Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/323830343a366463633a383830303a3a2f34302d3430203d3e20323730353536.roa
File:                     323830343a366463633a383830303a3a2f34302d3430203d3e20323730353536.roa (raw, json)
Hash identifier:          k8ezV1uJt2uXK6yqpYWugF6+uU1j4puoE9u88VujkCA=
Subject key identifier:   AC:72:38:25:FF:88:D2:C9:B2:CB:66:CC:11:C8:66:B5:06:D9:39:C2
Certificate issuer:       /CN=A768E8071BA41175FFBF0F813FD385B6FA5B1681
Certificate serial:       3A1C12FB864EA9FF4C75C6A80D6C1F9C1145F932
Authority key identifier: A7:68:E8:07:1B:A4:11:75:FF:BF:0F:81:3F:D3:85:B6:FA:5B:16:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/323830343a366463633a383830303a3a2f34302d3430203d3e20323730353536.roa
Signing time:             Wed 16 Jul 2025 16:16:50 +0000
ROA not before:           Wed 16 Jul 2025 16:11:50 +0000
ROA not after:            Wed 15 Jul 2026 16:16:50 +0000
asID:                     270556
IP address blocks:        2804:6dcc:8800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.crl
                          rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:1c:12:fb:86:4e:a9:ff:4c:75:c6:a8:0d:6c:1f:9c:11:45:f9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A768E8071BA41175FFBF0F813FD385B6FA5B1681
        Validity
            Not Before: Jul 16 16:11:50 2025 GMT
            Not After : Jul 15 16:16:50 2026 GMT
        Subject: CN=AC723825FF88D2C9B2CB66CC11C866B506D939C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:df:f7:a5:69:af:1f:e1:e4:2f:37:b5:e5:
                    1f:b6:46:c0:73:dd:7e:76:54:a3:71:b4:d9:f8:d1:
                    26:fd:1c:e9:a7:32:f1:34:16:1a:0b:80:e5:29:d5:
                    1f:1b:49:16:d5:c3:49:4a:55:69:45:48:a1:31:6f:
                    cb:88:0c:7f:ec:00:16:d4:79:2f:26:c0:d4:99:2f:
                    c5:c3:ee:6a:80:c3:2a:5b:f9:38:6f:1c:79:9c:15:
                    ec:38:e7:ea:ca:32:f0:c6:a4:a4:6e:e7:18:7d:51:
                    34:aa:77:08:71:07:3c:b6:de:5a:e5:fc:49:2b:27:
                    3e:95:4b:1b:46:53:fa:d1:72:34:7e:a7:ee:df:d0:
                    4e:68:d0:00:e3:ee:5f:dd:ff:27:03:82:b7:67:69:
                    c8:6a:ab:17:58:d2:a4:9d:fa:16:de:02:42:09:b9:
                    84:08:ae:30:8d:7f:95:31:41:d7:c9:e4:ff:73:f1:
                    c8:bd:79:6c:95:0f:48:14:46:4d:1e:da:97:8c:be:
                    ad:33:92:ad:8e:2f:a5:3c:64:d3:7b:bc:8d:8e:65:
                    dd:67:4a:20:05:e3:7e:f6:c1:0a:a9:d2:a6:f7:4f:
                    60:4e:38:68:84:91:1b:da:ef:35:43:92:ac:07:49:
                    f0:de:ff:57:cb:cd:97:ca:a0:3d:57:b4:2d:fe:da:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:72:38:25:FF:88:D2:C9:B2:CB:66:CC:11:C8:66:B5:06:D9:39:C2
            X509v3 Authority Key Identifier:
                keyid:A7:68:E8:07:1B:A4:11:75:FF:BF:0F:81:3F:D3:85:B6:FA:5B:16:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/323830343a366463633a383830303a3a2f34302d3430203d3e20323730353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6dcc:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:bb:21:99:a5:ab:18:05:9e:77:a0:e0:8c:d7:11:84:a3:d8:
         39:e9:9d:c0:c6:dc:21:1d:e1:f8:e3:57:84:d6:69:ac:09:80:
         bc:a0:2b:37:b7:0d:6c:16:42:5c:84:55:8d:37:30:af:21:82:
         fe:af:00:de:5d:f8:a1:9b:74:69:12:20:59:58:e8:65:e9:7e:
         db:ee:83:69:b8:7c:f6:f3:c6:95:5a:a3:a7:c7:c8:ee:fc:a4:
         f8:5c:25:b3:c4:51:7c:34:f7:94:03:16:a3:83:42:0e:68:5e:
         7e:ef:2c:54:12:e3:56:ab:83:73:5c:79:27:31:4c:0e:d1:86:
         36:f1:0b:9b:ec:2b:77:b3:58:4d:54:4d:f1:fc:27:7d:9f:80:
         4e:b7:d8:dd:0a:3b:d4:20:c6:ad:f8:7f:0d:72:b0:9a:ff:93:
         80:41:9d:34:01:b4:e8:9f:79:15:cf:08:be:c2:30:2a:19:20:
         c3:2e:e3:2f:1f:01:15:ed:14:f9:f9:9d:3a:b7:2d:7a:f0:8b:
         7a:b9:b4:96:46:b3:41:14:5b:13:0d:23:5a:b3:a2:44:5a:b7:
         d2:6b:d9:dc:8b:a5:e1:b5:a3:8a:32:ed:a6:a7:42:ee:2a:39:
         5a:18:94:c8:7f:7a:ea:23:23:ad:9e:3a:14:1b:f6:39:f1:de:
         bc:e0:33:b6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOhwS+4ZOqf9MdcaoDWwfnBFF+TIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc2OEU4MDcxQkE0MTE3NUZGQkYwRjgxM0ZEMzg1QjZG
QTVCMTY4MTAeFw0yNTA3MTYxNjExNTBaFw0yNjA3MTUxNjE2NTBaMDMxMTAvBgNV
BAMTKEFDNzIzODI1RkY4OEQyQzlCMkNCNjZDQzExQzg2NkI1MDZEOTM5QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOTt/3pWmvH+HkLze15R+2RsBz
3X52VKNxtNn40Sb9HOmnMvE0FhoLgOUp1R8bSRbVw0lKVWlFSKExb8uIDH/sABbU
eS8mwNSZL8XD7mqAwypb+ThvHHmcFew45+rKMvDGpKRu5xh9UTSqdwhxBzy23lrl
/EkrJz6VSxtGU/rRcjR+p+7f0E5o0ADj7l/d/ycDgrdnachqqxdY0qSd+hbeAkIJ
uYQIrjCNf5UxQdfJ5P9z8ci9eWyVD0gURk0e2peMvq0zkq2OL6U8ZNN7vI2OZd1n
SiAF4372wQqp0qb3T2BOOGiEkRva7zVDkqwHSfDe/1fLzZfKoD1XtC3+2uVpAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUrHI4Jf+I0smyy2bMEchmtQbZOcIwHwYDVR0j
BBgwFoAUp2joBxukEXX/vw+BP9OFtvpbFoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREZ1SGFTMzZwcjh6elVQQWJSQWRHTkpjUjdLV2JLUTJ2a1hmd2phNHVt
a1cvMC9BNzY4RTgwNzFCQTQxMTc1RkZCRjBGODEzRkQzODVCNkZBNUIxNjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3NjhFODA3MUJBNDExNzVG
RkJGMEY4MTNGRDM4NUI2RkE1QjE2ODEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RGdUhhUzM2cHI4enpVUEFiUkFkR05KY1I3S1diS1EydmtYZndqYTR1bWtXLzAv
MzIzODMwMzQzYTM2NjQ2MzYzM2EzODM4MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMDM1MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEbcyIMA0GCSqGSIb3DQEBCwUA
A4IBAQAvuyGZpasYBZ53oOCM1xGEo9g56Z3AxtwhHeH441eE1mmsCYC8oCs3tw1s
FkJchFWNNzCvIYL+rwDeXfihm3RpEiBZWOhl6X7b7oNpuHz288aVWqOnx8ju/KT4
XCWzxFF8NPeUAxajg0IOaF5+7yxUEuNWq4NzXHknMUwO0YY28Qub7Ct3s1hNVE3x
/Cd9n4BOt9jdCjvUIMat+H8NcrCa/5OAQZ00AbTon3kVzwi+wjAqGSDDLuMvHwEV
7RT5+Z06ty168It6ubSWRrNBFFsTDSNas6JEWrfSa9nci6XhtaOKMu2mp0LuKjla
GJTIf3rqIyOtnjoUG/Y58d684DO2
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:57:00 2025 by rpki-client