Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/323830343a346235343a3a2f33322d3438203d3e20323637323938.roa
File:                     323830343a346235343a3a2f33322d3438203d3e20323637323938.roa (raw, json)
Hash identifier:          y+NNzAeOIf4ZmiDypmwFxhK00GceqqrXY+3Fjk7YLV8=
Subject key identifier:   48:CD:73:AF:3F:B9:5C:80:91:A8:D1:33:8F:82:E1:8E:BA:CC:03:75
Certificate issuer:       /CN=8902905780FDACAD708BC5F4FA8508B26F16146C
Certificate serial:       75B6AEFD30F2D483CB9D6C8E0E8EBF94F76C8866
Authority key identifier: 89:02:90:57:80:FD:AC:AD:70:8B:C5:F4:FA:85:08:B2:6F:16:14:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8902905780FDACAD708BC5F4FA8508B26F16146C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/323830343a346235343a3a2f33322d3438203d3e20323637323938.roa
Signing time:             Thu 06 Mar 2025 07:55:26 +0000
ROA not before:           Thu 06 Mar 2025 07:50:26 +0000
ROA not after:            Thu 05 Mar 2026 07:55:26 +0000
asID:                     267298
IP address blocks:        2804:4b54::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/8902905780FDACAD708BC5F4FA8508B26F16146C.crl
                          rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/8902905780FDACAD708BC5F4FA8508B26F16146C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8902905780FDACAD708BC5F4FA8508B26F16146C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 18:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b6:ae:fd:30:f2:d4:83:cb:9d:6c:8e:0e:8e:bf:94:f7:6c:88:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8902905780FDACAD708BC5F4FA8508B26F16146C
        Validity
            Not Before: Mar  6 07:50:26 2025 GMT
            Not After : Mar  5 07:55:26 2026 GMT
        Subject: CN=48CD73AF3FB95C8091A8D1338F82E18EBACC0375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c7:78:fd:9a:76:aa:ec:90:a9:e9:01:cb:29:
                    23:67:f5:97:3d:85:91:7c:af:3b:8e:24:02:fe:8e:
                    64:a7:c1:c2:c0:02:c3:fb:12:21:2f:18:ff:17:68:
                    29:0c:5d:3a:28:56:45:c0:fd:bf:7a:41:38:3f:49:
                    8b:22:63:ad:39:92:ae:ef:8d:24:10:de:24:64:45:
                    3f:ee:a1:76:66:d0:60:20:02:9c:de:c4:1f:16:8e:
                    be:d8:66:7e:09:5b:3c:6c:8f:cf:ee:e9:b4:89:8a:
                    14:f0:cb:0c:89:e4:08:10:c2:92:5d:c5:24:48:89:
                    42:13:85:f0:c2:f3:79:44:be:4f:f9:7e:05:86:cd:
                    b1:00:fb:c1:c4:0c:2a:72:8e:92:c1:6d:9f:cf:fa:
                    1c:ef:1e:b7:cb:9e:41:3f:d5:13:ae:8e:93:17:45:
                    79:44:bc:3d:21:a8:13:d0:8f:5d:43:da:5f:36:69:
                    65:77:e8:0b:e0:c1:50:8b:37:96:a2:25:3d:d0:06:
                    61:77:54:55:98:85:23:cc:82:22:9f:ce:8f:01:0b:
                    6c:58:9e:c7:e8:4f:c4:e3:a5:40:e5:80:7a:1a:e3:
                    f1:0b:c7:98:99:3c:a1:df:44:ed:74:a3:1a:c0:69:
                    7f:a6:a0:3a:2f:fa:43:8a:63:fe:73:33:27:6a:2f:
                    12:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CD:73:AF:3F:B9:5C:80:91:A8:D1:33:8F:82:E1:8E:BA:CC:03:75
            X509v3 Authority Key Identifier:
                keyid:89:02:90:57:80:FD:AC:AD:70:8B:C5:F4:FA:85:08:B2:6F:16:14:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/8902905780FDACAD708BC5F4FA8508B26F16146C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8902905780FDACAD708BC5F4FA8508B26F16146C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/1/323830343a346235343a3a2f33322d3438203d3e20323637323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b54::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:d8:cf:21:19:cd:5a:bf:e5:7f:6f:b0:08:12:06:b7:94:6f:
         32:c6:be:58:f8:92:da:56:03:87:37:25:46:c0:f3:02:7d:db:
         a3:e9:65:81:fc:84:95:e7:96:db:3a:f5:15:04:3a:a4:64:e8:
         16:31:0a:6e:8b:9e:47:2d:15:c1:22:85:97:e2:4f:98:23:df:
         6b:5d:c3:df:80:91:ef:a1:cd:10:aa:05:5b:a4:eb:39:7f:00:
         93:cb:cc:7e:58:5c:06:31:66:21:3d:42:ce:ee:e2:a4:b7:2b:
         05:ad:f3:c6:c1:39:51:09:37:00:7c:8b:fd:6d:8c:52:e8:65:
         a7:e5:e1:44:ad:8f:a5:10:b3:ae:cc:c0:13:c0:65:26:bd:6d:
         21:fd:77:f4:e7:bb:ca:f7:c2:7d:73:4d:64:09:da:39:fc:b5:
         cd:07:5c:27:d5:0a:ff:ac:64:e2:17:8f:70:58:d8:3b:2c:b2:
         f8:2c:d0:7e:7e:80:12:d1:7a:54:7e:76:14:87:43:eb:68:c3:
         f1:9a:f8:f7:97:82:56:a1:e9:01:8b:a0:34:6a:48:7a:d1:f3:
         48:9a:42:b8:b7:61:cd:6c:fd:2f:26:bb:60:7f:19:f8:fd:2f:
         9f:78:5c:74:c2:4d:89:44:67:3c:98:0e:80:3f:ea:ee:08:8f:
         41:8c:26:89
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdbau/TDy1IPLnWyODo6/lPdsiGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkwMjkwNTc4MEZEQUNBRDcwOEJDNUY0RkE4NTA4QjI2
RjE2MTQ2QzAeFw0yNTAzMDYwNzUwMjZaFw0yNjAzMDUwNzU1MjZaMDMxMTAvBgNV
BAMTKDQ4Q0Q3M0FGM0ZCOTVDODA5MUE4RDEzMzhGODJFMThFQkFDQzAzNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTx3j9mnaq7JCp6QHLKSNn9Zc9
hZF8rzuOJAL+jmSnwcLAAsP7EiEvGP8XaCkMXTooVkXA/b96QTg/SYsiY605kq7v
jSQQ3iRkRT/uoXZm0GAgApzexB8Wjr7YZn4JWzxsj8/u6bSJihTwywyJ5AgQwpJd
xSRIiUIThfDC83lEvk/5fgWGzbEA+8HEDCpyjpLBbZ/P+hzvHrfLnkE/1ROujpMX
RXlEvD0hqBPQj11D2l82aWV36AvgwVCLN5aiJT3QBmF3VFWYhSPMgiKfzo8BC2xY
nsfoT8TjpUDlgHoa4/ELx5iZPKHfRO10oxrAaX+moDov+kOKY/5zMydqLxJRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUSM1zrz+5XICRqNEzj4LhjrrMA3UwHwYDVR0j
BBgwFoAUiQKQV4D9rK1wi8X0+oUIsm8WFGwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWFiYjhRTTZFS2lDY1pVcUxpTVdWZGt6UDF4YWZSUVZBOVROTllmb1p5
UDQvMS84OTAyOTA1NzgwRkRBQ0FENzA4QkM1RjRGQTg1MDhCMjZGMTYxNDZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5MDI5MDU3ODBGREFDQUQ3
MDhCQzVGNEZBODUwOEIyNkYxNjE0NkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VhYmI4UU02RUtpQ2NaVXFMaU1XVmRrelAxeGFmUlFWQTlUTk5ZZm9aeVA0LzEv
MzIzODMwMzQzYTM0NjIzNTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzIzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARLVDANBgkqhkiG9w0BAQsFAAOCAQEAQtjPIRnN
Wr/lf2+wCBIGt5RvMsa+WPiS2lYDhzclRsDzAn3bo+llgfyEleeW2zr1FQQ6pGTo
FjEKboueRy0VwSKFl+JPmCPfa13D34CR76HNEKoFW6TrOX8Ak8vMflhcBjFmIT1C
zu7ipLcrBa3zxsE5UQk3AHyL/W2MUuhlp+XhRK2PpRCzrszAE8BlJr1tIf139Oe7
yvfCfXNNZAnaOfy1zQdcJ9UK/6xk4hePcFjYOyyy+CzQfn6AEtF6VH52FIdD62jD
8Zr495eCVqHpAYugNGpIetHzSJpCuLdhzWz9Lya7YH8Z+P0vn3hcdMJNiURnPJgO
gD/q7giPQYwmiQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:51 2025 by rpki-client on console.sobornost.net