Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/1/323830343a376637633a3a2f33322d313238203d3e20323731363931.roa
File:                     323830343a376637633a3a2f33322d313238203d3e20323731363931.roa (raw, json)
Hash identifier:          Knm92YXydKJYauvbMXLX3DQ8cIJfB67l3JPc8SYMEmE=
Subject key identifier:   04:32:94:6B:8A:2E:2A:6B:84:76:FA:9D:B9:C3:B3:8F:FB:BF:A0:8C
Certificate issuer:       /CN=45924C2A6FC8004A74776A6A41B211AA62067986
Certificate serial:       5FC8B178776C7238BDDFC399BBE6E1D9B9E56091
Authority key identifier: 45:92:4C:2A:6F:C8:00:4A:74:77:6A:6A:41:B2:11:AA:62:06:79:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45924C2A6FC8004A74776A6A41B211AA62067986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/1/323830343a376637633a3a2f33322d313238203d3e20323731363931.roa
Signing time:             Thu 06 Mar 2025 19:25:46 +0000
ROA not before:           Thu 06 Mar 2025 19:20:46 +0000
ROA not after:            Thu 05 Mar 2026 19:25:46 +0000
asID:                     271691
IP address blocks:        2804:7f7c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/1/45924C2A6FC8004A74776A6A41B211AA62067986.crl
                          rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/1/45924C2A6FC8004A74776A6A41B211AA62067986.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45924C2A6FC8004A74776A6A41B211AA62067986.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c8:b1:78:77:6c:72:38:bd:df:c3:99:bb:e6:e1:d9:b9:e5:60:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45924C2A6FC8004A74776A6A41B211AA62067986
        Validity
            Not Before: Mar  6 19:20:46 2025 GMT
            Not After : Mar  5 19:25:46 2026 GMT
        Subject: CN=0432946B8A2E2A6B8476FA9DB9C3B38FFBBFA08C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:1f:7a:3b:4e:f4:7b:cd:8c:51:20:65:48:
                    b6:d4:f8:8e:7d:6c:cf:60:36:c0:b8:a2:0e:b1:2b:
                    13:0a:c8:ab:d2:4d:e6:88:48:5c:88:20:c0:0f:c8:
                    90:11:9d:92:fc:49:c7:3b:01:da:e3:0c:ce:a0:4b:
                    ad:84:fc:1e:59:c7:cc:3c:98:77:01:f8:73:02:e8:
                    e2:64:9f:ac:e9:9c:0e:2e:69:e6:41:81:14:3d:fb:
                    b3:6d:e3:41:e7:1a:d1:ea:97:3e:ad:2a:f1:e4:bc:
                    d7:e8:3a:a4:ae:1f:2e:dd:3d:78:2e:59:27:d7:24:
                    aa:60:36:fc:00:3b:fc:4c:bc:30:57:95:52:bf:9c:
                    01:f0:25:d5:f5:5d:5c:52:c0:b9:6a:91:3c:11:a2:
                    97:a4:7b:b8:6a:d3:e2:34:24:eb:a0:d8:06:fb:c0:
                    f5:45:9a:32:46:29:06:31:37:4a:ad:df:11:95:3f:
                    65:49:b4:9f:50:e4:07:04:56:b3:85:77:4b:bd:be:
                    a8:b0:66:e0:7b:fd:14:d1:9d:62:5e:53:59:e0:25:
                    3a:3c:06:f4:ba:60:88:7d:54:a7:25:b9:ad:bb:1a:
                    47:ee:1a:14:6e:3b:66:d3:a1:73:f3:54:0e:3e:54:
                    4f:c1:0c:fd:91:7e:3c:a6:cb:02:9e:a0:c0:2d:31:
                    c1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:32:94:6B:8A:2E:2A:6B:84:76:FA:9D:B9:C3:B3:8F:FB:BF:A0:8C
            X509v3 Authority Key Identifier:
                keyid:45:92:4C:2A:6F:C8:00:4A:74:77:6A:6A:41:B2:11:AA:62:06:79:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/1/45924C2A6FC8004A74776A6A41B211AA62067986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45924C2A6FC8004A74776A6A41B211AA62067986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/1/323830343a376637633a3a2f33322d313238203d3e20323731363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:ae:20:c5:08:40:71:2c:df:de:db:8e:ce:f4:8f:da:3a:d4:
         4a:4e:9f:3b:42:52:87:8a:0a:88:dd:27:08:a6:f0:90:46:39:
         c3:2f:00:97:34:93:0b:bd:7f:68:08:a4:ac:29:18:6f:65:56:
         63:59:36:50:e6:0f:03:95:51:5a:ef:d4:7f:d9:13:be:8c:3c:
         42:d9:b1:a8:b3:37:d0:01:18:88:87:af:54:34:cc:35:0a:01:
         74:18:64:aa:4e:54:ce:c2:0c:76:93:aa:21:7e:f7:98:38:a3:
         7b:4e:45:01:9d:8d:68:89:ff:f2:88:7e:ca:90:c5:45:a0:d0:
         01:63:37:9f:d3:7e:13:78:1e:1d:fd:ed:36:06:61:f0:40:e4:
         4e:13:e4:d6:41:56:91:08:2a:97:b0:64:b3:00:c8:a6:c5:93:
         1f:22:5d:95:b8:9a:2f:5d:7f:b5:a8:d8:89:f8:20:fa:43:be:
         42:3e:79:60:51:44:3d:6f:32:5e:9a:41:b5:c6:02:2e:37:c1:
         cd:c9:e8:b2:87:c4:d9:1a:63:c0:10:2d:e4:36:76:b4:2b:d6:
         0b:2b:48:b5:c2:f6:64:d8:1a:c7:4a:25:86:6a:6d:be:b9:70:
         17:a7:8c:6b:20:34:bd:a1:db:ed:ec:6a:24:be:6b:1a:c9:c9:
         b9:87:9c:85
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUX8ixeHdscji938OZu+bh2bnlYJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU5MjRDMkE2RkM4MDA0QTc0Nzc2QTZBNDFCMjExQUE2
MjA2Nzk4NjAeFw0yNTAzMDYxOTIwNDZaFw0yNjAzMDUxOTI1NDZaMDMxMTAvBgNV
BAMTKDA0MzI5NDZCOEEyRTJBNkI4NDc2RkE5REI5QzNCMzhGRkJCRkEwOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtBx96O070e82MUSBlSLbU+I59
bM9gNsC4og6xKxMKyKvSTeaISFyIIMAPyJARnZL8Scc7AdrjDM6gS62E/B5Zx8w8
mHcB+HMC6OJkn6zpnA4uaeZBgRQ9+7Nt40HnGtHqlz6tKvHkvNfoOqSuHy7dPXgu
WSfXJKpgNvwAO/xMvDBXlVK/nAHwJdX1XVxSwLlqkTwRopeke7hq0+I0JOug2Ab7
wPVFmjJGKQYxN0qt3xGVP2VJtJ9Q5AcEVrOFd0u9vqiwZuB7/RTRnWJeU1ngJTo8
BvS6YIh9VKclua27GkfuGhRuO2bToXPzVA4+VE/BDP2RfjymywKeoMAtMcHVAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUBDKUa4ouKmuEdvqducOzj/u/oIwwHwYDVR0j
BBgwFoAURZJMKm/IAEp0d2pqQbIRqmIGeYYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTVNWGd2YkhFSndINmFuWm1SZmhXUVZRcnh4dTM4Z1RCQTljNjN2Y3NT
N1QvMS80NTkyNEMyQTZGQzgwMDRBNzQ3NzZBNkE0MUIyMTFBQTYyMDY3OTg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1OTI0QzJBNkZDODAwNEE3
NDc3NkE2QTQxQjIxMUFBNjIwNjc5ODYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U1TVhndmJIRUp3SDZhblptUmZoV1FWUXJ4eHUzOGdUQkE5YzYzdmNzUzdULzEv
MzIzODMwMzQzYTM3NjYzNzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzNjM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBH98MA0GCSqGSIb3DQEBCwUAA4IBAQCeriDF
CEBxLN/e247O9I/aOtRKTp87QlKHigqI3ScIpvCQRjnDLwCXNJMLvX9oCKSsKRhv
ZVZjWTZQ5g8DlVFa79R/2RO+jDxC2bGoszfQARiIh69UNMw1CgF0GGSqTlTOwgx2
k6ohfveYOKN7TkUBnY1oif/yiH7KkMVFoNABYzef034TeB4d/e02BmHwQOROE+TW
QVaRCCqXsGSzAMimxZMfIl2VuJovXX+1qNiJ+CD6Q75CPnlgUUQ9bzJemkG1xgIu
N8HNyeiyh8TZGmPAEC3kNna0K9YLK0i1wvZk2BrHSiWGam2+uXAXp4xrIDS9odvt
7Gokvmsaycm5h5yF
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:26 2025 by rpki-client on console.sobornost.net