Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          mdOiBZtgI+ti3jq3PZfCSetp9MGwXqFHW6sGWkbR7c0=
Subject key identifier:   0B:4B:EA:94:D8:DD:35:2E:E7:8B:6B:93:FA:5D:66:E1:D8:74:26:DC
Certificate issuer:       /CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
Certificate serial:       73B403E4B0912CAC22A285392FA030C691D3ACB1
Authority key identifier: 3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Mon 14 Jul 2025 15:36:26 +0000
ROA not before:           Mon 14 Jul 2025 15:31:26 +0000
ROA not after:            Mon 13 Jul 2026 15:36:26 +0000
asID:                     264936
IP address blocks:        2804:3034::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 19:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b4:03:e4:b0:91:2c:ac:22:a2:85:39:2f:a0:30:c6:91:d3:ac:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0B1BB7587933400496F7F35A58FBF85A0732A4
        Validity
            Not Before: Jul 14 15:31:26 2025 GMT
            Not After : Jul 13 15:36:26 2026 GMT
        Subject: CN=0B4BEA94D8DD352EE78B6B93FA5D66E1D87426DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:96:01:32:79:51:ea:0c:df:8d:cf:86:36:
                    d1:99:65:8e:92:c7:f4:dc:f8:74:38:25:c1:db:75:
                    52:21:5e:b5:b1:12:bb:38:e0:b8:7a:07:bf:2d:b7:
                    01:d6:56:4a:48:02:a6:45:24:93:59:d8:19:b5:bf:
                    b1:76:76:89:e0:8e:81:63:21:c7:20:75:a8:4b:90:
                    6c:e4:cb:01:b0:07:a9:c0:3d:56:80:b7:7e:cf:31:
                    72:f7:5c:fb:4c:b1:a2:9e:b2:40:4d:9e:19:d3:32:
                    de:52:4e:df:dc:2e:23:ef:52:bf:27:f6:4b:9e:2b:
                    a6:b6:03:09:05:76:cb:e1:38:8a:db:93:da:10:38:
                    3d:34:bd:3d:04:8b:c8:58:2a:bb:94:0e:24:1b:b8:
                    aa:c3:a4:0a:49:3f:53:94:dc:d9:79:56:83:ba:48:
                    56:fa:98:8a:bf:4b:2b:69:c5:50:eb:0c:94:bd:58:
                    8b:33:9d:07:74:70:f3:e7:5a:2f:d6:9f:bb:df:0a:
                    4c:3a:59:3b:53:f8:9d:f6:8a:fe:8e:aa:d2:ae:92:
                    0c:d2:53:f5:ab:ef:38:af:de:84:0b:cd:ec:da:92:
                    cd:55:7b:0f:05:c8:0e:aa:e8:07:08:fd:fb:13:90:
                    ee:07:73:52:92:ab:2f:69:e2:2e:62:63:01:95:33:
                    81:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4B:EA:94:D8:DD:35:2E:E7:8B:6B:93:FA:5D:66:E1:D8:74:26:DC
            X509v3 Authority Key Identifier:
                keyid:3F:0B:1B:B7:58:79:33:40:04:96:F7:F3:5A:58:FB:F8:5A:07:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3F0B1BB7587933400496F7F35A58FBF85A0732A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0B1BB7587933400496F7F35A58FBF85A0732A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034::/44

    Signature Algorithm: sha256WithRSAEncryption
         3d:dd:45:2a:0a:35:f9:a9:8e:e5:29:05:70:e5:45:ff:89:99:
         37:29:c7:5b:df:02:ce:e6:0f:94:25:fa:44:8a:f7:ce:c5:ec:
         bc:3e:07:cb:de:52:15:cb:3f:8a:0d:01:c7:ce:96:53:21:63:
         21:5d:5b:4f:cf:c7:02:5e:1d:62:e4:fb:d6:32:84:f2:d2:7f:
         fd:5e:c2:41:d0:8d:1c:b4:15:dd:f7:97:8e:c1:e4:d1:cb:3a:
         0d:75:36:00:1d:82:36:87:05:9b:66:e3:ad:42:c1:b0:bd:c9:
         b6:07:96:23:27:91:c8:e7:4f:d1:ac:3d:71:96:6f:ba:84:f1:
         fa:d9:5d:7a:25:75:27:67:45:6b:ec:2c:6d:26:6e:5f:20:32:
         be:8a:78:fc:2a:5d:dc:be:ef:9b:d3:54:6a:31:5a:e6:ee:8b:
         c2:07:9f:30:fc:a5:dd:51:95:c9:6f:48:f1:38:5b:7f:71:bc:
         c2:ca:6e:b6:bb:09:15:3c:ca:e8:f0:44:74:1d:84:d1:ee:5a:
         ac:ef:60:56:30:9e:8d:e9:09:58:f1:b9:fc:36:d2:e9:29:84:
         67:f7:21:46:f8:d6:4f:17:03:eb:fe:73:44:2a:35:82:82:65:
         ec:54:8f:d3:a1:d2:23:33:a9:81:ce:a5:84:06:da:df:8b:d2:
         aa:e4:82:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:37 2025 by rpki-client