Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3230312e36322e36342e302f32302d3332203d3e203238363334.roa
File:                     3230312e36322e36342e302f32302d3332203d3e203238363334.roa (raw, json)
Hash identifier:          lpNTcJ76pZKRQrWXJmF+l/fSxgPsLSGCWHGhl98FSog=
Subject key identifier:   F4:7C:CE:DD:19:BF:5E:BE:8C:3B:43:10:94:4D:3B:99:C2:84:B5:4C
Certificate issuer:       /CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
Certificate serial:       4E9B7D7250041F808E9FB28E4C6315E85F1AAC14
Authority key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3230312e36322e36342e302f32302d3332203d3e203238363334.roa
Signing time:             Thu 06 Mar 2025 08:18:50 +0000
ROA not before:           Thu 06 Mar 2025 08:13:50 +0000
ROA not after:            Thu 05 Mar 2026 08:18:50 +0000
asID:                     28634
IP address blocks:        201.62.64.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl
                          rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9b:7d:72:50:04:1f:80:8e:9f:b2:8e:4c:63:15:e8:5f:1a:ac:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
        Validity
            Not Before: Mar  6 08:13:50 2025 GMT
            Not After : Mar  5 08:18:50 2026 GMT
        Subject: CN=F47CCEDD19BF5EBE8C3B4310944D3B99C284B54C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:31:ee:6f:3e:55:33:b2:6e:e0:13:38:11:
                    d4:d2:00:a5:77:37:fa:00:43:fc:e5:6a:30:f1:c8:
                    fb:67:1f:b6:4d:15:31:cf:8f:46:72:4a:69:f9:8f:
                    bc:5d:e4:c4:27:f8:e3:2a:00:89:e5:c8:07:37:e5:
                    1c:e9:e6:bf:c0:ab:de:c1:6b:ac:3a:d1:b2:53:7e:
                    13:f0:09:af:29:db:cf:68:83:cd:39:6e:7b:8f:fe:
                    37:48:74:92:cf:7b:b0:1c:6a:d9:da:76:88:b7:aa:
                    d8:a5:b1:75:98:54:75:b2:d9:81:82:93:e4:f1:80:
                    4c:11:6c:53:cf:da:0c:9f:24:60:22:bb:2c:a9:dc:
                    08:f9:96:95:34:33:d3:aa:9a:a5:37:98:47:d0:32:
                    aa:84:6c:50:18:3c:aa:19:0b:b6:ab:03:c5:2d:74:
                    e8:ca:c1:9c:98:5c:34:34:60:f7:4e:04:f0:e1:f1:
                    73:81:bf:1a:56:d8:67:29:a7:bb:58:17:1b:04:a5:
                    48:af:29:13:ad:e3:26:e6:82:2e:f9:5f:da:b4:85:
                    cc:d7:42:26:dd:fb:b7:fb:60:54:32:2d:9b:94:79:
                    d7:07:02:fa:58:85:4c:38:ac:fd:b0:b9:58:e9:e0:
                    3f:0f:a0:8c:49:12:94:e1:4d:96:a9:f4:f7:6c:b6:
                    9c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7C:CE:DD:19:BF:5E:BE:8C:3B:43:10:94:4D:3B:99:C2:84:B5:4C
            X509v3 Authority Key Identifier:
                keyid:0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3230312e36322e36342e302f32302d3332203d3e203238363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.62.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b5:97:f8:e0:64:3d:e8:7d:99:c4:46:90:62:72:09:4e:81:83:
