Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a343030303a3a2f33342d3334203d3e20323636393137.roa
File:                     323830343a343534633a343030303a3a2f33342d3334203d3e20323636393137.roa (raw, json)
Hash identifier:          yH/kjzAixAwKrJzYdYJ+ChpNDzxLe0dvZ9XXtRnCas4=
Subject key identifier:   43:D4:69:2D:DA:5A:5A:9C:5B:79:37:6C:34:DB:74:EA:A8:19:E5:DD
Certificate issuer:       /CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
Certificate serial:       63E4DEEA74BF558DD0BF489681B1AE25397729B7
Authority key identifier: D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a343030303a3a2f33342d3334203d3e20323636393137.roa
Signing time:             Tue 09 Jun 2026 16:12:11 +0000
ROA not before:           Tue 09 Jun 2026 16:07:11 +0000
ROA not after:            Tue 08 Jun 2027 16:12:11 +0000
asID:                     266917
IP address blocks:        2804:454c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl
                          rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 01:52:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e4:de:ea:74:bf:55:8d:d0:bf:48:96:81:b1:ae:25:39:77:29:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
        Validity
            Not Before: Jun  9 16:07:11 2026 GMT
            Not After : Jun  8 16:12:11 2027 GMT
        Subject: CN=43D4692DDA5A5A9C5B79376C34DB74EAA819E5DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:9e:47:a3:4f:8e:92:1d:49:4b:43:48:6d:
                    d4:38:d9:c7:5f:ff:c8:52:33:0b:08:b4:5b:41:87:
                    a0:8b:72:8a:35:34:13:03:e0:5f:21:f4:68:83:86:
                    14:7c:5d:64:53:8e:13:5f:9a:ea:7b:e5:97:67:e7:
                    b5:ad:49:3e:1b:06:e6:ba:5a:ff:10:16:26:99:37:
                    79:c3:6b:5d:50:2c:c6:ad:99:a7:47:de:fe:d4:ed:
                    c1:6e:98:f0:16:9a:ac:d4:d1:43:2e:9e:0d:42:f2:
                    a1:a5:9e:a8:94:2f:57:a8:4f:74:d0:67:3d:8d:61:
                    2d:24:02:16:5c:24:74:44:6e:e1:ff:df:3d:90:08:
                    3d:65:b4:cf:db:a4:65:70:7d:8e:a1:9e:32:6f:2d:
                    07:3e:4d:98:f0:a2:0d:24:b4:f7:a3:84:0f:2e:2b:
                    c3:14:24:55:ba:34:03:ac:de:34:06:bd:82:2a:ed:
                    aa:93:f5:c5:0b:e4:b7:6d:26:78:66:32:21:f8:59:
                    9a:e6:72:2a:e6:4f:5b:cc:f0:fd:de:76:2a:7d:a7:
                    9f:98:3c:d5:1c:a6:d2:d3:95:34:42:42:4e:a5:6c:
                    0f:4b:01:52:38:7c:a4:86:ec:f5:2e:30:f2:58:0d:
                    81:33:0d:be:21:bc:df:1d:cc:8d:76:6e:c9:6b:f8:
                    f9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D4:69:2D:DA:5A:5A:9C:5B:79:37:6C:34:DB:74:EA:A8:19:E5:DD
            X509v3 Authority Key Identifier:
