Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa
File:                     323830343a323936303a3a2f33322d3332203d3e20323634303131.roa (raw, json)
Hash identifier:          UePXoQUId1fCKMXOQtXLYp/YCvJpcpbkwWbtILw3IvQ=
Subject key identifier:   3D:A2:C0:B2:38:0B:0F:5D:BA:C4:E8:E3:70:1C:67:F3:10:DD:32:3F
Certificate issuer:       /CN=443BA13DE0ABBA767490BA2BABF46C62BC39424A
Certificate serial:       0356DDA8D1EB2417338FD7C9B8A4848E185669CE
Authority key identifier: 44:3B:A1:3D:E0:AB:BA:76:74:90:BA:2B:AB:F4:6C:62:BC:39:42:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443BA13DE0ABBA767490BA2BABF46C62BC39424A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa
Signing time:             Sat 21 Jun 2025 23:49:00 +0000
ROA not before:           Sat 21 Jun 2025 23:44:00 +0000
ROA not after:            Sat 20 Jun 2026 23:49:00 +0000
asID:                     264011
IP address blocks:        2804:2960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/443BA13DE0ABBA767490BA2BABF46C62BC39424A.crl
                          rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/443BA13DE0ABBA767490BA2BABF46C62BC39424A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443BA13DE0ABBA767490BA2BABF46C62BC39424A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 21:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:56:dd:a8:d1:eb:24:17:33:8f:d7:c9:b8:a4:84:8e:18:56:69:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443BA13DE0ABBA767490BA2BABF46C62BC39424A
        Validity
            Not Before: Jun 21 23:44:00 2025 GMT
            Not After : Jun 20 23:49:00 2026 GMT
        Subject: CN=3DA2C0B2380B0F5DBAC4E8E3701C67F310DD323F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6a:cf:84:89:04:5f:dd:68:83:25:84:1b:cd:
                    ec:cd:69:0e:d3:47:b8:01:b9:65:c8:63:ff:94:2b:
                    22:c5:85:9a:7b:b3:00:03:fb:38:fd:36:5a:fa:23:
                    61:2c:16:b7:e1:a1:a3:08:a0:a4:de:70:b5:8d:08:
                    08:bb:aa:35:79:22:89:d3:78:14:29:eb:e6:f3:b1:
                    bb:e7:9a:f1:d7:71:02:bf:4c:20:a9:85:76:b0:e8:
                    f5:9c:8a:d8:47:42:bb:7d:7e:ea:bf:66:6b:f1:42:
                    67:62:7d:a4:41:2f:fe:86:2d:da:3c:e9:a6:54:9a:
                    cb:8c:5f:84:e3:9c:06:a9:ea:21:04:27:ff:b9:6e:
                    67:1d:4a:ce:06:f8:e4:5c:18:57:95:01:1f:9d:f1:
                    34:8e:a8:df:26:f8:8c:d9:4f:c8:ee:86:60:f6:91:
                    1a:fe:97:be:63:85:3a:9e:3a:8f:3b:cd:f5:8f:91:
                    c8:15:fd:e1:bb:be:e1:60:5d:9b:e0:0d:1b:24:ec:
                    f8:b4:d2:c2:57:75:81:09:a5:79:82:9a:31:24:74:
                    ce:cf:21:9a:6c:ac:73:aa:76:eb:a0:75:2c:43:93:
                    d2:65:d4:65:29:37:07:5d:d7:9a:6a:68:c8:27:3a:
                    09:aa:b2:1f:94:80:2e:8d:55:db:f6:30:94:c8:3b:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A2:C0:B2:38:0B:0F:5D:BA:C4:E8:E3:70:1C:67:F3:10:DD:32:3F
            X509v3 Authority Key Identifier:
                keyid:44:3B:A1:3D:E0:AB:BA:76:74:90:BA:2B:AB:F4:6C:62:BC:39:42:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/443BA13DE0ABBA767490BA2BABF46C62BC39424A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443BA13DE0ABBA767490BA2BABF46C62BC39424A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2960::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:6e:d2:91:95:5e:eb:0e:0a:73:5b:76:b3:d0:9e:ae:40:45:
         24:af:1e:f4:25:cd:f2:cc:e7:0e:23:02:e8:b5:2f:d4:cb:84:
         69:ff:c5:44:e4:49:19:c0:33:60:27:25:0d:aa:01:1c:19:98:
         42:53:0c:27:eb:b7:a3:1d:7e:36:a9:08:90:13:3d:2a:1a:fc:
         63:60:de:99:e4:0c:d5:cd:20:fa:3f:35:0c:51:aa:08:d3:09:
         2e:76:a8:d3:c2:13:d4:63:d6:2e:5b:ea:fc:b2:ec:72:c1:14:
         4d:1d:bf:f3:75:22:13:cc:d4:66:0b:1c:f6:7c:42:d2:49:61:
         25:5a:eb:c6:d1:32:d6:0a:15:26:1b:76:e2:ff:7a:91:59:7e:
         5e:5d:10:8a:69:df:d1:bc:20:5e:9b:8b:98:99:90:88:70:e7:
         59:56:c8:3f:88:1f:31:7a:28:1d:65:5c:24:b2:ad:f0:79:d0:
         a0:12:72:f9:31:b6:59:2f:ca:db:51:39:f5:78:a9:ab:64:eb:
         dd:07:4b:de:a7:11:85:e9:20:57:51:51:c7:de:03:5d:0a:7a:
         95:fa:7e:b7:00:87:4e:20:b9:43:e0:02:7c:44:72:06:f7:d3:
         5f:2b:62:be:20:10:67:ff:0c:57:a4:7b:69:43:43:74:7c:2f:
         cb:d4:fd:16
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUA1bdqNHrJBczj9fJuKSEjhhWac4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQzQkExM0RFMEFCQkE3Njc0OTBCQTJCQUJGNDZDNjJC
QzM5NDI0QTAeFw0yNTA2MjEyMzQ0MDBaFw0yNjA2MjAyMzQ5MDBaMDMxMTAvBgNV
BAMTKDNEQTJDMEIyMzgwQjBGNURCQUM0RThFMzcwMUM2N0YzMTBERDMyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnas+EiQRf3WiDJYQbzezNaQ7T
R7gBuWXIY/+UKyLFhZp7swAD+zj9Nlr6I2EsFrfhoaMIoKTecLWNCAi7qjV5IonT
eBQp6+bzsbvnmvHXcQK/TCCphXaw6PWcithHQrt9fuq/ZmvxQmdifaRBL/6GLdo8
6aZUmsuMX4TjnAap6iEEJ/+5bmcdSs4G+ORcGFeVAR+d8TSOqN8m+IzZT8juhmD2
kRr+l75jhTqeOo87zfWPkcgV/eG7vuFgXZvgDRsk7Pi00sJXdYEJpXmCmjEkdM7P
IZpsrHOqduugdSxDk9Jl1GUpNwdd15pqaMgnOgmqsh+UgC6NVdv2MJTIO4JXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPaLAsjgLD126xOjjcBxn8xDdMj8wHwYDVR0j
BBgwFoAURDuhPeCrunZ0kLorq/RsYrw5QkowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGlNbXBKQWEyOXV6c2tpbmdONDJuanY1TWQ3VVpCM3JTaW1BMmtZckY0
UlYvMC80NDNCQTEzREUwQUJCQTc2NzQ5MEJBMkJBQkY0NkM2MkJDMzk0MjRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0M0JBMTNERTBBQkJBNzY3
NDkwQkEyQkFCRjQ2QzYyQkMzOTQyNEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRpTW1wSkFhMjl1enNraW5nTjQybmp2NU1kN1VaQjNyU2ltQTJrWXJGNFJWLzAv
MzIzODMwMzQzYTMyMzkzNjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzAzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQpYDANBgkqhkiG9w0BAQsFAAOCAQEAiG7SkZVe
6w4Kc1t2s9CerkBFJK8e9CXN8sznDiMC6LUv1MuEaf/FRORJGcAzYCclDaoBHBmY
QlMMJ+u3ox1+NqkIkBM9Khr8Y2DemeQM1c0g+j81DFGqCNMJLnao08IT1GPWLlvq
/LLscsEUTR2/83UiE8zUZgsc9nxC0klhJVrrxtEy1goVJht24v96kVl+Xl0Qimnf
0bwgXpuLmJmQiHDnWVbIP4gfMXooHWVcJLKt8HnQoBJy+TG2WS/K21E59Xipq2Tr
3QdL3qcRhekgV1FRx94DXQp6lfp+twCHTiC5Q+ACfERyBvfTXytiviAQZ/8MV6R7
aUNDdHwvy9T9Fg==
-----END CERTIFICATE-----
Generated at Mon Jun 23 14:25:49 2025 by rpki-client