         64:fe:3d:55:ab:f8:dc:22:d6:99:91:3b:d8:9c:64:a0:31:2f:
         68:63:d1:7b:b6:4a:51:a2:43:f8:3f:35:a6:77:bc:f3:57:da:
         f0:65:f5:c8:14:06:b4:64:4c:50:09:27:f9:85:29:00:7a:60:
         7c:4b:18:7c:5d:7c:ab:0b:30:81:41:ec:75:10:b5:87:22:bf:
         fa:cb:c9:e4:b0:bb:b1:f2:1e:58:15:78:86:8e:61:f6:83:c9:
         25:2e:19:ac:58:10:60:cc:07:a7:59:27:33:cd:46:2b:95:f1:
         66:dc:21:61:96:a8:05:c6:98:93:c9:18:67:51:03:c6:87:4a:
         2b:f0:e9:73:3d:e7:dd:23:45:1f:9d:82:2a:69:c4:4f:4b:20:
         2d:3a:64:39:74:0f:f5:7b:f2:65:bd:c5:5a:60:f0:06:62:64:
         7e:d1:c9:8f:83:63:e4:be:b6:a1:1b:62:a0:e1:ba:6f:b0:39:
         83:23:28:a5:29:b6:29:52:11:60:f9:9e:4c:e9:bd:d6:89:b2:
         84:f7:e6:37:f7:3b:1f:e1:a4:6a:37:30:08:87:13:0a:ee:9f:
         f2:bb:a4:74:ba:b5:3e:f7:d0:e1:24:4a:55:7b:3a:db:43:1f:
         d1:eb:83:84
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTpt9clAEH4COn7KOTGMV6F8arBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ2RkZEM0MzMjA0NjE4RUYzQ0NFQjI5N0ZEMUE0MjA3
M0NENzEyQTAeFw0yNTAzMDYwODEzNTBaFw0yNjAzMDUwODE4NTBaMDMxMTAvBgNV
BAMTKEY0N0NDRUREMTlCRjVFQkU4QzNCNDMxMDk0NEQzQjk5QzI4NEI1NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpjHubz5VM7Ju4BM4EdTSAKV3
N/oAQ/zlajDxyPtnH7ZNFTHPj0ZySmn5j7xd5MQn+OMqAInlyAc35Rzp5r/Aq97B
a6w60bJTfhPwCa8p289og805bnuP/jdIdJLPe7Acatnadoi3qtilsXWYVHWy2YGC
k+TxgEwRbFPP2gyfJGAiuyyp3Aj5lpU0M9OqmqU3mEfQMqqEbFAYPKoZC7arA8Ut
dOjKwZyYXDQ0YPdOBPDh8XOBvxpW2Gcpp7tYFxsEpUivKROt4ybmgi75X9q0hczX
Qibd+7f7YFQyLZuUedcHAvpYhUw4rP2wuVjp4D8PoIxJEpThTZap9PdstpzZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU9HzO3Rm/Xr6MO0MQlE07mcKEtUwwHwYDVR0j
BBgwFoAUDW/9PDIEYY7zzOspf9GkIHPNcSowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRktRd1ZvQUR5RVA1S045NmZoemlxTkhBWlJYVGtEQnBBWTJXcWNIaE1a
NWcvMy8wRDZGRkQzQzMyMDQ2MThFRjNDQ0VCMjk3RkQxQTQyMDczQ0Q3MTJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENkZGRDNDMzIwNDYxOEVG
M0NDRUIyOTdGRDFBNDIwNzNDRDcxMkEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZLUXdWb0FEeUVQNUtOOTZmaHppcU5IQVpSWFRrREJwQVkyV3FjSGhNWjVnLzMv
MzIzMDMxMmUzNjMyMmUzNjM0MmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzIzODM2
MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBMk+QDANBgkqhkiG9w0BAQsFAAOCAQEAtZf44GQ96H2Z
xEaQYnIJToGDZP49Vav43CLWmZE72JxkoDEvaGPRe7ZKUaJD+D81pne881fa8GX1
yBQGtGRMUAkn+YUpAHpgfEsYfF18qwswgUHsdRC1hyK/+svJ5LC7sfIeWBV4ho5h
9oPJJS4ZrFgQYMwHp1knM81GK5XxZtwhYZaoBcaYk8kYZ1EDxodKK/Dpcz3n3SNF
H52CKmnET0sgLTpkOXQP9XvyZb3FWmDwBmJkftHJj4Nj5L62oRtioOG6b7A5gyMo
pSm2KVIRYPmeTOm91omyhPfmN/c7H+GkajcwCIcTCu6f8rukdLq1PvfQ4SRKVXs6
20Mf0euDhA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:38:02 2025 by rpki-client on console.sobornost.net