Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/323830343a383632633a3a2f33322d3335203d3e20323732363236.roa
File:                     323830343a383632633a3a2f33322d3335203d3e20323732363236.roa (raw, json)
Hash identifier:          u3QX0Sw01r5zWK9SI7e/zZteNQlDp6bzw/sy4KdIv84=
Subject key identifier:   B8:5A:47:06:42:10:A1:4E:DB:7A:63:FB:E2:76:B1:D1:D9:78:D2:B4
Certificate issuer:       /CN=CBED8B77145C146C6E2002637F70D52E41B65B78
Certificate serial:       5B16A458CF9F38336F01B2ECA0F4DD87E69E6194
Authority key identifier: CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/323830343a383632633a3a2f33322d3335203d3e20323732363236.roa
Signing time:             Wed 05 Mar 2025 22:33:05 +0000
ROA not before:           Wed 05 Mar 2025 22:28:05 +0000
ROA not after:            Wed 04 Mar 2026 22:33:05 +0000
asID:                     272626
IP address blocks:        2804:862c::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.crl
                          rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:16:a4:58:cf:9f:38:33:6f:01:b2:ec:a0:f4:dd:87:e6:9e:61:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBED8B77145C146C6E2002637F70D52E41B65B78
        Validity
            Not Before: Mar  5 22:28:05 2025 GMT
            Not After : Mar  4 22:33:05 2026 GMT
        Subject: CN=B85A47064210A14EDB7A63FBE276B1D1D978D2B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:38:7f:47:66:2a:19:63:67:6b:c1:0d:41:
                    fa:23:4e:06:8f:28:78:3c:57:88:d5:05:f9:be:b7:
                    68:4f:7b:36:3e:33:25:8e:31:fe:fd:8e:19:31:ca:
                    7a:2d:1f:04:b1:f5:31:0d:96:98:83:bb:ac:92:f7:
                    c4:88:60:0f:74:ad:a7:a9:3d:ba:53:fc:a3:ba:b4:
                    66:13:9f:b5:06:98:40:ab:ef:24:93:94:90:3b:32:
                    9e:9e:4a:1f:99:ab:eb:f8:be:84:3d:a0:b4:a1:51:
                    c3:00:33:e7:1b:5a:1f:ee:39:a8:38:ab:76:c9:12:
                    23:21:14:00:82:3d:4f:da:72:c1:d0:33:3a:76:d0:
                    b2:af:0d:ff:40:18:b3:05:31:c4:fb:d4:25:d9:26:
                    00:4d:db:17:df:5b:01:c6:cf:a9:b6:b0:ce:2d:d6:
                    a4:d8:f0:8f:d9:19:75:74:02:0e:02:71:34:e1:3d:
                    53:9c:19:9f:2a:05:b3:49:46:c4:59:ae:3c:5e:e9:
                    e4:93:45:22:4b:b2:ea:b2:db:a9:18:43:8a:aa:67:
                    35:9d:6e:6d:41:f9:de:93:f3:80:12:e4:95:3b:df:
                    4b:a7:50:90:45:85:c6:5a:7e:a2:84:10:6e:63:e2:
                    cd:c1:4b:14:5a:75:a9:68:99:08:20:23:fc:2a:b3:
                    5c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5A:47:06:42:10:A1:4E:DB:7A:63:FB:E2:76:B1:D1:D9:78:D2:B4
            X509v3 Authority Key Identifier:
                keyid:CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/323830343a383632633a3a2f33322d3335203d3e20323732363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:862c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:08:dd:cc:f9:38:b9:3f:a4:fc:3c:03:a1:e7:23:08:f7:10:
         74:04:e0:36:ae:10:16:ca:c4:da:22:0b:c0:00:f4:45:67:dc:
         1a:46:d0:a8:58:04:84:db:cf:61:b2:42:2d:23:b3:ba:45:53:
         31:1b:72:f5:b6:57:59:e5:d7:62:89:71:18:5c:4d:50:ed:3f:
         3f:9c:0f:70:04:0e:a3:fa:08:fb:19:76:ea:c8:13:7e:96:bf:
         40:05:66:d2:49:62:5a:a4:18:06:6c:63:9a:bb:be:02:a3:c3:
         0e:d5:f8:40:ff:7e:66:21:89:91:a4:d9:ca:57:cb:70:59:fd:
         51:3f:eb:18:a0:e4:88:fa:89:18:c4:1b:73:93:62:28:cb:37:
         3d:ac:e3:48:ec:cf:9d:8c:fb:46:b8:a1:3f:48:13:93:86:4b:
         f9:f0:22:ce:82:aa:ef:34:e8:e0:f9:a3:74:d3:7a:3c:45:62:
         fe:19:ff:d4:8a:9a:1c:57:31:c3:ba:f8:88:92:28:73:5f:a7:
         9d:a7:af:ae:57:74:e6:c0:f1:a3:f9:95:20:60:b9:29:87:1c:
         b0:f0:b9:d1:ff:04:f5:44:70:e8:24:f0:39:82:e3:2a:13:99:
         7b:09:6a:96:48:af:33:a5:21:b2:f6:9a:0d:ef:a9:fd:df:23:
         86:05:2a:57
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWxakWM+fODNvAbLsoPTdh+aeYZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JFRDhCNzcxNDVDMTQ2QzZFMjAwMjYzN0Y3MEQ1MkU0
MUI2NUI3ODAeFw0yNTAzMDUyMjI4MDVaFw0yNjAzMDQyMjMzMDVaMDMxMTAvBgNV
BAMTKEI4NUE0NzA2NDIxMEExNEVEQjdBNjNGQkUyNzZCMUQxRDk3OEQyQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa3jh/R2YqGWNna8ENQfojTgaP
KHg8V4jVBfm+t2hPezY+MyWOMf79jhkxynotHwSx9TENlpiDu6yS98SIYA90raep
PbpT/KO6tGYTn7UGmECr7ySTlJA7Mp6eSh+Zq+v4voQ9oLShUcMAM+cbWh/uOag4
q3bJEiMhFACCPU/acsHQMzp20LKvDf9AGLMFMcT71CXZJgBN2xffWwHGz6m2sM4t
1qTY8I/ZGXV0Ag4CcTThPVOcGZ8qBbNJRsRZrjxe6eSTRSJLsuqy26kYQ4qqZzWd
bm1B+d6T84AS5JU730unUJBFhcZafqKEEG5j4s3BSxRadalomQggI/wqs1yBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUuFpHBkIQoU7bemP74nax0dl40rQwHwYDVR0j
BBgwFoAUy+2LdxRcFGxuIAJjf3DVLkG2W3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzJFVmpBNTdRWURUaFRaTXd3R3BrbVpFeHJmdTRyVkJZd3VRYXV0allr
WXIvMS9DQkVEOEI3NzE0NUMxNDZDNkUyMDAyNjM3RjcwRDUyRTQxQjY1Qjc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRUQ4Qjc3MTQ1QzE0NkM2
RTIwMDI2MzdGNzBENTJFNDFCNjVCNzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0cyRVZqQTU3UVlEVGhUWk13d0dwa21aRXhyZnU0clZCWXd1UWF1dGpZa1lyLzEv
MzIzODMwMzQzYTM4MzYzMjYzM2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNzMy
MzYzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASGLDANBgkqhkiG9w0BAQsFAAOCAQEALQjdzPk4
uT+k/DwDoecjCPcQdATgNq4QFsrE2iILwAD0RWfcGkbQqFgEhNvPYbJCLSOzukVT
MRty9bZXWeXXYolxGFxNUO0/P5wPcAQOo/oI+xl26sgTfpa/QAVm0kliWqQYBmxj
mru+AqPDDtX4QP9+ZiGJkaTZylfLcFn9UT/rGKDkiPqJGMQbc5NiKMs3PazjSOzP
nYz7RrihP0gTk4ZL+fAizoKq7zTo4PmjdNN6PEVi/hn/1IqaHFcxw7r4iJIoc1+n
naevrld05sDxo/mVIGC5KYccsPC50f8E9URw6CTwOYLjKhOZewlqlkivM6Uhsvaa
De+p/d8jhgUqVw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:45 2025 by rpki-client on console.sobornost.net