Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a3a2f33322d3438203d3e203532393635.roa
File:                     323830343a3362383a3a2f33322d3438203d3e203532393635.roa (raw, json)
Hash identifier:          3oR2L4pXAEHTFqvRgOOyoIqZYL0WKEJ+PmxxpkzVeeI=
Subject key identifier:   3D:DE:D9:35:10:BD:5A:5F:EA:96:3B:75:D9:6B:D7:A0:8D:48:88:ED
Certificate issuer:       /CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
Certificate serial:       4A5AD3B41F620FAF40651B5A2856316B6E127308
Authority key identifier: 31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a3a2f33322d3438203d3e203532393635.roa
Signing time:             Thu 24 Apr 2025 12:35:07 +0000
ROA not before:           Thu 24 Apr 2025 12:30:07 +0000
ROA not after:            Thu 23 Apr 2026 12:35:07 +0000
asID:                     52965
IP address blocks:        2804:3b8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl
                          rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5a:d3:b4:1f:62:0f:af:40:65:1b:5a:28:56:31:6b:6e:12:73:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
        Validity
            Not Before: Apr 24 12:30:07 2025 GMT
            Not After : Apr 23 12:35:07 2026 GMT
        Subject: CN=3DDED93510BD5A5FEA963B75D96BD7A08D4888ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:17:49:f0:83:19:61:6f:ec:f9:da:10:6f:
                    6c:41:32:08:22:d3:cb:d3:31:fa:82:81:4c:d8:de:
                    98:cd:e3:48:55:97:98:40:ac:9a:61:b7:89:7e:6b:
                    e6:b6:df:cb:b6:b2:0f:8b:34:7a:f7:d8:bc:5f:92:
                    83:51:56:3d:d9:5e:e7:0e:bb:43:12:b0:fb:fb:e7:
                    3f:46:00:fe:7c:9c:00:1d:0a:7d:e9:f8:aa:c4:b7:
                    02:aa:78:bd:99:1f:ae:dc:28:de:20:3b:dc:03:8d:
                    04:a3:03:6f:6e:99:bb:b4:35:ca:e4:b1:b2:a7:fe:
                    59:d0:f2:7c:5a:0a:21:c0:c1:37:7f:ee:53:35:26:
                    2e:b4:cf:51:c6:a9:f3:bd:7c:96:85:a3:96:ae:c4:
                    1a:f1:a6:f7:e6:1e:4a:3d:a9:fc:ca:3b:c0:6c:5f:
                    0f:12:86:0f:45:42:88:3e:85:bf:1d:98:a0:0a:a8:
                    06:8d:33:ce:52:c7:e9:9f:66:2f:a2:60:5a:88:c7:
                    29:76:d0:dd:38:af:fb:78:68:2b:32:10:45:e1:f0:
                    3b:8c:b3:5c:95:8a:61:13:fc:e8:4d:f6:76:e5:af:
                    60:c2:79:0f:2a:59:c4:8f:58:f6:34:c3:fe:87:fd:
                    ad:f3:4e:7a:be:e2:fe:4e:0d:04:d2:ff:7b:99:c4:
                    0b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DE:D9:35:10:BD:5A:5F:EA:96:3B:75:D9:6B:D7:A0:8D:48:88:ED
            X509v3 Authority Key Identifier:
                keyid:31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a3a2f33322d3438203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:06:69:da:12:0f:44:53:e3:4b:4e:cd:c2:20:71:e7:4e:ab:
