Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/323830343a326437303a3130303a3a2f34312d3431203d3e20323635323832.roa
File:                     323830343a326437303a3130303a3a2f34312d3431203d3e20323635323832.roa (raw, json)
Hash identifier:          x+6ZKdI3DLJqWvEWRZAbuqg3GJXYlwc8l3D3ugYEoIU=
Subject key identifier:   59:43:EF:DF:BF:3D:F4:F8:05:FB:B1:11:59:46:B8:EA:F9:17:C0:15
Certificate issuer:       /CN=E46E993C4F612FBD69E525931CC4402187BA41CF
Certificate serial:       6C3D2113EE566629F23701E3ED438D47ED93DC4D
Authority key identifier: E4:6E:99:3C:4F:61:2F:BD:69:E5:25:93:1C:C4:40:21:87:BA:41:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E46E993C4F612FBD69E525931CC4402187BA41CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/323830343a326437303a3130303a3a2f34312d3431203d3e20323635323832.roa
Signing time:             Tue 11 Jun 2024 17:34:00 +0000
ROA not before:           Tue 11 Jun 2024 17:29:00 +0000
ROA not after:            Tue 10 Jun 2025 17:34:00 +0000
asID:                     265282
IP address blocks:        2804:2d70:100::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/E46E993C4F612FBD69E525931CC4402187BA41CF.crl
                          rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/E46E993C4F612FBD69E525931CC4402187BA41CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E46E993C4F612FBD69E525931CC4402187BA41CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 05 Jul 2024 05:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3d:21:13:ee:56:66:29:f2:37:01:e3:ed:43:8d:47:ed:93:dc:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E46E993C4F612FBD69E525931CC4402187BA41CF
        Validity
            Not Before: Jun 11 17:29:00 2024 GMT
            Not After : Jun 10 17:34:00 2025 GMT
        Subject: CN=5943EFDFBF3DF4F805FBB1115946B8EAF917C015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:5f:df:4d:35:c7:d2:a6:0e:8c:7d:12:a2:
                    f4:78:5e:0d:31:16:93:07:48:f7:66:68:e8:9e:c5:
                    bf:d2:a9:7d:0b:9e:34:cc:51:52:d5:b6:3e:83:24:
                    87:5b:e4:4f:5c:8d:96:49:14:84:5f:8a:49:8a:f4:
                    d9:d2:40:9a:fc:5c:ec:3e:5f:d0:8a:78:ed:41:e9:
                    93:db:10:5c:59:4f:15:4f:31:f7:3a:80:9f:e2:95:
                    59:29:ad:72:a4:95:b1:3d:9e:66:0d:cf:fd:95:15:
                    16:8d:91:6b:2b:ea:ec:d5:7b:94:c7:c9:ad:08:55:
                    6a:fe:0c:37:d0:3b:9b:5c:74:14:34:c0:e9:5b:9e:
                    b7:07:e5:17:bd:7f:4e:63:55:9d:50:1d:c8:94:89:
                    60:7d:a3:57:b0:f3:96:44:52:35:62:59:50:11:4c:
                    73:a5:59:d8:92:9c:2a:64:74:55:59:4f:a5:48:e3:
                    79:00:ab:14:c0:c8:92:42:68:72:8d:89:c1:03:23:
                    a8:89:41:5d:1c:08:30:47:d8:ca:16:ca:a3:7b:20:
                    93:f6:42:f6:32:c9:77:0d:83:98:19:72:cd:bb:f1:
                    1c:ff:af:5d:9b:1c:c6:8c:8e:44:04:9b:26:27:98:
                    52:94:a7:7b:8c:d3:63:9f:19:8a:8c:35:56:8d:e7:
                    fc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:43:EF:DF:BF:3D:F4:F8:05:FB:B1:11:59:46:B8:EA:F9:17:C0:15
            X509v3 Authority Key Identifier:
                keyid:E4:6E:99:3C:4F:61:2F:BD:69:E5:25:93:1C:C4:40:21:87:BA:41:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/E46E993C4F612FBD69E525931CC4402187BA41CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E46E993C4F612FBD69E525931CC4402187BA41CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/4/323830343a326437303a3130303a3a2f34312d3431203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d70:100::/41

    Signature Algorithm: sha256WithRSAEncryption
         68:e2:d5:ef:d8:b8:86:5a:a2:76:9d:51:ff:79:64:9d:95:2f:
         9d:25:b3:82:f8:b8:dc:13:6d:9e:67:70:3b:ba:33:97:02:f6:
         bd:84:47:31:4c:77:09:ab:e3:6f:7b:c7:f5:00:e9:0c:14:0a:
         45:90:16:99:9b:36:1d:a8:7c:22:e3:0f:b8:8c:d2:5c:eb:ea:
         b8:05:d6:80:99:83:f4:da:0a:bf:68:e5:2d:43:8c:f6:98:df:
         f0:5c:cc:d4:04:22:43:03:09:55:99:dc:f7:8b:25:5b:2f:f3:
         e8:b5:d9:7a:03:36:ef:0e:f3:e2:6d:ae:6d:b4:71:53:d9:d8:
         b8:17:0c:08:21:fa:1b:be:c9:bc:d9:e7:59:fa:1b:2b:29:2c:
         9f:88:57:95:04:ac:bd:34:10:1d:09:79:6f:68:1f:02:3e:26:
         c3:e4:38:ca:1e:b7:ca:ac:a9:a9:90:60:13:e4:a4:11:68:7a:
         f2:71:56:e3:08:da:52:d2:6d:bf:85:ca:4c:bf:bf:fe:08:7c:
         1e:a2:5c:b8:43:85:0f:9e:ff:e2:70:41:86:c7:d4:b7:c3:c7:
         13:c7:14:9c:71:2b:bf:8f:9b:7e:8e:3d:57:b1:4d:89:8b:56:
         2d:87:d3:7b:0d:dd:e8:c8:15:8c:30:fc:43:c9:1c:93:36:59:
         2d:99:ad:01
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUbD0hE+5WZinyNwHj7UONR+2T3E0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ2RTk5M0M0RjYxMkZCRDY5RTUyNTkzMUNDNDQwMjE4
N0JBNDFDRjAeFw0yNDA2MTExNzI5MDBaFw0yNTA2MTAxNzM0MDBaMDMxMTAvBgNV
BAMTKDU5NDNFRkRGQkYzREY0RjgwNUZCQjExMTU5NDZCOEVBRjkxN0MwMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCplF/fTTXH0qYOjH0SovR4Xg0x
FpMHSPdmaOiexb/SqX0LnjTMUVLVtj6DJIdb5E9cjZZJFIRfikmK9NnSQJr8XOw+
X9CKeO1B6ZPbEFxZTxVPMfc6gJ/ilVkprXKklbE9nmYNz/2VFRaNkWsr6uzVe5TH
ya0IVWr+DDfQO5tcdBQ0wOlbnrcH5Re9f05jVZ1QHciUiWB9o1ew85ZEUjViWVAR
THOlWdiSnCpkdFVZT6VI43kAqxTAyJJCaHKNicEDI6iJQV0cCDBH2MoWyqN7IJP2
QvYyyXcNg5gZcs278Rz/r12bHMaMjkQEmyYnmFKUp3uM02OfGYqMNVaN5/zjAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUWUPv37899PgF+7ERWUa46vkXwBUwHwYDVR0j
BBgwFoAU5G6ZPE9hL71p5SWTHMRAIYe6Qc8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHZ4ZjNlSjV4MkNMeGsyTkZhVUZhUnhoR21XeFIxR28zdFdZdHREOGRF
Tk4vNC9FNDZFOTkzQzRGNjEyRkJENjlFNTI1OTMxQ0M0NDAyMTg3QkE0MUNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0NkU5OTNDNEY2MTJGQkQ2
OUU1MjU5MzFDQzQ0MDIxODdCQTQxQ0YuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h2eGYzZUo1eDJDTHhrMk5GYVVGYVJ4aEdtV3hSMUdvM3RXWXR0RDhkRU5OLzQv
MzIzODMwMzQzYTMyNjQzNzMwM2EzMTMwMzAzYTNhMmYzNDMxMmQzNDMxMjAzZDNl
MjAzMjM2MzUzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwcoBC1wAQAwDQYJKoZIhvcNAQELBQAD
ggEBAGji1e/YuIZaonadUf95ZJ2VL50ls4L4uNwTbZ5ncDu6M5cC9r2ERzFMdwmr
4297x/UA6QwUCkWQFpmbNh2ofCLjD7iM0lzr6rgF1oCZg/TaCr9o5S1DjPaY3/Bc
zNQEIkMDCVWZ3PeLJVsv8+i12XoDNu8O8+Jtrm20cVPZ2LgXDAgh+hu+ybzZ51n6
GyspLJ+IV5UErL00EB0JeW9oHwI+JsPkOMoet8qsqamQYBPkpBFoevJxVuMI2lLS
bb+Fyky/v/4IfB6iXLhDhQ+e/+JwQYbH1LfDxxPHFJxxK7+Pm36OPVexTYmLVi2H
03sN3ejIFYww/EPJHJM2WS2ZrQE=
-----END CERTIFICATE-----
Generated at Thu Jul 4 06:18:36 2024 by rpki-client on console.sobornost.net