Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3131303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a3131303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          jYc62JXkHK0peVkPLefudi6p/WzUcSwTUsJxbFYIDaQ=
Subject key identifier:   9B:58:E0:08:CB:8D:A8:D9:13:ED:62:34:31:D8:5B:36:39:BC:0B:DC
Certificate issuer:       /CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
Certificate serial:       5739C43DDE599C0CA6505EA2C1EF8DA4F9E36B8C
Authority key identifier: 3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3131303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Mon 14 Jul 2025 15:36:50 +0000
ROA not before:           Mon 14 Jul 2025 15:31:50 +0000
ROA not after:            Mon 13 Jul 2026 15:36:50 +0000
asID:                     264936
IP address blocks:        2804:3034:110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 19:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:39:c4:3d:de:59:9c:0c:a6:50:5e:a2:c1:ef:8d:a4:f9:e3:6b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
        Validity
            Not Before: Jul 14 15:31:50 2025 GMT
            Not After : Jul 13 15:36:50 2026 GMT
        Subject: CN=9B58E008CB8DA8D913ED623431D85B3639BC0BDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:40:d6:f2:71:82:bb:45:14:82:c9:11:19:
                    db:2b:bb:d3:71:7e:ba:44:73:f6:e5:03:92:d6:d9:
                    55:c5:d5:3f:23:fb:c9:15:cb:03:93:54:64:bd:e3:
                    61:c4:45:c3:48:72:72:de:80:f9:41:dc:94:04:c9:
                    cc:5d:77:29:69:87:c4:03:12:24:32:e3:64:50:96:
                    ac:67:fa:b0:66:f5:2b:3a:6e:5c:31:1b:fe:b8:2a:
                    2b:e6:08:e4:d5:3e:bd:4e:1f:61:86:8f:14:0c:b6:
                    4a:a4:69:de:f9:ba:83:e8:97:4d:25:64:a0:91:8f:
                    f5:7e:e0:8c:d2:06:02:f2:67:c8:20:81:ad:a4:06:
                    4c:b9:ef:37:6e:56:b4:ea:6f:77:f0:37:47:93:d6:
                    08:1b:f5:6e:6d:48:e4:e0:10:bc:82:a9:58:e6:11:
                    25:60:d4:53:37:c6:97:d5:c9:86:5c:1f:b0:0b:32:
                    30:64:94:f2:ef:c3:aa:a5:23:25:39:cd:f9:c1:d8:
                    e4:8a:27:20:24:9f:f3:94:82:2f:de:8a:09:2a:a3:
                    a4:53:11:ca:5b:37:d6:29:27:b8:e4:81:d3:b2:32:
                    89:2b:c0:43:f5:5b:f3:3e:5b:6f:62:03:b4:9c:25:
                    6a:d4:0c:ac:83:de:7c:4a:b5:26:a6:89:ae:6f:85:
                    5e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:58:E0:08:CB:8D:A8:D9:13:ED:62:34:31:D8:5B:36:39:BC:0B:DC
            X509v3 Authority Key Identifier:
                keyid:3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3131303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         a5:ce:a1:43:ec:0b:b1:50:f2:fb:02:5e:97:1c:6e:30:9f:28:
         d8:49:f4:f5:77:50:30:f8:c1:5d:0f:96:af:86:06:00:35:0b:
         c2:fb:66:33:3c:1c:c9:c6:64:42:c6:fb:f9:28:79:8a:07:36:
         2f:52:e0:fa:66:d3:59:62:19:24:6f:87:42:ce:dc:22:1b:58:
         b4:ad:ad:9d:e0:28:d0:8f:5f:70:92:f5:c3:1b:1e:85:69:89:
         f2:cd:1b:08:01:f4:eb:10:b5:36:78:bc:92:c3:98:97:16:a1:
         4b:c7:cc:f6:19:45:d0:70:87:1d:e8:76:70:d9:f8:5e:7f:8f:
         7a:c3:63:96:cf:3a:9c:c4:ed:67:09:c8:c4:e5:cc:27:aa:70:
         31:3f:1c:75:97:2e:6c:c0:a9:41:78:93:d7:4d:53:9b:f4:79:
         3c:34:4b:fb:b6:19:91:4c:f3:d0:bb:dd:3f:79:07:f5:20:1c:
         f5:b0:3e:b7:4c:73:94:57:0d:b5:a8:8e:e6:97:f3:dc:9e:fd:
         07:68:bb:f6:ff:49:98:58:e2:89:ec:5b:7f:58:ea:f3:c9:f8:
         19:06:95:b2:bb:81:2b:e8:ed:34:81:c0:ee:74:66:99:1f:40:
         04:0e:de:ac:bb:08:2e:d8:1f:20:ce:f3:18:1b:86:51:73:39:
         93:ef:cd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:58 2025 by rpki-client