Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a383030303a3a2f33342d3334203d3e20323638353333.roa
File:                     323830343a353261633a383030303a3a2f33342d3334203d3e20323638353333.roa (raw, json)
Hash identifier:          G9Gop5zvToflO/2gpfor+zrNq42K6WPewb3L6fpm6hc=
Subject key identifier:   25:65:8D:C4:15:6F:31:22:11:BD:FA:DA:D3:29:07:E1:56:2D:2B:66
Certificate issuer:       /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
Certificate serial:       1B38F7FE4B07A5440B16F2BD8893C5A387DBC07D
Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a383030303a3a2f33342d3334203d3e20323638353333.roa
Signing time:             Mon 14 Apr 2025 21:17:07 +0000
ROA not before:           Mon 14 Apr 2025 21:12:07 +0000
ROA not after:            Mon 13 Apr 2026 21:17:07 +0000
asID:                     268533
IP address blocks:        2804:52ac:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl
                          rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:38:f7:fe:4b:07:a5:44:0b:16:f2:bd:88:93:c5:a3:87:db:c0:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
        Validity
            Not Before: Apr 14 21:12:07 2025 GMT
            Not After : Apr 13 21:17:07 2026 GMT
        Subject: CN=25658DC4156F312211BDFADAD32907E1562D2B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:93:d9:27:d1:06:ac:a8:27:90:07:9c:33:
                    ea:c9:f8:c2:e4:79:f7:bf:4b:bd:14:3d:c5:42:a7:
                    37:23:86:ed:31:b7:20:a4:b2:df:ed:e5:2b:97:63:
                    2e:f5:2a:54:78:59:2d:9d:97:24:d0:51:71:5b:5e:
                    da:80:ef:d5:61:82:67:1a:38:69:86:39:ee:3d:27:
                    4b:f7:ac:e5:9c:97:a7:9e:a8:e3:8e:b8:77:23:04:
                    65:80:95:4d:b6:12:81:d0:94:e2:59:86:05:aa:21:
                    57:96:19:88:f7:0b:6f:08:79:7a:01:13:3a:0d:a1:
                    19:f2:85:23:a2:72:cb:f5:38:ef:03:39:6a:db:8a:
                    0e:92:b1:bf:b3:0d:a5:e8:40:ce:66:b0:be:3c:7d:
                    35:13:14:29:af:cf:b7:81:4d:fb:23:e7:d7:44:73:
                    43:b3:92:92:5d:c2:39:bc:53:dc:57:ed:c0:c7:4b:
                    24:c4:c4:33:ea:ab:8b:9c:a6:27:2b:f4:aa:c5:5e:
                    6a:4a:1b:a8:39:dd:13:c6:04:e6:07:e5:b5:78:e4:
                    16:e5:af:f3:f3:c2:92:96:1b:fb:0f:a8:b4:06:9e:
                    e1:ce:fe:1b:82:02:30:ed:01:73:61:12:dd:e2:69:
                    66:e6:cd:69:f3:30:ce:c2:70:4c:94:8f:33:20:2b:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:65:8D:C4:15:6F:31:22:11:BD:FA:DA:D3:29:07:E1:56:2D:2B:66
            X509v3 Authority Key Identifier:
                keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a383030303a3a2f33342d3334203d3e20323638353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52ac:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         43:eb:a3:4d:a4:ef:ec:72:7a:50:32:91:c1:3e:a7:f3:e9:d8:
