Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f33322d3332203d3e20323634393336.roa
File:                     323830343a333033343a3a2f33322d3332203d3e20323634393336.roa (raw, json)
Hash identifier:          LVLy4yFEouQKsoj5NaGLyw9jtXjTnCWUuzwLRbZLc0o=
Subject key identifier:   A4:C6:8F:AC:AE:08:17:55:94:F5:BE:C9:92:9F:92:8A:E4:2F:AF:5A
Certificate issuer:       /CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
Certificate serial:       204B7CCC934AFB539A9441B915C0F3011358C280
Authority key identifier: 3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f33322d3332203d3e20323634393336.roa
Signing time:             Mon 14 Jul 2025 15:36:20 +0000
ROA not before:           Mon 14 Jul 2025 15:31:20 +0000
ROA not after:            Mon 13 Jul 2026 15:36:20 +0000
asID:                     264936
IP address blocks:        2804:3034::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 19:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4b:7c:cc:93:4a:fb:53:9a:94:41:b9:15:c0:f3:01:13:58:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
        Validity
            Not Before: Jul 14 15:31:20 2025 GMT
            Not After : Jul 13 15:36:20 2026 GMT
        Subject: CN=A4C68FACAE08175594F5BEC9929F928AE42FAF5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:eb:cf:fa:a7:94:c3:fa:d9:30:da:e5:5b:
                    da:ef:b4:c0:ea:3d:6b:75:15:9d:f7:b7:c8:59:3f:
                    7f:32:5c:b4:49:33:f4:ea:bc:74:e5:06:3f:0c:db:
                    51:ee:dc:43:c1:40:18:f7:74:61:22:7c:9b:1f:60:
                    b7:84:ef:36:30:30:03:42:d6:59:c5:45:b4:fd:cf:
                    c8:f5:4c:63:56:61:68:7d:ac:ef:06:12:dc:18:8b:
                    36:2d:6f:0e:87:21:b0:25:0e:a8:35:61:1f:43:05:
                    9a:2a:c2:ca:ef:0c:19:4b:f5:46:33:58:e1:ec:c4:
                    03:c2:c8:3c:08:5c:81:5d:6c:e2:01:76:ca:13:b8:
                    c0:96:0b:8d:1b:9b:fa:bb:93:a2:6a:fa:da:9c:fb:
                    f2:d4:1d:36:77:b3:ae:28:b2:60:f4:59:5e:c9:ed:
                    de:7b:21:0d:09:42:b3:c9:3f:0e:47:ce:c9:12:ff:
                    ab:5a:27:64:95:eb:f8:31:9f:01:06:2f:1b:fc:78:
                    e7:79:fb:d5:cc:cc:37:71:2e:70:a7:7f:4c:11:76:
                    ba:60:c2:b1:37:1a:fe:3b:33:c9:76:ee:ae:ea:38:
                    62:e5:b6:1d:fe:89:80:f0:b9:75:2f:93:53:83:8b:
                    aa:c0:ed:0a:9b:e7:5c:78:af:86:95:e3:ca:6d:11:
                    96:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C6:8F:AC:AE:08:17:55:94:F5:BE:C9:92:9F:92:8A:E4:2F:AF:5A
            X509v3 Authority Key Identifier:
                keyid:3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f33322d3332203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:b6:80:3c:13:e9:c2:19:e1:4c:bc:4c:ff:ee:b8:1b:f3:f9:
