Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a343030303a3a2f33342d3334203d3e20323638373436.roa
File:                     323830343a356131303a343030303a3a2f33342d3334203d3e20323638373436.roa (raw, json)
Hash identifier:          w4Nml5oEApym7dAms2mz08q+PHPJy9+nc+HSFUCIXIQ=
Subject key identifier:   3A:1E:4C:8B:50:2D:1C:B3:45:51:56:FF:FE:2C:28:BB:D9:E0:E8:8B
Certificate issuer:       /CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
Certificate serial:       7DC14179C683D3357A2A8F6537131B4710FBE79D
Authority key identifier: DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a343030303a3a2f33342d3334203d3e20323638373436.roa
Signing time:             Fri 12 Sep 2025 18:32:17 +0000
ROA not before:           Fri 12 Sep 2025 18:27:17 +0000
ROA not after:            Fri 11 Sep 2026 18:32:17 +0000
asID:                     268746
IP address blocks:        2804:5a10:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 03:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c1:41:79:c6:83:d3:35:7a:2a:8f:65:37:13:1b:47:10:fb:e7:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
        Validity
            Not Before: Sep 12 18:27:17 2025 GMT
            Not After : Sep 11 18:32:17 2026 GMT
        Subject: CN=3A1E4C8B502D1CB3455156FFFE2C28BBD9E0E88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:22:93:b8:58:5d:ef:15:7e:b1:d8:f9:90:6b:
                    6e:16:41:ca:9c:f8:0e:ab:fd:ba:c3:96:90:c5:c7:
                    9f:9f:b9:30:7c:a0:cb:0b:2b:c7:27:7d:03:3b:ef:
                    60:72:8d:c1:7c:f4:65:5a:61:f4:47:81:07:fa:9b:
                    b3:e2:3e:bb:c7:a8:c1:b3:61:95:35:8b:d2:b2:c7:
                    68:da:50:df:da:f9:d1:3b:43:7d:a7:ad:67:9a:1d:
                    74:3e:d8:eb:9a:7e:a8:48:ed:3f:be:88:52:51:76:
                    0a:0c:02:02:f9:82:74:80:65:b2:ae:5c:1c:b4:12:
                    05:3f:13:cb:62:a7:a0:f2:6f:2b:11:e3:29:89:43:
                    ac:5c:b3:e6:cb:64:33:62:4e:e8:4a:fe:0e:19:a7:
                    3b:7a:ed:05:13:3e:56:5e:14:b2:57:b9:36:57:f5:
                    f4:9a:fd:d2:21:4a:02:50:0d:cb:93:d3:de:ac:d2:
                    65:9c:b2:0b:40:92:5b:3f:63:38:91:92:a8:38:da:
                    e6:58:bb:75:3e:dd:54:94:0b:32:79:bc:00:2e:5c:
                    99:41:c4:9c:34:a2:fa:91:af:62:8c:d7:c9:b2:17:
                    9b:10:91:60:3b:06:e4:d6:93:1a:1d:82:a4:36:9d:
                    64:40:83:4f:b0:ac:a4:aa:87:78:1f:92:b8:17:e3:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1E:4C:8B:50:2D:1C:B3:45:51:56:FF:FE:2C:28:BB:D9:E0:E8:8B
            X509v3 Authority Key Identifier:
                keyid:DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a343030303a3a2f33342d3334203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         82:77:f1:b7:ca:e4:5a:93:63:92:4d:1c:20:0f:d6:a6:26:e0:
         7b:e5:e5:29:06:5c:40:e1:1f:98:2c:b0:6f:b8:51:77:0e:c7:
         2b:0d:d2:f1:98:a0:be:b4:ec:8a:29:a6:48:fc:b6:97:48:f2:
         7e:f1:b7:f3:8c:86:e8:09:dc:9a:38:80:a6:f3:19:ef:47:f7:
         fa:e8:ef:9f:40:e5:70:2b:fb:d5:ef:e4:bf:83:a9:34:1d:fb:
         b4:72:b4:6d:a0:f9:c6:d2:a2:cf:9e:2a:d4:71:3d:d4:32:4d:
         02:eb:25:40:10:85:d7:41:10:3c:af:ca:72:7e:5f:69:82:df:
         31:83:b5:96:10:51:65:74:18:02:9e:9b:6d:6b:32:0e:d3:dc:
         a8:01:c0:36:dc:48:9a:98:2a:92:5a:d2:c4:e7:e5:8b:19:1f:
         8c:f0:d3:aa:73:ed:2b:e4:89:e4:9d:4b:df:3d:77:0f:68:1c:
         02:44:63:13:62:48:f1:86:82:b0:75:40:2b:af:15:1d:ba:b9:
         96:db:98:f5:54:ac:3c:8f:01:20:c2:1b:30:c1:38:84:e2:6f:
         f7:99:41:2d:5f:77:3c:cf:5a:a3:1f:32:97:2a:85:ca:17:8d:
         27:b0:0a:74:b0:61:06:b4:e1:5e:5f:1c:d7:87:ad:d5:cc:d8:
         7f:b8:97:ad
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUfcFBecaD0zV6Ko9lNxMbRxD7550wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREEzMjE2MTY1MUI5RjlFNUU1OEY0REM5NkQ3NTE3RjBE
ODAyM0QyMTAeFw0yNTA5MTIxODI3MTdaFw0yNjA5MTExODMyMTdaMDMxMTAvBgNV
BAMTKDNBMUU0QzhCNTAyRDFDQjM0NTUxNTZGRkZFMkMyOEJCRDlFMEU4OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyIpO4WF3vFX6x2PmQa24WQcqc
+A6r/brDlpDFx5+fuTB8oMsLK8cnfQM772ByjcF89GVaYfRHgQf6m7PiPrvHqMGz
YZU1i9Kyx2jaUN/a+dE7Q32nrWeaHXQ+2OuafqhI7T++iFJRdgoMAgL5gnSAZbKu
XBy0EgU/E8tip6DybysR4ymJQ6xcs+bLZDNiTuhK/g4Zpzt67QUTPlZeFLJXuTZX
9fSa/dIhSgJQDcuT096s0mWcsgtAkls/YziRkqg42uZYu3U+3VSUCzJ5vAAuXJlB
xJw0ovqRr2KM18myF5sQkWA7BuTWkxodgqQ2nWRAg0+wrKSqh3gfkrgX4zQ7AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUOh5Mi1AtHLNFUVb//iwou9ng6IswHwYDVR0j
BBgwFoAU2jIWFlG5+eXlj03JbXUX8NgCPSEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz
LzAvREEzMjE2MTY1MUI5RjlFNUU1OEY0REM5NkQ3NTE3RjBEODAyM0QyMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EQTMyMTYxNjUxQjlGOUU1RTU4
RjREQzk2RDc1MTdGMEQ4MDIzRDIxLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
UW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lzLzAvMzIz
ODMwMzQzYTM1NjEzMTMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2Uy
MDMyMzYzODM3MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEWhBAMA0GCSqGSIb3DQEBCwUAA4IB
AQCCd/G3yuRak2OSTRwgD9amJuB75eUpBlxA4R+YLLBvuFF3DscrDdLxmKC+tOyK
KaZI/LaXSPJ+8bfzjIboCdyaOICm8xnvR/f66O+fQOVwK/vV7+S/g6k0Hfu0crRt
oPnG0qLPnirUcT3UMk0C6yVAEIXXQRA8r8pyfl9pgt8xg7WWEFFldBgCnpttazIO
09yoAcA23EiamCqSWtLE5+WLGR+M8NOqc+0r5InknUvfPXcPaBwCRGMTYkjxhoKw
dUArrxUdurmW25j1VKw8jwEgwhswwTiE4m/3mUEtX3c8z1qjHzKXKoXKF40nsAp0
sGEGtOFeXxzXh63VzNh/uJet
-----END CERTIFICATE-----
Generated at Fri Sep 19 03:57:59 2025 by rpki-client