         2d:a4:de:4c:62:93:29:4b:15:9c:60:7b:c7:d1:77:cf:8a:c3:
         90:b7:00:71:da:f3:74:7a:40:90:76:8b:98:2b:9c:1e:55:47:
         4e:5e:f4:83:21:d2:13:0e:67:d0:b2:bb:0c:7e:91:70:d6:3a:
         60:e8:93:06:e6:e6:72:c3:5e:82:e3:2f:58:ae:71:63:79:4b:
         6e:75:81:8a:ac:9d:f3:c9:f2:d2:bb:9f:9a:bb:f8:ff:f7:b6:
         bc:3f:ec:94:a3:e7:48:94:fb:74:c2:2d:62:44:27:a7:48:68:
         3b:14:87:4e:ce:4f:c5:97:20:c1:bf:24:93:67:16:c9:3e:7f:
         78:0b:e2:67:8d:a5:db:64:06:1c:85:b0:34:16:63:fb:84:75:
         79:8e:f9:af:dd:51:d3:2c:85:fc:fd:9c:0b:9b:50:1d:1d:0f:
         f7:ae:bf:57:0c:2b:86:f4:9b:58:6e:59:7e:11:49:a8:f4:38:
         86:ee:b5:9a:08:6a:9d:86:69:d0:88:57:3b:d9:5b:88:57:e5:
         e7:c4:11:e4:58:0c:f5:bc:4c:5b:ce:bb:4c:07:71:23:91:8c:
         43:ae:cb:5e:28:b2:12:b9:db:21:bd:cd:e4:45:b9:66:ca:a6:
         8b:08:0b:02
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGzj3/ksHpUQLFvK9iJPFo4fbwH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIxNThGMUY5ODNEOEYyMUNBRUI5M0M5MjhBQzZBQjUy
QjUxQ0IxQzAeFw0yNTA0MTQyMTEyMDdaFw0yNjA0MTMyMTE3MDdaMDMxMTAvBgNV
BAMTKDI1NjU4REM0MTU2RjMxMjIxMUJERkFEQUQzMjkwN0UxNTYyRDJCNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ypPZJ9EGrKgnkAecM+rJ+MLk
efe/S70UPcVCpzcjhu0xtyCkst/t5SuXYy71KlR4WS2dlyTQUXFbXtqA79Vhgmca
OGmGOe49J0v3rOWcl6eeqOOOuHcjBGWAlU22EoHQlOJZhgWqIVeWGYj3C28IeXoB
EzoNoRnyhSOicsv1OO8DOWrbig6Ssb+zDaXoQM5msL48fTUTFCmvz7eBTfsj59dE
c0OzkpJdwjm8U9xX7cDHSyTExDPqq4ucpicr9KrFXmpKG6g53RPGBOYH5bV45Bbl
r/PzwpKWG/sPqLQGnuHO/huCAjDtAXNhEt3iaWbmzWnzMM7CcEyUjzMgK/dzAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUJWWNxBVvMSIRvfra0ykH4VYtK2YwHwYDVR0j
BBgwFoAUuxWPH5g9jyHK65PJKKxqtStRyxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2RlaGU2OEsydWVSNGhXUTVVNWJwQ2daY1gyN3BSSlJKWVBGRG5BMmQ0
S1IvMS9CQjE1OEYxRjk4M0Q4RjIxQ0FFQjkzQzkyOEFDNkFCNTJCNTFDQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMTU4RjFGOTgzRDhGMjFD
QUVCOTNDOTI4QUM2QUI1MkI1MUNCMUMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dkZWhlNjhLMnVlUjRoV1E1VTVicENnWmNYMjdwUkpSSllQRkRuQTJkNEtSLzEv
MzIzODMwMzQzYTM1MzI2MTYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM1MzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEUqyAMA0GCSqGSIb3DQEBCwUA
A4IBAQBD66NNpO/scnpQMpHBPqfz6dgtpN5MYpMpSxWcYHvH0XfPisOQtwBx2vN0
ekCQdouYK5weVUdOXvSDIdITDmfQsrsMfpFw1jpg6JMG5uZyw16C4y9YrnFjeUtu
dYGKrJ3zyfLSu5+au/j/97a8P+yUo+dIlPt0wi1iRCenSGg7FIdOzk/FlyDBvyST
ZxbJPn94C+JnjaXbZAYchbA0FmP7hHV5jvmv3VHTLIX8/ZwLm1AdHQ/3rr9XDCuG
9JtYbll+EUmo9DiG7rWaCGqdhmnQiFc72VuIV+XnxBHkWAz1vExbzrtMB3EjkYxD
rsteKLISudshvc3kRblmyqaLCAsC
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:46 2025 by rpki-client on console.sobornost.net