Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/323830343a366533303a3a2f33322d313238203d3e20323730353831.roa
File:                     323830343a366533303a3a2f33322d313238203d3e20323730353831.roa (raw, json)
Hash identifier:          YqVEEc9hJVnpwd7dlUQG1gBKY7tccWG1NTTDiXfcfIA=
Subject key identifier:   B6:22:A1:17:DC:AC:97:89:49:EB:6B:83:D2:0A:5A:E1:5D:E5:3B:7F
Certificate issuer:       /CN=793843AE7EAE08FD5A902A5679C194A4E02D2781
Certificate serial:       3FE6B32578E9CF64BC5F1BB07462CDAED97764EC
Authority key identifier: 79:38:43:AE:7E:AE:08:FD:5A:90:2A:56:79:C1:94:A4:E0:2D:27:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793843AE7EAE08FD5A902A5679C194A4E02D2781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/323830343a366533303a3a2f33322d313238203d3e20323730353831.roa
Signing time:             Thu 07 Aug 2025 14:35:58 +0000
ROA not before:           Thu 07 Aug 2025 14:30:58 +0000
ROA not after:            Thu 06 Aug 2026 14:35:58 +0000
asID:                     270581
IP address blocks:        2804:6e30::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.crl
                          rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793843AE7EAE08FD5A902A5679C194A4E02D2781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 15:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e6:b3:25:78:e9:cf:64:bc:5f:1b:b0:74:62:cd:ae:d9:77:64:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793843AE7EAE08FD5A902A5679C194A4E02D2781
        Validity
            Not Before: Aug  7 14:30:58 2025 GMT
            Not After : Aug  6 14:35:58 2026 GMT
        Subject: CN=B622A117DCAC978949EB6B83D20A5AE15DE53B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:40:42:d7:a3:a0:69:f2:18:6d:59:12:64:
                    a1:ae:b3:df:16:70:86:0c:1b:de:e2:5b:5c:b4:98:
                    72:73:9f:36:ed:cb:d7:2a:f9:86:d4:22:81:83:9b:
                    27:5f:81:79:48:6a:f8:25:76:94:2b:3f:67:40:5e:
                    26:fa:80:70:f7:c0:70:38:47:2b:6c:a8:1c:5c:4d:
                    0a:aa:20:5c:a9:c4:ff:39:69:a0:b7:0b:7f:ce:81:
                    21:24:59:ab:13:7c:7f:73:74:c8:18:77:7d:8f:b0:
                    ba:b2:99:8f:dc:d9:2e:8f:38:e4:63:26:d0:93:24:
                    0e:5c:30:e3:62:0c:67:94:6c:7a:cb:9d:b3:14:78:
                    1b:12:a4:31:20:ae:f1:ee:d1:eb:00:67:9a:63:74:
                    60:72:20:58:8f:17:c1:36:b2:55:5d:ca:d6:9a:7a:
                    f9:19:9d:bf:ad:1d:b5:87:13:ef:8c:48:ed:01:3f:
                    09:3f:42:6f:47:1f:4d:65:6c:ae:b8:93:a9:2e:ad:
                    60:b4:cb:6b:b4:f6:2e:ce:6f:44:92:d6:b3:db:7d:
                    32:75:6b:be:19:f9:c9:2d:70:16:9d:c6:ee:8b:f8:
                    39:41:bf:d0:eb:67:77:4b:c9:c5:e6:0f:be:b6:a1:
                    2c:e2:7f:fd:d8:45:3f:db:ee:6e:39:e8:1a:ff:d9:
                    42:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:22:A1:17:DC:AC:97:89:49:EB:6B:83:D2:0A:5A:E1:5D:E5:3B:7F
            X509v3 Authority Key Identifier:
                keyid:79:38:43:AE:7E:AE:08:FD:5A:90:2A:56:79:C1:94:A4:E0:2D:27:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/793843AE7EAE08FD5A902A5679C194A4E02D2781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793843AE7EAE08FD5A902A5679C194A4E02D2781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WdpfVZRAibj3XRYvKUKmFu8Hf5UBt8BQMGRsqFbvtwB/0/323830343a366533303a3a2f33322d313238203d3e20323730353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e30::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:16:eb:3e:66:db:90:ad:9d:84:22:69:9c:df:7b:64:12:58:
         48:05:27:09:7d:29:b3:55:24:69:47:c7:27:c3:dd:40:e2:b3:
         4d:ab:22:de:b2:29:54:e1:46:14:15:fa:7e:28:4e:33:5a:9c:
         73:c4:80:8b:36:99:93:a2:f5:e1:66:ac:ea:48:1a:ee:7e:d5:
         90:1f:ae:a9:7c:d4:90:34:44:f9:f6:46:80:b2:55:e2:52:4f:
         35:08:55:44:37:a0:15:c8:43:e5:f5:94:f7:e6:38:fc:29:99:
         bc:72:ec:7e:f5:09:ee:b2:4f:14:cc:ee:d7:f3:c8:d5:ea:87:
         a5:2f:7c:e3:5e:3d:f6:97:83:1f:29:14:f0:a6:fe:2a:13:1d:
         28:77:0e:ae:43:a4:4c:1d:16:0d:72:0e:68:33:72:f7:3c:61:
         ff:ab:61:7e:77:90:a8:30:21:30:9a:6c:fb:4b:4a:34:25:ff:
         e6:47:d1:84:5b:c5:df:3d:cd:fc:cd:cd:fb:f9:65:35:61:3b:
         20:21:da:3b:e1:9e:9d:8a:21:58:c7:18:1c:8d:b2:e8:f6:c6:
         46:33:8a:42:8d:9b:96:3a:f5:98:ff:ae:74:6a:3e:38:8a:26:
         63:2d:e4:2c:66:01:85:c2:5b:59:59:8c:de:cf:1a:51:4e:61:
         5e:8b:6d:bf
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUP+azJXjpz2S8XxuwdGLNrtl3ZOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkzODQzQUU3RUFFMDhGRDVBOTAyQTU2NzlDMTk0QTRF
MDJEMjc4MTAeFw0yNTA4MDcxNDMwNThaFw0yNjA4MDYxNDM1NThaMDMxMTAvBgNV
BAMTKEI2MjJBMTE3RENBQzk3ODk0OUVCNkI4M0QyMEE1QUUxNURFNTNCN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16EBC16OgafIYbVkSZKGus98W
cIYMG97iW1y0mHJznzbty9cq+YbUIoGDmydfgXlIavgldpQrP2dAXib6gHD3wHA4
RytsqBxcTQqqIFypxP85aaC3C3/OgSEkWasTfH9zdMgYd32PsLqymY/c2S6POORj
JtCTJA5cMONiDGeUbHrLnbMUeBsSpDEgrvHu0esAZ5pjdGByIFiPF8E2slVdytaa
evkZnb+tHbWHE++MSO0BPwk/Qm9HH01lbK64k6kurWC0y2u09i7Ob0SS1rPbfTJ1
a74Z+cktcBadxu6L+DlBv9DrZ3dLycXmD762oSzif/3YRT/b7m456Br/2ULxAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUtiKhF9ysl4lJ62uD0gpa4V3lO38wHwYDVR0j
BBgwFoAUeThDrn6uCP1akCpWecGUpOAtJ4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMldkcGZWWlJBaWJqM1hSWXZLVUttRnU4SGY1VUJ0OEJRTUdSc3FGYnZ0
d0IvMC83OTM4NDNBRTdFQUUwOEZENUE5MDJBNTY3OUMxOTRBNEUwMkQyNzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5Mzg0M0FFN0VBRTA4RkQ1
QTkwMkE1Njc5QzE5NEE0RTAyRDI3ODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJXZHBmVlpSQWliajNYUll2S1VLbUZ1OEhmNVVCdDhCUU1HUnNxRmJ2dHdCLzAv
MzIzODMwMzQzYTM2NjUzMzMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzNTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBG4wMA0GCSqGSIb3DQEBCwUAA4IBAQBbFus+
ZtuQrZ2EImmc33tkElhIBScJfSmzVSRpR8cnw91A4rNNqyLesilU4UYUFfp+KE4z
WpxzxICLNpmTovXhZqzqSBruftWQH66pfNSQNET59kaAslXiUk81CFVEN6AVyEPl
9ZT35jj8KZm8cux+9Qnusk8UzO7X88jV6oelL3zjXj32l4MfKRTwpv4qEx0odw6u
Q6RMHRYNcg5oM3L3PGH/q2F+d5CoMCEwmmz7S0o0Jf/mR9GEW8XfPc38zc37+WU1
YTsgIdo74Z6diiFYxxgcjbLo9sZGM4pCjZuWOvWY/650aj44iiZjLeQsZgGFwltZ
WYzezxpRTmFei22/
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:19:40 2025 by rpki-client