Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/323830343a333631633a3a2f33322d3438203d3e20323636333237.roa
File:                     323830343a333631633a3a2f33322d3438203d3e20323636333237.roa (raw, json)
Hash identifier:          FFzjkGjnuEy9RISGVzHB8+Sa1jqEFhBS/xZKb7qX2eY=
Subject key identifier:   5F:FA:96:8A:82:97:66:D3:0D:56:78:A1:A3:1D:E7:9F:BB:14:EC:89
Certificate issuer:       /CN=3F61C570043017F966E8F8384C4FD1BC3F5288AD
Certificate serial:       5715E77461C04693CA9654F927F523C006FF5348
Authority key identifier: 3F:61:C5:70:04:30:17:F9:66:E8:F8:38:4C:4F:D1:BC:3F:52:88:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F61C570043017F966E8F8384C4FD1BC3F5288AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/323830343a333631633a3a2f33322d3438203d3e20323636333237.roa
Signing time:             Tue 15 Apr 2025 13:25:04 +0000
ROA not before:           Tue 15 Apr 2025 13:20:04 +0000
ROA not after:            Tue 14 Apr 2026 13:25:04 +0000
asID:                     266327
IP address blocks:        2804:361c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3F61C570043017F966E8F8384C4FD1BC3F5288AD.crl
                          rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3F61C570043017F966E8F8384C4FD1BC3F5288AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F61C570043017F966E8F8384C4FD1BC3F5288AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 03:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:15:e7:74:61:c0:46:93:ca:96:54:f9:27:f5:23:c0:06:ff:53:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F61C570043017F966E8F8384C4FD1BC3F5288AD
        Validity
            Not Before: Apr 15 13:20:04 2025 GMT
            Not After : Apr 14 13:25:04 2026 GMT
        Subject: CN=5FFA968A829766D30D5678A1A31DE79FBB14EC89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:6e:bc:2d:00:88:79:b7:84:9d:4a:5c:ef:
                    dc:3a:32:1e:29:96:73:b6:30:36:1f:70:5e:28:ec:
                    73:02:d2:66:50:af:ae:21:f4:42:0b:de:22:d6:22:
                    bf:df:1c:f9:84:39:e4:f4:86:59:83:21:2b:04:e6:
                    fe:7e:bb:97:17:1a:b3:49:60:a7:2a:4b:50:9a:71:
                    0d:e8:cf:9a:d8:fc:90:73:a9:5a:1c:91:1f:ca:f9:
                    c5:7f:e7:89:01:12:49:e0:87:f3:67:2f:4a:e4:bc:
                    09:73:57:9b:2e:f1:f0:b6:df:55:da:bb:d6:18:85:
                    6a:74:b4:73:66:f9:a7:8e:12:a0:9c:c3:bc:36:61:
                    92:1b:bd:87:0d:a3:c4:a3:36:3d:7d:bb:9b:82:57:
                    26:fd:4f:95:4f:5e:f3:a1:ff:7c:9b:08:66:2b:cf:
                    56:58:38:36:d6:df:f9:3f:1a:73:b5:92:90:fb:2a:
                    04:d7:7a:9b:ed:1f:00:77:57:65:e7:39:90:02:a4:
                    34:4e:13:80:28:b0:65:0b:fc:c0:49:3d:9f:1e:96:
                    47:a4:93:01:7e:6c:64:d8:4e:cf:83:4b:dc:d6:d3:
                    a6:f6:fe:6c:c9:7b:13:d0:a2:32:7c:2c:e8:e1:d2:
                    9b:20:da:8f:79:74:42:2e:82:29:b0:6b:ee:1d:ec:
                    65:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FA:96:8A:82:97:66:D3:0D:56:78:A1:A3:1D:E7:9F:BB:14:EC:89
            X509v3 Authority Key Identifier:
                keyid:3F:61:C5:70:04:30:17:F9:66:E8:F8:38:4C:4F:D1:BC:3F:52:88:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/3F61C570043017F966E8F8384C4FD1BC3F5288AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F61C570043017F966E8F8384C4FD1BC3F5288AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/323830343a333631633a3a2f33322d3438203d3e20323636333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:361c::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:07:5b:31:6e:69:5f:3f:3a:0e:47:ea:d0:d3:3c:1a:e3:94:
         af:a9:78:be:79:bd:39:53:be:75:20:73:7d:dc:74:71:3b:5b:
         40:98:42:21:00:35:47:98:19:27:40:83:82:96:0e:16:ae:c6:
         3c:0c:b7:2f:2b:34:42:ee:ea:2c:b2:af:b6:66:48:a0:d6:2e:
         d0:a6:e9:a7:25:5f:99:52:c3:b9:82:08:43:75:1e:ee:41:56:
         bc:d7:cc:17:25:f5:c7:23:b8:8d:02:46:cb:68:58:18:5a:00:
         f0:e4:0a:ad:18:44:e1:5a:55:22:d8:55:ef:da:be:f1:ee:77:
         de:ae:45:10:06:35:9b:da:ec:6a:d8:2d:c1:fa:d7:93:18:9c:
         ca:47:39:1d:44:21:a4:ce:b2:18:cd:37:6a:f4:54:4a:37:c0:
         e4:e8:f8:b1:e0:9b:a4:35:2c:82:75:8d:af:db:69:84:46:28:
         2e:ed:39:f1:96:db:e2:ef:78:d4:07:ac:82:55:c9:d0:cc:c5:
         8e:4b:fb:da:63:f0:15:a6:61:07:c4:ee:3d:da:bb:2d:6f:1d:
         6e:d8:84:e4:14:8b:cf:05:69:4a:13:32:bf:7a:43:51:2b:58:
         3d:60:83:4f:02:5f:b6:4f:84:26:08:e0:b8:c4:17:37:9a:14:
         58:cb:55:97
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVxXndGHARpPKllT5J/UjwAb/U0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y2MUM1NzAwNDMwMTdGOTY2RThGODM4NEM0RkQxQkMz
RjUyODhBRDAeFw0yNTA0MTUxMzIwMDRaFw0yNjA0MTQxMzI1MDRaMDMxMTAvBgNV
BAMTKDVGRkE5NjhBODI5NzY2RDMwRDU2NzhBMUEzMURFNzlGQkIxNEVDODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrrW68LQCIebeEnUpc79w6Mh4p
lnO2MDYfcF4o7HMC0mZQr64h9EIL3iLWIr/fHPmEOeT0hlmDISsE5v5+u5cXGrNJ
YKcqS1CacQ3oz5rY/JBzqVockR/K+cV/54kBEkngh/NnL0rkvAlzV5su8fC231Xa
u9YYhWp0tHNm+aeOEqCcw7w2YZIbvYcNo8SjNj19u5uCVyb9T5VPXvOh/3ybCGYr
z1ZYODbW3/k/GnO1kpD7KgTXepvtHwB3V2XnOZACpDROE4AosGUL/MBJPZ8elkek
kwF+bGTYTs+DS9zW06b2/mzJexPQojJ8LOjh0psg2o95dEIugimwa+4d7GWVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUX/qWioKXZtMNVnihox3nn7sU7IkwHwYDVR0j
BBgwFoAUP2HFcAQwF/lm6Pg4TE/RvD9SiK0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR214ZUNINE1XQVRxeFZ3OW15QTFwUW9ZTnNNdUNCZnhqcm03NDNDVkJY
MUcvMC8zRjYxQzU3MDA0MzAxN0Y5NjZFOEY4Mzg0QzRGRDFCQzNGNTI4OEFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGNjFDNTcwMDQzMDE3Rjk2
NkU4RjgzODRDNEZEMUJDM0Y1Mjg4QUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dteGVDSDRNV0FUcXhWdzlteUExcFFvWU5zTXVDQmZ4anJtNzQzQ1ZCWDFHLzAv
MzIzODMwMzQzYTMzMzYzMTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzMzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ2HDANBgkqhkiG9w0BAQsFAAOCAQEABgdbMW5p
Xz86Dkfq0NM8GuOUr6l4vnm9OVO+dSBzfdx0cTtbQJhCIQA1R5gZJ0CDgpYOFq7G
PAy3Lys0Qu7qLLKvtmZIoNYu0KbppyVfmVLDuYIIQ3Ue7kFWvNfMFyX1xyO4jQJG
y2hYGFoA8OQKrRhE4VpVIthV79q+8e533q5FEAY1m9rsatgtwfrXkxicykc5HUQh
pM6yGM03avRUSjfA5Oj4seCbpDUsgnWNr9tphEYoLu058Zbb4u941AesglXJ0MzF
jkv72mPwFaZhB8TuPdq7LW8dbtiE5BSLzwVpShMyv3pDUStYPWCDTwJftk+EJgjg
uMQXN5oUWMtVlw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:29 2025 by rpki-client on console.sobornost.net