Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/323830343a3366383a3a2f33322d313238203d3e203232333831.roa
File:                     323830343a3366383a3a2f33322d313238203d3e203232333831.roa (raw, json)
Hash identifier:          IkzwGjaZCQVT5qRz9bgLIXyOomTCizaH/gBWsslfOjs=
Subject key identifier:   D7:2C:75:92:DC:35:3E:37:74:70:FE:E1:DE:67:85:1E:77:29:95:4E
Certificate issuer:       /CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
Certificate serial:       35DFD8670A399FCCEF350BEAA48D92976C0BE927
Authority key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/323830343a3366383a3a2f33322d313238203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:47:36 +0000
ROA not before:           Thu 28 Aug 2025 14:42:36 +0000
ROA not after:            Thu 27 Aug 2026 14:47:36 +0000
asID:                     22381
IP address blocks:        2804:3f8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 16:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:df:d8:67:0a:39:9f:cc:ef:35:0b:ea:a4:8d:92:97:6c:0b:e9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
        Validity
            Not Before: Aug 28 14:42:36 2025 GMT
            Not After : Aug 27 14:47:36 2026 GMT
        Subject: CN=D72C7592DC353E377470FEE1DE67851E7729954E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:49:eb:1c:ee:96:3a:c5:36:4f:62:d0:41:
                    56:d6:73:f0:65:16:66:45:1f:93:a1:f7:ee:0a:28:
                    75:96:16:4f:0c:b0:a3:6c:22:26:b3:df:f2:05:2c:
                    97:a4:00:b7:94:09:bc:cb:f7:97:27:20:d0:00:35:
                    67:f1:71:1e:a7:31:10:01:04:f2:a1:9e:69:ab:ef:
                    d9:32:98:bf:aa:87:5e:dc:7b:1f:7d:6f:8d:d2:59:
                    f1:08:12:69:81:fc:eb:7f:47:8f:98:47:4f:3e:98:
                    33:a5:ca:6f:09:9c:f5:07:bc:80:ee:ef:0a:54:6f:
                    a9:e8:eb:f3:33:0c:1a:d4:27:f2:d2:ae:2c:15:9a:
                    b1:03:4a:f6:d3:87:3e:6b:23:3d:5f:df:e5:1b:70:
                    14:5f:ba:49:77:2f:3b:26:fc:bd:82:a7:3b:7d:a8:
                    e9:37:55:95:a3:68:b6:12:34:64:6c:68:a4:45:a7:
                    c7:97:28:8d:fa:99:73:4d:48:83:ef:0c:72:23:12:
                    3c:39:34:77:d2:bf:f5:ba:1a:0d:16:19:d3:51:09:
                    71:7c:30:15:50:98:fd:d0:8f:d9:c1:0b:75:ea:8d:
                    46:39:90:86:b2:19:c5:16:de:3c:90:77:c1:be:37:
                    c6:ae:eb:d7:87:19:be:83:2c:e0:96:09:75:57:ca:
                    df:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2C:75:92:DC:35:3E:37:74:70:FE:E1:DE:67:85:1E:77:29:95:4E
            X509v3 Authority Key Identifier:
                keyid:B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/323830343a3366383a3a2f33322d313238203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:ac:82:d2:50:62:88:d1:b2:f0:61:e3:99:16:25:4f:fb:28:
         29:5b:32:a9:e6:d2:8b:b6:54:76:be:b6:79:c6:25:38:61:c9:
         84:ce:5f:7f:59:b6:fe:25:61:6a:fd:8e:a2:5f:95:0a:f3:7a:
         5b:f9:82:55:2b:31:33:35:60:88:22:10:49:00:a4:33:49:1b:
         6e:97:1f:fa:f4:b0:37:b8:51:a2:78:ce:e2:91:b5:fa:c6:86:
         f7:d2:d0:84:07:91:b2:89:04:27:03:df:18:b3:43:2b:8c:d6:
         7c:2b:27:47:10:b0:2c:3d:0d:3b:d4:89:d0:67:fb:92:29:65:
         c2:df:13:bf:8b:ae:28:d9:68:45:24:27:4b:74:9c:af:ef:1c:
         42:cd:c6:4b:33:28:42:52:ea:cf:dc:09:bd:2f:a9:6c:00:24:
         39:e3:d7:fb:23:33:ca:70:a2:24:07:b6:73:e1:70:64:fc:ad:
         f7:78:06:84:ff:85:39:e7:c8:d9:a6:45:cc:5b:82:fb:7d:4e:
         7e:1a:16:ad:cd:0b:7d:dc:7d:d4:14:20:9a:ba:e4:1f:68:2f:
         b3:f8:41:d2:0b:70:33:7d:eb:b2:0e:14:af:21:c0:ad:a7:c9:
         bd:26:13:eb:60:6c:40:d8:12:ec:88:f6:47:b3:60:ca:fc:fb:
         16:7c:36:68
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUNd/YZwo5n8zvNQvqpI2Sl2wL6ScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDRjU2OUQ4MkYzMjMzNTNCRjAxOUZDQzhEQTIzMTQ2
RDY2NkVGNTAeFw0yNTA4MjgxNDQyMzZaFw0yNjA4MjcxNDQ3MzZaMDMxMTAvBgNV
BAMTKEQ3MkM3NTkyREMzNTNFMzc3NDcwRkVFMURFNjc4NTFFNzcyOTk1NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhUnrHO6WOsU2T2LQQVbWc/Bl
FmZFH5Oh9+4KKHWWFk8MsKNsIiaz3/IFLJekALeUCbzL95cnINAANWfxcR6nMRAB
BPKhnmmr79kymL+qh17cex99b43SWfEIEmmB/Ot/R4+YR08+mDOlym8JnPUHvIDu
7wpUb6no6/MzDBrUJ/LSriwVmrEDSvbThz5rIz1f3+UbcBRfukl3Lzsm/L2Cpzt9
qOk3VZWjaLYSNGRsaKRFp8eXKI36mXNNSIPvDHIjEjw5NHfSv/W6Gg0WGdNRCXF8
MBVQmP3Qj9nBC3XqjUY5kIayGcUW3jyQd8G+N8au69eHGb6DLOCWCXVXyt/PAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU1yx1ktw1Pjd0cP7h3meFHncplU4wHwYDVR0j
BBgwFoAUs89WnYLzIzU78Bn8yNojFG1mbvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTJOdXNSMmlqdzZHM1lOaU1FRjMzM01Sa29EVERiV2dneDdZS2ZWcmZV
bXcvMi9CM0NGNTY5RDgyRjMyMzM1M0JGMDE5RkNDOERBMjMxNDZENjY2RUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQ0Y1NjlEODJGMzIzMzUz
QkYwMTlGQ0M4REEyMzE0NkQ2NjZFRjUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UyTnVzUjJpanc2RzNZTmlNRUYzMzNNUmtvRFREYldnZ3g3WUtmVnJmVW13LzIv
MzIzODMwMzQzYTMzNjYzODNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzMjMz
MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEA/gwDQYJKoZIhvcNAQELBQADggEBAM+sgtJQYojR
svBh45kWJU/7KClbMqnm0ou2VHa+tnnGJThhyYTOX39Ztv4lYWr9jqJflQrzelv5
glUrMTM1YIgiEEkApDNJG26XH/r0sDe4UaJ4zuKRtfrGhvfS0IQHkbKJBCcD3xiz
QyuM1nwrJ0cQsCw9DTvUidBn+5IpZcLfE7+LrijZaEUkJ0t0nK/vHELNxkszKEJS
6s/cCb0vqWwAJDnj1/sjM8pwoiQHtnPhcGT8rfd4BoT/hTnnyNmmRcxbgvt9Tn4a
Fq3NC33cfdQUIJq65B9oL7P4QdILcDN967IOFK8hwK2nyb0mE+tgbEDYEuyI9kez
YMr8+xZ8Nmg=
-----END CERTIFICATE-----
Generated at Mon Sep 15 16:11:53 2025 by rpki-client