Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          WzxRYJsT9A9dbPbKXJuixdeiG0NZsoBdkJ4ObUGBAmI=
Subject key identifier:   B8:DA:A4:62:EA:62:31:A8:3D:27:49:F6:FF:21:4D:61:CD:C3:EF:29
Certificate issuer:       /CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
Certificate serial:       1FD1925A16EC138EAA68A36E51B324A6334449C6
Authority key identifier: 3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Mon 14 Jul 2025 15:36:41 +0000
ROA not before:           Mon 14 Jul 2025 15:31:41 +0000
ROA not after:            Mon 13 Jul 2026 15:36:41 +0000
asID:                     264936
IP address blocks:        2804:3034:40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 19:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d1:92:5a:16:ec:13:8e:aa:68:a3:6e:51:b3:24:a6:33:44:49:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
        Validity
            Not Before: Jul 14 15:31:41 2025 GMT
            Not After : Jul 13 15:36:41 2026 GMT
        Subject: CN=B8DAA462EA6231A83D2749F6FF214D61CDC3EF29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cd:29:a4:23:27:3a:95:a7:88:21:49:16:4d:
                    4e:61:d5:8c:bf:25:49:6e:04:21:15:d2:9b:0f:80:
                    6c:26:a4:49:d2:88:97:6c:2a:6d:51:00:4c:ed:95:
                    46:65:30:8a:81:46:44:76:42:7b:98:84:e5:73:58:
                    46:7f:91:f8:86:6d:d8:67:b2:01:bf:23:c1:5a:dc:
                    d4:49:93:39:a4:5e:5c:84:cf:1d:13:e9:c7:96:79:
                    c3:95:66:87:70:dd:a3:84:10:8d:20:c8:1a:f1:f9:
                    a6:19:1a:1b:64:47:87:40:4e:c3:c7:16:14:50:dd:
                    e3:1f:c6:9a:b7:77:52:d8:da:a7:c4:10:4d:1a:26:
                    4a:36:9c:15:91:91:f3:c3:35:ed:c7:bd:7a:7b:d3:
                    25:bd:f0:1b:d6:4f:4a:64:71:23:1f:e2:7d:d6:22:
                    eb:21:fc:17:c6:b5:82:ac:86:0a:58:f8:70:05:69:
                    88:bb:a4:df:98:0d:d6:23:06:b0:bc:e8:0b:ba:65:
                    c5:d1:91:eb:75:72:ff:e5:2d:68:b0:b5:b0:2c:40:
                    40:0f:c2:51:e1:10:7b:38:68:6a:b7:a2:ec:39:ef:
                    7a:6a:16:87:df:97:13:04:53:f5:bb:f8:d9:c2:86:
                    da:69:87:ea:3f:3d:57:cf:b9:e2:5f:92:23:1f:8a:
                    77:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DA:A4:62:EA:62:31:A8:3D:27:49:F6:FF:21:4D:61:CD:C3:EF:29
            X509v3 Authority Key Identifier:
                keyid:3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         89:f9:b4:13:a1:a3:cd:7a:c5:0c:7c:f2:5a:72:46:de:22:4e:
         f9:0f:01:8d:7f:a7:ad:5a:60:c5:e0:32:aa:96:27:8b:0d:df:
         c1:41:69:da:e9:07:11:46:38:c4:05:cb:e4:ab:5f:2b:e4:e3:
         a5:97:39:94:29:9a:9b:5f:3b:ee:71:2f:65:34:da:24:a8:f1:
         40:80:d5:af:0c:4d:35:ca:57:af:92:72:32:1d:82:32:69:4e:
         80:ed:8d:8e:36:70:15:af:e6:79:1c:f3:f8:a4:5a:8b:ee:d4:
         8f:50:f5:a5:e1:c3:c8:51:a8:11:3f:c4:0b:50:97:05:5e:35:
         ce:f9:55:90:0c:e3:10:3b:e7:cb:a8:11:c9:1b:c9:46:69:0f:
         2d:11:fe:6c:1b:e7:1f:a5:3b:42:3b:e8:09:b1:0e:35:c0:a6:
         f1:39:56:3a:a2:d7:ab:b8:33:00:12:2e:4a:a4:ca:ef:72:88:
         72:c5:bd:db:37:6b:75:71:21:0b:94:2a:b3:8d:99:be:ae:92:
         a5:c6:c8:55:d1:ee:9f:2b:cd:67:e8:18:1e:4a:d2:b9:ed:01:
         86:22:0a:52:3f:e6:19:96:c2:35:c4:b8:d9:d2:ff:d3:da:69:
         56:19:ba:ce:d9:1d:5f:58:d2:af:f8:63:f9:b5:c4:b4:7d:bf:
         bd:78:fc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:03 2025 by rpki-client