Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/323830343a333239343a3a2f33322d3332203d3e20323635303836.roa
File:                     323830343a333239343a3a2f33322d3332203d3e20323635303836.roa (raw, json)
Hash identifier:          Wbv6BMQaaDnd9V9kwCrkdjbecibemaOz49vSrhnWqYU=
Subject key identifier:   C8:D5:D1:CA:C2:5E:0D:DB:77:4F:1B:2B:C8:E4:33:CE:45:E2:41:0E
Certificate issuer:       /CN=C6D22E709DBC61B10238749E2FE09B4DD11E18C6
Certificate serial:       0B514F6B0F8F4379D3C405EC1BF752C989293777
Authority key identifier: C6:D2:2E:70:9D:BC:61:B1:02:38:74:9E:2F:E0:9B:4D:D1:1E:18:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/323830343a333239343a3a2f33322d3332203d3e20323635303836.roa
Signing time:             Tue 11 Mar 2025 18:18:25 +0000
ROA not before:           Tue 11 Mar 2025 18:13:25 +0000
ROA not after:            Tue 10 Mar 2026 18:18:25 +0000
asID:                     265086
IP address blocks:        2804:3294::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.crl
                          rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 03:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:51:4f:6b:0f:8f:43:79:d3:c4:05:ec:1b:f7:52:c9:89:29:37:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6D22E709DBC61B10238749E2FE09B4DD11E18C6
        Validity
            Not Before: Mar 11 18:13:25 2025 GMT
            Not After : Mar 10 18:18:25 2026 GMT
        Subject: CN=C8D5D1CAC25E0DDB774F1B2BC8E433CE45E2410E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e9:db:82:6a:f0:2c:e8:72:d2:37:84:21:45:
                    a8:e6:ce:37:77:fd:ab:5a:4c:ea:ae:c7:7d:93:2d:
                    db:06:e8:f3:67:04:69:26:f8:cf:fa:c9:35:88:c4:
                    2a:a2:1c:49:1f:96:7b:b9:8d:a6:80:bd:fd:eb:c4:
                    50:f8:05:89:b3:d4:9f:2a:b9:a5:4e:bc:8f:c5:f0:
                    05:1e:26:8b:e2:b3:44:a8:e2:74:dc:7f:05:67:26:
                    d2:65:c3:f1:e0:9f:5b:c1:a7:da:1c:66:22:76:18:
                    7e:36:e5:d1:25:d5:42:b5:95:9d:30:d7:66:ca:57:
                    90:f8:7f:87:af:00:a8:74:05:12:e1:fb:29:66:f5:
                    8c:84:c8:b2:3a:b5:cd:c1:fd:ab:1b:45:86:23:97:
                    0a:c6:a2:78:55:90:fc:d2:85:17:4a:9e:45:1b:17:
                    d2:6c:87:c0:2e:20:c1:3e:e2:83:70:9d:ef:86:54:
                    db:89:c8:71:33:f1:a7:b4:10:bf:6e:5d:a6:a5:bc:
                    a1:64:77:23:13:b1:ad:62:81:d1:2b:ca:44:f8:58:
                    42:e3:bb:3d:9e:c6:2b:10:02:a0:50:53:68:e9:21:
                    90:ca:86:94:28:ae:d8:b0:23:c0:96:0c:2b:d0:92:
                    ae:14:ef:62:ed:2f:fd:4c:9b:f7:a7:57:89:a2:f9:
                    31:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D5:D1:CA:C2:5E:0D:DB:77:4F:1B:2B:C8:E4:33:CE:45:E2:41:0E
            X509v3 Authority Key Identifier:
                keyid:C6:D2:2E:70:9D:BC:61:B1:02:38:74:9E:2F:E0:9B:4D:D1:1E:18:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6D22E709DBC61B10238749E2FE09B4DD11E18C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ggbpjjp3QhCxRB7cC2DPbBJqbPFMZRBRXqKgRWXjABD/0/323830343a333239343a3a2f33322d3332203d3e20323635303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3294::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:20:95:5f:33:d9:15:91:50:e7:d2:c7:18:54:aa:e1:4a:92:
         93:b3:3c:65:04:a5:45:55:d6:82:ba:0a:78:46:63:7a:da:df:
         f4:93:92:22:e1:65:ed:8b:84:f4:9e:de:7d:bb:92:e1:77:67:
         a8:60:11:56:31:5f:ec:e6:52:bd:80:6c:a3:cf:fb:d1:b2:9c:
         58:1f:86:cb:21:46:95:3e:1b:39:0c:ae:86:3b:df:c9:26:5e:
         b4:3d:cb:ed:3a:8c:1c:6a:14:f2:07:32:1a:a6:39:c0:01:fb:
         7c:e1:6c:b3:1a:41:0a:a8:8a:79:b4:ef:24:a5:f8:93:59:ef:
         88:35:5f:e0:3b:bc:71:9b:91:19:fd:ac:3f:5a:94:3e:f8:72:
         ba:41:ad:e0:da:46:fc:df:81:a5:ab:fc:11:43:0f:25:62:c3:
         e4:95:bc:cf:2a:99:80:50:1b:01:1d:da:91:ce:32:af:88:56:
         79:7c:0d:c5:12:5a:98:f3:be:42:b2:4b:56:ff:6d:3b:b1:80:
         af:00:36:a4:9a:b1:3a:2b:d1:ba:91:fe:2c:00:6c:4e:d1:73:
         95:ad:a4:dd:2d:21:35:c2:39:c5:31:90:af:4c:e4:56:40:0a:
         fe:a8:13:76:f4:77:f8:c6:06:18:b0:05:40:76:d8:43:5c:62:
         4a:b0:21:89
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUC1FPaw+PQ3nTxAXsG/dSyYkpN3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZEMjJFNzA5REJDNjFCMTAyMzg3NDlFMkZFMDlCNERE
MTFFMThDNjAeFw0yNTAzMTExODEzMjVaFw0yNjAzMTAxODE4MjVaMDMxMTAvBgNV
BAMTKEM4RDVEMUNBQzI1RTBEREI3NzRGMUIyQkM4RTQzM0NFNDVFMjQxMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6duCavAs6HLSN4QhRajmzjd3
/ataTOqux32TLdsG6PNnBGkm+M/6yTWIxCqiHEkflnu5jaaAvf3rxFD4BYmz1J8q
uaVOvI/F8AUeJovis0So4nTcfwVnJtJlw/Hgn1vBp9ocZiJ2GH425dEl1UK1lZ0w
12bKV5D4f4evAKh0BRLh+ylm9YyEyLI6tc3B/asbRYYjlwrGonhVkPzShRdKnkUb
F9Jsh8AuIME+4oNwne+GVNuJyHEz8ae0EL9uXaalvKFkdyMTsa1igdErykT4WELj
uz2exisQAqBQU2jpIZDKhpQortiwI8CWDCvQkq4U72LtL/1Mm/enV4mi+TGpAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUyNXRysJeDdt3TxsryOQzzkXiQQ4wHwYDVR0j
BBgwFoAUxtIucJ28YbECOHSeL+CbTdEeGMYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9HZ2JwampwM1FoQ3hSQjdjQzJEUGJCSnFiUEZNWlJCUlhxS2dSV1hqQUJE
LzAvQzZEMjJFNzA5REJDNjFCMTAyMzg3NDlFMkZFMDlCNEREMTFFMThDNi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DNkQyMkU3MDlEQkM2MUIxMDIz
ODc0OUUyRkUwOUI0REQxMUUxOEM2LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9H
Z2JwampwM1FoQ3hSQjdjQzJEUGJCSnFiUEZNWlJCUlhxS2dSV1hqQUJELzAvMzIz
ODMwMzQzYTMzMzIzOTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1MzAz
ODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQylDANBgkqhkiG9w0BAQsFAAOCAQEAICCVXzPZFZFQ
59LHGFSq4UqSk7M8ZQSlRVXWgroKeEZjetrf9JOSIuFl7YuE9J7efbuS4XdnqGAR
VjFf7OZSvYBso8/70bKcWB+GyyFGlT4bOQyuhjvfySZetD3L7TqMHGoU8gcyGqY5
wAH7fOFssxpBCqiKebTvJKX4k1nviDVf4Du8cZuRGf2sP1qUPvhyukGt4NpG/N+B
pav8EUMPJWLD5JW8zyqZgFAbAR3akc4yr4hWeXwNxRJamPO+QrJLVv9tO7GArwA2
pJqxOivRupH+LABsTtFzla2k3S0hNcI5xTGQr0zkVkAK/qgTdvR3+MYGGLAFQHbY
Q1xiSrAhiQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:25 2025 by rpki-client on console.sobornost.net