Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a666230303a3a2f34302d3430203d3e20323634313230.roa
File:                     323830343a323263303a666230303a3a2f34302d3430203d3e20323634313230.roa (raw, json)
Hash identifier:          6SMPud54ZU3onOu89NR7UDl7JYK3K8ZgNq2y/M1sfK8=
Subject key identifier:   A8:27:44:C3:8F:8D:0E:F1:C9:69:54:6E:D9:83:A0:FF:E0:38:78:0D
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       14A99887F3F7FE79361BA3E2B5609471D1C4D0B3
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a666230303a3a2f34302d3430203d3e20323634313230.roa
Signing time:             Mon 02 Mar 2026 15:37:37 +0000
ROA not before:           Mon 02 Mar 2026 15:32:37 +0000
ROA not after:            Mon 01 Mar 2027 15:37:37 +0000
asID:                     264120
IP address blocks:        2804:22c0:fb00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a9:98:87:f3:f7:fe:79:36:1b:a3:e2:b5:60:94:71:d1:c4:d0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Mar  2 15:32:37 2026 GMT
            Not After : Mar  1 15:37:37 2027 GMT
        Subject: CN=A82744C38F8D0EF1C969546ED983A0FFE038780D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:95:ec:ca:a4:9e:9a:84:ef:4d:9f:83:78:4b:
                    6f:1a:c2:52:1e:7a:e4:af:8e:59:64:fd:03:76:87:
                    fc:08:80:e3:34:a0:52:20:d5:5c:ef:48:fe:de:6b:
                    cc:df:45:c6:82:29:11:bf:03:e9:39:e1:4f:78:93:
                    e9:04:72:ea:06:79:35:15:7e:81:82:2a:55:ca:02:
                    8c:4e:62:b8:39:8b:1b:55:fa:ae:b5:c4:0a:d3:39:
                    e9:93:f4:d7:5d:d2:68:55:61:2d:a8:fc:1e:6a:bd:
                    69:88:71:d0:49:77:e2:63:1c:0f:08:dc:ff:a5:7c:
                    53:b0:87:22:79:7f:c7:5d:8c:ce:00:50:48:98:27:
                    ee:19:f1:d1:37:91:57:6e:33:20:85:50:b2:20:9c:
                    b4:d9:03:0c:09:22:74:3f:2d:7c:da:21:42:15:59:
                    31:5e:d3:ed:c6:a3:59:ea:a7:a3:a9:87:5b:1b:f6:
                    8c:53:80:58:a7:b3:87:95:81:89:16:b4:6b:ec:20:
                    0b:7e:2e:35:b1:ea:74:58:c2:de:fa:a8:12:9d:9c:
                    00:29:15:75:9c:82:87:c4:84:f7:db:c1:0a:b0:df:
                    2f:1d:2d:68:5f:d3:63:7b:65:7e:47:0c:75:d2:01:
                    8b:8e:e0:1f:7f:ce:dc:2f:f8:81:36:42:87:ae:cc:
                    87:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:27:44:C3:8F:8D:0E:F1:C9:69:54:6E:D9:83:A0:FF:E0:38:78:0D
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/323830343a323263303a666230303a3a2f34302d3430203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22c0:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:47:6b:a0:56:ea:b0:ea:13:ea:23:33:18:8e:d4:fb:2c:b9:
