Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3530303a3a2f34302d3431203d3e203533303735.roa
File:                     323830343a3931303a3530303a3a2f34302d3431203d3e203533303735.roa (raw, json)
Hash identifier:          qjXxYlfmsDon0mBjZJrbmvXaJSRR+OgZ1SY3/TKSCeI=
Subject key identifier:   22:41:11:EE:0E:F5:3B:09:C2:7A:6F:B4:99:01:BF:40:31:08:47:2A
Certificate issuer:       /CN=AB13EC0D6D610051E770A7056856BDE9A8A2CA21
Certificate serial:       29DC1CE12C5D245CEF82B97429755A4521E2D0A6
Authority key identifier: AB:13:EC:0D:6D:61:00:51:E7:70:A7:05:68:56:BD:E9:A8:A2:CA:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3530303a3a2f34302d3431203d3e203533303735.roa
Signing time:             Fri 10 Apr 2026 20:26:39 +0000
ROA not before:           Fri 10 Apr 2026 20:21:39 +0000
ROA not after:            Fri 09 Apr 2027 20:26:39 +0000
asID:                     53075
IP address blocks:        2804:910:500::/40 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.crl
                          rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:dc:1c:e1:2c:5d:24:5c:ef:82:b9:74:29:75:5a:45:21:e2:d0:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB13EC0D6D610051E770A7056856BDE9A8A2CA21
        Validity
            Not Before: Apr 10 20:21:39 2026 GMT
            Not After : Apr  9 20:26:39 2027 GMT
        Subject: CN=224111EE0EF53B09C27A6FB49901BF403108472A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:e5:b6:82:9c:ea:72:80:64:df:89:21:57:
                    91:db:95:cb:62:e5:63:14:f9:3d:50:b5:5f:64:da:
                    8c:c0:27:80:57:ee:68:bd:48:4f:e9:17:b4:f1:13:
                    7f:c4:ef:a7:29:a3:42:5f:3a:fe:f9:a2:23:0c:09:
                    7f:66:a0:db:7b:24:9e:93:b4:ed:19:0c:24:dc:35:
                    e0:f2:c1:a7:ca:cf:d9:03:fa:4b:a8:48:95:5a:c1:
                    ba:35:d5:df:cf:a0:4d:47:08:92:4f:1d:fd:36:19:
                    03:eb:18:ab:c7:2a:32:0a:f5:ca:9d:66:17:b2:7b:
                    d4:d1:c1:4f:5f:f6:16:d3:92:79:07:a9:c4:52:a6:
                    02:de:50:9a:40:67:b4:8a:0d:de:63:96:2a:19:b9:
                    9f:37:07:85:b7:73:07:b2:6a:12:1a:ba:2a:af:b1:
                    6c:6e:20:fa:31:f5:3b:b0:6e:cf:9d:c4:92:4f:78:
                    c9:b5:6d:c1:70:b1:62:f2:a2:2d:3b:17:fc:76:9d:
                    b2:a0:d2:9b:86:71:b9:f6:de:08:72:24:36:b7:9b:
                    8a:48:86:7b:65:80:6f:dd:c9:9d:b6:2a:e4:e3:83:
                    fc:80:31:13:30:7f:37:54:de:1d:8f:96:2d:56:b0:
                    3b:91:41:00:10:23:c6:99:f0:4e:fd:c5:06:42:78:
                    61:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:41:11:EE:0E:F5:3B:09:C2:7A:6F:B4:99:01:BF:40:31:08:47:2A
            X509v3 Authority Key Identifier:
                keyid:AB:13:EC:0D:6D:61:00:51:E7:70:A7:05:68:56:BD:E9:A8:A2:CA:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3530303a3a2f34302d3431203d3e203533303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:910:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:65:02:45:d5:93:58:01:24:eb:59:59:70:83:c2:3e:08:93:
         d6:42:ef:85:a4:ac:a0:3e:b3:ff:a6:07:2c:9a:fd:e6:00:80:
         57:af:30:95:91:b6:02:81:90:d1:bb:8c:d5:b4:f9:2a:ad:4c:
         04:95:c0:1a:aa:df:66:fd:12:92:39:bd:8a:e6:34:f7:77:09:
         a9:31:fa:fa:09:84:0b:b2:6a:c3:49:96:e4:91:f3:06:7c:4d:
         6d:4e:78:24:a5:69:e3:8b:9c:d5:4b:e1:6e:e3:86:f3:5d:c7:
         70:be:51:7e:45:08:cc:0c:c8:c7:25:0f:1c:97:9c:98:e9:17:
         06:81:57:9d:54:69:20:07:8f:ba:90:03:87:f9:6a:63:7b:66:
         bd:83:52:c3:fd:ff:c4:4e:47:1a:94:66:c1:50:ee:b6:53:15:
         cd:b9:62:b6:35:ff:f7:aa:a0:42:db:cc:db:39:73:45:15:03:
         e7:ae:b4:79:c7:05:8c:2b:f7:78:60:c6:13:e3:57:dc:7b:77:
         f4:ce:b0:0c:fb:1e:ac:b7:ee:cf:d4:3f:b6:78:be:e3:3b:4b:
         63:2c:77:07:9f:e1:b6:2c:ab:78:43:45:2a:c0:f4:e1:3a:06:
         e7:1c:96:ae:b1:b5:13:fd:97:d8:49:2d:88:ac:70:b5:37:57:
         d3:33:a7:a0
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUKdwc4SxdJFzvgrl0KXVaRSHi0KYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUIxM0VDMEQ2RDYxMDA1MUU3NzBBNzA1Njg1NkJERTlB
OEEyQ0EyMTAeFw0yNjA0MTAyMDIxMzlaFw0yNzA0MDkyMDI2MzlaMDMxMTAvBgNV
BAMTKDIyNDExMUVFMEVGNTNCMDlDMjdBNkZCNDk5MDFCRjQwMzEwODQ3MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILeW2gpzqcoBk34khV5Hblcti
5WMU+T1QtV9k2ozAJ4BX7mi9SE/pF7TxE3/E76cpo0JfOv75oiMMCX9moNt7JJ6T
tO0ZDCTcNeDywafKz9kD+kuoSJVawbo11d/PoE1HCJJPHf02GQPrGKvHKjIK9cqd
Zheye9TRwU9f9hbTknkHqcRSpgLeUJpAZ7SKDd5jlioZuZ83B4W3cweyahIauiqv
sWxuIPox9Tuwbs+dxJJPeMm1bcFwsWLyoi07F/x2nbKg0puGcbn23ghyJDa3m4pI
hntlgG/dyZ22KuTjg/yAMRMwfzdU3h2Pli1WsDuRQQAQI8aZ8E79xQZCeGFdAgMB
AAGjggJVMIICUTAdBgNVHQ4EFgQUIkER7g71OwnCem+0mQG/QDEIRyowHwYDVR0j
BBgwFoAUqxPsDW1hAFHncKcFaFa96aiiyiEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzJMcjgyNVdBNnV0bUpQYnNLU2hSZ01neTRtWVZjVHR5S1ZaSmlVVEtV
NkEvMC9BQjEzRUMwRDZENjEwMDUxRTc3MEE3MDU2ODU2QkRFOUE4QTJDQTIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCMTNFQzBENkQ2MTAwNTFF
NzcwQTcwNTY4NTZCREU5QThBMkNBMjEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMyTHI4MjVXQTZ1dG1KUGJzS1NoUmdNZ3k0bVlWY1R0eUtWWkppVVRLVTZBLzAv
MzIzODMwMzQzYTM5MzEzMDNhMzUzMDMwM2EzYTJmMzQzMDJkMzQzMTIwM2QzZTIw
MzUzMzMwMzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwDgQCAAIwCAMGACgECRAFMA0GCSqGSIb3DQEBCwUAA4IBAQCN
ZQJF1ZNYASTrWVlwg8I+CJPWQu+FpKygPrP/pgcsmv3mAIBXrzCVkbYCgZDRu4zV
tPkqrUwElcAaqt9m/RKSOb2K5jT3dwmpMfr6CYQLsmrDSZbkkfMGfE1tTngkpWnj
i5zVS+Fu44bzXcdwvlF+RQjMDMjHJQ8cl5yY6RcGgVedVGkgB4+6kAOH+Wpje2a9
g1LD/f/ETkcalGbBUO62UxXNuWK2Nf/3qqBC28zbOXNFFQPnrrR5xwWMK/d4YMYT
41fce3f0zrAM+x6st+7P1D+2eL7jO0tjLHcHn+G2LKt4Q0UqwPThOgbnHJausbUT
/ZfYSS2IrHC1N1fTM6eg
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:06:59 2026 by rpki-client