Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f34382d3438203d3e203532353435.roa
File:                     323830343a6531633a3a2f34382d3438203d3e203532353435.roa (raw, json)
Hash identifier:          tMslQHnLGJAB5UxjTGpb/vZP2ppEaTiJwBDm93IvmOI=
Subject key identifier:   7E:5B:50:C8:57:26:C8:A7:85:B8:81:0A:7D:64:1B:DA:13:5F:C2:B3
Certificate issuer:       /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial:       43D36AA0BCCC62940DCD4AFF85D834C40340BF1F
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f34382d3438203d3e203532353435.roa
Signing time:             Thu 06 Mar 2025 02:06:26 +0000
ROA not before:           Thu 06 Mar 2025 02:01:26 +0000
ROA not after:            Thu 05 Mar 2026 02:06:26 +0000
asID:                     52545
IP address blocks:        2804:e1c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d3:6a:a0:bc:cc:62:94:0d:cd:4a:ff:85:d8:34:c4:03:40:bf:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
        Validity
            Not Before: Mar  6 02:01:26 2025 GMT
            Not After : Mar  5 02:06:26 2026 GMT
        Subject: CN=7E5B50C85726C8A785B8810A7D641BDA135FC2B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a2:8a:40:6f:34:4b:d7:1e:bf:c5:f7:26:ea:
                    7f:41:74:8a:82:38:a1:19:18:39:c4:6d:cc:dc:eb:
                    91:a7:67:6d:cb:45:9c:75:bc:32:ea:8d:9d:c3:3c:
                    84:79:78:4c:a2:eb:65:28:3b:8d:c8:ca:18:0b:ad:
                    12:b8:d0:c8:da:ce:4e:61:bc:1a:14:a1:c6:8a:71:
                    7a:3f:92:c4:cf:a9:f6:4a:47:38:19:9a:a7:fb:5e:
                    9d:15:bc:09:7f:64:9f:92:8b:c5:3b:df:57:4f:90:
                    81:59:7c:64:7f:25:f5:d3:8e:cd:68:b2:d4:f6:9c:
                    cf:dd:56:b0:cf:0a:2d:42:67:a5:71:87:15:ce:84:
                    02:f7:4a:d3:b5:c8:9e:c6:43:fa:3f:3c:18:f7:b3:
                    5a:cc:13:a6:f6:ad:41:df:21:38:ef:21:e5:62:54:
                    59:4b:50:45:c6:b9:a1:d3:7a:80:0f:33:48:48:16:
                    c8:ce:4a:e0:17:6c:08:1f:2c:7f:a1:1a:35:6c:6c:
                    89:9d:df:eb:85:68:b5:0c:13:af:eb:2e:65:18:99:
                    c3:42:80:12:b0:5a:80:16:cb:5c:2f:5c:61:72:de:
                    14:52:b2:36:9b:25:89:65:7c:f7:85:e8:70:bb:f7:
                    bd:9d:e1:5a:a5:ee:96:d4:95:d9:72:ab:e1:59:9b:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5B:50:C8:57:26:C8:A7:85:B8:81:0A:7D:64:1B:DA:13:5F:C2:B3
            X509v3 Authority Key Identifier:
                keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f34382d3438203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:81:c0:05:54:52:e3:15:60:de:16:47:c0:90:91:7e:8a:2b:
