Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/323830343a373737383a3a2f33322d3332203d3e20323731313830.roa
File:                     323830343a373737383a3a2f33322d3332203d3e20323731313830.roa (raw, json)
Hash identifier:          T4DdTx+itbKjuTb9CNBAlzOx5uIj3FX0yZutsx3Xc14=
Subject key identifier:   77:F6:CC:DA:54:76:6D:BE:88:2B:72:ED:52:54:9A:AD:5C:0B:05:4B
Certificate issuer:       /CN=63F894C151D6710EE7E7AA9CC79EE2F0EFA2ABAC
Certificate serial:       20693557502D22E334286AB66CD1A801EEDC3F3E
Authority key identifier: 63:F8:94:C1:51:D6:71:0E:E7:E7:AA:9C:C7:9E:E2:F0:EF:A2:AB:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63F894C151D6710EE7E7AA9CC79EE2F0EFA2ABAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/323830343a373737383a3a2f33322d3332203d3e20323731313830.roa
Signing time:             Thu 28 May 2026 20:01:41 +0000
ROA not before:           Thu 28 May 2026 19:56:41 +0000
ROA not after:            Thu 27 May 2027 20:01:41 +0000
asID:                     271180
IP address blocks:        2804:7778::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/63F894C151D6710EE7E7AA9CC79EE2F0EFA2ABAC.crl
                          rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/63F894C151D6710EE7E7AA9CC79EE2F0EFA2ABAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63F894C151D6710EE7E7AA9CC79EE2F0EFA2ABAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:69:35:57:50:2d:22:e3:34:28:6a:b6:6c:d1:a8:01:ee:dc:3f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63F894C151D6710EE7E7AA9CC79EE2F0EFA2ABAC
        Validity
            Not Before: May 28 19:56:41 2026 GMT
            Not After : May 27 20:01:41 2027 GMT
        Subject: CN=77F6CCDA54766DBE882B72ED52549AAD5C0B054B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:48:97:74:09:bf:3b:5b:49:51:de:e6:6f:ad:
                    be:0d:d4:17:1d:59:97:75:be:12:99:a3:5b:54:24:
                    1d:0d:24:dd:1f:f8:55:34:4d:48:28:0f:bf:86:b0:
                    2e:57:d5:a9:f9:d3:b1:71:78:8d:d8:86:95:4c:5d:
                    f8:d2:28:40:b1:7b:99:10:ab:0a:81:10:3c:5a:9a:
                    83:01:97:7e:d8:89:84:4c:dc:bc:9e:a6:55:7d:8b:
                    2e:61:87:ea:bc:62:bb:00:17:da:8d:90:fb:8b:74:
                    93:6e:d2:0c:a4:2e:6b:8b:cc:68:a6:79:cf:5b:b0:
                    2b:37:d4:dd:c5:3a:9b:ca:99:c6:1f:9a:6f:6e:78:
                    8d:94:eb:76:c1:b3:fc:74:67:c1:fe:61:7a:5a:f1:
                    01:52:7c:77:1e:57:4d:9c:e1:6a:ce:98:51:d4:3d:
                    99:4b:fc:b3:b4:db:b2:fd:14:4f:d7:c6:44:ca:81:
                    fb:8b:c3:5e:d9:13:22:7d:b8:3b:ff:49:72:85:7c:
                    f0:85:05:8c:91:d8:b7:61:e4:a2:51:a4:4a:b5:ef:
                    22:48:56:e3:39:39:82:7b:0d:a1:6f:54:90:06:cc:
                    da:c1:c2:3e:fc:c3:68:85:64:45:53:2e:d7:83:a0:
                    a4:04:d1:45:81:34:2b:d7:8f:51:8e:b2:13:29:6f:
                    68:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F6:CC:DA:54:76:6D:BE:88:2B:72:ED:52:54:9A:AD:5C:0B:05:4B
            X509v3 Authority Key Identifier:
                keyid:63:F8:94:C1:51:D6:71:0E:E7:E7:AA:9C:C7:9E:E2:F0:EF:A2:AB:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/63F894C151D6710EE7E7AA9CC79EE2F0EFA2ABAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63F894C151D6710EE7E7AA9CC79EE2F0EFA2ABAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/323830343a373737383a3a2f33322d3332203d3e20323731313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7778::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:35:09:cf:ae:54:12:51:cc:62:fb:49:8c:3e:fb:65:b0:f3:
         7c:af:94:7e:bc:68:73:84:19:d9:1d:db:40:2a:85:34:6c:92:
         5d:04:58:63:83:42:fa:86:8c:ea:02:f2:40:04:f2:80:38:2d:
         16:87:5f:00:9f:48:ed:8f:29:3a:1a:f4:d8:ed:9b:22:7d:ce:
         00:ee:93:06:e4:28:28:85:e9:96:fd:6e:bb:69:15:14:be:bb:
         8d:d9:e0:43:6d:db:54:15:59:63:14:af:17:5d:f9:65:9d:50:
         f5:68:c6:72:25:ec:30:cf:2a:6d:2c:f1:be:bb:3d:8f:52:19:
         24:7d:41:60:26:5e:55:ce:49:dc:1e:a0:e7:57:ac:61:d6:3c:
         8b:da:6c:49:7b:6b:db:79:9b:06:aa:ae:5e:95:af:cb:f3:ab:
         db:56:f9:bc:4b:80:9e:a1:6a:53:ec:38:fd:b0:3c:a4:23:a1:
         b9:d0:c0:4f:47:30:6b:39:c6:12:64:a6:52:d5:48:4c:1d:ae:
         fc:6b:85:35:89:a0:f6:2b:10:9f:33:14:25:5c:20:7c:ad:2d:
         a6:4c:fb:1d:a8:9a:d7:96:1f:07:b3:c0:a6:f6:09:ce:bc:eb:
         51:b4:c7:bb:4c:f1:a4:29:cd:66:f4:2e:f0:84:91:80:67:9e:
         41:e4:67:67
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIGk1V1AtIuM0KGq2bNGoAe7cPz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNGODk0QzE1MUQ2NzEwRUU3RTdBQTlDQzc5RUUyRjBF
RkEyQUJBQzAeFw0yNjA1MjgxOTU2NDFaFw0yNzA1MjcyMDAxNDFaMDMxMTAvBgNV
BAMTKDc3RjZDQ0RBNTQ3NjZEQkU4ODJCNzJFRDUyNTQ5QUFENUMwQjA1NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfSJd0Cb87W0lR3uZvrb4N1Bcd
WZd1vhKZo1tUJB0NJN0f+FU0TUgoD7+GsC5X1an507FxeI3YhpVMXfjSKECxe5kQ
qwqBEDxamoMBl37YiYRM3LyeplV9iy5hh+q8YrsAF9qNkPuLdJNu0gykLmuLzGim
ec9bsCs31N3FOpvKmcYfmm9ueI2U63bBs/x0Z8H+YXpa8QFSfHceV02c4WrOmFHU
PZlL/LO027L9FE/XxkTKgfuLw17ZEyJ9uDv/SXKFfPCFBYyR2Ldh5KJRpEq17yJI
VuM5OYJ7DaFvVJAGzNrBwj78w2iFZEVTLteDoKQE0UWBNCvXj1GOshMpb2hfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUd/bM2lR2bb6IK3LtUlSarVwLBUswHwYDVR0j
BBgwFoAUY/iUwVHWcQ7n56qcx57i8O+iq6wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhkS3UxNzNpV2NOeXM1WWljTXlGNlI1S2tqVHduVlJrOFJkTXN5amhG
WW8vMC82M0Y4OTRDMTUxRDY3MTBFRTdFN0FBOUNDNzlFRTJGMEVGQTJBQkFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzRjg5NEMxNTFENjcxMEVF
N0U3QUE5Q0M3OUVFMkYwRUZBMkFCQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIZEt1MTczaVdjTnlzNVlpY015RjZSNUtralR3blZSazhSZE1zeWpoRllvLzAv
MzIzODMwMzQzYTM3MzczNzM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzEzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR3eDANBgkqhkiG9w0BAQsFAAOCAQEAdzUJz65U
ElHMYvtJjD77ZbDzfK+Ufrxoc4QZ2R3bQCqFNGySXQRYY4NC+oaM6gLyQATygDgt
FodfAJ9I7Y8pOhr02O2bIn3OAO6TBuQoKIXplv1uu2kVFL67jdngQ23bVBVZYxSv
F135ZZ1Q9WjGciXsMM8qbSzxvrs9j1IZJH1BYCZeVc5J3B6g51esYdY8i9psSXtr
23mbBqquXpWvy/Or21b5vEuAnqFqU+w4/bA8pCOhudDAT0cwaznGEmSmUtVITB2u
/GuFNYmg9isQnzMUJVwgfK0tpkz7Haia15YfB7PApvYJzrzrUbTHu0zxpCnNZvQu
8ISRgGeeQeRnZw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:54:26 2026 by rpki-client