Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/323830343a336234343a3a2f33322d3438203d3e20323636313339.roa
File:                     323830343a336234343a3a2f33322d3438203d3e20323636313339.roa (raw, json)
Hash identifier:          RcZkPGKN5YzNsu/IYCyjoNcw0HFeQJKgqBHXnrQhdEg=
Subject key identifier:   B3:9F:96:EC:EE:8E:C6:4B:84:26:4C:19:10:EA:AD:DA:6E:46:47:38
Certificate issuer:       /CN=01C410F2D199705E3E387AB99600CABA9280F155
Certificate serial:       37372E20B1DDB8083E358DB230B819582C8CB923
Authority key identifier: 01:C4:10:F2:D1:99:70:5E:3E:38:7A:B9:96:00:CA:BA:92:80:F1:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01C410F2D199705E3E387AB99600CABA9280F155.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/323830343a336234343a3a2f33322d3438203d3e20323636313339.roa
Signing time:             Mon 02 Mar 2026 14:18:42 +0000
ROA not before:           Mon 02 Mar 2026 14:13:42 +0000
ROA not after:            Mon 01 Mar 2027 14:18:42 +0000
asID:                     266139
IP address blocks:        2804:3b44::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/01C410F2D199705E3E387AB99600CABA9280F155.crl
                          rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/01C410F2D199705E3E387AB99600CABA9280F155.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01C410F2D199705E3E387AB99600CABA9280F155.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:37:2e:20:b1:dd:b8:08:3e:35:8d:b2:30:b8:19:58:2c:8c:b9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01C410F2D199705E3E387AB99600CABA9280F155
        Validity
            Not Before: Mar  2 14:13:42 2026 GMT
            Not After : Mar  1 14:18:42 2027 GMT
        Subject: CN=B39F96ECEE8EC64B84264C1910EAADDA6E464738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:9b:5e:6f:1d:5a:5d:76:06:f3:20:f9:a9:
                    a3:81:ab:0d:52:51:10:25:c3:12:04:46:22:c3:3c:
                    79:87:8d:87:48:2e:74:89:12:04:78:5a:73:d0:1c:
                    b2:8e:ba:cc:6d:ad:75:70:b3:52:f2:36:12:40:79:
                    28:b0:3a:51:ec:d6:32:29:dd:b6:d7:f9:45:1b:97:
                    06:90:a8:f9:9e:2f:c0:ec:b7:f9:95:7f:55:c9:cb:
                    82:fd:85:ec:07:cc:62:90:ac:2e:95:2b:17:19:f7:
                    64:af:5d:2c:e4:f0:07:92:a3:34:07:0c:f2:c7:3c:
                    5a:fd:3a:31:09:2c:51:92:7f:ee:7e:f1:df:4d:c5:
                    1d:12:27:ec:a7:b9:70:8c:b5:e3:7d:2e:75:b2:ad:
                    71:07:47:01:3e:7d:a1:f9:b4:34:0d:99:25:12:56:
                    1e:a9:24:ab:a9:70:ef:7a:dd:74:dd:e3:75:3a:9d:
                    22:07:7f:c3:39:ab:a5:6d:f1:e0:61:6a:58:1d:c8:
                    e2:72:83:17:ba:ff:a6:e5:46:de:c2:ad:dd:45:a5:
                    9e:ce:d8:85:a8:6c:69:0f:5a:ba:2d:fa:be:cc:45:
                    1f:76:6d:3a:62:6f:aa:4e:85:9c:a2:d3:29:1d:a6:
                    77:34:f7:f2:e3:c8:7c:a7:52:20:a4:85:e6:c2:2a:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9F:96:EC:EE:8E:C6:4B:84:26:4C:19:10:EA:AD:DA:6E:46:47:38
            X509v3 Authority Key Identifier:
                keyid:01:C4:10:F2:D1:99:70:5E:3E:38:7A:B9:96:00:CA:BA:92:80:F1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/01C410F2D199705E3E387AB99600CABA9280F155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01C410F2D199705E3E387AB99600CABA9280F155.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LaNtcJ9pc3vDf7r44kv2YDGj5UUkLgFW3pEpGtzYrej/0/323830343a336234343a3a2f33322d3438203d3e20323636313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b44::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:c6:5d:81:72:f3:0f:6b:bf:2d:d2:39:4f:dd:41:9b:1e:80:
         eb:e9:ae:82:c4:fe:af:ca:0a:6b:fd:26:77:41:78:68:8d:23:
         24:34:a5:58:f7:7e:a2:b6:d6:c2:9f:8b:ba:32:b2:db:26:b4:
         27:da:d0:d7:07:b1:7f:95:57:7d:19:4a:8f:30:98:ba:3d:cc:
         d3:0f:5b:05:31:93:0a:35:ef:46:d1:ba:6b:a6:97:87:00:94:
         b1:5f:35:2d:ca:5b:1b:18:c4:b1:46:09:09:5e:a1:1f:72:ff:
         32:e4:cb:5e:66:7f:f4:d1:09:78:17:7d:a4:fe:64:0a:d0:6d:
         b3:b7:96:17:ba:b3:da:b4:e8:a3:a2:8a:01:21:0b:fb:ae:5b:
         d0:82:b0:6c:f1:aa:15:0a:96:b1:d0:c7:4c:c8:fa:a3:d8:2e:
         4e:a0:7f:c2:b8:6f:29:bc:af:2f:bd:f1:82:a3:dd:b1:6c:cd:
         dd:f7:d4:d7:5c:ff:99:3a:9c:ea:ab:45:d0:c6:17:bf:d5:60:
         0a:9b:0b:60:8c:93:4c:c1:7a:88:71:25:e0:39:45:aa:e4:cd:
         35:80:fa:bb:8d:20:7d:fa:f0:96:ce:19:50:e1:54:8f:f4:d3:
         9f:4f:ab:0c:ef:b8:99:61:95:bf:cf:c7:a7:84:69:d6:ff:12:
         9e:96:b6:6b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUNzcuILHduAg+NY2yMLgZWCyMuSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFDNDEwRjJEMTk5NzA1RTNFMzg3QUI5OTYwMENBQkE5
MjgwRjE1NTAeFw0yNjAzMDIxNDEzNDJaFw0yNzAzMDExNDE4NDJaMDMxMTAvBgNV
BAMTKEIzOUY5NkVDRUU4RUM2NEI4NDI2NEMxOTEwRUFBRERBNkU0NjQ3MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23Ztebx1aXXYG8yD5qaOBqw1S
URAlwxIERiLDPHmHjYdILnSJEgR4WnPQHLKOusxtrXVws1LyNhJAeSiwOlHs1jIp
3bbX+UUblwaQqPmeL8Dst/mVf1XJy4L9hewHzGKQrC6VKxcZ92SvXSzk8AeSozQH
DPLHPFr9OjEJLFGSf+5+8d9NxR0SJ+ynuXCMteN9LnWyrXEHRwE+faH5tDQNmSUS
Vh6pJKupcO963XTd43U6nSIHf8M5q6Vt8eBhalgdyOJygxe6/6blRt7Crd1FpZ7O
2IWobGkPWrot+r7MRR92bTpib6pOhZyi0ykdpnc09/LjyHynUiCkhebCKgVxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUs5+W7O6OxkuEJkwZEOqt2m5GRzgwHwYDVR0j
BBgwFoAUAcQQ8tGZcF4+OHq5lgDKupKA8VUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0xhTnRjSjlwYzN2RGY3cjQ0a3YyWURHajVVVWtMZ0ZXM3BFcEd0elly
ZWovMC8wMUM0MTBGMkQxOTk3MDVFM0UzODdBQjk5NjAwQ0FCQTkyODBGMTU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQzQxMEYyRDE5OTcwNUUz
RTM4N0FCOTk2MDBDQUJBOTI4MEYxNTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNMYU50Y0o5cGMzdkRmN3I0NGt2MllER2o1VVVrTGdGVzNwRXBHdHpZcmVqLzAv
MzIzODMwMzQzYTMzNjIzNDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ7RDANBgkqhkiG9w0BAQsFAAOCAQEAvsZdgXLz
D2u/LdI5T91Bmx6A6+mugsT+r8oKa/0md0F4aI0jJDSlWPd+orbWwp+LujKy2ya0
J9rQ1wexf5VXfRlKjzCYuj3M0w9bBTGTCjXvRtG6a6aXhwCUsV81LcpbGxjEsUYJ
CV6hH3L/MuTLXmZ/9NEJeBd9pP5kCtBts7eWF7qz2rToo6KKASEL+65b0IKwbPGq
FQqWsdDHTMj6o9guTqB/wrhvKbyvL73xgqPdsWzN3ffU11z/mTqc6qtF0MYXv9Vg
CpsLYIyTTMF6iHEl4DlFquTNNYD6u40gffrwls4ZUOFUj/TTn0+rDO+4mWGVv8/H
p4Rp1v8Snpa2aw==
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:53:32 2026 by rpki-client