Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          kKJq+Du5tzRgRo4rvQrONLeoqzK24lV2nSwwyu342ZI=
Subject key identifier:   34:91:61:75:EE:FD:E9:50:86:CC:FC:23:51:A0:1B:71:AA:72:BC:BA
Certificate issuer:       /CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
Certificate serial:       4DADE0069BD2A21974A5595520170B4880E78157
Authority key identifier: 3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Mon 14 Jul 2025 15:36:44 +0000
ROA not before:           Mon 14 Jul 2025 15:31:44 +0000
ROA not after:            Mon 13 Jul 2026 15:36:44 +0000
asID:                     264936
IP address blocks:        2804:3034:50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 19:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ad:e0:06:9b:d2:a2:19:74:a5:59:55:20:17:0b:48:80:e7:81:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
        Validity
            Not Before: Jul 14 15:31:44 2025 GMT
            Not After : Jul 13 15:36:44 2026 GMT
        Subject: CN=34916175EEFDE95086CCFC2351A01B71AA72BCBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:be:2c:17:01:ac:08:e9:ef:e2:92:f1:bf:9c:
                    72:57:36:14:71:9a:34:fc:27:13:eb:a4:71:c5:cf:
                    50:8f:e1:0b:cf:f4:cb:5c:13:58:48:be:20:1a:21:
                    86:59:1f:7a:bd:75:fb:6c:a0:42:cb:fa:dc:a2:c5:
                    0d:ae:13:a8:73:03:91:56:46:44:f0:8a:ca:fd:e7:
                    6b:4c:24:71:7e:c0:8b:f9:c5:52:c9:28:81:f3:99:
                    f5:97:e2:d2:0c:33:bc:94:84:e5:2d:7f:3f:88:51:
                    93:35:13:f6:6f:1c:6d:c0:d8:20:11:b0:d8:6c:fe:
                    63:c9:46:fe:32:a9:3f:28:fd:64:49:68:3e:bb:fd:
                    e4:20:23:51:dd:44:13:af:74:5f:3c:1b:9f:71:d7:
                    22:56:e0:be:ab:64:b3:65:7b:47:7e:64:bd:2a:7e:
                    ac:47:26:d1:6b:54:24:d0:bf:f6:bc:a4:c9:9c:e6:
                    13:62:46:f2:80:28:01:f1:45:80:50:8a:60:11:97:
                    32:19:f1:e7:7f:86:c2:78:20:cd:69:40:4f:67:5b:
                    81:72:83:8d:06:1d:08:f7:d9:fc:f4:08:b6:ca:c1:
                    9f:e3:17:53:a2:bc:55:a8:1c:ce:31:77:2d:42:b5:
                    c7:e5:d8:f2:26:17:88:ca:13:77:c1:bf:d0:62:90:
                    4b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:91:61:75:EE:FD:E9:50:86:CC:FC:23:51:A0:1B:71:AA:72:BC:BA
            X509v3 Authority Key Identifier:
                keyid:3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a35303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         48:28:8c:9a:b6:e4:05:fc:05:77:6f:f7:e9:30:5f:60:13:a5:
         ba:93:45:f1:58:7e:13:12:ab:97:13:07:68:aa:23:f2:65:95:
         3f:a6:a0:d4:6c:09:fc:ca:d9:f0:d9:40:4f:49:25:3f:97:c7:
         af:c1:07:02:b6:17:4f:c9:2d:c5:69:7a:6a:bb:46:9c:4d:09:
         75:72:75:37:2c:37:7d:7e:9a:2a:dd:9b:ad:04:6d:b6:a4:92:
         6b:7e:09:3a:09:d5:5c:21:8f:9f:00:ac:5f:ff:7e:78:23:17:
         ad:41:c5:3f:23:3f:35:c7:03:ff:da:b5:32:8b:d7:f1:0f:dc:
         62:31:36:be:21:76:30:1e:1e:17:23:de:3f:08:f4:56:5c:e8:
         75:4b:2a:c0:4d:7f:53:62:ea:59:d9:6c:32:35:22:b6:65:c9:
         82:20:b4:8f:88:9f:cf:2b:fd:80:a1:d2:da:2f:7a:53:34:6b:
         f7:af:93:3b:4f:fa:06:f8:81:2a:aa:05:8a:fc:f2:57:ac:d6:
         3a:8b:85:da:c9:43:c7:e7:40:6e:28:a0:8c:05:bc:e5:f5:fb:
         f7:d0:a1:5b:22:38:c7:b5:9f:26:f5:8e:c7:fb:fc:33:39:01:
         59:96:29:04:27:63:f9:1b:e8:71:ea:b6:e5:dd:32:6a:c0:90:
         75:0b:f4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:03 2025 by rpki-client