Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33332d3333203d3e20323731313636.roa
File:                     323830343a373734343a3a2f33332d3333203d3e20323731313636.roa (raw, json)
Hash identifier:          Tr39WnlN4clRonCBNxfsmOX5oBu6rb58TAmNgtPvMZE=
Subject key identifier:   95:44:79:AB:4B:4A:1E:EE:12:42:F4:DF:21:43:F7:50:2D:91:44:D2
Certificate issuer:       /CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA
Certificate serial:       26E873667300F3BD5D9A8020D82A115B94385A05
Authority key identifier: 03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33332d3333203d3e20323731313636.roa
Signing time:             Thu 31 Jul 2025 00:08:04 +0000
ROA not before:           Thu 31 Jul 2025 00:03:04 +0000
ROA not after:            Thu 30 Jul 2026 00:08:04 +0000
asID:                     271166
IP address blocks:        2804:7744::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl
                          rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 00:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e8:73:66:73:00:f3:bd:5d:9a:80:20:d8:2a:11:5b:94:38:5a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0343B8928CA78A1D3548AF9EB5A390CF7664FEBA
        Validity
            Not Before: Jul 31 00:03:04 2025 GMT
            Not After : Jul 30 00:08:04 2026 GMT
        Subject: CN=954479AB4B4A1EEE1242F4DF2143F7502D9144D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d9:12:01:69:23:45:d4:e5:b1:1b:28:ef:52:
                    25:41:d0:5e:8d:06:3d:5b:e3:e7:7b:99:05:ee:3e:
                    2f:da:66:45:6f:7a:78:7b:98:ea:ba:d9:9c:96:10:
                    f5:bf:5d:ca:c0:ab:90:d1:4c:c7:22:eb:8a:3c:18:
                    cd:de:8c:dc:3b:63:31:f4:4f:7f:fa:17:1b:e0:4c:
                    d1:d4:cb:88:45:b4:86:f6:db:4a:25:b1:e7:24:0f:
                    d6:ac:13:63:74:a3:3a:7c:d7:e7:b5:35:e0:84:65:
                    b2:b9:22:36:36:f4:e2:df:b7:2c:31:34:8e:a9:2e:
                    30:d1:c4:ac:0b:e5:eb:30:72:56:5f:10:61:b4:06:
                    68:6e:72:bb:e2:89:e2:4b:61:aa:8d:d1:83:11:99:
                    8c:5f:b5:8d:d7:8d:b1:e6:9f:a8:e1:d9:84:15:f6:
                    bc:55:5f:12:7c:06:32:42:fb:be:44:30:83:91:32:
                    f7:a9:f6:09:bf:af:a8:e9:2b:04:bc:89:bd:3b:8e:
                    94:69:c5:04:7b:37:be:b6:03:3f:21:80:c9:04:34:
                    a5:d9:63:8f:58:0c:39:3a:f8:2b:b0:7f:4b:b0:90:
                    11:07:0b:4f:bb:1f:32:14:59:ca:04:c8:7c:6b:cd:
                    02:0b:cf:fc:8d:af:64:f9:c7:16:d3:d4:bf:2d:8b:
                    22:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:44:79:AB:4B:4A:1E:EE:12:42:F4:DF:21:43:F7:50:2D:91:44:D2
            X509v3 Authority Key Identifier:
                keyid:03:43:B8:92:8C:A7:8A:1D:35:48:AF:9E:B5:A3:90:CF:76:64:FE:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0343B8928CA78A1D3548AF9EB5A390CF7664FEBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33332d3333203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7744::/33

