Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/323830343a313235343a3a2f33322d3332203d3e20323633343730.roa
File:                     323830343a313235343a3a2f33322d3332203d3e20323633343730.roa (raw, json)
Hash identifier:          ELWb7rC3fgvn1sa3PxipINIruhW615Gy+69ajKYPWzI=
Subject key identifier:   C4:90:93:0C:F0:D2:6F:59:03:F8:72:79:2F:92:14:75:E6:CE:18:1E
Certificate issuer:       /CN=D95738A14AD98B305087E048FD2E4821E5E2299A
Certificate serial:       3B9902BB63F38143C409790A636B829F6CCB2840
Authority key identifier: D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/323830343a313235343a3a2f33322d3332203d3e20323633343730.roa
Signing time:             Thu 10 Apr 2025 13:02:15 +0000
ROA not before:           Thu 10 Apr 2025 12:57:15 +0000
ROA not after:            Thu 09 Apr 2026 13:02:15 +0000
asID:                     263470
IP address blocks:        2804:1254::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl
                          rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:99:02:bb:63:f3:81:43:c4:09:79:0a:63:6b:82:9f:6c:cb:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95738A14AD98B305087E048FD2E4821E5E2299A
        Validity
            Not Before: Apr 10 12:57:15 2025 GMT
            Not After : Apr  9 13:02:15 2026 GMT
        Subject: CN=C490930CF0D26F5903F872792F921475E6CE181E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c0:db:06:38:09:7c:f3:07:87:3e:94:ea:b5:
                    58:7d:2b:46:68:49:07:76:3e:2d:be:e2:90:eb:8e:
                    18:7c:8d:c4:ed:8a:7e:18:c7:be:f7:aa:bc:84:26:
                    a0:b4:56:36:ed:1d:37:26:5e:54:93:1b:29:0f:77:
                    a1:db:68:81:be:e7:cc:51:71:f8:72:dc:15:32:12:
                    6c:b8:a4:23:8b:07:da:e7:85:7b:04:3d:f9:d2:2a:
                    5c:e4:d3:08:bc:61:bd:96:bd:50:22:eb:48:4f:c6:
                    2e:1d:2f:7e:12:e3:04:b9:f2:46:d7:8f:5d:c8:12:
                    59:19:7c:94:cc:17:09:aa:14:9d:1a:5c:0e:24:12:
                    6f:47:1f:68:33:c7:fd:ab:94:53:d2:cd:9e:4a:2c:
                    f3:fe:0b:26:5b:24:a2:da:7c:48:d5:a5:ef:c6:e1:
                    ab:a9:38:39:70:db:3d:b1:98:29:68:4c:a9:90:39:
                    61:44:a7:ec:a8:6f:b0:a3:e9:9f:20:ae:d0:ef:84:
                    82:53:09:59:5a:14:8d:5e:75:a2:88:c9:12:2f:46:
                    49:c9:d3:79:62:a1:cc:d9:50:e0:26:72:8e:2a:55:
                    a5:3e:1a:12:8e:73:dc:31:3a:a0:50:c4:91:af:af:
                    07:20:b8:96:e2:77:4f:b6:2f:fc:2c:d4:fa:07:be:
                    41:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:90:93:0C:F0:D2:6F:59:03:F8:72:79:2F:92:14:75:E6:CE:18:1E
            X509v3 Authority Key Identifier:
                keyid:D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/323830343a313235343a3a2f33322d3332203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1254::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:63:fc:0e:81:b2:0f:4e:6c:b1:05:4f:04:fd:e9:ff:29:8e:
         39:a6:b2:66:01:7a:4a:0f:2e:3f:ec:ff:2d:b7:9d:d0:7e:22:
         1f:a0:fb:51:49:be:ec:4a:7a:5d:a9:db:67:d7:8f:80:67:65:
         20:25:02:2e:b4:3a:10:21:51:ae:bd:4d:57:69:e4:f8:c2:97:
         17:7d:81:8f:e2:b0:39:f4:ab:71:9c:83:59:ca:7b:e4:72:4d:
         f1:17:8f:f7:59:9e:b5:98:3d:91:a8:42:cc:74:e1:f4:28:69:
         1b:f4:f8:5f:83:fc:77:f9:5b:4a:e3:49:56:33:18:01:49:13:
         0d:83:fc:a9:84:5b:d3:96:d9:da:1c:6a:6f:66:b1:8f:c5:aa:
         74:2d:2f:86:47:7a:16:8f:b6:98:91:6b:f2:45:2f:82:f3:0a:
         12:7b:07:18:f6:46:c1:48:1c:56:f5:77:bc:54:ed:e8:68:76:
         97:a0:1c:72:84:f3:e5:5a:3f:0c:6b:2f:93:7a:b2:11:36:4f:
         2a:20:22:c9:89:29:51:58:48:9e:8f:9e:e4:55:ab:ad:df:c7:
         2e:8e:f3:00:26:9c:de:6e:16:18:da:92:8a:af:16:5e:df:5e:
         97:d6:85:55:bc:b2:40:f4:b9:a6:27:2f:47:62:dd:ea:7d:af:
         0c:ab:2f:76
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUO5kCu2PzgUPECXkKY2uCn2zLKEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk1NzM4QTE0QUQ5OEIzMDUwODdFMDQ4RkQyRTQ4MjFF
NUUyMjk5QTAeFw0yNTA0MTAxMjU3MTVaFw0yNjA0MDkxMzAyMTVaMDMxMTAvBgNV
BAMTKEM0OTA5MzBDRjBEMjZGNTkwM0Y4NzI3OTJGOTIxNDc1RTZDRTE4MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUwNsGOAl88weHPpTqtVh9K0Zo
SQd2Pi2+4pDrjhh8jcTtin4Yx773qryEJqC0VjbtHTcmXlSTGykPd6HbaIG+58xR
cfhy3BUyEmy4pCOLB9rnhXsEPfnSKlzk0wi8Yb2WvVAi60hPxi4dL34S4wS58kbX
j13IElkZfJTMFwmqFJ0aXA4kEm9HH2gzx/2rlFPSzZ5KLPP+CyZbJKLafEjVpe/G
4aupODlw2z2xmCloTKmQOWFEp+yob7Cj6Z8grtDvhIJTCVlaFI1edaKIyRIvRknJ
03lioczZUOAmco4qVaU+GhKOc9wxOqBQxJGvrwcguJbid0+2L/ws1PoHvkEJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUxJCTDPDSb1kD+HJ5L5IUdebOGB4wHwYDVR0j
BBgwFoAU2Vc4oUrZizBQh+BI/S5IIeXiKZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2
UFkvMC9EOTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NTczOEExNEFEOThCMzA1
MDg3RTA0OEZEMkU0ODIxRTVFMjI5OUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d4UzFIa2JNVUo3NEhxYWZzamJLbjNXclJMcm5VbU1iMmFQZkRRMUd4NlBZLzAv
MzIzODMwMzQzYTMxMzIzNTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzQzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQSVDANBgkqhkiG9w0BAQsFAAOCAQEAp2P8DoGy
D05ssQVPBP3p/ymOOaayZgF6Sg8uP+z/Lbed0H4iH6D7UUm+7Ep6XanbZ9ePgGdl
ICUCLrQ6ECFRrr1NV2nk+MKXF32Bj+KwOfSrcZyDWcp75HJN8ReP91metZg9kahC
zHTh9ChpG/T4X4P8d/lbSuNJVjMYAUkTDYP8qYRb05bZ2hxqb2axj8WqdC0vhkd6
Fo+2mJFr8kUvgvMKEnsHGPZGwUgcVvV3vFTt6Gh2l6AccoTz5Vo/DGsvk3qyETZP
KiAiyYkpUVhIno+e5FWrrd/HLo7zACac3m4WGNqSiq8WXt9el9aFVbyyQPS5picv
R2Ld6n2vDKsvdg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:30 2025 by rpki-client on console.sobornost.net