Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a3a2f33342d3334203d3e20323730373131.roa
File:                     323830343a373033303a3a2f33342d3334203d3e20323730373131.roa (raw, json)
Hash identifier:          38URD+9H8/qd1Gynoz2VjmfNwdex5HnNFTGSSJDz/DE=
Subject key identifier:   48:BD:A3:10:4B:E1:7D:49:59:34:32:3A:60:C8:D8:A0:C2:A7:1F:7C
Certificate issuer:       /CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
Certificate serial:       308AB35E50A4AB13E270AA6D5B34C39EFF2C2A3A
Authority key identifier: 44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a3a2f33342d3334203d3e20323730373131.roa
Signing time:             Thu 31 Jul 2025 15:08:24 +0000
ROA not before:           Thu 31 Jul 2025 15:03:24 +0000
ROA not after:            Thu 30 Jul 2026 15:08:24 +0000
asID:                     270711
IP address blocks:        2804:7030::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl
                          rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 01:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8a:b3:5e:50:a4:ab:13:e2:70:aa:6d:5b:34:c3:9e:ff:2c:2a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
        Validity
            Not Before: Jul 31 15:03:24 2025 GMT
            Not After : Jul 30 15:08:24 2026 GMT
        Subject: CN=48BDA3104BE17D495934323A60C8D8A0C2A71F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:dc:9a:12:56:c5:78:38:20:22:52:1c:6f:
                    8e:b9:74:bb:53:55:ec:19:88:9d:da:44:b5:02:20:
                    3f:f3:e1:29:d3:70:b1:de:5b:04:6f:45:16:0c:0a:
                    28:ef:16:86:98:91:26:d4:f5:8a:34:e8:ff:35:fa:
                    7f:18:1e:53:76:a0:cd:19:31:b7:13:1a:1f:d9:ec:
                    78:d1:43:62:5a:e4:49:a2:df:48:a1:64:6d:40:04:
                    68:5a:54:c4:b9:fb:98:72:df:53:76:3f:2f:13:16:
                    60:e8:71:08:1f:fc:91:fb:51:1c:13:21:9e:0c:d8:
                    91:da:62:73:52:00:1c:40:0d:9e:95:a9:65:0c:35:
                    bc:1f:66:2c:fe:26:8c:d1:f5:c4:c2:5a:7f:1b:df:
                    23:0e:af:d1:a6:4c:e5:50:69:5e:dc:86:22:da:27:
                    0f:3c:3f:05:c4:3a:f4:7a:56:2d:3b:81:e1:1d:d3:
                    19:de:40:0b:c5:da:2f:46:64:86:d1:b6:88:6d:17:
                    2f:e4:38:9b:5d:38:f4:14:93:80:75:15:a7:ee:f9:
                    8a:4f:fb:f3:9a:29:05:e1:cb:74:77:50:f0:ce:46:
                    e0:a5:af:f4:cc:04:31:27:50:d2:63:0b:3b:f5:9c:
                    d9:fa:e9:7d:ed:b9:50:c2:d9:fd:24:88:2f:83:b1:
                    5a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BD:A3:10:4B:E1:7D:49:59:34:32:3A:60:C8:D8:A0:C2:A7:1F:7C
            X509v3 Authority Key Identifier:
                keyid:44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a3a2f33342d3334203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7030::/34

    Signature Algorithm: sha256WithRSAEncryption
         0e:38:1f:3c:e6:72:d7:96:5d:3a:c5:d2:da:c0:73:af:a8:66:
         13:9d:ed:51:57:4f:9e:7c:90:09:33:b8:cf:a8:c2:ec:79:95:
         66:a1:ae:1f:cb:95:9a:53:2a:e4:ff:74:3f:4f:ad:d5:16:01:
         41:ef:98:05:ef:be:7a:8c:ed:41:4c:96:7a:51:b4:2e:b8:9b:
         90:be:da:7e:74:ea:9a:5b:6d:a0:aa:31:12:fd:cf:96:f1:a0:
         2e:1c:27:5f:1a:63:ee:f9:70:f8:0a:28:7d:5b:1d:fd:95:46:
         ea:06:c5:e1:0b:52:9c:b7:8b:88:70:dd:60:32:9e:b7:75:34:
         51:92:a9:df:59:38:00:20:0e:82:02:0b:7c:fd:60:f7:57:36:
         e3:4c:a2:5e:25:be:94:96:0b:a4:9c:d4:fd:a5:48:9a:7d:fe:
         b4:ee:5c:37:10:8a:16:a3:a6:d0:bb:c7:c6:7d:10:be:58:18:
         44:0b:20:c4:64:41:9a:35:3c:39:01:9e:4f:8d:b4:d6:c5:60:
         92:25:b7:95:12:91:6f:34:e1:02:7c:79:6b:b5:58:64:4a:72:
         5b:92:e2:31:87:8c:d6:03:d9:ae:a7:9c:08:1b:43:87:7f:ae:
         66:1e:e6:be:24:cf:fc:c6:d2:60:0d:11:b7:18:82:f4:e5:8b:
         83:b4:5e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:08 2025 by rpki-client