Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a3a2f33322d3332203d3e20323638303335.roa
File:                     323830343a353666383a3a2f33322d3332203d3e20323638303335.roa (raw, json)
Hash identifier:          3yqysgbOQvu0qwM3Wuxf3TsfnFvdYJM4regxERy2/Zw=
Subject key identifier:   E0:9C:39:24:59:86:85:56:8C:3F:14:5A:0F:3F:18:86:45:97:51:87
Certificate issuer:       /CN=746F62E0AEFCCD80381655BD82E017B375D2EC7E
Certificate serial:       13870598C6BA6D57C881AE748CF75B0F4CA4B750
Authority key identifier: 74:6F:62:E0:AE:FC:CD:80:38:16:55:BD:82:E0:17:B3:75:D2:EC:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a3a2f33322d3332203d3e20323638303335.roa
Signing time:             Fri 25 Apr 2025 18:35:03 +0000
ROA not before:           Fri 25 Apr 2025 18:30:03 +0000
ROA not after:            Fri 24 Apr 2026 18:35:03 +0000
asID:                     268035
IP address blocks:        2804:56f8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.crl
                          rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:87:05:98:c6:ba:6d:57:c8:81:ae:74:8c:f7:5b:0f:4c:a4:b7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746F62E0AEFCCD80381655BD82E017B375D2EC7E
        Validity
            Not Before: Apr 25 18:30:03 2025 GMT
            Not After : Apr 24 18:35:03 2026 GMT
        Subject: CN=E09C3924598685568C3F145A0F3F188645975187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2d:fb:0b:2d:36:a9:cb:4a:cd:55:33:c5:7b:
                    43:82:a2:4c:cc:3e:0c:4c:04:3c:1d:e2:5e:b2:0e:
                    f9:82:fa:08:20:ff:b2:fb:81:d0:a8:b9:20:2f:08:
                    76:f6:06:5b:8a:26:e6:1d:fa:49:f9:a6:d2:53:ee:
                    08:ab:f0:66:7a:da:25:ea:19:c2:81:2d:2f:52:c7:
                    3a:05:ea:98:db:d6:e7:a2:81:c3:3a:45:a1:e9:70:
                    71:b3:d4:71:ed:ec:76:5c:08:a1:65:5b:51:a3:73:
                    df:c7:0f:67:b9:94:62:1c:67:a9:a0:96:7b:1b:93:
                    e2:dc:5e:9c:88:ab:93:7d:7c:8c:74:9a:8a:fc:04:
                    c5:4a:e3:0e:89:9c:a6:e3:56:b2:9b:af:ac:dc:17:
                    a2:4d:fa:1f:de:f2:26:7e:e3:27:fc:e6:5a:7c:26:
                    15:4f:fb:b0:53:3a:2b:59:e8:b2:00:2f:4f:b7:04:
                    d6:44:10:8a:b5:13:7a:da:3a:24:51:93:f9:6d:26:
                    62:62:dd:8e:a4:62:c4:f3:bd:fd:da:30:a9:ce:15:
                    8b:ef:9b:5e:ae:2b:57:42:21:77:24:75:a4:6d:15:
                    23:b9:79:c7:5e:ab:ad:56:9a:d9:1c:69:39:e3:7d:
                    29:d2:07:64:c2:d4:54:f0:88:7c:59:09:b6:09:c2:
                    39:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9C:39:24:59:86:85:56:8C:3F:14:5A:0F:3F:18:86:45:97:51:87
            X509v3 Authority Key Identifier:
                keyid:74:6F:62:E0:AE:FC:CD:80:38:16:55:BD:82:E0:17:B3:75:D2:EC:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a3a2f33322d3332203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:ad:6c:fb:f9:2e:66:a6:a3:ab:4b:96:bf:34:13:53:7b:e5:
         d6:62:a8:43:c8:70:2a:de:19:6c:0c:92:74:3f:ea:f3:bf:3f:
         2e:0d:a2:44:66:65:58:23:23:ae:a0:fe:4a:c2:16:9f:36:19:
         5a:19:c4:f2:38:f3:c3:da:17:80:6a:b7:b1:ba:6b:65:e3:3a:
         2f:d4:9b:04:3e:51:17:90:71:c6:6c:19:72:e6:81:48:55:df:
         41:78:e4:02:7b:71:9d:e7:b1:1f:7b:10:84:8f:c7:a6:69:84:
         30:0e:02:7d:d3:d3:e9:58:1c:6c:93:ae:cb:fa:9c:28:c9:e2:
         e9:09:31:02:cf:88:b5:bf:17:6c:39:b7:90:e1:e1:c8:33:74:
         56:f1:35:04:52:e3:93:01:43:ac:ac:da:57:d3:16:5a:e1:92:
         ec:e7:ea:40:c4:38:64:83:13:2e:9b:c9:f5:1e:b9:d8:4b:a5:
         77:8c:d7:cb:c7:d8:35:9f:78:44:02:49:6c:60:0c:94:d1:8f:
         5a:9b:72:af:1d:2e:c8:0c:58:d5:ef:c5:73:f7:ca:69:18:f6:
         11:14:56:4a:4a:f6:d3:be:ce:22:f1:8b:4c:80:f1:6c:22:c3:
         20:e1:4b:d6:0a:d1:ce:cc:2e:ec:6f:3f:41:fe:d7:dd:d3:95:
         5f:97:95:22
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUE4cFmMa6bVfIga50jPdbD0ykt1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ2RjYyRTBBRUZDQ0Q4MDM4MTY1NUJEODJFMDE3QjM3
NUQyRUM3RTAeFw0yNTA0MjUxODMwMDNaFw0yNjA0MjQxODM1MDNaMDMxMTAvBgNV
BAMTKEUwOUMzOTI0NTk4Njg1NTY4QzNGMTQ1QTBGM0YxODg2NDU5NzUxODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLfsLLTapy0rNVTPFe0OCokzM
PgxMBDwd4l6yDvmC+ggg/7L7gdCouSAvCHb2BluKJuYd+kn5ptJT7gir8GZ62iXq
GcKBLS9SxzoF6pjb1ueigcM6RaHpcHGz1HHt7HZcCKFlW1Gjc9/HD2e5lGIcZ6mg
lnsbk+LcXpyIq5N9fIx0mor8BMVK4w6JnKbjVrKbr6zcF6JN+h/e8iZ+4yf85lp8
JhVP+7BTOitZ6LIAL0+3BNZEEIq1E3raOiRRk/ltJmJi3Y6kYsTzvf3aMKnOFYvv
m16uK1dCIXckdaRtFSO5ecdeq61WmtkcaTnjfSnSB2TC1FTwiHxZCbYJwjmhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU4Jw5JFmGhVaMPxRaDz8YhkWXUYcwHwYDVR0j
BBgwFoAUdG9i4K78zYA4FlW9guAXs3XS7H4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2VpM21pZHViaDh4cVN6amV5TmQ0TEwxcFpoUnRKMVRCb0p4YzVSVmNp
RjgvMC83NDZGNjJFMEFFRkNDRDgwMzgxNjU1QkQ4MkUwMTdCMzc1RDJFQzdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0NkY2MkUwQUVGQ0NEODAz
ODE2NTVCRDgyRTAxN0IzNzVEMkVDN0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dlaTNtaWR1Ymg4eHFTempleU5kNExMMXBaaFJ0SjFUQm9KeGM1UlZjaUY4LzAv
MzIzODMwMzQzYTM1MzY2NjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzAzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARW+DANBgkqhkiG9w0BAQsFAAOCAQEAE61s+/ku
Zqajq0uWvzQTU3vl1mKoQ8hwKt4ZbAySdD/q878/Lg2iRGZlWCMjrqD+SsIWnzYZ
WhnE8jjzw9oXgGq3sbprZeM6L9SbBD5RF5BxxmwZcuaBSFXfQXjkAntxneexH3sQ
hI/HpmmEMA4CfdPT6VgcbJOuy/qcKMni6QkxAs+Itb8XbDm3kOHhyDN0VvE1BFLj
kwFDrKzaV9MWWuGS7OfqQMQ4ZIMTLpvJ9R652Euld4zXy8fYNZ94RAJJbGAMlNGP
Wptyrx0uyAxY1e/Fc/fKaRj2ERRWSkr2077OIvGLTIDxbCLDIOFL1grRzswu7G8/
Qf7X3dOVX5eVIg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:14 2025 by rpki-client on console.sobornost.net