Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/323830343a353434383a3a2f33322d3336203d3e20323638363430.roa
File:                     323830343a353434383a3a2f33322d3336203d3e20323638363430.roa (raw, json)
Hash identifier:          38oZ7qGP7oZFwjPXnHJH0jKBkkY+GIWZKLt9hNZqu60=
Subject key identifier:   DB:F8:F3:59:B9:BE:E5:6B:F2:C9:58:2D:27:F3:E2:73:1C:86:C2:22
Certificate issuer:       /CN=CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF
Certificate serial:       51732B4A4F0B4AB6205FA2D6E003A482682AA80C
Authority key identifier: CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/323830343a353434383a3a2f33322d3336203d3e20323638363430.roa
Signing time:             Sat 05 Apr 2025 12:30:55 +0000
ROA not before:           Sat 05 Apr 2025 12:25:55 +0000
ROA not after:            Sat 04 Apr 2026 12:30:55 +0000
asID:                     268640
IP address blocks:        2804:5448::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.crl
                          rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:04:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:73:2b:4a:4f:0b:4a:b6:20:5f:a2:d6:e0:03:a4:82:68:2a:a8:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF
        Validity
            Not Before: Apr  5 12:25:55 2025 GMT
            Not After : Apr  4 12:30:55 2026 GMT
        Subject: CN=DBF8F359B9BEE56BF2C9582D27F3E2731C86C222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e6:ac:d8:23:38:78:51:e3:a5:fd:03:4a:ef:
                    22:ef:36:2f:f3:2a:24:55:8c:45:47:22:1c:64:6c:
                    b8:7f:e4:d5:89:c8:de:9f:94:b9:13:ec:16:1b:ec:
                    29:2d:5c:00:b7:04:06:ce:f2:3d:e7:b6:85:24:b0:
                    49:1a:7c:65:72:4c:df:83:cb:e7:3c:53:df:69:08:
                    fe:be:1d:93:fe:49:06:de:2b:42:0b:3e:1b:74:a3:
                    ba:f1:22:2c:44:18:38:36:2b:68:24:27:00:ed:b9:
                    42:12:2e:23:7c:ed:ee:55:5b:7e:92:ce:75:e7:e1:
                    60:de:ea:c0:fd:2e:d8:5d:9d:15:bf:28:bc:c5:58:
                    6e:b5:c0:5d:99:af:4b:fa:e5:f9:3a:5c:19:43:8d:
                    93:47:bb:c2:a1:7b:16:3c:8e:3e:9d:bd:3d:32:b4:
                    f8:50:a7:5c:31:ff:33:00:60:5c:d7:b1:db:f0:d3:
                    86:51:f7:96:ed:15:a1:e8:ae:47:c6:40:fe:3c:2a:
                    ef:4f:33:82:8c:b2:b5:d6:86:21:4a:0b:7b:51:ba:
                    f8:7e:95:6c:1f:6d:00:48:83:d8:ef:ae:57:72:0b:
                    e4:79:ff:c5:45:2e:bd:68:c3:21:71:31:8e:44:d0:
                    e1:9a:0b:29:e1:ef:7c:59:e6:ea:a9:e4:b2:75:b1:
                    65:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F8:F3:59:B9:BE:E5:6B:F2:C9:58:2D:27:F3:E2:73:1C:86:C2:22
            X509v3 Authority Key Identifier:
                keyid:CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/323830343a353434383a3a2f33322d3336203d3e20323638363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5448::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:88:73:0d:9f:35:3a:e8:b5:1a:0d:19:c6:06:14:5b:3e:2d:
         c8:4e:90:2e:04:28:a0:3b:11:46:7e:4b:1f:4e:55:ee:32:2a:
         67:ee:d7:3b:24:37:7d:7c:05:a9:06:aa:34:07:69:40:a0:30:
         49:22:54:2e:9b:2a:03:83:f5:18:0f:3f:82:b1:d1:c9:f7:95:
         60:64:a8:f6:59:55:5b:a6:33:45:20:50:92:e4:87:88:a9:bd:
         73:11:8d:45:1c:38:58:f8:68:96:86:60:dd:fa:17:e5:73:1f:
         0e:e6:e6:a3:6a:66:08:6b:ec:c7:ee:22:99:4c:8e:bf:ab:07:
         33:9e:d5:d6:6d:6b:48:b2:a7:19:4d:8c:d4:73:2f:a0:2c:97:
         4d:96:70:61:34:95:12:92:0c:cc:55:ff:5d:86:d8:d1:12:7b:
         bb:52:5c:69:d0:e1:ca:bf:6a:97:ae:d2:4e:d7:7e:d8:9e:e9:
         13:72:72:8f:71:eb:ab:c6:d3:5b:af:5a:a5:33:97:75:14:c5:
         e5:6c:a3:8d:df:04:9c:e8:2f:d5:4a:1c:8f:bb:e9:2a:b5:72:
         6e:e4:db:ac:62:bb:96:5a:f7:b8:47:fe:af:f4:c2:2e:4c:72:
         0b:dd:1a:48:68:58:d5:1c:40:6e:d1:22:db:4d:33:eb:67:f0:
         38:18:fa:4a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUXMrSk8LSrYgX6LW4AOkgmgqqAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JBNEFGREVGNTcwQjM0OUFGNjhFRTlBMEFEMDdCRERE
N0IyMzNFRjAeFw0yNTA0MDUxMjI1NTVaFw0yNjA0MDQxMjMwNTVaMDMxMTAvBgNV
BAMTKERCRjhGMzU5QjlCRUU1NkJGMkM5NTgyRDI3RjNFMjczMUM4NkMyMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG5qzYIzh4UeOl/QNK7yLvNi/z
KiRVjEVHIhxkbLh/5NWJyN6flLkT7BYb7CktXAC3BAbO8j3ntoUksEkafGVyTN+D
y+c8U99pCP6+HZP+SQbeK0ILPht0o7rxIixEGDg2K2gkJwDtuUISLiN87e5VW36S
znXn4WDe6sD9LthdnRW/KLzFWG61wF2Zr0v65fk6XBlDjZNHu8KhexY8jj6dvT0y
tPhQp1wx/zMAYFzXsdvw04ZR95btFaHorkfGQP48Ku9PM4KMsrXWhiFKC3tRuvh+
lWwfbQBIg9jvrldyC+R5/8VFLr1owyFxMY5E0OGaCynh73xZ5uqp5LJ1sWWRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU2/jzWbm+5WvyyVgtJ/PicxyGwiIwHwYDVR0j
BBgwFoAUy6Sv3vVws0mvaO6aCtB73deyM+8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNYcVdVNE1pSlltZU1IY0JLWjZCS0FQMjJ3MXFCSnJ4cXhnaDQyVE40
Y3cvMC9DQkE0QUZERUY1NzBCMzQ5QUY2OEVFOUEwQUQwN0JEREQ3QjIzM0VGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCQTRBRkRFRjU3MEIzNDlB
RjY4RUU5QTBBRDA3QkRERDdCMjMzRUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozWHFXVTRNaUpZbWVNSGNCS1o2QktBUDIydzFxQkpyeHF4Z2g0MlRONGN3LzAv
MzIzODMwMzQzYTM1MzQzNDM4M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM4
MzYzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARUSDANBgkqhkiG9w0BAQsFAAOCAQEAoohzDZ81
Oui1Gg0ZxgYUWz4tyE6QLgQooDsRRn5LH05V7jIqZ+7XOyQ3fXwFqQaqNAdpQKAw
SSJULpsqA4P1GA8/grHRyfeVYGSo9llVW6YzRSBQkuSHiKm9cxGNRRw4WPholoZg
3foX5XMfDubmo2pmCGvsx+4imUyOv6sHM57V1m1rSLKnGU2M1HMvoCyXTZZwYTSV
EpIMzFX/XYbY0RJ7u1JcadDhyr9ql67STtd+2J7pE3Jyj3Hrq8bTW69apTOXdRTF
5Wyjjd8EnOgv1Uocj7vpKrVybuTbrGK7llr3uEf+r/TCLkxyC90aSGhY1RxAbtEi
200z62fwOBj6Sg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:32 2025 by rpki-client on console.sobornost.net