    Signature Algorithm: sha256WithRSAEncryption
         57:fd:2b:5b:85:f2:40:e1:02:a5:47:3c:8f:a7:b5:06:27:c3:
         bd:be:42:82:7e:70:9c:e9:c6:83:6f:a8:28:cd:bb:69:03:d1:
         f7:06:1d:10:b6:60:f9:72:57:9c:11:7c:0f:35:f9:a4:34:82:
         33:cb:d0:82:db:90:bb:a6:77:4c:12:19:73:8b:55:a5:ba:7f:
         92:18:ae:d6:e7:19:8d:ce:3c:56:e8:ab:41:21:cd:b7:a5:98:
         b4:cb:6a:5b:79:17:2a:21:86:6a:cf:49:04:a2:b7:88:97:c6:
         41:8f:f9:4b:fd:82:0a:ad:2e:b1:8e:0b:cb:ac:05:29:98:e9:
         40:99:86:cc:e1:53:74:68:fd:85:7f:b2:73:e4:28:ab:e6:63:
         7d:d1:38:1f:24:9f:15:9a:74:e2:a6:bd:36:de:fb:a9:53:8d:
         b6:c9:9f:56:98:e2:7d:52:e9:b8:96:ca:6f:22:d1:46:52:9a:
         ef:29:f4:87:83:a2:20:12:38:e2:15:a5:2b:dd:aa:d2:11:41:
         17:0e:b5:46:90:b1:5c:b2:08:a9:eb:2d:41:5b:bd:bd:71:22:
         75:cd:63:7a:1c:94:fc:9e:4b:f3:83:5d:2f:40:63:48:26:50:
         38:e0:d4:da:28:ac:b3:69:b1:4e:63:6a:a3:ce:80:2e:d5:f0:
         69:fd:b2:10
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJuhzZnMA871dmoAg2CoRW5Q4WgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM0M0I4OTI4Q0E3OEExRDM1NDhBRjlFQjVBMzkwQ0Y3
NjY0RkVCQTAeFw0yNTA3MzEwMDAzMDRaFw0yNjA3MzAwMDA4MDRaMDMxMTAvBgNV
BAMTKDk1NDQ3OUFCNEI0QTFFRUUxMjQyRjRERjIxNDNGNzUwMkQ5MTQ0RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh2RIBaSNF1OWxGyjvUiVB0F6N
Bj1b4+d7mQXuPi/aZkVvenh7mOq62ZyWEPW/XcrAq5DRTMci64o8GM3ejNw7YzH0
T3/6FxvgTNHUy4hFtIb220olseckD9asE2N0ozp81+e1NeCEZbK5IjY29OLftywx
NI6pLjDRxKwL5eswclZfEGG0BmhucrviieJLYaqN0YMRmYxftY3XjbHmn6jh2YQV
9rxVXxJ8BjJC+75EMIORMvep9gm/r6jpKwS8ib07jpRpxQR7N762Az8hgMkENKXZ
Y49YDDk6+Cuwf0uwkBEHC0+7HzIUWcoEyHxrzQILz/yNr2T5xxbT1L8tiyL/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlUR5q0tKHu4SQvTfIUP3UC2RRNIwHwYDVR0j
BBgwFoAUA0O4koynih01SK+etaOQz3Zk/rowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG5xUFpMcUM1YzFRUVJNN2RjbVdBVkR6Sm55aWZzQ0EycGVwOEdDZnA4
VlYvMC8wMzQzQjg5MjhDQTc4QTFEMzU0OEFGOUVCNUEzOTBDRjc2NjRGRUJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNDNCODkyOENBNzhBMUQz
NTQ4QUY5RUI1QTM5MENGNzY2NEZFQkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hucVBaTHFDNWMxUVFSTTdkY21XQVZEekpueWlmc0NBMnBlcDhHQ2ZwOFZWLzAv
MzIzODMwMzQzYTM3MzczNDM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMx
MzEzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAR3RAAwDQYJKoZIhvcNAQELBQADggEBAFf9K1uF
8kDhAqVHPI+ntQYnw72+QoJ+cJzpxoNvqCjNu2kD0fcGHRC2YPlyV5wRfA81+aQ0
gjPL0ILbkLumd0wSGXOLVaW6f5IYrtbnGY3OPFboq0EhzbelmLTLalt5FyohhmrP
SQSit4iXxkGP+Uv9ggqtLrGOC8usBSmY6UCZhszhU3Ro/YV/snPkKKvmY33ROB8k
nxWadOKmvTbe+6lTjbbJn1aY4n1S6biWym8i0UZSmu8p9IeDoiASOOIVpSvdqtIR
QRcOtUaQsVyyCKnrLUFbvb1xInXNY3oclPyeS/ODXS9AY0gmUDjg1NoorLNpsU5j
aqPOgC7V8Gn9shA=
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:15:29 2025 by rpki-client