Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/323830313a38303a323830303a3a2f34302d3438203d3e20323632343431.roa
File:                     323830313a38303a323830303a3a2f34302d3438203d3e20323632343431.roa (raw, json)
Hash identifier:          MQ5h8WouA/zVyPTqgWaI2+uSlWBZjrxFoBRpq+xK8kY=
Subject key identifier:   33:E9:73:C1:30:58:A4:6A:9A:0C:81:58:BC:5E:56:EB:41:9B:94:DA
Certificate issuer:       /CN=BE068B06DE5C783A9921447A392452ED53F22837
Certificate serial:       434E150F73E6D6DD0D461740619EBEB4290011AB
Authority key identifier: BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/323830313a38303a323830303a3a2f34302d3438203d3e20323632343431.roa
Signing time:             Mon 13 Apr 2026 11:07:13 +0000
ROA not before:           Mon 13 Apr 2026 11:02:13 +0000
ROA not after:            Mon 12 Apr 2027 11:07:13 +0000
asID:                     262441
IP address blocks:        2801:80:2800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl
                          rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 23:15:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4e:15:0f:73:e6:d6:dd:0d:46:17:40:61:9e:be:b4:29:00:11:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE068B06DE5C783A9921447A392452ED53F22837
        Validity
            Not Before: Apr 13 11:02:13 2026 GMT
            Not After : Apr 12 11:07:13 2027 GMT
        Subject: CN=33E973C13058A46A9A0C8158BC5E56EB419B94DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:f5:31:80:5c:8d:e6:f2:f5:c3:97:12:95:
                    86:a9:77:47:32:85:30:20:6e:34:cd:5b:de:c5:1d:
                    b1:75:37:7a:1b:47:21:a5:7e:3b:d2:e5:05:63:18:
                    4d:c9:5b:17:2a:0b:7a:a6:11:79:a4:5e:56:33:d8:
                    ba:11:12:3b:11:b0:2d:bf:aa:3d:16:ea:8e:f5:13:
                    4d:42:07:d2:ea:e8:0e:52:65:a2:2b:d1:3f:da:5e:
                    a8:fd:e4:41:01:59:8b:9f:84:56:74:8a:55:09:d8:
                    a3:28:72:50:cd:a5:98:e6:87:3d:9c:47:9f:14:a1:
                    4e:df:33:35:7c:13:74:2f:0a:12:13:78:28:44:b1:
                    3d:bd:ed:1b:2b:fe:29:a4:ee:f8:9f:9d:50:10:86:
                    2f:d0:b0:28:23:96:a3:58:6b:fb:2f:ab:0b:83:87:
                    80:50:37:86:71:3d:bc:3a:70:44:ce:b2:ef:21:a9:
                    33:e3:98:27:2f:71:df:aa:a3:84:6c:3c:40:57:84:
                    f0:7e:d7:9c:93:19:08:53:4f:aa:34:15:a4:13:bb:
                    93:11:e5:16:d4:dc:db:e1:c8:5b:71:68:b6:af:cc:
                    bc:97:ce:38:f2:4e:33:fe:b5:c8:59:58:7e:b8:a7:
                    d4:11:2d:71:94:11:3d:3d:d0:0d:ab:d2:a7:17:22:
                    5f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E9:73:C1:30:58:A4:6A:9A:0C:81:58:BC:5E:56:EB:41:9B:94:DA
            X509v3 Authority Key Identifier:
                keyid:BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/323830313a38303a323830303a3a2f34302d3438203d3e20323632343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:2800::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:67:98:38:c1:be:d8:b9:8e:9e:e9:43:49:8e:66:98:f7:6b:
         c8:c4:35:de:80:7c:fb:98:c9:a7:81:b9:9c:29:15:84:41:6b:
         3f:97:1f:45:08:a4:99:0f:07:bf:44:81:b6:82:a6:f8:e1:1b:
         d0:a5:85:12:1b:16:e2:03:2c:46:b5:94:7a:2d:d4:6c:23:8d:
         ca:c8:1e:11:dc:d1:af:f0:56:ff:74:27:e4:2d:ab:7c:58:1f:
         f5:44:07:0b:46:d1:fa:24:8c:b0:ca:0e:0b:c1:75:f8:3a:cf:
         4d:69:be:e4:c9:50:6a:1e:0d:37:1e:20:64:f0:fd:b4:d6:6a:
         b2:f9:be:51:e8:f7:c9:53:84:99:dd:89:ae:e4:89:bb:72:37:
         e9:39:45:4f:ed:0d:79:be:59:19:75:9c:aa:f9:e8:5a:b9:4b:
         84:60:8b:67:4e:f2:8d:76:ce:7c:89:81:cb:e6:53:27:d6:75:
         7d:ec:b3:10:52:58:27:20:34:a5:3d:59:86:5e:ce:da:f0:b6:
         9e:59:3e:97:a0:a0:9d:e8:fd:f8:6b:52:fd:9b:96:e2:df:b4:
         97:3b:50:b6:ee:d9:3f:f0:1f:22:39:f6:f7:96:dc:b7:f3:aa:
         a9:84:59:27:fd:b3:6a:3b:44:b7:a7:b8:07:9e:c8:54:f9:29:
         b7:9a:57:cd
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUQ04VD3Pm1t0NRhdAYZ6+tCkAEaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUwNjhCMDZERTVDNzgzQTk5MjE0NDdBMzkyNDUyRUQ1
M0YyMjgzNzAeFw0yNjA0MTMxMTAyMTNaFw0yNzA0MTIxMTA3MTNaMDMxMTAvBgNV
BAMTKDMzRTk3M0MxMzA1OEE0NkE5QTBDODE1OEJDNUU1NkVCNDE5Qjk0REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvUPUxgFyN5vL1w5cSlYapd0cy
hTAgbjTNW97FHbF1N3obRyGlfjvS5QVjGE3JWxcqC3qmEXmkXlYz2LoREjsRsC2/
qj0W6o71E01CB9Lq6A5SZaIr0T/aXqj95EEBWYufhFZ0ilUJ2KMoclDNpZjmhz2c
R58UoU7fMzV8E3QvChITeChEsT297Rsr/imk7vifnVAQhi/QsCgjlqNYa/svqwuD
h4BQN4ZxPbw6cETOsu8hqTPjmCcvcd+qo4RsPEBXhPB+15yTGQhTT6o0FaQTu5MR
5RbU3NvhyFtxaLavzLyXzjjyTjP+tchZWH64p9QRLXGUET090A2r0qcXIl9pAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUM+lzwTBYpGqaDIFYvF5W60GblNowHwYDVR0j
BBgwFoAUvgaLBt5ceDqZIUR6OSRS7VPyKDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3VIcmU3RXdNeExnN05aVWU3b0hneXNDYXdvZjJXbzhLc2ZCTjFDVTRB
VncvMS9CRTA2OEIwNkRFNUM3ODNBOTkyMTQ0N0EzOTI0NTJFRDUzRjIyODM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFMDY4QjA2REU1Qzc4M0E5
OTIxNDQ3QTM5MjQ1MkVENTNGMjI4MzcuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN1SHJlN0V3TXhMZzdOWlVlN29IZ3lzQ2F3b2YyV284S3NmQk4xQ1U0QVZ3LzEv
MzIzODMwMzEzYTM4MzAzYTMyMzgzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIw
MzIzNjMyMzQzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAEAgCgwDQYJKoZIhvcNAQELBQADggEB
AHBnmDjBvti5jp7pQ0mOZpj3a8jENd6AfPuYyaeBuZwpFYRBaz+XH0UIpJkPB79E
gbaCpvjhG9ClhRIbFuIDLEa1lHot1GwjjcrIHhHc0a/wVv90J+Qtq3xYH/VEBwtG
0fokjLDKDgvBdfg6z01pvuTJUGoeDTceIGTw/bTWarL5vlHo98lThJndia7kibty
N+k5RU/tDXm+WRl1nKr56Fq5S4Rgi2dO8o12znyJgcvmUyfWdX3ssxBSWCcgNKU9
WYZeztrwtp5ZPpegoJ3o/fhrUv2bluLftJc7ULbu2T/wHyI59veW3LfzqqmEWSf9
s2o7RLenuAeeyFT5KbeaV80=
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:57:13 2026 by rpki-client