Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/323830343a313064343a3a2f33322d313238203d3e20323632333736.roa
File:                     323830343a313064343a3a2f33322d313238203d3e20323632333736.roa (raw, json)
Hash identifier:          1HKAc4UxMwHeuwP4PSZ2k2SXCKFWxIter1wyL6Bw8fQ=
Subject key identifier:   B2:9A:15:B4:AD:55:A1:5E:70:09:EF:A2:93:9E:22:C6:41:62:DF:91
Certificate issuer:       /CN=2FD3341671CEE00BE6A1E79864057B66AF83F10E
Certificate serial:       277A67348E64F846DEF632E898893D5327BA8896
Authority key identifier: 2F:D3:34:16:71:CE:E0:0B:E6:A1:E7:98:64:05:7B:66:AF:83:F1:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FD3341671CEE00BE6A1E79864057B66AF83F10E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/323830343a313064343a3a2f33322d313238203d3e20323632333736.roa
Signing time:             Tue 01 Jul 2025 23:32:58 +0000
ROA not before:           Tue 01 Jul 2025 23:27:58 +0000
ROA not after:            Tue 30 Jun 2026 23:32:58 +0000
asID:                     262376
IP address blocks:        2804:10d4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/2FD3341671CEE00BE6A1E79864057B66AF83F10E.crl
                          rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/2FD3341671CEE00BE6A1E79864057B66AF83F10E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FD3341671CEE00BE6A1E79864057B66AF83F10E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 10:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7a:67:34:8e:64:f8:46:de:f6:32:e8:98:89:3d:53:27:ba:88:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FD3341671CEE00BE6A1E79864057B66AF83F10E
        Validity
            Not Before: Jul  1 23:27:58 2025 GMT
            Not After : Jun 30 23:32:58 2026 GMT
        Subject: CN=B29A15B4AD55A15E7009EFA2939E22C64162DF91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:14:2f:91:f2:79:6a:02:a8:4a:e0:68:74:ba:
                    7b:54:e2:19:06:7b:57:83:c9:72:7d:59:e4:49:17:
                    2d:5c:30:7e:89:49:96:a3:a8:61:cf:5b:91:ff:16:
                    24:c9:12:69:34:e4:27:aa:43:0f:6c:8a:aa:c7:d6:
                    80:03:f9:a6:3f:57:07:c5:c5:7f:b3:f3:28:82:2d:
                    71:28:7c:5f:83:7a:d5:21:88:09:98:d0:42:52:65:
                    1a:39:e5:cf:40:d9:9b:c5:b7:bf:87:94:ec:29:7d:
                    79:99:4d:fc:9d:5c:1e:e2:9c:b7:ce:80:0d:7c:8a:
                    f7:14:6c:b8:ba:ec:80:eb:84:91:d9:a3:4d:2d:31:
                    23:25:88:93:ff:20:bc:c9:0b:eb:43:74:8d:16:b3:
                    46:65:38:76:b7:01:03:c4:d4:c5:12:db:a4:bb:ef:
                    00:28:a9:60:f8:fc:e0:be:ca:cb:2f:3f:28:5f:ce:
                    83:c8:2d:74:fd:02:f9:8e:87:f4:1c:87:c1:f4:bf:
                    22:7a:71:c0:73:06:84:6b:89:10:b7:76:ae:93:74:
                    58:11:56:1f:e6:8b:29:91:fa:62:a2:97:8e:85:45:
                    c7:3a:b5:54:e3:d4:5d:1d:0b:18:a5:9f:3c:a8:90:
                    0d:94:d8:e0:4d:aa:aa:92:d0:75:65:d0:58:56:1d:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9A:15:B4:AD:55:A1:5E:70:09:EF:A2:93:9E:22:C6:41:62:DF:91
            X509v3 Authority Key Identifier:
                keyid:2F:D3:34:16:71:CE:E0:0B:E6:A1:E7:98:64:05:7B:66:AF:83:F1:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/2FD3341671CEE00BE6A1E79864057B66AF83F10E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FD3341671CEE00BE6A1E79864057B66AF83F10E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/323830343a313064343a3a2f33322d313238203d3e20323632333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:ff:46:63:7c:83:f6:27:32:2d:e9:f8:2f:f2:59:c2:b4:c3:
         c6:92:d4:c9:ca:6a:f5:2c:1f:ab:ab:28:35:d2:23:96:15:cb:
         80:54:43:31:89:44:9c:0c:68:76:c9:a8:ea:65:bb:25:05:14:
         93:e5:be:ef:54:b2:69:01:22:9b:e1:98:42:31:18:89:dc:75:
         b7:fa:cb:3f:8d:2d:8f:61:8f:8f:e7:b3:38:99:b5:55:8d:b7:
         8d:ea:f6:e0:36:59:41:91:be:15:09:ab:2d:b5:5b:ce:92:0a:
         b1:ae:98:1f:c0:85:8c:ed:73:bd:20:b7:87:3a:9f:e0:48:20:
         e6:82:0a:fa:29:8d:1d:bb:bf:b0:ee:16:5b:f1:3c:56:0b:78:
         7e:46:e7:a3:77:c1:be:44:1c:5a:7f:4b:a2:26:b1:76:c6:21:
         43:ba:b2:09:ba:1a:f8:5a:ec:37:aa:8c:65:b4:f3:88:fa:b4:
         95:28:f7:b7:49:80:2d:9d:97:e2:ac:ea:f2:67:82:60:d8:d2:
         ae:82:12:dd:a6:ee:e4:5f:9d:b0:29:33:2a:45:4c:4d:f6:1d:
         6d:af:2f:f7:b0:4c:62:be:de:16:92:13:f9:2e:19:94:50:2c:
         22:1d:fa:49:34:d7:8b:f0:d9:b1:ea:e4:e5:79:48:8c:f4:d7:
         35:26:a2:a5
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUJ3pnNI5k+Ebe9jLomIk9Uye6iJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZEMzM0MTY3MUNFRTAwQkU2QTFFNzk4NjQwNTdCNjZB
RjgzRjEwRTAeFw0yNTA3MDEyMzI3NThaFw0yNjA2MzAyMzMyNThaMDMxMTAvBgNV
BAMTKEIyOUExNUI0QUQ1NUExNUU3MDA5RUZBMjkzOUUyMkM2NDE2MkRGOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdFC+R8nlqAqhK4Gh0untU4hkG
e1eDyXJ9WeRJFy1cMH6JSZajqGHPW5H/FiTJEmk05CeqQw9siqrH1oAD+aY/VwfF
xX+z8yiCLXEofF+DetUhiAmY0EJSZRo55c9A2ZvFt7+HlOwpfXmZTfydXB7inLfO
gA18ivcUbLi67IDrhJHZo00tMSMliJP/ILzJC+tDdI0Ws0ZlOHa3AQPE1MUS26S7
7wAoqWD4/OC+yssvPyhfzoPILXT9AvmOh/Qch8H0vyJ6ccBzBoRriRC3dq6TdFgR
Vh/miymR+mKil46FRcc6tVTj1F0dCxilnzyokA2U2OBNqqqS0HVl0FhWHWPTAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUspoVtK1VoV5wCe+ik54ixkFi35EwHwYDVR0j
BBgwFoAUL9M0FnHO4AvmoeeYZAV7Zq+D8Q4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEI3WXd6UVhSbjZ2YWo3REpIUHFqTWlRSGlhd1ZFQkNKRE5ydDhmWk1a
V2svMC8yRkQzMzQxNjcxQ0VFMDBCRTZBMUU3OTg2NDA1N0I2NkFGODNGMTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGRDMzNDE2NzFDRUUwMEJF
NkExRTc5ODY0MDU3QjY2QUY4M0YxMEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCN1l3elFYUm42dmFqN0RKSFBxak1pUUhpYXdWRUJDSkROcnQ4ZlpNWldrLzAv
MzIzODMwMzQzYTMxMzA2NDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzIzMzM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBBDUMA0GCSqGSIb3DQEBCwUAA4IBAQBH/0Zj
fIP2JzIt6fgv8lnCtMPGktTJymr1LB+rqyg10iOWFcuAVEMxiUScDGh2yajqZbsl
BRST5b7vVLJpASKb4ZhCMRiJ3HW3+ss/jS2PYY+P57M4mbVVjbeN6vbgNllBkb4V
CasttVvOkgqxrpgfwIWM7XO9ILeHOp/gSCDmggr6KY0du7+w7hZb8TxWC3h+Ruej
d8G+RBxaf0uiJrF2xiFDurIJuhr4Wuw3qoxltPOI+rSVKPe3SYAtnZfirOryZ4Jg
2NKughLdpu7kX52wKTMqRUxN9h1try/3sExivt4WkhP5LhmUUCwiHfpJNNeL8Nmx
6uTleUiM9Nc1JqKl
-----END CERTIFICATE-----
Generated at Fri Jul 4 20:41:13 2025 by rpki-client