Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a3a2f33332d3333203d3e20323638303335.roa
File:                     323830343a353666383a3a2f33332d3333203d3e20323638303335.roa (raw, json)
Hash identifier:          CLMiWrvC4ywFQKTw2l98+4/FkxjfulPZUiv2fiKXAn0=
Subject key identifier:   24:7D:07:2C:63:CF:47:81:90:7B:EC:09:13:69:7E:15:89:8D:8E:93
Certificate issuer:       /CN=746F62E0AEFCCD80381655BD82E017B375D2EC7E
Certificate serial:       50763955A5AE4933125347644016E179E854C375
Authority key identifier: 74:6F:62:E0:AE:FC:CD:80:38:16:55:BD:82:E0:17:B3:75:D2:EC:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a3a2f33332d3333203d3e20323638303335.roa
Signing time:             Fri 25 Apr 2025 18:35:03 +0000
ROA not before:           Fri 25 Apr 2025 18:30:03 +0000
ROA not after:            Fri 24 Apr 2026 18:35:03 +0000
asID:                     268035
IP address blocks:        2804:56f8::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.crl
                          rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:76:39:55:a5:ae:49:33:12:53:47:64:40:16:e1:79:e8:54:c3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746F62E0AEFCCD80381655BD82E017B375D2EC7E
        Validity
            Not Before: Apr 25 18:30:03 2025 GMT
            Not After : Apr 24 18:35:03 2026 GMT
        Subject: CN=247D072C63CF4781907BEC0913697E15898D8E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e3:78:c9:09:b5:7c:81:b5:07:5c:46:0d:5f:
                    2a:01:73:dc:83:a6:67:58:fd:2b:1d:58:71:e4:ae:
                    30:a9:d4:e6:88:63:06:18:e2:28:f9:7c:ed:aa:88:
                    27:d5:b3:c0:09:d6:d1:a1:6d:03:a1:ac:4f:09:e6:
                    3b:a1:0a:4f:37:11:f7:ec:8d:0e:3d:64:e3:b3:72:
                    94:c5:e7:99:1c:5f:03:54:71:c7:88:8d:8b:3a:2d:
                    29:bd:ae:d8:5c:6d:3d:cb:7d:5d:4b:73:9d:61:48:
                    29:bd:e7:b0:8d:24:d9:0d:ce:80:bd:2b:df:ed:61:
                    cf:18:ea:4f:72:03:da:63:b9:9e:9d:50:a6:a9:87:
                    76:b4:0a:27:70:e4:9c:8f:3c:36:fa:38:3a:be:4b:
                    79:1d:fb:ec:5f:63:97:84:56:59:09:79:a7:8c:bb:
                    57:4d:46:aa:27:ca:b3:7b:53:1c:69:f6:c3:11:4d:
                    9c:ae:1b:88:50:84:b0:0e:2b:ce:19:d0:9a:c4:7d:
                    02:33:e7:50:de:7f:07:76:af:5d:74:8d:a5:a4:80:
                    d3:17:df:0c:91:b4:0d:a9:76:a1:ff:73:95:82:71:
                    db:5d:79:8c:0b:f1:7e:99:7e:c8:87:05:2b:19:5b:
                    23:f0:e0:af:78:ad:df:17:d4:3f:85:e2:f9:4c:1e:
                    9b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7D:07:2C:63:CF:47:81:90:7B:EC:09:13:69:7E:15:89:8D:8E:93
            X509v3 Authority Key Identifier:
                keyid:74:6F:62:E0:AE:FC:CD:80:38:16:55:BD:82:E0:17:B3:75:D2:EC:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/746F62E0AEFCCD80381655BD82E017B375D2EC7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746F62E0AEFCCD80381655BD82E017B375D2EC7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a3a2f33332d3333203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f8::/33

