Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633031323a3a2f34382d3438203d3e20323634393936.roa
File:                     323830343a333132343a633031323a3a2f34382d3438203d3e20323634393936.roa (raw, json)
Hash identifier:          /4zxmcz7WyPKs4SM8eN6Kjvx9AfDtQyUHyIJ7XIun34=
Subject key identifier:   52:EF:6B:6F:90:33:1D:CE:B7:72:53:24:95:75:69:76:70:E9:F2:6D
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       5E9DB4CB3228E0E4A36B49563396A47E46EFBF6D
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633031323a3a2f34382d3438203d3e20323634393936.roa
Signing time:             Wed 09 Jul 2025 15:42:11 +0000
ROA not before:           Wed 09 Jul 2025 15:37:11 +0000
ROA not after:            Wed 08 Jul 2026 15:42:11 +0000
asID:                     264996
IP address blocks:        2804:3124:c012::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 14:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9d:b4:cb:32:28:e0:e4:a3:6b:49:56:33:96:a4:7e:46:ef:bf:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Jul  9 15:37:11 2025 GMT
            Not After : Jul  8 15:42:11 2026 GMT
        Subject: CN=52EF6B6F90331DCEB77253249575697670E9F26D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e0:4a:ca:05:e0:0d:c9:d4:4a:b7:5e:ef:a5:
                    65:ff:bd:56:19:96:4b:e0:c8:6e:c7:66:a8:16:95:
                    b2:45:2f:ec:5e:5a:be:cf:9a:ee:2f:6a:22:e4:82:
                    d7:49:7f:28:cd:85:48:72:20:2d:72:6c:01:96:e0:
                    27:9a:68:3b:96:20:50:13:b9:7f:a4:69:46:d9:78:
                    63:07:eb:98:d7:0f:4d:ce:44:ed:18:6e:58:8b:41:
                    a0:08:ae:c6:63:42:6b:26:b3:88:3e:c1:d0:d0:a5:
                    ef:24:3f:62:f8:57:fb:67:6b:c1:0d:c7:35:36:99:
                    b5:f8:56:73:ab:ce:4e:9a:b6:9c:77:54:d1:25:4a:
                    92:63:d5:9d:81:9e:12:2f:f4:dc:b8:87:93:5c:0c:
                    0c:1b:a9:89:a9:5a:a9:7a:ec:e6:3e:f5:72:50:d5:
                    dc:7f:8b:24:db:85:f8:0e:f0:eb:d5:d8:82:fe:0b:
                    4c:54:af:0d:78:4d:3a:eb:74:ff:81:17:f5:43:6a:
                    9b:2b:7b:e2:fb:4d:9a:57:57:5f:f6:a9:6b:d3:f9:
                    93:6d:d4:1f:5a:82:09:b6:54:bf:7e:62:ac:71:fc:
                    33:d7:c7:38:72:27:ad:99:1a:6d:1a:6c:b8:db:19:
                    e1:29:62:49:fd:ad:7d:0d:3a:0c:4c:cf:ad:c0:f0:
                    5a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EF:6B:6F:90:33:1D:CE:B7:72:53:24:95:75:69:76:70:E9:F2:6D
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633031323a3a2f34382d3438203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:c012::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:00:03:5a:b1:65:0d:b2:a1:80:fe:fb:eb:8b:b9:cb:ae:b9:
         9a:ca:cb:80:6c:4d:ef:fd:51:21:48:2b:f9:a6:6b:b9:ab:7b:
         25:89:10:4c:7b:4e:55:3f:34:1b:60:25:fa:ad:da:7b:5a:23:
         e8:a1:b9:c1:e2:50:ea:76:48:63:a4:18:af:38:db:a8:d5:02:
         9f:91:4d:f5:f8:fa:8b:1b:19:8c:8b:59:f8:e7:f7:6c:81:e5:
         a5:6f:53:39:4f:25:aa:4c:32:f6:94:49:cd:55:7a:e3:f6:5a:
         9d:79:5f:c9:3c:16:aa:9e:50:b9:73:cc:cf:8b:07:c8:88:fe:
         fd:27:f6:50:00:07:6a:e6:d4:06:f5:ab:0c:dc:c1:76:ac:8f:
         97:31:bd:cc:97:7a:1f:03:31:cd:26:55:e5:d1:96:91:70:cf:
         a7:2c:5e:fc:b6:5f:2d:59:da:c3:a5:11:1d:f8:ad:01:34:d5:
         3d:aa:c5:53:66:a5:89:c6:df:6b:b1:cd:e2:05:aa:23:92:ea:
         c2:f6:b1:ac:da:7c:33:f1:39:1e:c5:60:32:a7:5f:7c:19:13:
         5c:13:50:93:23:eb:1c:fa:ca:77:a5:fa:76:bd:b7:52:80:ce:
         c9:5f:8f:2e:9c:18:57:4d:23:6c:13:5c:c3:81:63:01:3f:c0:
         7b:13:1b:7e
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUXp20yzIo4OSja0lWM5akfkbvv20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYzRjEyRTk0NDcxOUYyNEE4RDFBNEIzQzc5ODBGNzBB
NkQ5OUQ2OTAeFw0yNTA3MDkxNTM3MTFaFw0yNjA3MDgxNTQyMTFaMDMxMTAvBgNV
BAMTKDUyRUY2QjZGOTAzMzFEQ0VCNzcyNTMyNDk1NzU2OTc2NzBFOUYyNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo4ErKBeANydRKt17vpWX/vVYZ
lkvgyG7HZqgWlbJFL+xeWr7Pmu4vaiLkgtdJfyjNhUhyIC1ybAGW4CeaaDuWIFAT
uX+kaUbZeGMH65jXD03ORO0YbliLQaAIrsZjQmsms4g+wdDQpe8kP2L4V/tna8EN
xzU2mbX4VnOrzk6atpx3VNElSpJj1Z2BnhIv9Ny4h5NcDAwbqYmpWql67OY+9XJQ
1dx/iyTbhfgO8OvV2IL+C0xUrw14TTrrdP+BF/VDapsre+L7TZpXV1/2qWvT+ZNt
1B9aggm2VL9+Yqxx/DPXxzhyJ62ZGm0abLjbGeEpYkn9rX0NOgxMz63A8FrjAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUUu9rb5AzHc63clMklXVpdnDp8m0wHwYDVR0j
BBgwFoAULz8S6URxnySo0aSzx5gPcKbZnWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3N2am9lSEdwUlJ0TGU4c0d5Wk5HTGRUd1V5aURkY1J3bmliYmp5OFI5
ZXQvMS8yRjNGMTJFOTQ0NzE5RjI0QThEMUE0QjNDNzk4MEY3MEE2RDk5RDY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGM0YxMkU5NDQ3MTlGMjRB
OEQxQTRCM0M3OTgwRjcwQTZEOTlENjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNzdmpvZUhHcFJSdExlOHNHeVpOR0xkVHdVeWlEZGNSd25pYmJqeThSOWV0LzEv
MzIzODMwMzQzYTMzMzEzMjM0M2E2MzMwMzEzMjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM5MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEMSTAEjANBgkqhkiG9w0BAQsF
AAOCAQEAXAADWrFlDbKhgP7764u5y665msrLgGxN7/1RIUgr+aZruat7JYkQTHtO
VT80G2Al+q3ae1oj6KG5weJQ6nZIY6QYrzjbqNUCn5FN9fj6ixsZjItZ+Of3bIHl
pW9TOU8lqkwy9pRJzVV64/ZanXlfyTwWqp5QuXPMz4sHyIj+/Sf2UAAHaubUBvWr
DNzBdqyPlzG9zJd6HwMxzSZV5dGWkXDPpyxe/LZfLVnaw6URHfitATTVParFU2al
icbfa7HN4gWqI5LqwvaxrNp8M/E5HsVgMqdffBkTXBNQkyPrHPrKd6X6dr23UoDO
yV+PLpwYV00jbBNcw4FjAT/AexMbfg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:10:10 2025 by rpki-client