDdR
njLyqADFlJcGpBShkcRPFlOz++3wUELc9PsuGT+joFiYuGULnslkIswzMtRfG0v9
GUJRNc1Ykldjg4VvXZlqACl6NmBFSXi4HkD6tWzNATDYq38/3/OGY8DGvIbxBpbU
nH5qYqQ08DpzvJkYTg+F77+LoP5mDIjZbjXuGJ4sCQSVgz84cvzqrk7/pHP8XEgv
7fsN9gSRq7I5qH887RrP8JaFbGLEx1a1TXA6D57JYIKOkxdpSI0/z7g5j9XexX2i
/3FC7x8TOld+eJTT8Cx7PywZLg1W6nJZDs+HoEvKbIJzQfO7lO5rkoSHYhxoABoF
UXOXlor6M/4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:09 2025 by rpki-client on console.sobornost.net