         37:f3:1a:54:6e:23:00:69:21:e6:44:6b:87:0a:21:e7:cc:9d:
         6f:e4:15:70:d1:87:43:45:3b:e5:4b:ec:48:57:91:22:cc:c7:
         4b:ca:6b:31:ed:07:c2:25:49:5c:af:f2:73:da:6b:32:07:50:
         d1:9d:26:ab:dd:03:30:a8:1e:55:50:e4:cb:f3:a6:b4:7d:a5:
         1d:a6:14:01:e5:38:de:1f:78:14:0a:db:c9:93:36:88:1f:d3:
         93:d8:00:8b:13:aa:09:d4:92:2e:f9:6c:fa:7c:e7:03:e6:55:
         b5:00:86:34:08:ad:92:a6:ce:fe:82:39:1e:28:3b:dc:32:79:
         92:0c:5d:32:55:aa:33:53:95:3b:4e:19:eb:7f:72:f9:82:c7:
         6f:ed:0d:b9:e2:1e:b6:04:dd:64:2f:d8:2a:ae:17:f4:d6:ee:
         e6:ad:67:dc:68:8f:d1:a0:37:c4:7d:81:6f:f8:55:1c:77:21:
         00:af:00:41:35:91:8b:4d:d5:4c:ce:70:c7:fc:0e:bd:a8:e0:
         41:94:9d:57:3b:c1:ca:c8:fa:d3:fb:02:1c:e2:c6:2a:56:75:
         a0:6a:a4:ad:8f:2e:98:4b:ba:56:b3:a7:98:e6:ae:79:29:0e:
         58:b0:57:5f
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUQ9NqoLzMYpQNzUr/hdg0xANAvx8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUyNURFQzJDMjk4Rjk4QTBBMENDODg4RTgwNUUwMUMz
OUZENjNENzAeFw0yNTAzMDYwMjAxMjZaFw0yNjAzMDUwMjA2MjZaMDMxMTAvBgNV
BAMTKDdFNUI1MEM4NTcyNkM4QTc4NUI4ODEwQTdENjQxQkRBMTM1RkMyQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkoopAbzRL1x6/xfcm6n9BdIqC
OKEZGDnEbczc65GnZ23LRZx1vDLqjZ3DPIR5eEyi62UoO43IyhgLrRK40Mjazk5h
vBoUocaKcXo/ksTPqfZKRzgZmqf7Xp0VvAl/ZJ+Si8U731dPkIFZfGR/JfXTjs1o
stT2nM/dVrDPCi1CZ6VxhxXOhAL3StO1yJ7GQ/o/PBj3s1rME6b2rUHfITjvIeVi
VFlLUEXGuaHTeoAPM0hIFsjOSuAXbAgfLH+hGjVsbImd3+uFaLUME6/rLmUYmcNC
gBKwWoAWy1wvXGFy3hRSsjabJYllfPeF6HC7972d4Vql7pbUldlyq+FZm3z5AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUfltQyFcmyKeFuIEKfWQb2hNfwrMwHwYDVR0j
BBgwFoAUNSXewsKY+YoKDMiI6AXgHDn9Y9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFx
eHgvMy8zNTI1REVDMkMyOThGOThBMEEwQ0M4ODhFODA1RTAxQzM5RkQ2M0Q3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MjVERUMyQzI5OEY5OEEw
QTBDQzg4OEU4MDVFMDFDMzlGRDYzRDcuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBTFEyR2pEUVNzWVFtN0NTWHRIZXdRSGZRRjhRcXRCSHZzNE1nSG0xcXh4LzMv
MzIzODMwMzQzYTY1MzE2MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzIzNTM0
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAoBA4cAAAwDQYJKoZIhvcNAQELBQADggEBAH+BwAVUUuMV
YN4WR8CQkX6KKzfzGlRuIwBpIeZEa4cKIefMnW/kFXDRh0NFO+VL7EhXkSLMx0vK
azHtB8IlSVyv8nPaazIHUNGdJqvdAzCoHlVQ5MvzprR9pR2mFAHlON4feBQK28mT
Nogf05PYAIsTqgnUki75bPp85wPmVbUAhjQIrZKmzv6COR4oO9wyeZIMXTJVqjNT
lTtOGet/cvmCx2/tDbniHrYE3WQv2CquF/TW7uatZ9xoj9GgN8R9gW/4VRx3IQCv
AEE1kYtN1UzOcMf8Dr2o4EGUnVc7wcrI+tP7AhzixipWdaBqpK2PLphLulazp5jm
rnkpDliwV18=
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:46 2025 by rpki-client on console.sobornost.net