Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/323830343a336330633a3a2f33322d3332203d3e20323636313837.roa
File:                     323830343a336330633a3a2f33322d3332203d3e20323636313837.roa (raw, json)
Hash identifier:          1n37YKbqW6Lz7Ny7HCDD0hAtofBilxWctPBauE36uLs=
Subject key identifier:   43:EF:69:34:DD:8B:96:96:27:01:B9:7D:7A:EA:27:D7:8C:EE:21:BE
Certificate issuer:       /CN=F9C78D96B739AC531FF8ABF2158D27A0087863CB
Certificate serial:       2B4F2A70B46804B14A139BF6134DD5D63EB4C167
Authority key identifier: F9:C7:8D:96:B7:39:AC:53:1F:F8:AB:F2:15:8D:27:A0:08:78:63:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C78D96B739AC531FF8ABF2158D27A0087863CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/323830343a336330633a3a2f33322d3332203d3e20323636313837.roa
Signing time:             Fri 17 Apr 2026 18:51:08 +0000
ROA not before:           Fri 17 Apr 2026 18:46:08 +0000
ROA not after:            Fri 16 Apr 2027 18:51:08 +0000
asID:                     266187
IP address blocks:        2804:3c0c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/F9C78D96B739AC531FF8ABF2158D27A0087863CB.crl
                          rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/F9C78D96B739AC531FF8ABF2158D27A0087863CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C78D96B739AC531FF8ABF2158D27A0087863CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 19:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4f:2a:70:b4:68:04:b1:4a:13:9b:f6:13:4d:d5:d6:3e:b4:c1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9C78D96B739AC531FF8ABF2158D27A0087863CB
        Validity
            Not Before: Apr 17 18:46:08 2026 GMT
            Not After : Apr 16 18:51:08 2027 GMT
        Subject: CN=43EF6934DD8B96962701B97D7AEA27D78CEE21BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:df:07:8f:b2:6a:7b:46:65:c8:6a:04:fa:
                    cf:37:f0:18:0c:be:99:11:20:78:92:9e:77:2c:04:
                    6c:22:e0:4f:e3:e9:99:3b:ce:9a:65:0b:5d:7c:4e:
                    3f:9a:0b:f5:fa:32:55:23:e8:5a:d7:71:3a:4b:a6:
                    e7:00:13:ee:44:1b:71:47:07:d6:a5:f8:c5:ad:54:
                    c1:c5:76:57:a0:9b:ca:d6:6f:0d:ee:96:a3:f7:28:
                    cf:b9:39:03:e4:c7:82:95:6a:a3:42:b2:10:73:04:
                    4f:c0:61:6c:05:8e:1d:aa:c6:51:a1:84:db:26:2f:
                    ab:cd:db:81:42:89:4f:e9:4f:f0:7c:4f:4a:3d:0e:
                    3f:a5:e9:22:ab:b1:88:25:e7:73:50:f4:e6:aa:bd:
                    c5:05:ad:d0:7b:c1:d0:97:a9:4a:96:b8:9f:e2:9a:
                    cd:ec:f8:f9:60:a6:75:2a:17:fb:8d:08:b9:f0:e2:
                    8e:e2:05:19:80:b0:cd:be:4f:c0:a7:82:62:44:53:
                    3b:c6:fe:f6:ba:63:ac:3f:51:e5:d7:6a:ed:52:94:
                    83:7f:78:a4:80:ee:c3:b6:75:38:55:6d:c6:0d:6d:
                    ec:a0:d1:70:34:ac:f0:49:76:4d:8c:7f:41:50:15:
                    6c:70:00:95:af:c8:cd:03:12:85:b2:d0:3c:d7:31:
                    83:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EF:69:34:DD:8B:96:96:27:01:B9:7D:7A:EA:27:D7:8C:EE:21:BE
            X509v3 Authority Key Identifier:
