Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/323830343a363432343a343030303a3a2f33342d3334203d3e20323639343039.roa
File:                     323830343a363432343a343030303a3a2f33342d3334203d3e20323639343039.roa (raw, json)
Hash identifier:          5pxTllfSSt39mrxpVTOopwx7Bij3QiO0PqFkE1xkqQY=
Subject key identifier:   B9:DA:32:C1:7F:4E:88:54:62:55:BE:F2:D7:C1:CB:79:27:9E:B9:F7
Certificate issuer:       /CN=FF962D3BC2259181BF6817D40CC381E0150C9740
Certificate serial:       70C6AD77DB44AA44FBEBE5ED217ED2529445F041
Authority key identifier: FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/323830343a363432343a343030303a3a2f33342d3334203d3e20323639343039.roa
Signing time:             Fri 31 Jul 2026 15:35:10 +0000
ROA not before:           Fri 31 Jul 2026 15:30:10 +0000
ROA not after:            Fri 30 Jul 2027 15:35:10 +0000
asID:                     269409
IP address blocks:        2804:6424:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl
                          rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 15:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c6:ad:77:db:44:aa:44:fb:eb:e5:ed:21:7e:d2:52:94:45:f0:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF962D3BC2259181BF6817D40CC381E0150C9740
        Validity
            Not Before: Jul 31 15:30:10 2026 GMT
            Not After : Jul 30 15:35:10 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c6:1c:9e:ec:af:bb:f9:9a:b3:50:d1:60:00:
                    37:5e:69:3c:3d:da:b7:8f:63:e0:c1:a8:53:e6:37:
                    50:85:bf:8f:01:e7:c5:c2:f3:7e:f1:4d:4c:94:b2:
                    cb:95:8b:6b:d5:2f:dd:ab:3e:64:79:ab:72:5f:07:
                    e9:1b:7f:1f:14:f6:22:41:5a:71:d0:46:3e:4c:e3:
                    23:f1:55:77:9b:69:8a:6c:45:b1:ab:24:38:a4:47:
                    19:75:3f:60:5a:ed:f2:b7:3a:b0:cf:0b:88:97:e7:
                    7b:db:6d:b2:35:a4:ee:aa:f0:30:54:26:5f:d5:3e:
                    fe:11:99:41:01:8f:31:35:ba:d4:df:27:3b:aa:67:
                    0c:19:20:e0:a5:a2:bc:df:d7:76:9c:a6:98:24:c4:
                    b8:d6:46:ba:7b:1a:81:c6:77:f0:94:f3:63:37:bf:
                    62:ea:23:3e:1f:b2:6a:8a:6d:a4:69:d1:a9:eb:8e:
                    40:a9:fa:c1:34:6c:17:d0:92:8b:d6:4e:76:27:3f:
                    66:9b:33:d7:37:4f:54:7f:cd:14:01:5f:a1:91:f0:
                    9e:2d:56:7e:18:14:a9:e7:ad:20:0c:f4:14:0f:83:
                    86:74:95:1d:1d:e8:4b:83:ab:8f:81:c4:1c:ff:5e:
                    9c:83:48:f6:65:ed:f3:c7:b5:67:59:e1:48:48:31:
                    c4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DA:32:C1:7F:4E:88:54:62:55:BE:F2:D7:C1:CB:79:27:9E:B9:F7
            X509v3 Authority Key Identifier:
                keyid:FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/323830343a363432343a343030303a3a2f33342d3334203d3e20323639343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6424:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         37:7d:7c:66:e8:c1:fc:05:de:d3:b8:0c:b7:08:c2:34:45:40:
         b3:6f:a5:0e:c9:fd:51:99:22:d7:2e:eb:ec:f8:ea:45:db:08:
         77:19:09:74:3a:9f:16:5d:db:22:eb:7f:06:9b:fc:df:48:17:
         61:9f:27:1d:42:70:2a:eb:84:6b:14:7a:b0:f0:82:30:82:7d:
         61:22:5c:06:d2:96:65:87:68:cf:e7:19:78:38:ed:4a:40:a4:
         64:2e:66:54:e2:c3:10:28:7a:fd:48:20:58:db:01:7c:8f:35:
         66:82:3d:0c:77:a3:7e:09:a9:71:39:a8:37:68:af:fd:7e:c8:
         4d:fe:81:aa:d5:e6:fd:55:41:b0:04:f2:42:5d:bc:e7:58:81:
         2f:6f:40:b5:59:56:ea:84:be:66:1f:be:8c:91:a6:32:24:06:
         bd:f0:99:de:3d:9f:d3:bf:2f:aa:3b:d5:87:d1:23:0c:75:6a:
         b2:36:94:17:87:b2:96:ff:84:20:a8:6d:c0:02:7c:ca:50:76:
         0c:0d:88:d6:d6:27:b8:37:ae:82:7a:44:f0:1b:2b:f0:59:63:
         ba:0f:aa:3c:e9:02:2a:6d:4e:da:9c:5b:18:9f:db:36:2c:20:
         bf:4a:7f:f9:18:40:0b:27:51:4e:25:c1:03:62:63:f9:76:d6:
         79:05:4e:15
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUcMatd9tEqkT76+XtIX7SUpRF8EEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY5NjJEM0JDMjI1OTE4MUJGNjgxN0Q0MENDMzgxRTAx
NTBDOTc0MDAeFw0yNjA3MzExNTMwMTBaFw0yNzA3MzAxNTM1MTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUJDNjFDOUVFQ0FGQkJGOTlB
QjM1MEQxNjAwMDM3NUU2OTNDM0REQUI3OEY2M0UwQzFBODUzRTYzNzUwODVCRjhG
MDFFN0M1QzJGMzdFRjE0RDRDOTRCMkNCOTU4QjZCRDUyRkREQUIzRTY0NzlBQjcy
NUYwN0U5MUI3RjFGMTRGNjIyNDE1QTcxRDA0NjNFNENFMzIzRjE1NTc3OUI2OThB
NkM0NUIxQUIyNDM4QTQ0NzE5NzUzRjYwNUFFREYyQjczQUIwQ0YwQjg4OTdFNzdC
REI2REIyMzVBNEVFQUFGMDMwNTQyNjVGRDUzRUZFMTE5OTQxMDE4RjMxMzVCQUQ0
REYyNzNCQUE2NzBDMTkyMEUwQTVBMkJDREZENzc2OUNBNjk4MjRDNEI4RDY0NkJB
N0IxQTgxQzY3N0YwOTRGMzYzMzdCRjYyRUEyMzNFMUZCMjZBOEE2REE0NjlEMUE5
RUI4RTQwQTlGQUMxMzQ2QzE3RDA5MjhCRDY0RTc2MjczRjY2OUIzM0Q3Mzc0RjU0
N0ZDRDE0MDE1RkExOTFGMDlFMkQ1NjdFMTgxNEE5RTdBRDIwMENGNDE0MEY4Mzg2
NzQ5NTFEMURFODRCODNBQjhGODFDNDFDRkY1RTlDODM0OEY2NjVFREYzQzdCNTY3
NTlFMTQ4NDgzMUM0NDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAm8Ycnuyvu/mas1DRYAA3Xmk8Pdq3j2PgwahT5jdQhb+PAefFwvN+
8U1MlLLLlYtr1S/dqz5keatyXwfpG38fFPYiQVpx0EY+TOMj8VV3m2mKbEWxqyQ4
pEcZdT9gWu3ytzqwzwuIl+d7222yNaTuqvAwVCZf1T7+EZlBAY8xNbrU3yc7qmcM
GSDgpaK839d2nKaYJMS41ka6exqBxnfwlPNjN79i6iM+H7Jqim2kadGp645AqfrB
NGwX0JKL1k52Jz9mmzPXN09Uf80UAV+hkfCeLVZ+GBSp560gDPQUD4OGdJUdHehL
g6uPgcQc/16cg0j2Ze3zx7VnWeFISDHESQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FLnaMsF/TohUYlW+8tfBy3knnrn3MB8GA1UdIwQYMBaAFP+WLTvCJZGBv2gX1AzD
geAVDJdAMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzh1M0ozUTlkTXlKWW9x
VkhXQmtrVGNYcXBuTUdkRktoN1RaR1FwTXQ4U2NILzAvRkY5NjJEM0JDMjI1OTE4
MUJGNjgxN0Q0MENDMzgxRTAxNTBDOTc0MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GRjk2MkQzQkMyMjU5MTgxQkY2ODE3RDQwQ0MzODFFMDE1MEM5
NzQwLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84dTNKM1E5ZE15SllvcVZIV0Jr
a1RjWHFwbk1HZEZLaDdUWkdRcE10OFNjSC8wLzMyMzgzMDM0M2EzNjM0MzIzNDNh
MzQzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzkzNDMwMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBGQkQDANBgkqhkiG9w0BAQsFAAOCAQEAN318ZujB/AXe07gMtwjC
NEVAs2+lDsn9UZki1y7r7PjqRdsIdxkJdDqfFl3bIut/Bpv830gXYZ8nHUJwKuuE
axR6sPCCMIJ9YSJcBtKWZYdoz+cZeDjtSkCkZC5mVOLDECh6/UggWNsBfI81ZoI9
DHejfgmpcTmoN2iv/X7ITf6BqtXm/VVBsATyQl2851iBL29AtVlW6oS+Zh++jJGm
MiQGvfCZ3j2f078vqjvVh9EjDHVqsjaUF4eylv+EIKhtwAJ8ylB2DA2I1tYnuDeu
gnpE8Bsr8Fljug+qPOkCKm1O2pxbGJ/bNiwgv0p/+RhACydRTiXBA2Jj+XbWeQVO
FQ==
-----END CERTIFICATE-----