         77:c9:c0:d7:c4:bb:59:fb:30:11:09:7f:19:f1:92:bd:2e:fe:
         63:e1:c6:31:bc:c9:02:c1:ab:8c:9c:75:71:33:8f:fd:6c:f8:
         f2:36:8f:fa:1d:17:a0:23:5b:6e:ac:47:3d:e5:b7:8e:bf:ae:
         d8:31:61:64:f6:e9:ad:3b:8f:4f:14:95:12:68:4a:9a:59:8a:
         2e:82:51:85:8a:55:81:15:ac:67:33:a6:5e:45:aa:3a:b7:76:
         f7:bc:09:70:96:33:65:80:5a:90:d6:78:ed:61:e3:ec:ee:90:
         35:cb:e6:73:9d:0f:8b:20:33:04:05:11:7e:b0:01:fd:af:d5:
         d0:1d:2e:dd:80:09:72:b7:f9:24:46:a9:8f:f0:25:bf:b0:e2:
         97:74:7e:bf:a6:95:df:64:02:2e:7f:6e:d0:98:e7:15:e9:5d:
         cc:58:a1:99:46:aa:58:4e:55:3f:64:4f:0b:7c:cb:2d:40:8f:
         66:b7:e7:ea:3b:4d:2f:7b:e5:a7:1c:d6:a2:71:f2:9e:21:e8:
         85:38:f2:ca:e3:1b:16:d8:45:99:61:53:d9:1c:6a:29:7f:6a:
         c7:da:40:f2:0d:27:14:29:c2:4f:b6:65:a3:fd:ad:35:8b:d9:
         a2:dc:9c:b8
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUSlrTtB9iD69AZRtaKFYxa24ScwgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE2RjI5ODVEOTNEMzFEQ0ZFMkZFQTNCRkZBRDgxRTVC
NjA2RjZCMTAeFw0yNTA0MjQxMjMwMDdaFw0yNjA0MjMxMjM1MDdaMDMxMTAvBgNV
BAMTKDNEREVEOTM1MTBCRDVBNUZFQTk2M0I3NUQ5NkJEN0EwOEQ0ODg4RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8lRdJ8IMZYW/s+doQb2xBMggi
08vTMfqCgUzY3pjN40hVl5hArJpht4l+a+a238u2sg+LNHr32LxfkoNRVj3ZXucO
u0MSsPv75z9GAP58nAAdCn3p+KrEtwKqeL2ZH67cKN4gO9wDjQSjA29umbu0Ncrk
sbKn/lnQ8nxaCiHAwTd/7lM1Ji60z1HGqfO9fJaFo5auxBrxpvfmHko9qfzKO8Bs
Xw8Shg9FQog+hb8dmKAKqAaNM85Sx+mfZi+iYFqIxyl20N04r/t4aCsyEEXh8DuM
s1yVimET/OhN9nblr2DCeQ8qWcSPWPY0w/6H/a3zTnq+4v5ODQTS/3uZxAsjAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUPd7ZNRC9Wl/qljt12WvXoI1IiO0wHwYDVR0j
BBgwFoAUMW8phdk9Mdz+L+o7/62B5bYG9rEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR24yOHN4bVB0Z0VmcXBhSjZFdHdENHE0S3dZTWRXaDQxemIxdVpFOWFC
Q1gvMC8zMTZGMjk4NUQ5M0QzMURDRkUyRkVBM0JGRkFEODFFNUI2MDZGNkIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNkYyOTg1RDkzRDMxRENG
RTJGRUEzQkZGQUQ4MUU1QjYwNkY2QjEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duMjhzeG1QdGdFZnFwYUo2RXR3RDRxNEt3WU1kV2g0MXpiMXVaRTlhQkNYLzAv
MzIzODMwMzQzYTMzNjIzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzOTM2
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAO4MA0GCSqGSIb3DQEBCwUAA4IBAQBRBmnaEg9EU+NL
Ts3CIHHnTqt3ycDXxLtZ+zARCX8Z8ZK9Lv5j4cYxvMkCwauMnHVxM4/9bPjyNo/6
HRegI1turEc95beOv67YMWFk9umtO49PFJUSaEqaWYouglGFilWBFaxnM6ZeRao6
t3b3vAlwljNlgFqQ1njtYePs7pA1y+ZznQ+LIDMEBRF+sAH9r9XQHS7dgAlyt/kk
RqmP8CW/sOKXdH6/ppXfZAIuf27QmOcV6V3MWKGZRqpYTlU/ZE8LfMstQI9mt+fq
O00ve+WnHNaicfKeIeiFOPLK4xsW2EWZYVPZHGopf2rH2kDyDScUKcJPtmWj/a01
i9mi3Jy4
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:42 2025 by rpki-client on console.sobornost.net