                keyid:F9:C7:8D:96:B7:39:AC:53:1F:F8:AB:F2:15:8D:27:A0:08:78:63:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/F9C78D96B739AC531FF8ABF2158D27A0087863CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C78D96B739AC531FF8ABF2158D27A0087863CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/323830343a336330633a3a2f33322d3332203d3e20323636313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:72:04:7e:52:eb:f3:f3:61:57:3d:c5:e4:2e:1c:0c:63:14:
         4d:cf:4d:b3:fd:79:77:bb:ef:ff:64:05:f6:ad:24:3e:c6:c4:
         55:99:83:65:20:80:94:a7:ae:46:ca:60:aa:11:b5:d9:52:65:
         cc:be:45:9f:1b:b9:e4:d6:e1:30:ce:ad:14:26:01:ef:1e:f6:
         7a:e4:07:20:38:7e:59:0c:d3:88:2f:6d:7a:7f:1d:6e:91:c8:
         c0:53:69:b2:06:6a:33:5d:c6:c3:4b:15:ed:e9:ea:d3:80:ff:
         ca:18:69:51:2f:45:5e:7f:df:e7:31:00:b4:b8:83:e2:b0:bb:
         b4:1f:d9:4b:a7:3c:a0:6c:55:0f:3d:8c:7b:25:7f:4e:84:f3:
         ee:76:20:c4:b4:ba:41:e7:78:79:d6:15:5a:2f:50:f9:92:ca:
         4c:eb:03:3f:31:b1:7d:72:36:e3:7f:8d:15:28:25:95:78:55:
         ac:f0:2f:b5:0e:0c:7a:26:56:15:9e:1d:8a:ab:c0:df:a8:5d:
         cf:65:2f:02:d9:72:02:0b:87:fe:84:a4:56:9b:fe:2d:7c:bb:
         a6:d0:b1:90:c9:8c:49:b0:8b:40:c4:d3:70:70:25:30:14:64:
         aa:ac:ef:14:c5:d3:04:e4:39:63:0c:af:cc:f3:f9:f2:06:98:
         d1:8d:60:db
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUK08qcLRoBLFKE5v2E03V1j60wWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlDNzhEOTZCNzM5QUM1MzFGRjhBQkYyMTU4RDI3QTAw
ODc4NjNDQjAeFw0yNjA0MTcxODQ2MDhaFw0yNzA0MTYxODUxMDhaMDMxMTAvBgNV
BAMTKDQzRUY2OTM0REQ4Qjk2OTYyNzAxQjk3RDdBRUEyN0Q3OENFRTIxQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Jd8Hj7Jqe0ZlyGoE+s838BgM
vpkRIHiSnncsBGwi4E/j6Zk7zpplC118Tj+aC/X6MlUj6FrXcTpLpucAE+5EG3FH
B9al+MWtVMHFdlegm8rWbw3ulqP3KM+5OQPkx4KVaqNCshBzBE/AYWwFjh2qxlGh
hNsmL6vN24FCiU/pT/B8T0o9Dj+l6SKrsYgl53NQ9OaqvcUFrdB7wdCXqUqWuJ/i
ms3s+PlgpnUqF/uNCLnw4o7iBRmAsM2+T8CngmJEUzvG/va6Y6w/UeXXau1SlIN/
eKSA7sO2dThVbcYNbeyg0XA0rPBJdk2Mf0FQFWxwAJWvyM0DEoWy0DzXMYNrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUQ+9pNN2LlpYnAbl9euon14zuIb4wHwYDVR0j
BBgwFoAU+ceNlrc5rFMf+KvyFY0noAh4Y8swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWFwZzVOR0FYeXFWR2hFMTJaOTJBajFBTW9uMm51czFIa3U2OWE5R05M
YkwvMC9GOUM3OEQ5NkI3MzlBQzUzMUZGOEFCRjIxNThEMjdBMDA4Nzg2M0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5Qzc4RDk2QjczOUFDNTMx
RkY4QUJGMjE1OEQyN0EwMDg3ODYzQ0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVhcGc1TkdBWHlxVkdoRTEyWjkyQWoxQU1vbjJudXMxSGt1NjlhOUdOTGJMLzAv
MzIzODMwMzQzYTMzNjMzMDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzEzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ8DDANBgkqhkiG9w0BAQsFAAOCAQEAZHIEflLr
8/NhVz3F5C4cDGMUTc9Ns/15d7vv/2QF9q0kPsbEVZmDZSCAlKeuRspgqhG12VJl
zL5Fnxu55NbhMM6tFCYB7x72euQHIDh+WQzTiC9ten8dbpHIwFNpsgZqM13Gw0sV
7enq04D/yhhpUS9FXn/f5zEAtLiD4rC7tB/ZS6c8oGxVDz2MeyV/ToTz7nYgxLS6
Qed4edYVWi9Q+ZLKTOsDPzGxfXI243+NFSgllXhVrPAvtQ4MeiZWFZ4diqvA36hd
z2UvAtlyAguH/oSkVpv+LXy7ptCxkMmMSbCLQMTTcHAlMBRkqqzvFMXTBOQ5Ywyv
zPP58gaY0Y1g2w==
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:06:34 2026 by rpki-client