Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/323830343a386565343a3a2f33322d3334203d3e20323733343534.roa
File:                     323830343a386565343a3a2f33322d3334203d3e20323733343534.roa (raw, json)
Hash identifier:          nXObm6ICYhD0XLJ8I92uYB7c/+uLLWyVtEGw0gz0VG0=
Subject key identifier:   62:6A:25:77:A6:48:4C:BA:D1:18:E1:77:FE:E2:A1:FB:09:6B:DD:E1
Certificate issuer:       /CN=367A395C617DF249BBDEA2B243555E7D0463C336
Certificate serial:       43383B44D144FA7EECE4D31590525BC526407225
Authority key identifier: 36:7A:39:5C:61:7D:F2:49:BB:DE:A2:B2:43:55:5E:7D:04:63:C3:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/367A395C617DF249BBDEA2B243555E7D0463C336.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/323830343a386565343a3a2f33322d3334203d3e20323733343534.roa
Signing time:             Tue 22 Apr 2025 13:25:02 +0000
ROA not before:           Tue 22 Apr 2025 13:20:02 +0000
ROA not after:            Tue 21 Apr 2026 13:25:02 +0000
asID:                     273454
IP address blocks:        2804:8ee4::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/367A395C617DF249BBDEA2B243555E7D0463C336.crl
                          rsync://rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/367A395C617DF249BBDEA2B243555E7D0463C336.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/367A395C617DF249BBDEA2B243555E7D0463C336.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:38:3b:44:d1:44:fa:7e:ec:e4:d3:15:90:52:5b:c5:26:40:72:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367A395C617DF249BBDEA2B243555E7D0463C336
        Validity
            Not Before: Apr 22 13:20:02 2025 GMT
            Not After : Apr 21 13:25:02 2026 GMT
        Subject: CN=626A2577A6484CBAD118E177FEE2A1FB096BDDE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4e:e7:58:df:42:88:15:c7:0e:41:83:0e:76:
                    25:f9:23:95:10:7f:62:b5:3c:00:1e:c8:82:dd:7e:
                    b6:b1:fc:3d:49:8e:72:27:cb:26:b3:70:70:e2:74:
                    7e:7d:88:39:c8:72:f1:ac:54:a7:7c:41:c9:1c:83:
                    27:b1:37:18:72:88:a3:f3:bb:50:9f:74:06:67:4d:
                    aa:65:b8:e3:a3:31:45:1d:fc:f4:9a:17:52:2f:f7:
                    c8:48:72:a8:04:c4:f5:7b:8c:c3:fd:f0:12:39:2a:
                    36:6e:1b:c7:14:76:8a:cd:62:5d:7b:76:4e:ed:9d:
                    af:f7:89:23:b2:2e:af:f2:fe:c2:0b:86:00:88:dd:
                    0e:93:b5:41:ca:f8:ec:ae:4e:bc:40:27:1b:59:96:
                    9c:ac:be:82:c2:4d:28:ce:3e:0c:b0:8d:82:ab:63:
                    1f:f1:28:2f:ba:b1:ce:c7:51:8e:a8:c4:8d:6e:6b:
                    a0:35:98:66:d3:06:b0:4c:f2:d2:89:ff:49:b6:46:
                    d8:f4:f1:32:28:36:89:26:df:a9:e6:6d:34:1b:68:
                    b3:42:20:dd:1c:2b:39:e6:c1:bb:61:e8:22:9b:fe:
                    f1:46:5c:9a:a5:d4:ec:cd:19:ae:0b:58:ad:8e:6b:
                    17:2a:ff:41:93:ee:f5:10:37:48:07:66:5f:eb:c4:
                    a2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6A:25:77:A6:48:4C:BA:D1:18:E1:77:FE:E2:A1:FB:09:6B:DD:E1
            X509v3 Authority Key Identifier:
                keyid:36:7A:39:5C:61:7D:F2:49:BB:DE:A2:B2:43:55:5E:7D:04:63:C3:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/367A395C617DF249BBDEA2B243555E7D0463C336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/367A395C617DF249BBDEA2B243555E7D0463C336.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXx1wwgH8Q7U25MmEzfBuWnYJ6qd3AWLjnarxrqdNDqi/0/323830343a386565343a3a2f33322d3334203d3e20323733343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ee4::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:de:b0:4e:b2:dc:8b:96:fd:48:b1:ca:75:fd:59:3e:12:88:
         25:66:30:c9:ef:f9:b8:bd:b6:f6:71:0b:f2:7f:b1:b1:33:40:
         c9:ce:4b:c0:b2:bc:af:99:4e:fb:63:e7:ff:50:11:47:dd:d7:
         da:ab:09:c0:54:c0:97:4f:99:dd:19:8d:f6:35:a0:9c:da:43:
         e3:b4:b2:2c:dc:d9:cf:e2:5e:20:a3:bf:a1:29:84:3b:1c:c6:
         80:d1:44:c7:c5:0a:b7:0e:14:aa:2c:f8:c4:a1:a9:20:2f:f5:
         e3:18:38:d9:d2:01:ff:b8:ec:c0:0d:49:4f:83:fe:0e:de:72:
         75:8b:f4:cb:21:de:6b:07:49:b7:4e:5e:47:7f:99:de:97:04:
         b3:de:6e:82:07:77:42:1b:4b:41:d1:ed:a4:8b:a3:d2:97:a1:
         9a:51:54:d8:fe:3b:5f:9f:57:d6:fc:c8:36:1a:9a:33:39:56:
         63:25:e1:ec:3d:70:40:ff:76:e0:48:a0:53:d3:b8:22:36:22:
         06:44:f0:29:6f:63:89:59:73:f7:c1:02:df:b7:c3:61:0b:80:
         df:2e:fb:1a:3d:80:e4:ad:80:94:5e:1d:d1:7e:a0:ee:e0:37:
         fe:7a:62:43:98:fc:be:e8:0d:ac:af:2f:bf:ce:e2:82:a5:27:
         2d:d4:84:18
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQzg7RNFE+n7s5NMVkFJbxSZAciUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY3QTM5NUM2MTdERjI0OUJCREVBMkIyNDM1NTVFN0Qw
NDYzQzMzNjAeFw0yNTA0MjIxMzIwMDJaFw0yNjA0MjExMzI1MDJaMDMxMTAvBgNV
BAMTKDYyNkEyNTc3QTY0ODRDQkFEMTE4RTE3N0ZFRTJBMUZCMDk2QkRERTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/TudY30KIFccOQYMOdiX5I5UQ
f2K1PAAeyILdfrax/D1JjnInyyazcHDidH59iDnIcvGsVKd8QckcgyexNxhyiKPz
u1CfdAZnTapluOOjMUUd/PSaF1Iv98hIcqgExPV7jMP98BI5KjZuG8cUdorNYl17
dk7tna/3iSOyLq/y/sILhgCI3Q6TtUHK+OyuTrxAJxtZlpysvoLCTSjOPgywjYKr
Yx/xKC+6sc7HUY6oxI1ua6A1mGbTBrBM8tKJ/0m2Rtj08TIoNokm36nmbTQbaLNC
IN0cKznmwbth6CKb/vFGXJql1OzNGa4LWK2Oaxcq/0GT7vUQN0gHZl/rxKKZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUYmold6ZITLrRGOF3/uKh+wlr3eEwHwYDVR0j
BBgwFoAUNno5XGF98km73qKyQ1VefQRjwzYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1h4MXd3Z0g4UTdVMjVNbUV6ZkJ1V25ZSjZxZDNBV0xqbmFyeHJxZE5E
cWkvMC8zNjdBMzk1QzYxN0RGMjQ5QkJERUEyQjI0MzU1NUU3RDA0NjNDMzM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2N0EzOTVDNjE3REYyNDlC
QkRFQTJCMjQzNTU1RTdEMDQ2M0MzMzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dYeDF3d2dIOFE3VTI1TW1FemZCdVduWUo2cWQzQVdMam5hcnhycWRORHFpLzAv
MzIzODMwMzQzYTM4NjU2NTM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMz
MzQzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASO5DANBgkqhkiG9w0BAQsFAAOCAQEAUt6wTrLc
i5b9SLHKdf1ZPhKIJWYwye/5uL229nEL8n+xsTNAyc5LwLK8r5lO+2Pn/1ARR93X
2qsJwFTAl0+Z3RmN9jWgnNpD47SyLNzZz+JeIKO/oSmEOxzGgNFEx8UKtw4Uqiz4
xKGpIC/14xg42dIB/7jswA1JT4P+Dt5ydYv0yyHeawdJt05eR3+Z3pcEs95uggd3
QhtLQdHtpIuj0pehmlFU2P47X59X1vzINhqaMzlWYyXh7D1wQP924EigU9O4IjYi
BkTwKW9jiVlz98EC37fDYQuA3y77Gj2A5K2AlF4d0X6g7uA3/npiQ5j8vugNrK8v
v87igqUnLdSEGA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:38:03 2025 by rpki-client on console.sobornost.net