Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/323830343a373131383a3a2f33322d313238203d3e20323730373636.roa
File:                     323830343a373131383a3a2f33322d313238203d3e20323730373636.roa (raw, json)
Hash identifier:          KSACBmCjp/dOq5DPSvRFwtLlzjXyou9HKIiHNjPprpA=
Subject key identifier:   20:3D:E1:3A:53:99:A4:71:4B:E4:3D:E0:DE:F3:D2:C8:7B:7F:F3:60
Certificate issuer:       /CN=F444077BB184F405399736885F1EDA6F59085594
Certificate serial:       2E1648713B2E171C6AB14040B8543669CA981DA1
Authority key identifier: F4:44:07:7B:B1:84:F4:05:39:97:36:88:5F:1E:DA:6F:59:08:55:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F444077BB184F405399736885F1EDA6F59085594.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/323830343a373131383a3a2f33322d313238203d3e20323730373636.roa
Signing time:             Tue 14 Oct 2025 17:50:46 +0000
ROA not before:           Tue 14 Oct 2025 17:45:46 +0000
ROA not after:            Tue 13 Oct 2026 17:50:46 +0000
asID:                     270766
IP address blocks:        2804:7118::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/F444077BB184F405399736885F1EDA6F59085594.crl
                          rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/F444077BB184F405399736885F1EDA6F59085594.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F444077BB184F405399736885F1EDA6F59085594.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:16:48:71:3b:2e:17:1c:6a:b1:40:40:b8:54:36:69:ca:98:1d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F444077BB184F405399736885F1EDA6F59085594
        Validity
            Not Before: Oct 14 17:45:46 2025 GMT
            Not After : Oct 13 17:50:46 2026 GMT
        Subject: CN=203DE13A5399A4714BE43DE0DEF3D2C87B7FF360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:77:52:40:e6:9e:56:52:e9:97:ce:1c:52:a6:
                    1a:5b:63:0f:42:51:e6:18:a0:fb:a5:3d:2d:c9:b9:
                    14:ce:30:71:cb:ac:b9:8f:4f:29:16:ec:bb:ac:72:
                    7b:2a:cd:ff:78:87:9e:1f:2c:58:53:cb:40:08:24:
                    7e:cc:75:94:48:f5:0e:38:dc:51:40:b9:8a:a3:8e:
                    d8:82:f7:50:d7:39:48:ee:d2:6d:51:3a:24:16:63:
                    3b:15:37:ef:18:f9:ae:68:bb:10:1e:f4:19:8f:67:
                    ca:33:13:04:0a:5c:d4:3b:27:9a:29:57:b4:1f:1d:
                    4f:ac:94:21:db:ae:f2:97:21:8f:40:18:79:f6:b3:
                    2f:d3:a0:c5:a6:5e:10:e7:47:5b:44:b2:68:21:f1:
                    4a:74:8e:d9:f1:b3:3b:ee:24:20:5c:4b:e5:42:a1:
                    0a:3c:0e:2a:c0:93:38:9f:e8:f4:7b:e0:1f:50:fd:
                    90:fe:f7:4e:97:5c:89:fa:5c:69:35:2f:41:b2:e3:
                    97:c6:df:f8:72:9f:11:b3:b2:e4:b8:33:88:52:2c:
                    42:99:40:0f:ec:e6:54:5a:95:16:b0:f8:1d:4e:58:
                    38:80:a7:41:98:7e:c1:d4:cd:18:a4:c4:ed:18:21:
                    b9:7d:9f:dd:18:d9:26:81:9a:0b:ee:84:2c:90:94:
                    21:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3D:E1:3A:53:99:A4:71:4B:E4:3D:E0:DE:F3:D2:C8:7B:7F:F3:60
            X509v3 Authority Key Identifier:
                keyid:F4:44:07:7B:B1:84:F4:05:39:97:36:88:5F:1E:DA:6F:59:08:55:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/F444077BB184F405399736885F1EDA6F59085594.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F444077BB184F405399736885F1EDA6F59085594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MiTSyS2dWcUZonFui1ZsgbSTJqTrE4bcAY6pRkhuRCd/0/323830343a373131383a3a2f33322d313238203d3e20323730373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7118::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:1f:32:9f:56:fe:46:a5:91:fa:55:19:76:48:d8:bc:57:17:
         41:69:e8:0a:6c:3d:37:d9:03:7a:a1:6e:cc:91:49:e1:2c:97:
         17:06:26:b3:f0:1f:e0:52:f9:9f:69:cf:b3:5d:f5:e3:48:09:
         73:84:e4:aa:7b:1e:e2:6b:de:e0:2c:cf:5d:3a:45:92:64:fe:
         e4:d0:41:07:62:fd:99:ab:0a:ea:b3:48:01:4c:2e:9d:f8:bb:
         64:23:2c:5b:05:d2:93:3d:c4:c0:2d:1f:1d:e9:5f:02:06:ae:
         38:9a:b8:26:7e:89:d9:f5:30:d2:2e:6d:dd:b2:4e:ba:ea:4b:
         9d:38:5d:47:d8:08:7a:54:e7:51:fb:19:64:6b:8f:34:44:33:
         f7:ab:78:50:e7:42:2f:77:8b:9e:b0:bc:25:28:5a:d1:40:58:
         17:43:b0:42:0c:0f:35:72:61:da:26:f4:e4:47:90:6d:a7:11:
         55:5f:88:73:24:8f:7f:94:60:c2:be:a4:03:c8:8c:55:52:c9:
         2a:ce:a4:3e:e4:4f:f3:de:a1:a0:7c:4c:44:ae:ef:f7:88:4b:
         1a:b7:6a:81:1d:0e:3a:94:0c:6a:c9:dc:ba:6b:b6:ce:8d:e8:
         d2:d8:61:7a:ad:ba:e8:6a:b4:3e:39:34:08:6a:c0:b5:79:7b:
         fd:e3:03:78
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIULhZIcTsuFxxqsUBAuFQ2acqYHaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ0NDA3N0JCMTg0RjQwNTM5OTczNjg4NUYxRURBNkY1
OTA4NTU5NDAeFw0yNTEwMTQxNzQ1NDZaFw0yNjEwMTMxNzUwNDZaMDMxMTAvBgNV
BAMTKDIwM0RFMTNBNTM5OUE0NzE0QkU0M0RFMERFRjNEMkM4N0I3RkYzNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGd1JA5p5WUumXzhxSphpbYw9C
UeYYoPulPS3JuRTOMHHLrLmPTykW7Luscnsqzf94h54fLFhTy0AIJH7MdZRI9Q44
3FFAuYqjjtiC91DXOUju0m1ROiQWYzsVN+8Y+a5ouxAe9BmPZ8ozEwQKXNQ7J5op
V7QfHU+slCHbrvKXIY9AGHn2sy/ToMWmXhDnR1tEsmgh8Up0jtnxszvuJCBcS+VC
oQo8DirAkzif6PR74B9Q/ZD+906XXIn6XGk1L0Gy45fG3/hynxGzsuS4M4hSLEKZ
QA/s5lRalRaw+B1OWDiAp0GYfsHUzRikxO0YIbl9n90Y2SaBmgvuhCyQlCG1AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUID3hOlOZpHFL5D3g3vPSyHt/82AwHwYDVR0j
BBgwFoAU9EQHe7GE9AU5lzaIXx7ab1kIVZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1pVFN5UzJkV2NVWm9uRnVpMVpzZ2JTVEpxVHJFNGJjQVk2cFJraHVS
Q2QvMC9GNDQ0MDc3QkIxODRGNDA1Mzk5NzM2ODg1RjFFREE2RjU5MDg1NTk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0NDQwNzdCQjE4NEY0MDUz
OTk3MzY4ODVGMUVEQTZGNTkwODU1OTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNaVRTeVMyZFdjVVpvbkZ1aTFac2diU1RKcVRyRTRiY0FZNnBSa2h1UkNkLzAv
MzIzODMwMzQzYTM3MzEzMTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzNzM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHEYMA0GCSqGSIb3DQEBCwUAA4IBAQChHzKf
Vv5GpZH6VRl2SNi8VxdBaegKbD032QN6oW7MkUnhLJcXBiaz8B/gUvmfac+zXfXj
SAlzhOSqex7ia97gLM9dOkWSZP7k0EEHYv2Zqwrqs0gBTC6d+LtkIyxbBdKTPcTA
LR8d6V8CBq44mrgmfonZ9TDSLm3dsk666kudOF1H2Ah6VOdR+xlka480RDP3q3hQ
50Ivd4uesLwlKFrRQFgXQ7BCDA81cmHaJvTkR5BtpxFVX4hzJI9/lGDCvqQDyIxV
UskqzqQ+5E/z3qGgfExEru/3iEsat2qBHQ46lAxqydy6a7bOjejS2GF6rbroarQ+
OTQIasC1eXv94wN4
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:18:40 2025 by rpki-client