Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3134303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3134303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          iwOCtyl/gIYYFy0p2goAquWB7uSzlmIuJrHrhznaf0A=
Subject key identifier:   54:B0:4E:EE:59:0C:83:16:F0:4B:57:28:34:8E:6C:B3:F3:08:9B:B4
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       469F7917D5C7C42EA122276F11BCBEA63E24CA9B
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3134303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:35 +0000
ROA not before:           Fri 30 Aug 2024 14:21:35 +0000
ROA not after:            Fri 29 Aug 2025 14:26:35 +0000
asID:                     272710
IP address blocks:        2804:8774:140::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 07:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9f:79:17:d5:c7:c4:2e:a1:22:27:6f:11:bc:be:a6:3e:24:ca:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:35 2024 GMT
            Not After : Aug 29 14:26:35 2025 GMT
        Subject: CN=54B04EEE590C8316F04B5728348E6CB3F3089BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f6:55:bb:87:25:3b:04:80:12:3f:6a:b6:82:
                    ac:3c:2a:11:a9:be:a0:2e:10:06:17:7f:9a:61:4e:
                    5e:d0:06:d3:17:13:d1:7b:bb:eb:37:b9:03:06:5a:
                    b6:5e:d0:91:24:6d:58:54:7b:54:a2:cc:28:b5:f2:
                    98:ec:ff:78:6f:59:b9:06:77:f2:fd:76:54:be:17:
                    cb:5e:b8:8a:0e:7d:bb:f3:2c:26:d5:72:76:e7:5e:
                    55:ad:df:ce:72:34:fe:34:1b:02:28:57:c3:63:a6:
                    0c:13:35:a4:ab:4d:59:67:a6:e8:f9:b2:8e:69:60:
                    73:ca:00:c1:3e:3b:15:e6:57:5d:62:3d:f8:53:52:
                    9b:c5:76:45:72:1b:96:1e:62:7e:36:d2:f9:8f:d2:
                    26:16:ea:26:ce:09:c4:13:cb:22:65:6a:3a:df:d7:
                    09:74:32:94:de:b6:f3:ae:1d:f2:de:5f:f8:ae:b5:
                    1d:1d:91:ab:9e:ee:b3:7a:80:c6:88:5a:3c:4f:eb:
                    2f:c8:37:25:e4:23:54:98:7a:0d:ff:b7:37:25:f9:
                    8c:73:66:55:8c:12:c3:f5:98:12:66:f6:e6:00:53:
                    63:cf:fb:29:dc:c1:0f:45:97:0d:69:83:71:5d:08:
                    55:04:3e:f3:b7:f4:f3:dd:b4:28:2f:9a:48:f1:f2:
                    1c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B0:4E:EE:59:0C:83:16:F0:4B:57:28:34:8E:6C:B3:F3:08:9B:B4
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3134303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:140::/45

    Signature Algorithm: sha256WithRSAEncryption
         11:cc:cf:59:60:1a:f9:17:2e:81:59:a7:14:8a:e1:89:79:69:
         49:79:71:03:af:e4:68:64:51:32:1f:03:ef:2c:6d:7f:1b:bf:
         ab:fc:c6:75:d2:04:4a:cf:bc:60:ae:15:ec:92:6f:30:20:ee:
         80:92:40:1e:0d:ad:da:25:31:7a:f6:2b:c2:71:49:ca:aa:a0:
         6a:32:b2:6e:29:5b:f7:18:7e:09:a4:25:98:ab:a1:71:ef:ff:
         92:30:3d:32:a1:92:64:e5:0b:09:b5:7f:61:d2:5c:b3:d8:39:
         dc:90:13:3b:15:92:4d:55:cc:a0:8b:71:2a:9a:a6:bf:ab:e5:
         b2:0d:bb:15:6d:d9:86:0e:f0:14:8d:a1:31:fa:46:72:08:89:
         bd:ad:96:06:a2:67:ed:c0:e3:cb:49:bd:7f:53:77:cf:4a:74:
         48:a4:7f:af:f7:e4:94:89:6b:2c:a2:79:14:1b:e2:21:a2:91:
         7a:52:f0:24:0e:a1:7e:72:ce:44:f7:e9:16:14:54:cd:ce:38:
         25:cf:87:9e:9d:f4:95:dd:e8:9a:0d:f8:65:be:1d:14:d6:f8:
         a0:08:2e:44:bd:26:13:ce:b0:3e:af:8b:0d:a6:f5:65:ee:96:
         7e:5b:52:c2:bc:4f:33:af:0c:ec:4c:b7:f6:22:7b:da:ed:9b:
         58:44:a9:a0
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIURp95F9XHxC6hIidvEby+pj4kypswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNDA4MzAxNDIxMzVaFw0yNTA4MjkxNDI2MzVaMDMxMTAvBgNV
BAMTKDU0QjA0RUVFNTkwQzgzMTZGMDRCNTcyODM0OEU2Q0IzRjMwODlCQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW9lW7hyU7BIASP2q2gqw8KhGp
vqAuEAYXf5phTl7QBtMXE9F7u+s3uQMGWrZe0JEkbVhUe1SizCi18pjs/3hvWbkG
d/L9dlS+F8teuIoOfbvzLCbVcnbnXlWt385yNP40GwIoV8NjpgwTNaSrTVlnpuj5
so5pYHPKAME+OxXmV11iPfhTUpvFdkVyG5YeYn420vmP0iYW6ibOCcQTyyJlajrf
1wl0MpTetvOuHfLeX/iutR0dkaue7rN6gMaIWjxP6y/INyXkI1SYeg3/tzcl+Yxz
ZlWMEsP1mBJm9uYAU2PP+yncwQ9Flw1pg3FdCFUEPvO39PPdtCgvmkjx8hxJAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUVLBO7lkMgxbwS1coNI5ss/MIm7QwHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzMTM0MzAzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBId0AUAwDQYJKoZIhvcNAQELBQAD
ggEBABHMz1lgGvkXLoFZpxSK4Yl5aUl5cQOv5GhkUTIfA+8sbX8bv6v8xnXSBErP
vGCuFeySbzAg7oCSQB4NrdolMXr2K8JxScqqoGoysm4pW/cYfgmkJZiroXHv/5Iw
PTKhkmTlCwm1f2HSXLPYOdyQEzsVkk1VzKCLcSqapr+r5bINuxVt2YYO8BSNoTH6
RnIIib2tlgaiZ+3A48tJvX9Td89KdEikf6/35JSJayyieRQb4iGikXpS8CQOoX5y
zkT36RYUVM3OOCXPh56d9JXd6JoN+GW+HRTW+KAILkS9JhPOsD6viw2m9WXuln5b
UsK8TzOvDOxMt/Yie9rtm1hEqaA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:10 2025 by rpki-client on console.sobornost.net