Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/323830343a366465303a383030303a3a2f33342d3334203d3e20323730353631.roa
File:                     323830343a366465303a383030303a3a2f33342d3334203d3e20323730353631.roa (raw, json)
Hash identifier:          N2f054kYn2KdWTfA92Kb1PFmAbWRMZmNsak4P6oMxrw=
Subject key identifier:   80:F7:E3:09:B8:B2:76:96:82:73:37:C9:52:2C:94:3C:03:91:CB:A9
Certificate issuer:       /CN=D76AC9525C9299F8D9F26853A5246419EB9913D9
Certificate serial:       091DC794C9E734BA87DF525A3C3607E9D9E9202A
Authority key identifier: D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/323830343a366465303a383030303a3a2f33342d3334203d3e20323730353631.roa
Signing time:             Thu 12 Dec 2024 01:44:23 +0000
ROA not before:           Thu 12 Dec 2024 01:39:23 +0000
ROA not after:            Thu 11 Dec 2025 01:44:23 +0000
asID:                     270561
IP address blocks:        2804:6de0:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl
                          rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1d:c7:94:c9:e7:34:ba:87:df:52:5a:3c:36:07:e9:d9:e9:20:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D76AC9525C9299F8D9F26853A5246419EB9913D9
        Validity
            Not Before: Dec 12 01:39:23 2024 GMT
            Not After : Dec 11 01:44:23 2025 GMT
        Subject: CN=80F7E309B8B27696827337C9522C943C0391CBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f8:b7:b0:86:04:6d:97:6c:8b:96:8f:f9:36:
                    cc:d0:d2:d3:61:de:41:74:4c:4d:df:36:a4:b2:6a:
                    44:4d:fd:a8:2e:d8:7c:f0:74:2f:58:6d:a5:ea:cb:
                    ab:2b:a1:39:cc:05:97:6c:19:73:ee:3f:f2:29:1d:
                    e2:c0:68:35:03:02:6b:32:5c:f4:b2:c0:55:be:5b:
                    26:e9:f5:fe:36:ac:4d:f3:33:8d:19:97:af:a5:76:
                    11:4b:0b:fe:08:21:74:e3:22:df:4d:c5:b3:0d:d4:
                    46:8a:40:23:83:34:64:f5:13:88:36:08:03:19:4d:
                    21:87:8c:34:70:ae:fd:fa:90:52:76:3c:60:a5:23:
                    08:62:1a:e7:40:e3:11:b9:49:4c:4f:9a:7f:e4:e3:
                    c3:05:da:f9:da:de:4e:51:91:e3:a8:33:82:ec:5b:
                    5d:54:17:17:ee:45:bb:5c:b9:8c:69:f0:8f:d0:ac:
                    93:aa:a7:a2:35:92:4f:9b:2f:16:a9:50:8c:ed:25:
                    50:4e:39:8b:f8:b0:43:2b:c9:33:0b:72:18:1e:54:
                    2a:3b:1c:eb:15:22:65:d0:ce:14:4f:6a:1d:34:1f:
                    12:98:33:d2:9a:3b:49:cc:2c:f4:ff:14:ae:e7:f3:
                    32:78:ad:4e:1f:6b:cf:f7:82:84:c3:d3:68:ab:da:
                    f6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F7:E3:09:B8:B2:76:96:82:73:37:C9:52:2C:94:3C:03:91:CB:A9
            X509v3 Authority Key Identifier:
                keyid:D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/323830343a366465303a383030303a3a2f33342d3334203d3e20323730353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6de0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         19:a7:1a:41:cf:e8:c2:4f:b0:9b:44:7a:38:92:01:60:ca:98:
         2d:ad:34:79:fa:dc:72:fc:76:e3:28:b6:52:73:ac:dd:c7:a3:
         ec:7a:b0:b1:54:da:75:ca:62:e0:8e:3c:2b:9e:64:c9:4e:50:
         d4:a6:48:c6:58:70:d1:bb:dd:09:85:73:a5:59:18:78:e7:22:
         be:f0:44:ad:af:ed:69:8d:d2:34:72:89:19:25:59:63:5f:3c:
         48:f4:42:44:bc:86:fa:d9:a1:29:ad:62:1d:bd:54:f3:c1:41:
         dc:a6:a3:53:38:f7:91:dc:ba:02:f0:d4:6b:a8:0c:03:28:1e:
         46:b3:c5:8e:b1:bb:24:09:4f:59:36:be:6b:6f:87:02:81:11:
         00:4e:22:f7:36:28:b6:35:d9:d6:4e:30:91:c8:65:55:51:ff:
         03:91:ce:3b:41:3c:b3:2f:21:1e:fa:b3:1f:97:e4:d2:33:a3:
         ee:fd:06:29:ea:8a:ab:97:f3:0c:87:9e:9d:ea:12:e9:e9:eb:
         84:68:ec:9d:b1:19:ff:b3:eb:93:76:c6:11:07:0d:0f:2f:be:
         9e:08:b0:78:95:5b:aa:a0:c2:bb:97:75:ac:f8:52:77:7a:ae:
         96:2c:23:59:e4:62:a2:68:d8:5f:96:e5:22:46:6c:3b:a3:e5:
         67:8e:04:03
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUCR3HlMnnNLqH31JaPDYH6dnpICowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc2QUM5NTI1QzkyOTlGOEQ5RjI2ODUzQTUyNDY0MTlF
Qjk5MTNEOTAeFw0yNDEyMTIwMTM5MjNaFw0yNTEyMTEwMTQ0MjNaMDMxMTAvBgNV
BAMTKDgwRjdFMzA5QjhCMjc2OTY4MjczMzdDOTUyMkM5NDNDMDM5MUNCQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ+LewhgRtl2yLlo/5NszQ0tNh
3kF0TE3fNqSyakRN/agu2HzwdC9YbaXqy6sroTnMBZdsGXPuP/IpHeLAaDUDAmsy
XPSywFW+Wybp9f42rE3zM40Zl6+ldhFLC/4IIXTjIt9NxbMN1EaKQCODNGT1E4g2
CAMZTSGHjDRwrv36kFJ2PGClIwhiGudA4xG5SUxPmn/k48MF2vna3k5RkeOoM4Ls
W11UFxfuRbtcuYxp8I/QrJOqp6I1kk+bLxapUIztJVBOOYv4sEMryTMLchgeVCo7
HOsVImXQzhRPah00HxKYM9KaO0nMLPT/FK7n8zJ4rU4fa8/3goTD02ir2vbTAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUgPfjCbiydpaCczfJUiyUPAORy6kwHwYDVR0j
BBgwFoAU12rJUlySmfjZ8mhTpSRkGeuZE9kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SNUVSd2FudG1VQjVVRGVKbU16a2ZicHNwSnZkZXhma1VScFFvbm16SmtU
LzAvRDc2QUM5NTI1QzkyOTlGOEQ5RjI2ODUzQTUyNDY0MTlFQjk5MTNEOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENzZBQzk1MjVDOTI5OUY4RDlG
MjY4NTNBNTI0NjQxOUVCOTkxM0Q5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S
NUVSd2FudG1VQjVVRGVKbU16a2ZicHNwSnZkZXhma1VScFFvbm16SmtULzAvMzIz
ODMwMzQzYTM2NjQ2NTMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2Uy
MDMyMzczMDM1MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEbeCAMA0GCSqGSIb3DQEBCwUAA4IB
AQAZpxpBz+jCT7CbRHo4kgFgypgtrTR5+txy/HbjKLZSc6zdx6PserCxVNp1ymLg
jjwrnmTJTlDUpkjGWHDRu90JhXOlWRh45yK+8EStr+1pjdI0cokZJVljXzxI9EJE
vIb62aEprWIdvVTzwUHcpqNTOPeR3LoC8NRrqAwDKB5Gs8WOsbskCU9ZNr5rb4cC
gREATiL3Nii2NdnWTjCRyGVVUf8Dkc47QTyzLyEe+rMfl+TSM6Pu/QYp6oqrl/MM
h56d6hLp6euEaOydsRn/s+uTdsYRBw0PL76eCLB4lVuqoMK7l3Ws+FJ3eq6WLCNZ
5GKiaNhfluUiRmw7o+VnjgQD
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:32 2025 by rpki-client on console.sobornost.net