                keyid:D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a343030303a3a2f33342d3334203d3e20323636393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:454c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         33:e2:1c:67:7f:0e:5f:60:57:43:df:53:bd:50:3f:7e:95:d3:
         34:d9:99:70:7f:eb:85:72:eb:3b:5c:93:6f:b1:51:ea:7f:06:
         de:8e:38:e2:58:ea:50:a1:8c:9f:58:c2:16:85:15:d7:2c:6b:
         58:7a:9e:69:8d:14:6a:7d:51:70:ec:e0:b2:ba:43:02:03:47:
         8a:41:6c:a5:17:7d:9c:38:23:45:cc:77:45:cc:09:ce:6d:29:
         f8:ab:a8:53:fd:7f:12:7d:9a:96:cf:e4:16:57:2a:90:db:d9:
         7d:06:12:df:7c:c4:9f:c3:7c:6a:d7:b9:29:f9:ac:51:00:82:
         1d:28:18:50:fa:18:a6:c9:96:b5:7d:fc:01:e7:02:e2:2f:6e:
         9f:c8:ee:33:6a:b8:6f:c9:4b:03:81:03:5e:36:fa:3f:07:72:
         73:2d:ce:55:f3:3e:04:ab:d9:2e:8e:b5:80:82:e7:c6:f1:42:
         54:e3:5e:35:1d:7a:05:c6:94:db:e3:4b:10:19:8d:78:e1:8d:
         e8:25:6c:aa:54:71:53:2e:2a:13:49:80:c1:3f:be:58:57:ef:
         4e:0c:ea:ff:74:f5:a3:ae:9e:be:31:a7:ea:25:21:fe:0a:b8:
         d1:99:88:5b:55:3d:47:d4:39:44:e3:1e:11:31:97:76:68:43:
         28:14:94:04
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUY+Te6nS/VY3Qv0iWgbGuJTl3KbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJGNTcyQUNCMTIzNTRCREEyMkUzOEQzQTk5OURFNUE0
RUU0ODc5MjAeFw0yNjA2MDkxNjA3MTFaFw0yNzA2MDgxNjEyMTFaMDMxMTAvBgNV
BAMTKDQzRDQ2OTJEREE1QTVBOUM1Qjc5Mzc2QzM0REI3NEVBQTgxOUU1REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR355Ho0+Okh1JS0NIbdQ42cdf
/8hSMwsItFtBh6CLcoo1NBMD4F8h9GiDhhR8XWRTjhNfmup75Zdn57WtST4bBua6
Wv8QFiaZN3nDa11QLMatmadH3v7U7cFumPAWmqzU0UMung1C8qGlnqiUL1eoT3TQ
Zz2NYS0kAhZcJHREbuH/3z2QCD1ltM/bpGVwfY6hnjJvLQc+TZjwog0ktPejhA8u
K8MUJFW6NAOs3jQGvYIq7aqT9cUL5LdtJnhmMiH4WZrmcirmT1vM8P3edip9p5+Y
PNUcptLTlTRCQk6lbA9LAVI4fKSG7PUuMPJYDYEzDb4hvN8dzI12bslr+PmpAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQ9RpLdpaWpxbeTdsNNt06qgZ5d0wHwYDVR0j
BBgwFoAU0vVyrLEjVL2iLjjTqZneWk7kh5IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1hmTXl5dUdYSjZ6dnFEYVNEWHdOQ0M4a2U2UVFKYlJTcWNpNlJmRkdt
bk4vMC9EMkY1NzJBQ0IxMjM1NEJEQTIyRTM4RDNBOTk5REU1QTRFRTQ4NzkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyRjU3MkFDQjEyMzU0QkRB
MjJFMzhEM0E5OTlERTVBNEVFNDg3OTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNYZk15eXVHWEo2enZxRGFTRFh3TkNDOGtlNlFRSmJSU3FjaTZSZkZHbW5OLzAv
MzIzODMwMzQzYTM0MzUzNDYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjM5MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigERUxAMA0GCSqGSIb3DQEBCwUA
A4IBAQAz4hxnfw5fYFdD31O9UD9+ldM02Zlwf+uFcus7XJNvsVHqfwbejjjiWOpQ
oYyfWMIWhRXXLGtYep5pjRRqfVFw7OCyukMCA0eKQWylF32cOCNFzHdFzAnObSn4
q6hT/X8SfZqWz+QWVyqQ29l9BhLffMSfw3xq17kp+axRAIIdKBhQ+himyZa1ffwB
5wLiL26fyO4zarhvyUsDgQNeNvo/B3JzLc5V8z4Eq9kujrWAgufG8UJU4141HXoF
xpTb40sQGY144Y3oJWyqVHFTLioTSYDBP75YV+9ODOr/dPWjrp6+MafqJSH+CrjR
mYhbVT1H1DlE4x4RMZd2aEMoFJQE
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:30:43 2026 by rpki-client