Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a3a2f33322d3332203d3e20323634313230.roa
File:                     323830343a323263303a3a2f33322d3332203d3e20323634313230.roa (raw, json)
Hash identifier:          EqhHQJ9iWPQ/fMNurx/M30ar8OW6VSIrBQN4j7+Jqy8=
Subject key identifier:   2D:90:55:E8:D1:9E:84:C9:84:D9:79:2A:80:A3:2A:3C:69:5C:67:02
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       6D4D91F06681FD1BF662FA313E1767B8A3FD3257
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a3a2f33322d3332203d3e20323634313230.roa
Signing time:             Mon 02 Mar 2026 15:32:21 +0000
ROA not before:           Mon 02 Mar 2026 15:27:21 +0000
ROA not after:            Mon 01 Mar 2027 15:32:21 +0000
asID:                     264120
IP address blocks:        2804:22c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4d:91:f0:66:81:fd:1b:f6:62:fa:31:3e:17:67:b8:a3:fd:32:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Mar  2 15:27:21 2026 GMT
            Not After : Mar  1 15:32:21 2027 GMT
        Subject: CN=2D9055E8D19E84C984D9792A80A32A3C695C6702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b2:b1:60:6f:79:d1:b5:59:bc:f1:5b:5b:d2:
                    65:03:5d:62:a2:47:5b:28:5b:b0:81:3e:ce:a5:03:
                    50:77:c4:eb:81:68:18:00:ab:ff:ce:dd:2b:d1:4b:
                    45:fd:14:e2:d4:ec:82:fb:cc:02:88:a5:64:1d:ae:
                    35:57:91:e0:26:6e:b8:5c:a7:c4:72:4b:0a:51:5f:
                    85:31:26:11:e8:bf:43:b2:5d:d7:de:46:9f:5f:e8:
                    9e:b5:31:a4:53:e4:21:22:76:cd:97:54:12:32:1b:
                    e2:7f:70:e7:f1:c2:e7:7c:91:14:a6:01:41:ec:39:
                    72:c8:a6:14:ac:91:24:cf:fc:9b:80:ab:74:56:cc:
                    3c:b6:26:e2:8e:2b:8d:45:95:47:8f:91:2f:29:f5:
                    e2:bd:be:71:06:7b:9b:d0:17:b1:8d:58:06:22:1d:
                    e1:e5:e2:ef:9c:16:64:ce:3e:d9:98:40:f8:94:4b:
                    e9:c5:92:2f:9a:b9:dd:87:d9:32:ff:b3:f8:c0:7f:
                    da:74:fd:c6:05:5c:62:6f:62:ee:ba:0f:63:97:38:
                    af:7e:79:04:59:c1:55:d2:0a:28:ca:7a:a5:8a:eb:
                    eb:d4:48:23:66:fd:e2:6f:ea:f7:84:98:05:60:9a:
                    d1:13:0e:db:84:dc:b5:03:26:5a:ef:2e:c8:b7:40:
                    36:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:90:55:E8:D1:9E:84:C9:84:D9:79:2A:80:A3:2A:3C:69:5C:67:02
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a3a2f33322d3332203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:ca:5d:7d:dc:a3:c5:53:f3:b2:01:e0:2f:72:13:a4:2b:29:
         ac:0a:63:83:d8:da:19:f2:84:43:2c:a5:3d:14:c2:05:e3:0f:
         6e:d8:10:cc:63:9b:5f:53:85:7f:e9:e0:c8:00:8b:38:cf:02:
         54:bf:13:86:39:29:46:e0:6e:1b:00:6a:47:1e:b1:a2:08:83:
         44:b2:d6:6f:52:72:d8:1f:f1:9c:b5:01:e5:63:84:9d:e7:20:
         23:36:21:99:d5:13:e3:38:16:27:14:c7:90:66:6c:ea:5f:be:
         da:f1:fa:35:5a:e5:69:dd:f8:cc:dc:2c:00:73:9c:4a:fa:a4:
         c2:f3:b2:b5:6f:7c:45:f6:41:6f:a2:c9:b5:3f:c3:0d:45:01:
         5d:fd:38:76:19:b4:15:45:87:48:d0:21:a2:24:c0:0a:af:5f:
         e7:46:57:b3:b0:f0:82:c9:d1:7f:62:90:67:82:f2:4e:41:82:
         ad:3c:90:68:96:fa:4f:ab:9c:b3:f4:bc:b0:f5:11:a4:8f:cf:
         4d:89:50:7b:06:75:13:09:1b:46:15:f2:40:cf:bd:9e:f7:c4:
         4d:24:e7:85:89:b3:e8:43:59:23:12:6a:6c:e2:d0:b6:c0:24:
         d2:36:b0:ea:83:71:e6:8a:3b:b5:47:4e:ee:2d:85:58:83:9f:
         e4:e1:a3:dd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbU2R8GaB/Rv2YvoxPhdnuKP9MlcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw
MzNBMUM5NjAeFw0yNjAzMDIxNTI3MjFaFw0yNzAzMDExNTMyMjFaMDMxMTAvBgNV
BAMTKDJEOTA1NUU4RDE5RTg0Qzk4NEQ5NzkyQTgwQTMyQTNDNjk1QzY3MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNsrFgb3nRtVm88Vtb0mUDXWKi
R1soW7CBPs6lA1B3xOuBaBgAq//O3SvRS0X9FOLU7IL7zAKIpWQdrjVXkeAmbrhc
p8RySwpRX4UxJhHov0OyXdfeRp9f6J61MaRT5CEids2XVBIyG+J/cOfxwud8kRSm
AUHsOXLIphSskSTP/JuAq3RWzDy2JuKOK41FlUePkS8p9eK9vnEGe5vQF7GNWAYi
HeHl4u+cFmTOPtmYQPiUS+nFki+aud2H2TL/s/jAf9p0/cYFXGJvYu66D2OXOK9+
eQRZwVXSCijKeqWK6+vUSCNm/eJv6veEmAVgmtETDtuE3LUDJlrvLsi3QDb7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQULZBV6NGehMmE2XkqgKMqPGlcZwIwHwYDVR0j
BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD
cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF
QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv
MzIzODMwMzQzYTMyMzI2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzEzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQiwDANBgkqhkiG9w0BAQsFAAOCAQEAWMpdfdyj
xVPzsgHgL3ITpCsprApjg9jaGfKEQyylPRTCBeMPbtgQzGObX1OFf+ngyACLOM8C
VL8ThjkpRuBuGwBqRx6xogiDRLLWb1Jy2B/xnLUB5WOEnecgIzYhmdUT4zgWJxTH
kGZs6l++2vH6NVrlad34zNwsAHOcSvqkwvOytW98RfZBb6LJtT/DDUUBXf04dhm0
FUWHSNAhoiTACq9f50ZXs7DwgsnRf2KQZ4LyTkGCrTyQaJb6T6ucs/S8sPURpI/P
TYlQewZ1EwkbRhXyQM+9nvfETSTnhYmz6ENZIxJqbOLQtsAk0jaw6oNx5oo7tUdO
7i2FWIOf5OGj3Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:53:15 2026 by rpki-client