Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a3a2f33342d3334203d3e20323638313334.roa
File:                     323830343a353838343a3a2f33342d3334203d3e20323638313334.roa (raw, json)
Hash identifier:          jDZToRhC7rw94u0eX6sqBzX3BMM1S9ndtZoU0Obme7Y=
Subject key identifier:   98:18:DD:C0:FB:B3:7A:F9:3A:E8:6D:D2:BF:53:5E:34:F5:EA:55:8E
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       442431FC622D8272D748944F8446E93ADDE70964
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a3a2f33342d3334203d3e20323638313334.roa
Signing time:             Thu 06 Mar 2025 14:31:12 +0000
ROA not before:           Thu 06 Mar 2025 14:26:12 +0000
ROA not after:            Thu 05 Mar 2026 14:31:12 +0000
asID:                     268134
IP address blocks:        2804:5884::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:24:31:fc:62:2d:82:72:d7:48:94:4f:84:46:e9:3a:dd:e7:09:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Mar  6 14:26:12 2025 GMT
            Not After : Mar  5 14:31:12 2026 GMT
        Subject: CN=9818DDC0FBB37AF93AE86DD2BF535E34F5EA558E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f0:a7:63:e8:72:35:ba:6d:5e:81:b2:cb:fd:
                    f4:af:45:6b:81:2a:c2:08:02:71:a5:49:b7:8b:5b:
                    fb:74:65:21:cd:d9:e7:e8:80:e7:9c:99:25:73:12:
                    ca:4d:84:7b:a7:24:c1:5e:62:a9:41:42:9e:3e:32:
                    39:36:8b:b1:59:96:17:65:1d:2a:55:2f:98:c2:6b:
                    62:a3:db:ef:06:29:cb:77:da:df:8f:1c:e5:f9:13:
                    5c:ee:9e:ea:bb:9f:f4:5a:7f:dc:31:8b:05:91:92:
                    fd:68:78:2d:40:ff:0b:85:fc:f5:97:9c:f2:f2:b6:
                    48:d1:8e:a4:47:c4:42:53:2b:d0:4a:fe:16:76:5b:
                    2e:d9:46:07:6b:be:26:5b:6d:f5:c6:4b:23:0a:33:
                    62:75:80:9d:64:14:2a:e0:34:79:f7:e0:4d:6c:e1:
                    81:7b:31:10:94:ba:bf:c9:c3:c0:49:bb:dc:5c:70:
                    66:ab:cf:88:a5:05:72:fa:48:26:0b:92:7c:49:b0:
                    70:9c:36:d3:44:a8:66:86:10:37:f3:08:73:25:e7:
                    16:23:f9:a1:5a:cc:6c:79:81:84:e2:16:d4:13:06:
                    7d:fc:21:75:dc:3d:5f:03:a7:09:75:e4:bf:0f:2c:
                    fa:d6:5e:60:6d:05:d5:b9:82:1f:d1:3b:f1:5b:5e:
                    37:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:18:DD:C0:FB:B3:7A:F9:3A:E8:6D:D2:BF:53:5E:34:F5:EA:55:8E
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a3a2f33342d3334203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5884::/34

    Signature Algorithm: sha256WithRSAEncryption
         13:ba:50:26:50:42:99:cd:be:50:4d:74:63:e3:8f:bf:e7:06:
         10:91:99:71:72:58:8c:aa:56:13:79:c5:e5:f8:17:0c:73:2a:
         20:8c:08:ad:58:ce:56:80:38:63:a4:de:91:cf:4b:59:ad:c6:
         28:cf:c6:95:cf:1b:83:86:15:5b:db:27:33:a0:51:08:87:bd:
         88:e7:c0:47:cd:23:df:f3:2d:dc:a0:2b:11:75:fa:cb:bb:23:
         1f:5c:b7:34:f9:fd:f5:09:0f:31:40:37:a5:12:27:ce:fd:8b:
         a1:5a:05:a9:e6:5d:9a:73:b6:c5:be:b2:4c:ec:81:37:94:65:
         58:38:92:2c:c6:94:00:d7:20:19:84:72:c9:93:2b:07:03:f5:
         10:c1:e8:72:3d:8b:36:f7:61:0c:07:8a:ab:da:d1:1f:8d:9a:
         84:e7:67:00:59:45:72:9a:fc:25:13:88:3e:b0:e1:46:c2:06:
         81:a9:41:07:ac:9c:df:09:e7:78:5f:b3:22:1a:fd:1f:0b:5a:
         10:e6:ca:5d:b2:a8:4e:5d:94:5b:87:68:fb:c6:ad:ff:bf:73:
         c4:49:17:ad:d8:20:b7:5f:d1:6b:5a:04:18:fd:55:a6:9f:fd:
         47:e9:1b:94:73:4e:72:93:a3:cd:2d:ee:5b:c0:f7:0e:cb:79:
         a0:74:25:78
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURCQx/GItgnLXSJRPhEbpOt3nCWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJFMzUxRTA0Q0VCMjU0MEQ4ODI5NzU1NUVENzZFODBC
OTFDNTJGNzAeFw0yNTAzMDYxNDI2MTJaFw0yNjAzMDUxNDMxMTJaMDMxMTAvBgNV
BAMTKDk4MThEREMwRkJCMzdBRjkzQUU4NkREMkJGNTM1RTM0RjVFQTU1OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8Kdj6HI1um1egbLL/fSvRWuB
KsIIAnGlSbeLW/t0ZSHN2efogOecmSVzEspNhHunJMFeYqlBQp4+Mjk2i7FZlhdl
HSpVL5jCa2Kj2+8GKct32t+PHOX5E1zunuq7n/Raf9wxiwWRkv1oeC1A/wuF/PWX
nPLytkjRjqRHxEJTK9BK/hZ2Wy7ZRgdrviZbbfXGSyMKM2J1gJ1kFCrgNHn34E1s
4YF7MRCUur/Jw8BJu9xccGarz4ilBXL6SCYLknxJsHCcNtNEqGaGEDfzCHMl5xYj
+aFazGx5gYTiFtQTBn38IXXcPV8Dpwl15L8PLPrWXmBtBdW5gh/RO/FbXjfNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmBjdwPuzevk66G3Sv1NeNPXqVY4wHwYDVR0j
BBgwFoAU8uNR4EzrJUDYgpdVXtdugLkcUvcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFlFa281RTJ6TTc2MVRkWmVTVFRRVFFxUXRnVDFwOFdGbUFEaTdUc0dp
b0YvMS9GMkUzNTFFMDRDRUIyNTQwRDg4Mjk3NTU1RUQ3NkU4MEI5MUM1MkY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyRTM1MUUwNENFQjI1NDBE
ODgyOTc1NTVFRDc2RTgwQjkxQzUyRjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RZRWtvNUUyek03NjFUZFplU1RUUVRRcVF0Z1QxcDhXRm1BRGk3VHNHaW9GLzEv
MzIzODMwMzQzYTM1MzgzODM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM4
MzEzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARYhAAwDQYJKoZIhvcNAQELBQADggEBABO6UCZQ
QpnNvlBNdGPjj7/nBhCRmXFyWIyqVhN5xeX4FwxzKiCMCK1YzlaAOGOk3pHPS1mt
xijPxpXPG4OGFVvbJzOgUQiHvYjnwEfNI9/zLdygKxF1+su7Ix9ctzT5/fUJDzFA
N6USJ879i6FaBanmXZpztsW+skzsgTeUZVg4kizGlADXIBmEcsmTKwcD9RDB6HI9
izb3YQwHiqva0R+NmoTnZwBZRXKa/CUTiD6w4UbCBoGpQQesnN8J53hfsyIa/R8L
WhDmyl2yqE5dlFuHaPvGrf+/c8RJF63YILdf0WtaBBj9Vaaf/UfpG5RzTnKTo80t
7lvA9w7LeaB0JXg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:48 2025 by rpki-client on console.sobornost.net