         bf:a2:ba:8a:c5:d6:8c:bb:56:7c:df:7f:5d:6a:09:39:ba:b7:
         82:c4:04:b3:88:fe:88:9a:c3:b9:f8:fb:c7:66:b0:b3:12:b9:
         d9:72:5e:68:1a:1a:fe:c8:26:2d:09:bd:60:aa:dd:50:5d:bf:
         26:c0:de:32:cf:fb:a7:69:25:91:2c:61:0e:b5:fa:1d:05:05:
         1f:aa:62:be:f8:67:74:18:39:72:6a:94:de:c4:2f:74:fd:fa:
         75:d1:7f:91:21:15:2d:be:21:4d:da:a1:90:f0:a3:cc:54:be:
         ee:e0:3a:e7:2e:8b:54:81:07:13:b0:1a:51:55:d5:39:96:7c:
         32:22:c3:8b:c1:68:41:ad:29:22:81:18:a0:36:a2:ca:7f:65:
         34:3b:b6:ae:0f:20:ec:aa:a5:00:0d:e9:70:01:20:2c:3f:6b:
         00:84:f0:a2:25:5f:e9:ac:fd:d1:75:d3:b6:72:99:c9:89:53:
         00:fa:8b:df:16:42:4a:94:f7:66:04:01:67:01:52:35:f9:fd:
         96:46:84:13:6c:8e:3e:27:d8:5f:2a:e8:f3:97:a6:e4:3b:77:
         a3:85:80:0f:94:80:f3:d8:ed:77:ae:97:63:6d:04:79:be:3d:
         7f:ca:ca:53
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUFKmYh/P3/nk2G6PitWCUcdHE0LMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE3M0ZBRjhEODY3QjYzNEVBQzVFNzM4NkRFNTcwODMw
MzNBMUM5NjAeFw0yNjAzMDIxNTMyMzdaFw0yNzAzMDExNTM3MzdaMDMxMTAvBgNV
BAMTKEE4Mjc0NEMzOEY4RDBFRjFDOTY5NTQ2RUQ5ODNBMEZGRTAzODc4MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwlezKpJ6ahO9Nn4N4S28awlIe
euSvjllk/QN2h/wIgOM0oFIg1VzvSP7ea8zfRcaCKRG/A+k54U94k+kEcuoGeTUV
foGCKlXKAoxOYrg5ixtV+q61xArTOemT9Ndd0mhVYS2o/B5qvWmIcdBJd+JjHA8I
3P+lfFOwhyJ5f8ddjM4AUEiYJ+4Z8dE3kVduMyCFULIgnLTZAwwJInQ/LXzaIUIV
WTFe0+3Go1nqp6Oph1sb9oxTgFins4eVgYkWtGvsIAt+LjWx6nRYwt76qBKdnAAp
FXWcgofEhPfbwQqw3y8dLWhf02N7ZX5HDHXSAYuO4B9/ztwv+IE2QoeuzIehAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUqCdEw4+NDvHJaVRu2YOg/+A4eA0wHwYDVR0j
BBgwFoAUGnP6+NhntjTqxec4beVwgwM6HJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1lWOUd5UWcyYUFFcDNmYkdrUXUzVmREdk1QeXR5MXp6VlI2Ym1QSEtD
cHUvMi8xQTczRkFGOEQ4NjdCNjM0RUFDNUU3Mzg2REU1NzA4MzAzM0ExQzk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzNGQUY4RDg2N0I2MzRF
QUM1RTczODZERTU3MDgzMDMzQTFDOTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNZVjlHeVFnMmFBRXAzZmJHa1F1M1ZkRHZNUHl0eTF6elZSNmJtUEhLQ3B1LzIv
MzIzODMwMzQzYTMyMzI2MzMwM2E2NjYyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEIsD7MA0GCSqGSIb3DQEBCwUA
A4IBAQBBR2ugVuqw6hPqIzMYjtT7LLm/orqKxdaMu1Z8339dagk5ureCxASziP6I
msO5+PvHZrCzErnZcl5oGhr+yCYtCb1gqt1QXb8mwN4yz/unaSWRLGEOtfodBQUf
qmK++Gd0GDlyapTexC90/fp10X+RIRUtviFN2qGQ8KPMVL7u4DrnLotUgQcTsBpR
VdU5lnwyIsOLwWhBrSkigRigNqLKf2U0O7auDyDsqqUADelwASAsP2sAhPCiJV/p
rP3RddO2cpnJiVMA+ovfFkJKlPdmBAFnAVI1+f2WRoQTbI4+J9hfKujzl6bkO3ej
hYAPlIDz2O13rpdjbQR5vj1/yspT
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:53:14 2026 by rpki-client