Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/323830343a383135303a3a2f33322d3438203d3e20323732343436.roa
File:                     323830343a383135303a3a2f33322d3438203d3e20323732343436.roa (raw, json)
Hash identifier:          RK4LVJPnGM7yZk++dlEiR3JSB8KeEF2G9+gGvPLtbOg=
Subject key identifier:   C3:14:AA:D7:B0:C5:B2:DC:F0:56:2E:4B:F8:08:8C:46:78:B5:D0:79
Certificate issuer:       /CN=390DE358A808D36C0795E69DC8E59530BF5A0D37
Certificate serial:       58006DF260D389DF6029AAB481A1ED887F83835C
Authority key identifier: 39:0D:E3:58:A8:08:D3:6C:07:95:E6:9D:C8:E5:95:30:BF:5A:0D:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/390DE358A808D36C0795E69DC8E59530BF5A0D37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/323830343a383135303a3a2f33322d3438203d3e20323732343436.roa
Signing time:             Wed 02 Jul 2025 18:54:23 +0000
ROA not before:           Wed 02 Jul 2025 18:49:23 +0000
ROA not after:            Wed 01 Jul 2026 18:54:23 +0000
asID:                     272446
IP address blocks:        2804:8150::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/390DE358A808D36C0795E69DC8E59530BF5A0D37.crl
                          rsync://rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/390DE358A808D36C0795E69DC8E59530BF5A0D37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/390DE358A808D36C0795E69DC8E59530BF5A0D37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 17:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:00:6d:f2:60:d3:89:df:60:29:aa:b4:81:a1:ed:88:7f:83:83:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390DE358A808D36C0795E69DC8E59530BF5A0D37
        Validity
            Not Before: Jul  2 18:49:23 2025 GMT
            Not After : Jul  1 18:54:23 2026 GMT
        Subject: CN=C314AAD7B0C5B2DCF0562E4BF8088C4678B5D079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e5:d7:0e:ce:8b:5a:54:c5:c1:d1:99:b1:94:
                    c6:7d:70:95:2f:c5:c7:af:48:11:24:ee:7c:a0:c4:
                    7c:38:f9:54:83:1c:45:d7:7d:29:aa:8f:e0:ad:f2:
                    e2:c1:a2:4c:5e:7c:14:da:b6:3b:87:54:3c:60:fa:
                    72:7d:ae:7a:96:b0:60:4d:32:e2:6a:65:5a:5b:e2:
                    5f:fe:4e:4d:17:4f:4b:34:98:29:da:cf:77:6f:7a:
                    01:b2:66:1e:bd:88:da:53:00:f5:99:60:e6:69:bc:
                    95:65:1d:3e:9e:6c:14:d4:f6:e0:5d:eb:2b:d4:dc:
                    96:7d:66:1d:67:78:1e:b4:2f:03:f6:28:7d:35:11:
                    d1:39:e8:49:40:c9:7c:5c:d2:02:ab:ca:28:f6:b6:
                    90:a1:fb:16:6c:4b:e3:0e:b3:3f:88:e9:2e:0e:0f:
                    29:18:99:9a:cf:20:ed:b3:aa:35:a6:e9:d9:18:4f:
                    e2:87:d6:2f:44:35:17:a0:6f:54:a0:78:38:3d:a5:
                    c8:77:ac:26:1f:5f:b0:90:dd:ad:13:12:da:dc:58:
                    1c:f6:05:64:07:10:64:9a:de:c5:1e:4f:d6:53:c3:
                    47:3a:9a:cb:e7:c7:b0:84:82:55:3f:b6:bf:1c:53:
                    6b:e1:20:56:20:25:d3:7c:6a:cf:12:95:f9:9d:ee:
                    3e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:14:AA:D7:B0:C5:B2:DC:F0:56:2E:4B:F8:08:8C:46:78:B5:D0:79
            X509v3 Authority Key Identifier:
                keyid:39:0D:E3:58:A8:08:D3:6C:07:95:E6:9D:C8:E5:95:30:BF:5A:0D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/390DE358A808D36C0795E69DC8E59530BF5A0D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/390DE358A808D36C0795E69DC8E59530BF5A0D37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2y8XoGEhQeY5Eqe7ELaZYUQRY8a9MUg1DvZVkrip7xMj/0/323830343a383135303a3a2f33322d3438203d3e20323732343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8150::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:96:91:ce:89:dd:e7:d7:2a:b6:fb:ac:17:60:f9:67:56:25:
         be:a1:94:b5:38:d4:27:a9:d3:2d:a5:7c:80:5a:d7:75:af:bd:
         74:63:60:d2:0c:84:5c:63:96:d4:76:68:18:52:1d:e4:58:ec:
         96:66:6e:2d:be:62:7f:a4:47:f4:95:6f:01:99:b1:f9:af:31:
         95:1a:f9:13:89:74:46:1c:0a:40:ba:3e:f4:99:af:11:a8:c0:
         9f:77:02:09:43:ba:0c:c9:21:59:30:b1:b5:5d:a8:38:e7:3c:
         14:28:4f:f7:ca:95:74:a6:a9:5d:7c:7f:19:1c:40:89:21:c9:
         e1:ba:fb:1f:81:5e:79:39:60:1e:23:dd:29:fd:c2:26:21:9a:
         c1:0d:c3:0c:82:72:ad:0a:42:5c:01:82:54:95:b9:09:63:d2:
         08:76:81:48:dd:97:5b:e1:ef:ae:4d:66:27:c0:70:63:53:b4:
         6f:1b:76:91:7c:e3:b9:41:9a:c7:fd:3a:5f:c3:52:36:ad:09:
         e4:6d:11:fc:36:0d:6f:53:22:92:c8:1e:46:66:0c:19:70:4e:
         1d:b6:ff:fd:51:79:9c:eb:53:bd:93:75:58:61:d0:9b:5b:56:
         60:05:66:df:f1:67:96:be:00:2a:f3:b0:a0:53:66:bf:cc:22:
         d1:af:6d:69
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWABt8mDTid9gKaq0gaHtiH+Dg1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkwREUzNThBODA4RDM2QzA3OTVFNjlEQzhFNTk1MzBC
RjVBMEQzNzAeFw0yNTA3MDIxODQ5MjNaFw0yNjA3MDExODU0MjNaMDMxMTAvBgNV
BAMTKEMzMTRBQUQ3QjBDNUIyRENGMDU2MkU0QkY4MDg4QzQ2NzhCNUQwNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU5dcOzotaVMXB0ZmxlMZ9cJUv
xcevSBEk7nygxHw4+VSDHEXXfSmqj+Ct8uLBokxefBTatjuHVDxg+nJ9rnqWsGBN
MuJqZVpb4l/+Tk0XT0s0mCnaz3dvegGyZh69iNpTAPWZYOZpvJVlHT6ebBTU9uBd
6yvU3JZ9Zh1neB60LwP2KH01EdE56ElAyXxc0gKryij2tpCh+xZsS+MOsz+I6S4O
DykYmZrPIO2zqjWm6dkYT+KH1i9ENRegb1SgeDg9pch3rCYfX7CQ3a0TEtrcWBz2
BWQHEGSa3sUeT9ZTw0c6msvnx7CEglU/tr8cU2vhIFYgJdN8as8Slfmd7j7/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUwxSq17DFstzwVi5L+AiMRni10HkwHwYDVR0j
BBgwFoAUOQ3jWKgI02wHleadyOWVML9aDTcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnk4WG9HRWhRZVk1RXFlN0VMYVpZVVFSWThhOU1VZzFEdlpWa3JpcDd4
TWovMC8zOTBERTM1OEE4MDhEMzZDMDc5NUU2OURDOEU1OTUzMEJGNUEwRDM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MERFMzU4QTgwOEQzNkMw
Nzk1RTY5REM4RTU5NTMwQkY1QTBEMzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ5OFhvR0VoUWVZNUVxZTdFTGFaWVVRUlk4YTlNVWcxRHZaVmtyaXA3eE1qLzAv
MzIzODMwMzQzYTM4MzEzNTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMy
MzQzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASBUDANBgkqhkiG9w0BAQsFAAOCAQEAXpaRzond
59cqtvusF2D5Z1YlvqGUtTjUJ6nTLaV8gFrXda+9dGNg0gyEXGOW1HZoGFId5Fjs
lmZuLb5if6RH9JVvAZmx+a8xlRr5E4l0RhwKQLo+9JmvEajAn3cCCUO6DMkhWTCx
tV2oOOc8FChP98qVdKapXXx/GRxAiSHJ4br7H4FeeTlgHiPdKf3CJiGawQ3DDIJy
rQpCXAGCVJW5CWPSCHaBSN2XW+Hvrk1mJ8BwY1O0bxt2kXzjuUGax/06X8NSNq0J
5G0R/DYNb1MiksgeRmYMGXBOHbb//VF5nOtTvZN1WGHQm1tWYAVm3/Fnlr4AKvOw
oFNmv8wi0a9taQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:59:45 2025 by rpki-client