Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/323830343a393435633a363a3a2f34382d3438203d3e203631363234.roa
File:                     323830343a393435633a363a3a2f34382d3438203d3e203631363234.roa (raw, json)
Hash identifier:          lbzq2tAXRMoHrt5RPrxpeRldsgZjhpc2YTTuAWVgAAs=
Subject key identifier:   62:32:B6:5D:42:CF:C9:58:CC:D5:F2:5A:8A:93:38:BA:14:D0:FF:69
Certificate issuer:       /CN=3A039835A68C92594BA889BF185A560E86C0CFD1
Certificate serial:       586644966596514B55931D607E1BD6911A4236ED
Authority key identifier: 3A:03:98:35:A6:8C:92:59:4B:A8:89:BF:18:5A:56:0E:86:C0:CF:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/323830343a393435633a363a3a2f34382d3438203d3e203631363234.roa
Signing time:             Fri 22 May 2026 05:17:27 +0000
ROA not before:           Fri 22 May 2026 05:12:27 +0000
ROA not after:            Fri 21 May 2027 05:17:27 +0000
asID:                     61624
IP address blocks:        2804:945c:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.crl
                          rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:66:44:96:65:96:51:4b:55:93:1d:60:7e:1b:d6:91:1a:42:36:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A039835A68C92594BA889BF185A560E86C0CFD1
        Validity
            Not Before: May 22 05:12:27 2026 GMT
            Not After : May 21 05:17:27 2027 GMT
        Subject: CN=6232B65D42CFC958CCD5F25A8A9338BA14D0FF69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:70:1b:06:52:ba:a0:3b:a6:9a:fc:fc:fb:b0:
                    6b:66:79:89:e0:a0:d5:ba:69:e1:ac:c6:50:ba:85:
                    c9:f6:dd:9d:76:47:4c:61:e8:3b:b7:59:75:91:5b:
                    70:67:83:93:76:c6:a2:8f:62:b7:54:ee:c3:61:1e:
                    2a:44:69:19:b8:7c:eb:67:75:7f:2e:b9:f6:8f:fc:
                    58:66:2b:1d:0a:61:ef:27:47:88:88:94:3b:6f:6e:
                    08:ea:fa:41:a8:95:62:be:c8:73:4a:da:07:f4:69:
                    c0:00:0c:70:05:82:28:a0:d2:6c:e9:2d:31:4e:60:
                    40:3b:58:c3:bf:f0:55:25:da:4e:a3:82:60:29:ec:
                    cc:98:0f:63:b4:06:4f:67:93:07:82:30:30:a9:a4:
                    04:5a:13:b4:49:d1:8a:91:48:a2:85:83:21:c6:09:
                    e8:ef:6c:d9:31:a6:09:a6:74:8d:27:b4:4f:ac:ca:
                    e1:bf:3d:d7:4f:0d:c2:c8:ea:a6:d3:e5:37:83:f2:
                    38:f3:db:8f:e6:32:68:cc:fa:12:d6:97:d9:a9:c3:
                    f6:99:40:4a:db:d8:00:94:86:a4:59:c7:27:8c:18:
                    dc:43:cc:f3:29:30:2d:cc:7c:a6:09:dc:5a:aa:1f:
                    54:10:60:af:fa:3a:f5:28:76:92:a0:9c:20:09:e9:
                    61:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:32:B6:5D:42:CF:C9:58:CC:D5:F2:5A:8A:93:38:BA:14:D0:FF:69
            X509v3 Authority Key Identifier:
                keyid:3A:03:98:35:A6:8C:92:59:4B:A8:89:BF:18:5A:56:0E:86:C0:CF:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/323830343a393435633a363a3a2f34382d3438203d3e203631363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:945c:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:34:8b:0b:7b:f4:63:2d:ea:16:03:4e:db:0d:49:85:42:b9:
         68:92:c3:40:4f:1b:1c:1a:77:d7:27:8b:88:c2:ae:d3:ea:fe:
         5e:58:57:1b:c2:04:13:98:81:4b:3c:dd:1a:37:01:14:5d:8d:
         d6:72:b9:08:0a:74:3e:9f:a0:0d:68:7d:d9:d3:76:f8:bc:0a:
         70:a0:4e:6b:0f:ee:ef:41:4e:04:d6:c2:d8:53:2a:66:5d:6d:
         72:fd:21:63:4d:b0:0f:ef:94:15:e7:9d:46:35:87:b4:2a:c7:
         a3:a1:e7:5d:46:1c:9f:eb:42:70:3b:57:f9:92:65:86:93:22:
         1e:26:f4:e8:e7:d6:64:b5:71:fd:05:87:a0:ed:50:41:f8:09:
         cb:39:4b:eb:ba:95:14:f0:67:bb:3e:49:89:b3:06:b1:aa:f6:
         81:8b:f5:ac:85:10:12:a9:76:8c:1b:16:24:ce:71:6d:47:0d:
         ef:af:fa:d7:d8:5e:e5:75:0f:09:96:c2:27:d7:31:be:4b:ac:
         09:b5:84:3f:08:a9:65:9a:86:c9:f8:bf:f1:7f:e4:66:af:61:
         60:e9:46:c3:96:d3:a1:68:b5:3f:3c:ca:f2:da:ae:2c:6e:d7:
         f4:65:97:3b:2d:57:c0:b3:08:60:aa:33:3d:12:29:bb:d8:4a:
         23:5c:72:48
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUWGZElmWWUUtVkx1gfhvWkRpCNu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EwMzk4MzVBNjhDOTI1OTRCQTg4OUJGMTg1QTU2MEU4
NkMwQ0ZEMTAeFw0yNjA1MjIwNTEyMjdaFw0yNzA1MjEwNTE3MjdaMDMxMTAvBgNV
BAMTKDYyMzJCNjVENDJDRkM5NThDQ0Q1RjI1QThBOTMzOEJBMTREMEZGNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKcBsGUrqgO6aa/Pz7sGtmeYng
oNW6aeGsxlC6hcn23Z12R0xh6Du3WXWRW3Bng5N2xqKPYrdU7sNhHipEaRm4fOtn
dX8uufaP/FhmKx0KYe8nR4iIlDtvbgjq+kGolWK+yHNK2gf0acAADHAFgiig0mzp
LTFOYEA7WMO/8FUl2k6jgmAp7MyYD2O0Bk9nkweCMDCppARaE7RJ0YqRSKKFgyHG
CejvbNkxpgmmdI0ntE+syuG/PddPDcLI6qbT5TeD8jjz24/mMmjM+hLWl9mpw/aZ
QErb2ACUhqRZxyeMGNxDzPMpMC3MfKYJ3FqqH1QQYK/6OvUodpKgnCAJ6WFpAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUYjK2XULPyVjM1fJaipM4uhTQ/2kwHwYDVR0j
BBgwFoAUOgOYNaaMkllLqIm/GFpWDobAz9EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2FDRFdiZlY0UG05U2theFJZZkVFWmRKUkRlV0RQRFZxbk1HZW8xNG9w
WG0vMC8zQTAzOTgzNUE2OEM5MjU5NEJBODg5QkYxODVBNTYwRTg2QzBDRkQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBMDM5ODM1QTY4QzkyNTk0
QkE4ODlCRjE4NUE1NjBFODZDMENGRDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNhQ0RXYmZWNFBtOVNrYXhSWWZFRVpkSlJEZVdEUERWcW5NR2VvMTRvcFhtLzAv
MzIzODMwMzQzYTM5MzQzNTYzM2EzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2
MzEzNjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBJRcAAYwDQYJKoZIhvcNAQELBQADggEBAIk0
iwt79GMt6hYDTtsNSYVCuWiSw0BPGxwad9cni4jCrtPq/l5YVxvCBBOYgUs83Ro3
ARRdjdZyuQgKdD6foA1ofdnTdvi8CnCgTmsP7u9BTgTWwthTKmZdbXL9IWNNsA/v
lBXnnUY1h7Qqx6Oh511GHJ/rQnA7V/mSZYaTIh4m9Ojn1mS1cf0Fh6DtUEH4Ccs5
S+u6lRTwZ7s+SYmzBrGq9oGL9ayFEBKpdowbFiTOcW1HDe+v+tfYXuV1DwmWwifX
Mb5LrAm1hD8IqWWahsn4v/F/5GavYWDpRsOW06FotT88yvLarixu1/RllzstV8Cz
CGCqMz0SKbvYSiNcckg=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:58:17 2026 by rpki-client