Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/323830343a333434633a3a2f33322d313238203d3e20323632383138.roa
File:                     323830343a333434633a3a2f33322d313238203d3e20323632383138.roa (raw, json)
Hash identifier:          eC98xOd74xPFe0elH1fHRaLIjQkYokaFAv4Gxl3c2uM=
Subject key identifier:   94:07:80:74:97:61:47:6B:44:EE:6D:6D:0C:77:7A:C7:61:EC:25:41
Certificate issuer:       /CN=D3237D5995E1D5C681CD7F512F69829F6DB60E6A
Certificate serial:       6EA205F113D0B1F425C980928E3E551C59785573
Authority key identifier: D3:23:7D:59:95:E1:D5:C6:81:CD:7F:51:2F:69:82:9F:6D:B6:0E:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/323830343a333434633a3a2f33322d313238203d3e20323632383138.roa
Signing time:             Wed 09 Apr 2025 14:09:25 +0000
ROA not before:           Wed 09 Apr 2025 14:04:25 +0000
ROA not after:            Wed 08 Apr 2026 14:09:25 +0000
asID:                     262818
IP address blocks:        2804:344c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.crl
                          rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 18:15:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a2:05:f1:13:d0:b1:f4:25:c9:80:92:8e:3e:55:1c:59:78:55:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3237D5995E1D5C681CD7F512F69829F6DB60E6A
        Validity
            Not Before: Apr  9 14:04:25 2025 GMT
            Not After : Apr  8 14:09:25 2026 GMT
        Subject: CN=940780749761476B44EE6D6D0C777AC761EC2541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:82:0f:28:74:cb:55:27:77:e5:7b:8e:ab:02:
                    74:d0:0f:f8:33:52:1b:30:12:7b:82:67:7f:39:40:
                    ea:85:4e:05:a3:78:56:05:43:40:c7:5c:e1:b2:93:
                    15:73:e5:9e:b0:53:95:8c:90:2c:5b:1c:95:17:c8:
                    c3:05:37:67:97:86:1d:d5:81:df:5b:9a:5f:16:4e:
                    64:a6:78:71:ce:6e:f9:97:4a:36:82:38:5e:61:9c:
                    5a:db:b9:ad:ec:c7:42:3e:61:ae:e3:03:84:14:c2:
                    5d:c2:36:76:b1:98:9b:3c:cc:85:1d:27:a0:ce:eb:
                    b4:c5:27:08:cd:f6:e3:d4:1d:61:45:be:1e:95:26:
                    64:0d:c4:5a:55:56:3a:dd:35:c7:bd:df:5a:2b:6c:
                    a1:66:ee:29:18:66:c5:4f:d0:74:be:e3:b2:6b:10:
                    25:45:63:d6:89:ee:e4:46:0a:a7:1c:03:19:19:a5:
                    af:7f:ed:0b:7b:7c:bb:34:fe:27:19:fc:57:f8:9b:
                    6d:3f:77:76:f3:64:7f:05:29:17:89:d5:43:c5:3b:
                    8a:19:0a:80:bd:14:e2:ae:16:2b:2a:12:3e:bb:4e:
                    41:02:5c:11:11:67:a6:4b:97:17:96:16:25:34:91:
                    b6:1e:da:9a:da:ff:06:7d:cc:08:26:6f:67:19:ee:
                    77:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:07:80:74:97:61:47:6B:44:EE:6D:6D:0C:77:7A:C7:61:EC:25:41
            X509v3 Authority Key Identifier:
