Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          /VBVo0lfFNOZss45eGlXovuD79aasqZ1xOUNYk1R7qY=
Subject key identifier:   91:C8:35:EA:29:6D:3C:5E:09:7D:24:65:AB:7D:E8:B4:51:B1:14:EB
Certificate issuer:       /CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
Certificate serial:       16A8E41A0C52054E6AC3E1D0BA81D8009A1BC322
Authority key identifier: 3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Mon 14 Jul 2025 15:36:32 +0000
ROA not before:           Mon 14 Jul 2025 15:31:32 +0000
ROA not after:            Mon 13 Jul 2026 15:36:32 +0000
asID:                     264936
IP address blocks:        2804:3034:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 19:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a8:e4:1a:0c:52:05:4e:6a:c3:e1:d0:ba:81:d8:00:9a:1b:c3:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
        Validity
            Not Before: Jul 14 15:31:32 2025 GMT
            Not After : Jul 13 15:36:32 2026 GMT
        Subject: CN=91C835EA296D3C5E097D2465AB7DE8B451B114EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1c:d2:2e:69:42:5a:56:66:8f:fe:ee:a8:6f:
                    34:56:ce:ce:bf:32:cd:45:31:5f:30:78:0e:cd:5d:
                    6d:66:26:71:99:fc:38:64:8a:f4:82:45:ad:62:49:
                    17:75:e0:49:40:49:f7:44:1a:50:bf:34:fd:c4:dd:
                    fa:12:d7:cf:8c:a5:e3:89:69:64:59:13:e1:27:bf:
                    3d:4f:25:95:32:ad:de:be:59:58:f3:f8:9d:09:ce:
                    1b:af:84:8b:a8:9a:e8:39:24:35:93:96:39:a5:27:
                    1d:d9:b4:7f:44:f5:47:76:58:35:4b:de:d3:33:44:
                    83:3f:68:57:a2:f4:91:a7:4e:7b:e5:ec:61:aa:ef:
                    95:8e:fd:27:c5:74:e7:cd:cb:4d:d0:a9:33:67:a9:
                    1e:5f:cc:e1:6d:f8:14:d0:4c:85:9f:b2:93:76:97:
                    30:50:e7:0f:e5:03:5b:47:1b:be:c4:2c:9f:4d:94:
                    67:eb:a1:2d:39:7b:ea:df:19:64:75:2f:ed:4c:4b:
                    28:f4:44:ce:c0:49:be:bf:f9:50:8b:4f:3a:96:b2:
                    f7:01:2c:ab:49:b7:fe:8f:f8:5f:a7:54:47:c9:b5:
                    6a:d9:e2:bb:c0:be:b1:20:5b:0a:33:01:f3:63:6b:
                    cc:70:34:f5:4b:8d:78:89:89:46:24:85:95:ae:6b:
                    37:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C8:35:EA:29:6D:3C:5E:09:7D:24:65:AB:7D:E8:B4:51:B1:14:EB
            X509v3 Authority Key Identifier:
                keyid:3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         9c:93:8c:2a:0a:66:c2:0c:d5:b4:f6:34:e3:ef:d0:8f:b9:e7:
         7c:61:48:d2:58:82:d1:8b:3a:07:1a:08:66:71:87:01:70:e6:
         73:be:57:06:21:ce:12:9d:67:de:33:a5:7f:ae:38:24:99:15:
         7e:83:4c:47:86:fe:ae:54:e7:af:3a:6c:7a:03:3a:d4:ad:9d:
         6a:b4:52:6d:64:12:85:6c:e2:70:ba:01:3b:d6:38:a3:93:1a:
         a8:db:9c:2f:bc:f7:a7:48:f2:ab:33:6e:f8:36:ec:38:51:fa:
         4e:73:73:03:ee:a6:67:bf:04:eb:9f:58:7f:f4:5d:37:de:b1:
         de:e1:fc:32:15:38:13:a0:69:0a:d7:28:ee:85:c6:51:3f:65:
         9e:df:4c:dd:6a:c9:77:01:ea:26:f1:9f:15:14:d1:ce:9f:d8:
         8e:e5:6e:d3:c0:79:77:7e:2e:36:46:e4:b1:07:2d:c3:68:50:
         37:f7:61:3e:38:58:48:5a:6b:34:11:17:d4:69:14:6a:86:ad:
         e0:f5:a7:33:5c:27:aa:5e:da:f5:58:60:61:12:21:c0:fb:1f:
         3f:ca:fd:14:0c:d9:63:78:7e:36:dd:12:76:8f:1c:b6:17:3e:
         8e:3c:79:6c:bd:bb:04:5c:64:d0:c0:cd:1f:fe:60:89:e7:dc:
         6b:d8:12:25
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUFqjkGgxSBU5qw+HQuoHYAJobwyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YwQjFCQjc1ODc5MzM0MDA0OTZGN0YzNUE1OEZCRjg1
QTA3MzJBNDAeFw0yNTA3MTQxNTMxMzJaFw0yNjA3MTMxNTM2MzJaMDMxMTAvBgNV
BAMTKDkxQzgzNUVBMjk2RDNDNUUwOTdEMjQ2NUFCN0RFOEI0NTFCMTE0RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHNIuaUJaVmaP/u6obzRWzs6/
Ms1FMV8weA7NXW1mJnGZ/DhkivSCRa1iSRd14ElASfdEGlC/NP3E3foS18+MpeOJ
aWRZE+Envz1PJZUyrd6+WVjz+J0JzhuvhIuomug5JDWTljmlJx3ZtH9E9Ud2WDVL
3tMzRIM/aFei9JGnTnvl7GGq75WO/SfFdOfNy03QqTNnqR5fzOFt+BTQTIWfspN2
lzBQ5w/lA1tHG77ELJ9NlGfroS05e+rfGWR1L+1MSyj0RM7ASb6/+VCLTzqWsvcB
LKtJt/6P+F+nVEfJtWrZ4rvAvrEgWwozAfNja8xwNPVLjXiJiUYkhZWuazdXAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUkcg16iltPF4JfSRlq33otFGxFOswHwYDVR0j
BBgwFoAUPwsbt1h5M0AElvfzWlj7+FoHMqQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNyNUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFX
UG4vMC8zRjBCMUJCNzU4NzkzMzQwMDQ5NkY3RjM1QTU4RkJGODVBMDczMkE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGMEIxQkI3NTg3OTMzNDAw
NDk2RjdGMzVBNThGQkY4NUEwNzMyQTQuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzcjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzAv
MzIzODMwMzQzYTMzMzAzMzM0M2EzMTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIw
MzIzNjM0MzkzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKAQwNAAQMA0GCSqGSIb3DQEBCwUAA4IB
AQCck4wqCmbCDNW09jTj79CPued8YUjSWILRizoHGghmcYcBcOZzvlcGIc4SnWfe
M6V/rjgkmRV+g0xHhv6uVOevOmx6AzrUrZ1qtFJtZBKFbOJwugE71jijkxqo25wv
vPenSPKrM274Nuw4UfpOc3MD7qZnvwTrn1h/9F033rHe4fwyFTgToGkK1yjuhcZR
P2We30zdasl3Aeom8Z8VFNHOn9iO5W7TwHl3fi42RuSxBy3DaFA392E+OFhIWms0
ERfUaRRqhq3g9aczXCeqXtr1WGBhEiHA+x8/yv0UDNljeH423RJ2jxy2Fz6OPHls
vbsEXGTQwM0f/mCJ59xr2BIl
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:21 2025 by rpki-client