Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/323830343a383231633a3a2f33322d3438203d3e20323732343939.roa
File:                     323830343a383231633a3a2f33322d3438203d3e20323732343939.roa (raw, json)
Hash identifier:          ALEsa+QK8A5t+9dLpZM9xpkdSh+DBMEQqaU1CI6pAlE=
Subject key identifier:   2F:02:65:ED:9E:CC:E9:B0:A9:C8:2D:04:FF:7A:73:9D:69:FA:42:E1
Certificate issuer:       /CN=188458C338DCC3C545AE6A4EE982512CBC800EF6
Certificate serial:       3E011D19EE6347A918147E096BE2C7977ACA9CA3
Authority key identifier: 18:84:58:C3:38:DC:C3:C5:45:AE:6A:4E:E9:82:51:2C:BC:80:0E:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/188458C338DCC3C545AE6A4EE982512CBC800EF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/323830343a383231633a3a2f33322d3438203d3e20323732343939.roa
Signing time:             Wed 23 Jul 2025 13:17:13 +0000
ROA not before:           Wed 23 Jul 2025 13:12:13 +0000
ROA not after:            Wed 22 Jul 2026 13:17:13 +0000
asID:                     272499
IP address blocks:        2804:821c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/188458C338DCC3C545AE6A4EE982512CBC800EF6.crl
                          rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/188458C338DCC3C545AE6A4EE982512CBC800EF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/188458C338DCC3C545AE6A4EE982512CBC800EF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:01:1d:19:ee:63:47:a9:18:14:7e:09:6b:e2:c7:97:7a:ca:9c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188458C338DCC3C545AE6A4EE982512CBC800EF6
        Validity
            Not Before: Jul 23 13:12:13 2025 GMT
            Not After : Jul 22 13:17:13 2026 GMT
        Subject: CN=2F0265ED9ECCE9B0A9C82D04FF7A739D69FA42E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f3:0f:a2:da:53:1b:e5:30:ad:10:d3:e3:83:
                    1f:0d:6b:e8:a7:08:73:a2:f9:40:9c:a9:26:87:37:
                    d5:c3:65:e5:0d:eb:79:45:c9:d8:5a:aa:15:56:35:
                    e8:c4:75:d8:32:d4:48:7c:d3:c8:2a:7f:b9:04:85:
                    af:38:96:49:c0:22:50:3a:62:e6:68:b6:79:84:cf:
                    22:b1:f0:48:43:a3:99:8a:f7:6b:10:f3:3d:f0:ba:
                    1a:7a:84:4b:58:84:03:13:c3:28:ee:02:32:3e:6e:
                    10:a9:6a:8d:05:f4:58:8c:80:7e:60:5e:d3:90:94:
                    3d:5b:1c:3f:80:3c:7e:44:34:f9:59:ca:6b:b5:75:
                    b7:cb:68:96:0d:ff:32:6e:ba:38:e5:85:f6:f0:11:
                    95:aa:72:ce:a7:a7:bd:6d:46:d7:e6:b1:61:e5:7e:
                    72:9b:41:0a:d2:26:f6:a0:46:55:6b:a4:5d:a9:5c:
                    c9:4a:99:38:e6:db:1e:a7:ff:b0:28:3c:ec:b3:20:
                    f9:c4:7d:6f:b3:c5:45:38:86:58:05:65:6c:98:e7:
                    b1:36:7c:fb:80:0f:18:da:0d:a1:23:aa:16:fc:c2:
                    71:98:e4:bd:61:67:b5:51:f5:19:ec:24:7f:9b:a1:
                    60:33:3a:94:01:68:0a:f2:d3:99:b8:5c:40:8f:e4:
                    70:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:02:65:ED:9E:CC:E9:B0:A9:C8:2D:04:FF:7A:73:9D:69:FA:42:E1
            X509v3 Authority Key Identifier:
                keyid:18:84:58:C3:38:DC:C3:C5:45:AE:6A:4E:E9:82:51:2C:BC:80:0E:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/188458C338DCC3C545AE6A4EE982512CBC800EF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/188458C338DCC3C545AE6A4EE982512CBC800EF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/323830343a383231633a3a2f33322d3438203d3e20323732343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:821c::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:fe:34:67:53:70:9c:8a:9e:fc:67:c5:c4:04:86:75:a3:4c:
         3b:40:cc:92:be:7c:85:8d:3a:35:9a:bd:33:a3:85:36:6f:dd:
         ce:38:4b:aa:fa:a0:72:ad:80:95:37:f9:20:f9:66:84:8f:10:
         90:35:98:a5:eb:14:81:bd:d1:a0:6e:f4:48:59:55:a3:40:9e:
         46:c3:83:46:fd:64:45:56:cd:89:37:94:a4:28:e6:08:de:9d:
         27:1e:ab:30:fe:2a:c7:54:47:c3:35:38:21:fe:70:64:94:50:
         f1:5e:8a:a8:4e:15:9e:03:7a:de:04:f0:2f:ce:f8:11:dd:1b:
         49:e7:f6:f7:36:4e:a2:16:f2:76:3b:3d:22:e8:f4:f9:a1:96:
         d1:d5:0e:e5:0a:9b:fa:65:e2:c7:a5:a1:19:d5:e7:75:c5:aa:
         43:2d:57:cd:f7:dd:c0:6e:de:ca:42:55:2f:b6:18:e1:82:90:
         20:0a:40:a3:d6:5c:7b:76:aa:ce:1a:61:ee:7b:9e:5f:1d:20:
         97:f5:1b:57:af:87:7d:3d:90:79:79:97:ca:5f:58:1c:d9:45:
         a6:1b:79:e8:ba:3b:f0:8d:a0:aa:81:68:dd:ce:d1:f5:6a:1d:
         5a:5d:5c:ec:26:04:bd:de:59:2e:a7:33:d7:6a:a6:d7:d9:c5:
         6f:91:f5:81
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUPgEdGe5jR6kYFH4Ja+LHl3rKnKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg4NDU4QzMzOERDQzNDNTQ1QUU2QTRFRTk4MjUxMkNC
QzgwMEVGNjAeFw0yNTA3MjMxMzEyMTNaFw0yNjA3MjIxMzE3MTNaMDMxMTAvBgNV
BAMTKDJGMDI2NUVEOUVDQ0U5QjBBOUM4MkQwNEZGN0E3MzlENjlGQTQyRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP8w+i2lMb5TCtENPjgx8Na+in
CHOi+UCcqSaHN9XDZeUN63lFydhaqhVWNejEddgy1Eh808gqf7kEha84lknAIlA6
YuZotnmEzyKx8EhDo5mK92sQ8z3wuhp6hEtYhAMTwyjuAjI+bhCpao0F9FiMgH5g
XtOQlD1bHD+APH5ENPlZymu1dbfLaJYN/zJuujjlhfbwEZWqcs6np71tRtfmsWHl
fnKbQQrSJvagRlVrpF2pXMlKmTjm2x6n/7AoPOyzIPnEfW+zxUU4hlgFZWyY57E2
fPuADxjaDaEjqhb8wnGY5L1hZ7VR9RnsJH+boWAzOpQBaAry05m4XECP5HA9AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQULwJl7Z7M6bCpyC0E/3pznWn6QuEwHwYDVR0j
BBgwFoAUGIRYwzjcw8VFrmpO6YJRLLyADvYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9IMzdhbUp3SEozNExZTHJnWGU0RUhMUHJ2Smk0VlFjazVTblJYbnRWM0xo
LzAvMTg4NDU4QzMzOERDQzNDNTQ1QUU2QTRFRTk4MjUxMkNCQzgwMEVGNi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xODg0NThDMzM4RENDM0M1NDVB
RTZBNEVFOTgyNTEyQ0JDODAwRUY2LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9I
MzdhbUp3SEozNExZTHJnWGU0RUhMUHJ2Smk0VlFjazVTblJYbnRWM0xoLzAvMzIz
ODMwMzQzYTM4MzIzMTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMyMzQz
OTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKASCHDANBgkqhkiG9w0BAQsFAAOCAQEAV/40Z1NwnIqe
/GfFxASGdaNMO0DMkr58hY06NZq9M6OFNm/dzjhLqvqgcq2AlTf5IPlmhI8QkDWY
pesUgb3RoG70SFlVo0CeRsODRv1kRVbNiTeUpCjmCN6dJx6rMP4qx1RHwzU4If5w
ZJRQ8V6KqE4VngN63gTwL874Ed0bSef29zZOohbydjs9Iuj0+aGW0dUO5Qqb+mXi
x6WhGdXndcWqQy1XzffdwG7eykJVL7YY4YKQIApAo9Zce3aqzhph7nueXx0gl/Ub
V6+HfT2QeXmXyl9YHNlFpht56Lo78I2gqoFo3c7R9WodWl1c7CYEvd5ZLqcz12qm
19nFb5H1gQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:40:16 2025 by rpki-client