Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa
File:                     323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa (raw, json)
Hash identifier:          p1/VmojSdIc1qQpUP18UbyYfNp+p/paRq33apEp/AjE=
Subject key identifier:   85:37:BD:E6:BC:BF:B3:29:30:4D:05:CC:A3:41:10:CA:56:88:EC:F7
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       11D557C0D77D7E73C9A4FDFDA95A47C005B8BC46
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     268137
IP address blocks:        2804:5894:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d5:57:c0:d7:7d:7e:73:c9:a4:fd:fd:a9:5a:47:c0:05:b8:bc:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=8537BDE6BCBFB329304D05CCA34110CA5688ECF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c7:4c:07:0f:c2:bf:20:d5:6a:61:cc:2c:08:
                    44:c7:94:b1:c9:f6:07:68:cb:f1:84:36:3a:f0:2f:
                    f7:7e:2b:96:42:a8:73:93:54:d5:6d:30:c5:55:ab:
                    e0:6b:75:16:db:1f:8e:b9:fe:88:8e:4b:1d:b9:ea:
                    23:da:8c:89:63:9f:4c:46:1c:c2:f1:4f:a2:2c:a1:
                    e7:3e:17:2d:70:e9:a6:6e:7f:73:b8:8e:0e:92:6d:
                    2d:21:68:26:85:4a:5c:7b:cf:96:65:89:eb:66:3e:
                    1d:d3:85:75:df:52:51:20:00:68:fe:e1:19:46:6f:
                    1d:53:02:99:2b:de:01:f4:0b:58:8c:45:cc:8e:56:
                    64:3c:5d:3e:d9:6d:6e:38:62:cb:e1:5e:e1:b3:f0:
                    8e:87:3b:ca:00:20:90:1f:0f:86:ed:92:a0:30:1e:
                    a0:b1:f0:55:2a:06:a5:35:d1:ee:17:e0:1c:e4:98:
                    da:67:ed:6e:bc:88:18:d5:fe:4f:70:d8:79:58:c2:
                    39:85:9c:14:20:5c:2d:57:c3:cd:52:3e:7b:31:62:
                    f2:f1:94:a5:53:d6:a7:fc:e1:d4:05:45:c1:07:25:
                    99:6b:80:54:39:4a:92:11:10:01:03:68:5a:68:9f:
                    3d:28:53:e3:4b:8a:d5:af:54:3c:33:79:70:09:e7:
                    54:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:37:BD:E6:BC:BF:B3:29:30:4D:05:CC:A3:41:10:CA:56:88:EC:F7
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a343030303a3a2f33342d3334203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5894:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c6:47:3e:26:ef:7b:82:de:86:d9:e9:b2:b0:6a:cd:81:4f:7e:
         46:1c:cf:2e:73:fc:e6:41:18:27:7c:50:93:63:3b:02:1e:bf:
         f9:cf:17:71:a4:60:25:ae:0c:43:cb:89:9b:af:65:8d:80:39:
         df:42:bb:fa:5e:95:8b:0f:eb:03:34:e5:b4:84:72:5a:8a:e9:
         78:aa:ec:b3:bc:84:27:84:a9:69:a4:41:40:7e:81:ee:dd:fd:
         3b:b1:95:b5:77:d4:a6:bd:30:23:19:ce:e7:ff:3e:bd:47:89:
         cc:5e:b8:d2:f9:66:47:6a:2e:ab:c0:d5:c2:a1:d6:ba:96:5b:
         cd:c0:2a:39:05:08:d2:33:80:72:84:ec:c3:71:2f:bb:62:1a:
         34:5a:f7:22:54:43:92:56:7c:ec:a7:a6:4d:0d:0f:27:97:1a:
         57:51:26:a7:66:5e:2f:2b:6c:70:f0:09:5f:40:8c:12:ce:86:
         4e:4f:c5:b6:5f:53:fc:46:7e:15:e9:17:f1:c1:eb:a2:ba:61:
         a4:d4:15:c6:83:f5:da:b6:2f:4b:81:b9:6b:69:d6:70:ff:26:
         12:ff:64:0a:ce:a0:7f:e0:6d:73:76:a4:8b:93:b5:f4:26:f0:
         4a:e6:3c:07:37:6b:5b:63:11:75:6b:1d:83:1b:77:30:0b:70:
         3b:a8:b7:5a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUEdVXwNd9fnPJpP39qVpHwAW4vEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RDNjkwQzBERTgwMTMxQjIyM0JFRTcwRDdGNkZGOTkw
QTE1RjM0MTAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKDg1MzdCREU2QkNCRkIzMjkzMDREMDVDQ0EzNDExMENBNTY4OEVDRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFx0wHD8K/INVqYcwsCETHlLHJ
9gdoy/GENjrwL/d+K5ZCqHOTVNVtMMVVq+BrdRbbH465/oiOSx256iPajIljn0xG
HMLxT6Isoec+Fy1w6aZuf3O4jg6SbS0haCaFSlx7z5ZlietmPh3ThXXfUlEgAGj+
4RlGbx1TApkr3gH0C1iMRcyOVmQ8XT7ZbW44YsvhXuGz8I6HO8oAIJAfD4btkqAw
HqCx8FUqBqU10e4X4BzkmNpn7W68iBjV/k9w2HlYwjmFnBQgXC1Xw81SPnsxYvLx
lKVT1qf84dQFRcEHJZlrgFQ5SpIREAEDaFponz0oU+NLitWvVDwzeXAJ51T9AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUhTe95ry/sykwTQXMo0EQylaI7PcwHwYDVR0j
BBgwFoAUPcaQwN6AExsiO+5w1/b/mQoV80EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KdVlMSFBkS1k1WTFwaEY1TW9xcVdCa00yVjVQQW9uYmtyY3VQdTJSZUgy
LzEvM0RDNjkwQzBERTgwMTMxQjIyM0JFRTcwRDdGNkZGOTkwQTE1RjM0MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zREM2OTBDMERFODAxMzFCMjIz
QkVFNzBEN0Y2RkY5OTBBMTVGMzQxLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9K
dVlMSFBkS1k1WTFwaEY1TW9xcVdCa00yVjVQQW9uYmtyY3VQdTJSZUgyLzEvMzIz
ODMwMzQzYTM1MzgzOTM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2Uy
MDMyMzYzODMxMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWJRAMA0GCSqGSIb3DQEBCwUAA4IB
AQDGRz4m73uC3obZ6bKwas2BT35GHM8uc/zmQRgnfFCTYzsCHr/5zxdxpGAlrgxD
y4mbr2WNgDnfQrv6XpWLD+sDNOW0hHJaiul4quyzvIQnhKlppEFAfoHu3f07sZW1
d9SmvTAjGc7n/z69R4nMXrjS+WZHai6rwNXCoda6llvNwCo5BQjSM4ByhOzDcS+7
Yho0WvciVEOSVnzsp6ZNDQ8nlxpXUSanZl4vK2xw8AlfQIwSzoZOT8W2X1P8Rn4V
6RfxweuiumGk1BXGg/Xati9LgblradZw/yYS/2QKzqB/4G1zdqSLk7X0JvBK5jwH
N2tbYxF1ax2DG3cwC3A7qLda
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:49 2025 by rpki-client on console.sobornost.net