Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/323830343a346464633a3a2f33322d3438203d3e20323638323234.roa
File:                     323830343a346464633a3a2f33322d3438203d3e20323638323234.roa (raw, json)
Hash identifier:          RWf1M+YDkz/LqQmvsgo2wdtB4f3hxAnt+fEH2ro4muw=
Subject key identifier:   F4:74:16:8E:E2:FF:EA:C0:BA:EB:79:53:91:64:49:D6:16:9C:E3:E9
Certificate issuer:       /CN=36396C7C03A2D794B22FA865D7FB6C2020887E26
Certificate serial:       7921C8E4868DEE0FA7A0648D27AB91FA45C37160
Authority key identifier: 36:39:6C:7C:03:A2:D7:94:B2:2F:A8:65:D7:FB:6C:20:20:88:7E:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36396C7C03A2D794B22FA865D7FB6C2020887E26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/323830343a346464633a3a2f33322d3438203d3e20323638323234.roa
Signing time:             Mon 10 Mar 2025 20:31:49 +0000
ROA not before:           Mon 10 Mar 2025 20:26:49 +0000
ROA not after:            Mon 09 Mar 2026 20:31:49 +0000
asID:                     268224
IP address blocks:        2804:4ddc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/36396C7C03A2D794B22FA865D7FB6C2020887E26.crl
                          rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/36396C7C03A2D794B22FA865D7FB6C2020887E26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36396C7C03A2D794B22FA865D7FB6C2020887E26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:21:c8:e4:86:8d:ee:0f:a7:a0:64:8d:27:ab:91:fa:45:c3:71:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36396C7C03A2D794B22FA865D7FB6C2020887E26
        Validity
            Not Before: Mar 10 20:26:49 2025 GMT
            Not After : Mar  9 20:31:49 2026 GMT
        Subject: CN=F474168EE2FFEAC0BAEB7953916449D6169CE3E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:ad:64:2f:40:a7:9e:3b:7a:4e:c9:97:27:
                    2f:fa:b4:da:93:81:e1:e8:78:98:56:22:d0:65:e2:
                    af:7a:fc:83:f8:50:ea:0b:9b:1e:29:4b:d2:af:ee:
                    f1:f1:6e:9f:f3:f5:89:97:5d:62:fe:51:2b:54:02:
                    5f:24:3f:3e:ae:10:c8:b3:5e:de:50:cc:01:d2:6c:
                    97:66:72:68:e6:0b:71:aa:0e:e6:7b:e9:8d:3d:f8:
                    22:71:08:87:de:ac:aa:07:d8:27:ac:fe:67:cb:f9:
                    7e:f3:f0:f7:e6:bb:7a:d8:d1:69:e8:a9:59:b4:49:
                    b6:8d:1b:c9:6c:5c:53:83:62:8c:de:70:00:2a:b5:
                    82:f1:58:69:38:8d:85:ec:65:49:c2:3b:18:f2:e2:
                    11:f3:b0:9e:a2:bb:cc:70:f3:a4:1f:bb:48:9a:56:
                    e7:b2:86:1b:f4:aa:59:b7:d4:1c:1b:d7:62:4a:db:
                    71:62:ab:e4:79:82:be:35:72:20:8f:b4:6e:44:41:
                    19:f7:ea:fe:b3:88:57:22:fa:3a:36:6a:a1:2e:cd:
                    6c:d2:4e:a0:30:29:6c:95:eb:c2:d4:68:dc:e7:0b:
                    5a:84:e0:00:43:28:3a:47:d2:49:c0:b6:28:eb:e2:
                    1d:5b:b3:aa:d5:e6:9b:37:8e:1c:f2:53:aa:e9:5c:
                    f5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:74:16:8E:E2:FF:EA:C0:BA:EB:79:53:91:64:49:D6:16:9C:E3:E9
            X509v3 Authority Key Identifier:
                keyid:36:39:6C:7C:03:A2:D7:94:B2:2F:A8:65:D7:FB:6C:20:20:88:7E:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/36396C7C03A2D794B22FA865D7FB6C2020887E26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36396C7C03A2D794B22FA865D7FB6C2020887E26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/323830343a346464633a3a2f33322d3438203d3e20323638323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ddc::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:aa:4a:04:cd:7a:9b:f2:56:be:e5:db:3d:0e:96:65:dd:ee:
         a6:ef:2d:93:7d:9f:fa:9b:14:2b:cd:af:9a:dd:a7:ee:90:f5:
         ed:9e:a6:18:44:3c:1b:0b:91:2f:88:10:3d:21:27:a4:8a:41:
         2b:3f:6f:16:bf:da:4e:98:2e:81:d7:af:a7:d4:5d:01:e0:a4:
         e8:d3:06:3d:20:1a:9f:2f:e5:0f:17:07:81:17:cc:33:bc:29:
         d4:f7:36:46:77:ea:6e:0c:1f:20:dd:28:12:b5:8e:b8:12:b6:
         39:a8:3b:f1:ba:a4:68:41:95:d4:7a:1f:3b:37:7b:a3:0d:46:
         db:57:a0:79:37:7d:ee:4e:d7:bc:a8:7e:45:41:95:ed:03:ea:
         d6:40:82:96:1c:f8:e4:3b:3d:e0:76:c5:da:d3:65:d9:90:dd:
         d5:2b:9b:cc:4e:33:f4:4f:8a:04:04:05:9b:ab:94:5f:eb:07:
         a8:2a:fd:c8:06:03:30:8b:68:50:b7:e4:d0:ea:8e:0f:4a:91:
         de:78:11:31:84:45:62:60:e0:72:6e:8e:af:b5:40:b7:90:27:
         f3:36:a7:dc:45:9a:dc:02:ec:5c:00:6d:98:12:a6:e3:b9:51:
         b4:89:6d:9c:67:bd:c7:25:27:3c:6e:d9:5f:a3:ac:ce:1d:9f:
         e0:e5:ab:e3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUeSHI5IaN7g+noGSNJ6uR+kXDcWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYzOTZDN0MwM0EyRDc5NEIyMkZBODY1RDdGQjZDMjAy
MDg4N0UyNjAeFw0yNTAzMTAyMDI2NDlaFw0yNjAzMDkyMDMxNDlaMDMxMTAvBgNV
BAMTKEY0NzQxNjhFRTJGRkVBQzBCQUVCNzk1MzkxNjQ0OUQ2MTY5Q0UzRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkra1kL0Cnnjt6TsmXJy/6tNqT
geHoeJhWItBl4q96/IP4UOoLmx4pS9Kv7vHxbp/z9YmXXWL+UStUAl8kPz6uEMiz
Xt5QzAHSbJdmcmjmC3GqDuZ76Y09+CJxCIferKoH2Ces/mfL+X7z8Pfmu3rY0Wno
qVm0SbaNG8lsXFODYozecAAqtYLxWGk4jYXsZUnCOxjy4hHzsJ6iu8xw86Qfu0ia
Vueyhhv0qlm31Bwb12JK23Fiq+R5gr41ciCPtG5EQRn36v6ziFci+jo2aqEuzWzS
TqAwKWyV68LUaNznC1qE4ABDKDpH0knAtijr4h1bs6rV5ps3jhzyU6rpXPU3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU9HQWjuL/6sC663lTkWRJ1hac4+kwHwYDVR0j
BBgwFoAUNjlsfAOi15SyL6hl1/tsICCIfiYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnluQVZYTnJSODVmS0JiNGhKWWNaSlBLOFB5SGR4V3JzbW9GUUFZYkxH
REsvMC8zNjM5NkM3QzAzQTJENzk0QjIyRkE4NjVEN0ZCNkMyMDIwODg3RTI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2Mzk2QzdDMDNBMkQ3OTRC
MjJGQTg2NUQ3RkI2QzIwMjA4ODdFMjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z5bkFWWE5yUjg1ZktCYjRoSlljWkpQSzhQeUhkeFdyc21vRlFBWWJMR0RLLzAv
MzIzODMwMzQzYTM0NjQ2NDYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzIzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARN3DANBgkqhkiG9w0BAQsFAAOCAQEAq6pKBM16
m/JWvuXbPQ6WZd3upu8tk32f+psUK82vmt2n7pD17Z6mGEQ8GwuRL4gQPSEnpIpB
Kz9vFr/aTpgugdevp9RdAeCk6NMGPSAany/lDxcHgRfMM7wp1Pc2RnfqbgwfIN0o
ErWOuBK2Oag78bqkaEGV1HofOzd7ow1G21egeTd97k7XvKh+RUGV7QPq1kCClhz4
5Ds94HbF2tNl2ZDd1SubzE4z9E+KBAQFm6uUX+sHqCr9yAYDMItoULfk0OqOD0qR
3ngRMYRFYmDgcm6Or7VAt5An8zan3EWa3ALsXABtmBKm47lRtIltnGe9xyUnPG7Z
X6Oszh2f4OWr4w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:28 2025 by rpki-client on console.sobornost.net