    Signature Algorithm: sha256WithRSAEncryption
         11:c9:c4:cc:a9:ac:f1:30:14:cd:52:31:4c:5e:57:83:67:2c:
         0f:da:f8:62:70:79:36:5b:f1:82:8f:3e:4d:b3:92:df:ba:25:
         ec:d9:6e:1c:82:1b:26:ba:82:5c:6a:12:c5:5a:5b:8b:7d:97:
         14:13:0f:33:84:18:3a:7e:99:1e:77:20:a4:77:66:d5:e7:79:
         f4:f4:cd:a6:97:75:83:46:4e:c9:ed:74:37:41:ee:e3:1c:5b:
         10:67:d4:34:40:db:ea:42:01:a6:92:b0:1a:fa:d7:85:b5:37:
         0a:e4:09:cc:42:8a:8f:bc:d4:04:87:c6:5b:98:57:2d:12:68:
         93:c1:fb:e5:e6:86:a4:87:38:4a:13:57:28:04:22:57:16:bc:
         d1:fe:f5:c4:3d:49:61:a2:3f:e7:42:72:38:de:d0:7b:ad:0d:
         cd:51:17:42:a6:1c:0d:43:4c:65:e8:95:f8:43:d1:08:88:54:
         15:2f:a5:e8:2d:d9:17:4b:8f:1f:84:17:cc:c2:2f:a7:45:34:
         99:c6:1f:7d:36:36:ad:a9:34:ef:51:c8:d8:1f:b1:44:33:97:
         ca:ef:a3:e2:aa:f7:6f:3e:9f:21:20:4a:23:89:bc:ee:e4:05:
         03:6e:64:04:74:89:7e:b1:6e:62:01:8d:c9:f0:5f:93:97:f2:
         dc:a1:e5:a8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUHY5VaWuSTMSU0dkQBbheehUw3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ2RjYyRTBBRUZDQ0Q4MDM4MTY1NUJEODJFMDE3QjM3
NUQyRUM3RTAeFw0yNTA0MjUxODMwMDNaFw0yNjA0MjQxODM1MDNaMDMxMTAvBgNV
BAMTKDI0N0QwNzJDNjNDRjQ3ODE5MDdCRUMwOTEzNjk3RTE1ODk4RDhFOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe43jJCbV8gbUHXEYNXyoBc9yD
pmdY/SsdWHHkrjCp1OaIYwYY4ij5fO2qiCfVs8AJ1tGhbQOhrE8J5juhCk83Effs
jQ49ZOOzcpTF55kcXwNUcceIjYs6LSm9rthcbT3LfV1Lc51hSCm957CNJNkNzoC9
K9/tYc8Y6k9yA9pjuZ6dUKaph3a0Cidw5JyPPDb6ODq+S3kd++xfY5eEVlkJeaeM
u1dNRqonyrN7Uxxp9sMRTZyuG4hQhLAOK84Z0JrEfQIz51Defwd2r110jaWkgNMX
3wyRtA2pdqH/c5WCcdtdeYwL8X6ZfsiHBSsZWyPw4K94rd8X1D+F4vlMHpsnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJH0HLGPPR4GQe+wJE2l+FYmNjpMwHwYDVR0j
BBgwFoAUdG9i4K78zYA4FlW9guAXs3XS7H4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2VpM21pZHViaDh4cVN6amV5TmQ0TEwxcFpoUnRKMVRCb0p4YzVSVmNp
RjgvMC83NDZGNjJFMEFFRkNDRDgwMzgxNjU1QkQ4MkUwMTdCMzc1RDJFQzdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0NkY2MkUwQUVGQ0NEODAz
ODE2NTVCRDgyRTAxN0IzNzVEMkVDN0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dlaTNtaWR1Ymg4eHFTempleU5kNExMMXBaaFJ0SjFUQm9KeGM1UlZjaUY4LzAv
MzIzODMwMzQzYTM1MzY2NjM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzAzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARW+AAwDQYJKoZIhvcNAQELBQADggEBABHJxMyp
rPEwFM1SMUxeV4NnLA/a+GJweTZb8YKPPk2zkt+6JezZbhyCGya6glxqEsVaW4t9
lxQTDzOEGDp+mR53IKR3ZtXnefT0zaaXdYNGTsntdDdB7uMcWxBn1DRA2+pCAaaS
sBr614W1NwrkCcxCio+81ASHxluYVy0SaJPB++XmhqSHOEoTVygEIlcWvNH+9cQ9
SWGiP+dCcjje0HutDc1RF0KmHA1DTGXolfhD0QiIVBUvpegt2RdLjx+EF8zCL6dF
NJnGH302Nq2pNO9RyNgfsUQzl8rvo+Kq928+nyEgSiOJvO7kBQNuZAR0iX6xbmIB
jcnwX5OX8tyh5ag=
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:14 2025 by rpki-client on console.sobornost.net