                keyid:D3:23:7D:59:95:E1:D5:C6:81:CD:7F:51:2F:69:82:9F:6D:B6:0E:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/323830343a333434633a3a2f33322d313238203d3e20323632383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:344c::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:b5:5b:bd:14:d8:d6:17:27:f3:8f:56:e1:b8:08:dc:cd:a0:
         09:09:a4:43:13:22:52:73:83:82:e2:8d:4e:9a:8e:41:e0:48:
         d0:33:8e:b5:ae:5a:5f:b4:50:39:b1:65:ee:25:c8:5e:06:6a:
         1c:38:0e:6e:7c:a3:92:34:3e:73:e4:ce:67:47:f4:0b:71:23:
         f2:b1:72:a7:8f:5f:31:57:36:6d:78:f6:75:0f:ae:f9:48:43:
         53:8c:03:5a:e0:77:be:77:95:18:43:b4:5a:79:d7:db:f8:38:
         41:a1:87:99:ee:4c:53:70:0c:6b:e3:29:0f:eb:3f:52:2a:e9:
         63:22:6c:b8:ba:d0:37:b0:d4:6d:8a:93:3d:80:0c:cc:78:e9:
         e1:14:99:64:78:60:db:c7:85:71:06:03:b3:23:3c:45:f1:d6:
         1f:13:fe:bb:76:d1:e0:8f:82:69:4c:b9:62:e1:ad:ba:d5:4e:
         24:af:e3:d7:1a:9c:3f:f6:f9:d1:ce:41:33:c8:5c:b3:ae:37:
         56:13:80:90:a1:2e:64:4e:ac:0c:89:f2:85:e6:1e:fa:3f:f8:
         22:f4:e0:31:8f:69:cf:96:36:5b:4b:74:92:49:18:7c:2b:98:
         9b:c0:4f:dd:f2:70:18:53:8c:61:a3:77:87:7b:bf:33:00:21:
         7f:dc:cf:04
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUbqIF8RPQsfQlyYCSjj5VHFl4VXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMyMzdENTk5NUUxRDVDNjgxQ0Q3RjUxMkY2OTgyOUY2
REI2MEU2QTAeFw0yNTA0MDkxNDA0MjVaFw0yNjA0MDgxNDA5MjVaMDMxMTAvBgNV
BAMTKDk0MDc4MDc0OTc2MTQ3NkI0NEVFNkQ2RDBDNzc3QUM3NjFFQzI1NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgg8odMtVJ3fle46rAnTQD/gz
UhswEnuCZ385QOqFTgWjeFYFQ0DHXOGykxVz5Z6wU5WMkCxbHJUXyMMFN2eXhh3V
gd9bml8WTmSmeHHObvmXSjaCOF5hnFrbua3sx0I+Ya7jA4QUwl3CNnaxmJs8zIUd
J6DO67TFJwjN9uPUHWFFvh6VJmQNxFpVVjrdNce931orbKFm7ikYZsVP0HS+47Jr
ECVFY9aJ7uRGCqccAxkZpa9/7Qt7fLs0/icZ/Ff4m20/d3bzZH8FKReJ1UPFO4oZ
CoC9FOKuFisqEj67TkECXBERZ6ZLlxeWFiU0kbYe2pra/wZ9zAgmb2cZ7ndtAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUlAeAdJdhR2tE7m1tDHd6x2HsJUEwHwYDVR0j
BBgwFoAU0yN9WZXh1caBzX9RL2mCn222DmowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUNyU3A4R3Q1YXhEVmZyeUZwTkV3MURONVRTOGV4WDZjc2o4RXRVZHVH
Zm0vMC9EMzIzN0Q1OTk1RTFENUM2ODFDRDdGNTEyRjY5ODI5RjZEQjYwRTZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzMjM3RDU5OTVFMUQ1QzY4
MUNEN0Y1MTJGNjk4MjlGNkRCNjBFNkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VDclNwOEd0NWF4RFZmcnlGcE5FdzFETjVUUzhleFg2Y3NqOEV0VWR1R2ZtLzAv
MzIzODMwMzQzYTMzMzQzNDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzIzODMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDRMMA0GCSqGSIb3DQEBCwUAA4IBAQBRtVu9
FNjWFyfzj1bhuAjczaAJCaRDEyJSc4OC4o1Omo5B4EjQM461rlpftFA5sWXuJche
BmocOA5ufKOSND5z5M5nR/QLcSPysXKnj18xVzZtePZ1D675SENTjANa4He+d5UY
Q7Raedfb+DhBoYeZ7kxTcAxr4ykP6z9SKuljImy4utA3sNRtipM9gAzMeOnhFJlk
eGDbx4VxBgOzIzxF8dYfE/67dtHgj4JpTLli4a261U4kr+PXGpw/9vnRzkEzyFyz
rjdWE4CQoS5kTqwMifKF5h76P/gi9OAxj2nPljZbS3SSSRh8K5ibwE/d8nAYU4xh
o3eHe78zACF/3M8E
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:44 2025 by rpki-client on console.sobornost.net