Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          pFM8YCTx47DOY4cmA5RdGs/cV+iW2FG1cK3zhijjBlQ=
Subject key identifier:   E8:FD:52:29:5F:C1:51:DF:B9:E6:8C:4C:F8:32:9C:F0:69:A7:06:FD
Certificate issuer:       /CN=3C8F0CFC9B35F328402AD269F14D94BF6C5C7372
Certificate serial:       11046DACF60BCE4772180FD1F996A8A3301B3B55
Authority key identifier: 3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Tue 03 Jun 2025 00:27:03 +0000
ROA not before:           Tue 03 Jun 2025 00:22:03 +0000
ROA not after:            Tue 02 Jun 2026 00:27:03 +0000
asID:                     264936
IP address blocks:        2804:3034:40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 13:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:04:6d:ac:f6:0b:ce:47:72:18:0f:d1:f9:96:a8:a3:30:1b:3b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8F0CFC9B35F328402AD269F14D94BF6C5C7372
        Validity
            Not Before: Jun  3 00:22:03 2025 GMT
            Not After : Jun  2 00:27:03 2026 GMT
        Subject: CN=E8FD52295FC151DFB9E68C4CF8329CF069A706FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a1:2c:8a:b6:7d:8e:12:61:70:fa:65:f4:83:
                    1c:84:28:07:f1:5e:f2:a0:d0:81:41:a6:ed:ae:b1:
                    d7:a1:22:02:b2:89:d7:26:37:4c:e2:45:dc:53:98:
                    5c:18:81:7d:35:d0:ad:40:3d:a0:90:5e:55:65:18:
                    08:e4:5f:c0:12:8f:07:76:68:4d:f8:4a:3f:23:22:
                    c1:c4:74:bb:b2:ce:26:b8:f6:24:ab:52:7a:6a:fc:
                    dd:a4:ad:37:36:21:65:6e:ae:35:cf:15:f7:21:15:
                    65:c5:a1:23:1f:73:94:1f:c5:a9:d6:d5:f6:b3:9b:
                    e3:6f:06:83:a4:c7:24:43:e6:7b:9d:e5:35:d4:3e:
                    18:b3:f8:46:db:26:25:47:08:ed:3c:31:40:46:d3:
                    9a:9d:70:c3:0d:87:58:8d:08:37:ca:c4:73:5d:52:
                    f4:dc:39:5f:a5:0a:c8:59:4e:91:a4:1a:ca:c4:2e:
                    c3:52:b2:34:4c:63:25:af:f2:3d:4e:d3:e4:9b:de:
                    a6:2d:49:1f:f5:41:21:f1:f3:d0:2b:04:eb:14:05:
                    cb:56:88:ab:ac:4d:c4:94:40:2d:37:d3:81:05:8a:
                    a8:85:34:89:2b:a0:de:ad:90:cf:d5:e6:5c:a0:03:
                    5f:3f:53:71:50:10:0f:c9:14:74:ea:92:da:8b:98:
                    2f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FD:52:29:5F:C1:51:DF:B9:E6:8C:4C:F8:32:9C:F0:69:A7:06:FD
            X509v3 Authority Key Identifier:
                keyid:3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a34303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         66:25:10:01:0f:9c:5b:9e:5a:bb:1c:00:82:c6:6c:70:7b:d4:
         b8:64:cd:1e:7f:21:c1:b9:e6:61:b0:4f:6a:43:12:df:85:03:
         98:0b:4f:d8:70:42:a1:7c:99:dd:4c:e2:4b:35:41:23:f1:45:
         39:ca:5a:30:b0:9f:cf:78:c4:3b:e8:70:57:8a:44:64:37:22:
         d0:71:94:30:e4:4b:55:31:0a:78:a6:99:c8:a8:ba:47:09:d5:
         e9:95:16:58:09:0b:3b:e4:0e:e3:dd:f1:44:e7:b1:3f:53:39:
         15:17:27:2a:9e:2e:85:dc:c3:e9:12:01:5a:b3:b1:fe:f4:ab:
         67:e4:f0:08:72:15:36:24:fd:0c:ce:46:3e:3b:3a:1c:86:ba:
         35:d2:52:b8:36:75:f1:44:96:21:56:e8:d0:9f:03:3f:0a:59:
         1d:87:4a:dd:0c:45:13:88:a8:73:e8:c7:43:0a:f6:4e:4f:db:
         94:12:cd:73:06:0e:6d:0d:15:2b:79:89:2b:56:14:25:6d:54:
         17:8c:81:4a:6e:b8:7f:0d:c8:02:b6:21:31:6b:d8:2f:a5:06:
         5b:19:47:53:cf:9e:d5:30:6c:88:ec:1a:38:3b:13:4b:17:eb:
         88:d6:fa:63:3a:3a:84:75:02:6b:a7:1e:41:3c:50:ac:42:37:
         00:ef:d2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:14:49 2025 by rpki-client