Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NuB2SNpmtMAjYiHbeEb7KkvktVp4Y8gaJNEe27Yhxe4/0/323830343a313434343a3a2f33322d3332203d3e20323633333232.roa
File:                     323830343a313434343a3a2f33322d3332203d3e20323633333232.roa (raw, json)
Hash identifier:          CsaUzthktHhFlYVusLrCWG+fDqtLtduqo3G4BegOidI=
Subject key identifier:   77:D2:A4:DE:31:1B:0D:49:87:54:AA:B9:07:36:6E:28:CE:A6:63:52
Certificate issuer:       /CN=B498ECD3AAF078280F3CC4465E2E4A131EE6BBD8
Certificate serial:       5E3F06F1EE10A1EA6EB063F3D39C6C2A126EC811
Authority key identifier: B4:98:EC:D3:AA:F0:78:28:0F:3C:C4:46:5E:2E:4A:13:1E:E6:BB:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B498ECD3AAF078280F3CC4465E2E4A131EE6BBD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NuB2SNpmtMAjYiHbeEb7KkvktVp4Y8gaJNEe27Yhxe4/0/323830343a313434343a3a2f33322d3332203d3e20323633333232.roa
Signing time:             Mon 25 May 2026 20:39:59 +0000
ROA not before:           Mon 25 May 2026 20:34:59 +0000
ROA not after:            Mon 24 May 2027 20:39:59 +0000
asID:                     263322
IP address blocks:        2804:1444::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NuB2SNpmtMAjYiHbeEb7KkvktVp4Y8gaJNEe27Yhxe4/0/B498ECD3AAF078280F3CC4465E2E4A131EE6BBD8.crl
                          rsync://rpki-repo.registro.br/repo/3NuB2SNpmtMAjYiHbeEb7KkvktVp4Y8gaJNEe27Yhxe4/0/B498ECD3AAF078280F3CC4465E2E4A131EE6BBD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B498ECD3AAF078280F3CC4465E2E4A131EE6BBD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 03:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3f:06:f1:ee:10:a1:ea:6e:b0:63:f3:d3:9c:6c:2a:12:6e:c8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B498ECD3AAF078280F3CC4465E2E4A131EE6BBD8
        Validity
            Not Before: May 25 20:34:59 2026 GMT
            Not After : May 24 20:39:59 2027 GMT
        Subject: CN=77D2A4DE311B0D498754AAB907366E28CEA66352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b6:24:0e:c3:c9:e7:3b:2f:1e:30:fe:90:36:
                    67:f3:01:88:29:52:b8:cf:21:05:d8:07:fc:df:0d:
                    fc:9b:b4:bd:17:86:03:12:1c:a4:73:0e:19:84:a3:
                    77:fd:4f:87:eb:85:84:4b:d8:28:66:00:4a:84:a0:
                    7f:2b:d0:72:fa:c1:d8:4e:9b:5b:5b:a8:c2:f3:6c:
                    ac:95:e6:31:5f:be:79:0a:ec:dc:27:cf:b2:25:4b:
                    d9:97:8b:69:af:a4:c9:5f:0d:a7:97:db:1b:86:0b:
                    01:0f:1b:81:7f:c6:6b:9a:29:6f:10:6e:29:a2:71:
                    bf:37:59:c1:86:e8:59:cc:d1:42:9a:78:8e:55:f6:
                    b4:93:9f:84:04:d5:3e:51:d4:a6:2a:37:c9:7b:ca:
                    2e:43:61:27:0b:65:57:5e:26:09:b2:dd:89:c6:c9:
                    36:ee:a1:4b:03:f4:5b:ee:1c:ad:d9:ad:7e:3d:50:
                    46:b5:3d:af:df:ca:0b:d1:9e:7b:77:6d:16:68:88:
                    55:4f:8f:8f:fd:2e:9a:dc:66:bc:6a:04:26:3d:e9:
                    07:2c:33:d9:0c:53:78:0f:38:f0:8d:99:3a:7c:25:
                    8e:ee:9b:a4:24:ee:2d:4d:79:81:c2:36:1d:4b:49:
                    a5:cc:f8:90:18:b5:7b:f9:88:d9:fb:f8:a5:82:48:
                    1c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D2:A4:DE:31:1B:0D:49:87:54:AA:B9:07:36:6E:28:CE:A6:63:52
            X509v3 Authority Key Identifier:
                keyid:B4:98:EC:D3:AA:F0:78:28:0F:3C:C4:46:5E:2E:4A:13:1E:E6:BB:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NuB2SNpmtMAjYiHbeEb7KkvktVp4Y8gaJNEe27Yhxe4/0/B498ECD3AAF078280F3CC4465E2E4A131EE6BBD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B498ECD3AAF078280F3CC4465E2E4A131EE6BBD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NuB2SNpmtMAjYiHbeEb7KkvktVp4Y8gaJNEe27Yhxe4/0/323830343a313434343a3a2f33322d3332203d3e20323633333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1444::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:42:ea:1e:07:8f:b5:81:bb:4e:83:fa:06:c6:2e:69:dc:52:
         f9:c1:74:fe:25:eb:69:57:ac:25:e6:14:e0:4d:f9:70:4c:40:
         f8:d3:8f:53:15:28:77:d6:b7:7e:51:b0:8c:46:1f:15:5d:1a:
         ac:f7:03:41:e3:d4:e7:77:74:02:9f:5a:0e:b8:98:22:d8:6c:
         1d:e2:3a:f7:3c:39:3c:7b:b5:8b:00:7d:9c:ca:a2:b0:d3:31:
         14:50:bf:9c:64:4b:40:d7:79:03:52:0c:f2:00:7a:03:72:49:
         42:40:81:db:b2:dd:14:b8:10:62:23:77:0f:0b:03:a4:3e:c1:
         05:46:23:d7:f6:5b:d3:c5:af:f3:56:bd:24:59:1f:20:f2:db:
         2c:6a:fc:7c:ad:73:a6:d3:b2:06:0e:43:bc:1b:7a:31:cb:02:
         88:36:bd:c3:88:60:6d:3a:62:5c:36:a6:36:28:15:11:f1:16:
         7e:69:0f:9f:3b:32:f0:f3:64:d4:26:08:f6:55:6f:56:0c:92:
         59:7b:0b:b2:3b:93:80:37:54:c0:29:e7:a3:12:60:c2:de:e8:
         16:dd:aa:d9:d4:4e:2a:7a:7c:de:94:be:e6:75:d0:32:3d:d7:
         21:f8:c8:96:a1:35:59:07:e5:1d:32:12:72:c1:31:13:53:f4:
         ec:64:8f:af
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXj8G8e4QoepusGPz05xsKhJuyBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ5OEVDRDNBQUYwNzgyODBGM0NDNDQ2NUUyRTRBMTMx
RUU2QkJEODAeFw0yNjA1MjUyMDM0NTlaFw0yNzA1MjQyMDM5NTlaMDMxMTAvBgNV
BAMTKDc3RDJBNERFMzExQjBENDk4NzU0QUFCOTA3MzY2RTI4Q0VBNjYzNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbtiQOw8nnOy8eMP6QNmfzAYgp
UrjPIQXYB/zfDfybtL0XhgMSHKRzDhmEo3f9T4frhYRL2ChmAEqEoH8r0HL6wdhO
m1tbqMLzbKyV5jFfvnkK7Nwnz7IlS9mXi2mvpMlfDaeX2xuGCwEPG4F/xmuaKW8Q
bimicb83WcGG6FnM0UKaeI5V9rSTn4QE1T5R1KYqN8l7yi5DYScLZVdeJgmy3YnG
yTbuoUsD9FvuHK3ZrX49UEa1Pa/fygvRnnt3bRZoiFVPj4/9LprcZrxqBCY96Qcs
M9kMU3gPOPCNmTp8JY7um6Qk7i1NeYHCNh1LSaXM+JAYtXv5iNn7+KWCSBy3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUd9Kk3jEbDUmHVKq5BzZuKM6mY1IwHwYDVR0j
BBgwFoAUtJjs06rweCgPPMRGXi5KEx7mu9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM051QjJTTnBtdE1BallpSGJlRWI3S2t2a3RWcDRZOGdhSk5FZTI3WWh4
ZTQvMC9CNDk4RUNEM0FBRjA3ODI4MEYzQ0M0NDY1RTJFNEExMzFFRTZCQkQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0OThFQ0QzQUFGMDc4Mjgw
RjNDQzQ0NjVFMkU0QTEzMUVFNkJCRDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNOdUIyU05wbXRNQWpZaUhiZUViN0trdmt0VnA0WThnYUpORWUyN1loeGU0LzAv
MzIzODMwMzQzYTMxMzQzNDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzMzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQURDANBgkqhkiG9w0BAQsFAAOCAQEAlkLqHgeP
tYG7ToP6BsYuadxS+cF0/iXraVesJeYU4E35cExA+NOPUxUod9a3flGwjEYfFV0a
rPcDQePU53d0Ap9aDriYIthsHeI69zw5PHu1iwB9nMqisNMxFFC/nGRLQNd5A1IM
8gB6A3JJQkCB27LdFLgQYiN3DwsDpD7BBUYj1/Zb08Wv81a9JFkfIPLbLGr8fK1z
ptOyBg5DvBt6McsCiDa9w4hgbTpiXDamNigVEfEWfmkPnzsy8PNk1CYI9lVvVgyS
WXsLsjuTgDdUwCnnoxJgwt7oFt2q2dROKnp83pS+5nXQMj3XIfjIlqE1WQflHTIS
csExE1P07GSPrw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:49:32 2026 by rpki-client