         b2:7a:aa:48:e3:63:77:c1:c8:49:48:77:1c:62:90:f2:7c:cf:
         76:c0:a8:c3:42:7d:be:bb:16:2b:65:db:d7:3c:65:35:48:b4:
         05:aa:02:d2:59:36:dd:6d:87:a4:0d:3d:73:c5:da:5d:bd:a7:
         17:cf:c1:e2:6d:bd:e5:05:7c:39:96:9a:ba:da:9d:d0:8a:a3:
         db:3c:42:87:4c:2c:c8:a0:1d:b2:9e:c3:f6:ae:da:e8:18:06:
         ce:2a:47:62:79:c6:fd:86:9a:25:a4:ba:f7:e5:6b:4a:3c:ac:
         48:e2:fb:7c:a7:ab:91:46:66:ea:51:b1:c6:3e:ee:c6:ef:c0:
         22:94:fa:e5:57:c9:d1:1f:d2:b5:cb:52:3c:8c:7f:35:06:5e:
         dd:d0:01:9f:af:63:b9:96:70:6e:e3:4e:82:57:17:28:ba:8b:
         fb:1d:82:c0:8a:1d:4f:1d:4a:c9:76:d1:4a:4f:19:a3:4b:d5:
         65:87:68:20:c2:d0:a0:19:f4:8c:c1:6b:97:88:8e:c0:13:e2:
         27:7a:2c:b1:8b:e7:aa:b4:8d:e9:16:27:44:0f:26:a8:67:96:
         ce:49:4f:e0:af:88:a9:0d:e9:fa:03:1c:81:46:7f:cc:38:ee:
         cc:9d:82:87
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIEt8zJNK+1OalEG5FcDzARNYwoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YwQjFCQjc1ODc5MzM0MDA0OTZGN0YzNUE1OEZCRjg1
QTA3MzJBNDAeFw0yNTA3MTQxNTMxMjBaFw0yNjA3MTMxNTM2MjBaMDMxMTAvBgNV
BAMTKEE0QzY4RkFDQUUwODE3NTU5NEY1QkVDOTkyOUY5MjhBRTQyRkFGNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvrOvP+qeUw/rZMNrlW9rvtMDq
PWt1FZ33t8hZP38yXLRJM/TqvHTlBj8M21Hu3EPBQBj3dGEifJsfYLeE7zYwMANC
1lnFRbT9z8j1TGNWYWh9rO8GEtwYizYtbw6HIbAlDqg1YR9DBZoqwsrvDBlL9UYz
WOHsxAPCyDwIXIFdbOIBdsoTuMCWC40bm/q7k6Jq+tqc+/LUHTZ3s64osmD0WV7J
7d57IQ0JQrPJPw5HzskS/6taJ2SV6/gxnwEGLxv8eOd5+9XMzDdxLnCnf0wRdrpg
wrE3Gv47M8l27q7qOGLlth3+iYDwuXUvk1ODi6rA7Qqb51x4r4aV48ptEZZfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUpMaPrK4IF1WU9b7Jkp+SiuQvr1owHwYDVR0j
BBgwFoAUPwsbt1h5M0AElvfzWlj7+FoHMqQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNyNUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFX
UG4vMC8zRjBCMUJCNzU4NzkzMzQwMDQ5NkY3RjM1QTU4RkJGODVBMDczMkE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGMEIxQkI3NTg3OTMzNDAw
NDk2RjdGMzVBNThGQkY4NUEwNzMyQTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzcjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzAv
MzIzODMwMzQzYTMzMzAzMzM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzkzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQwNDANBgkqhkiG9w0BAQsFAAOCAQEAlraAPBPp
whnhTLxM/+64G/P5snqqSONjd8HISUh3HGKQ8nzPdsCow0J9vrsWK2Xb1zxlNUi0
BaoC0lk23W2HpA09c8XaXb2nF8/B4m295QV8OZaautqd0Iqj2zxCh0wsyKAdsp7D
9q7a6BgGzipHYnnG/YaaJaS69+VrSjysSOL7fKerkUZm6lGxxj7uxu/AIpT65VfJ
0R/StctSPIx/NQZe3dABn69juZZwbuNOglcXKLqL+x2CwIodTx1KyXbRSk8Zo0vV
ZYdoIMLQoBn0jMFrl4iOwBPiJ3ossYvnqrSN6RYnRA8mqGeWzklP4K+IqQ3p+gMc
gUZ/zDjuzJ2Chw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:07 2025 by rpki-client