Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/323830343a313037383a3a2f33322d3438203d3e20323633363337.roa
File:                     323830343a313037383a3a2f33322d3438203d3e20323633363337.roa (raw, json)
Hash identifier:          KBQCdFHplWquuT+kab6DZbpDzKtkvdcAkkBTGtbdW8w=
Subject key identifier:   1B:F3:BC:77:49:CE:5B:02:CB:C6:84:FD:FB:D3:26:BD:2E:EE:20:40
Certificate issuer:       /CN=783CF2D02131A21E333113BEEE878BC38B6104B6
Certificate serial:       0D30FC5039D968EE0AEB3E247A7393E84C0E76BF
Authority key identifier: 78:3C:F2:D0:21:31:A2:1E:33:31:13:BE:EE:87:8B:C3:8B:61:04:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/323830343a313037383a3a2f33322d3438203d3e20323633363337.roa
Signing time:             Fri 10 Apr 2026 13:46:44 +0000
ROA not before:           Fri 10 Apr 2026 13:41:44 +0000
ROA not after:            Fri 09 Apr 2027 13:46:44 +0000
asID:                     263637
IP address blocks:        2804:1078::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.crl
                          rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 05:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:30:fc:50:39:d9:68:ee:0a:eb:3e:24:7a:73:93:e8:4c:0e:76:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783CF2D02131A21E333113BEEE878BC38B6104B6
        Validity
            Not Before: Apr 10 13:41:44 2026 GMT
            Not After : Apr  9 13:46:44 2027 GMT
        Subject: CN=1BF3BC7749CE5B02CBC684FDFBD326BD2EEE2040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:9d:51:db:d7:87:4f:3e:d6:a0:54:a4:b8:
                    6e:18:9f:14:f9:f6:63:c4:19:70:c4:b9:14:59:5b:
                    5c:1f:a9:b9:c1:da:82:54:d9:ba:3e:f4:61:63:9a:
                    97:36:8e:eb:e9:74:fa:96:05:c1:98:0d:16:14:ee:
                    c4:d8:3e:02:cf:00:7a:bc:8d:e3:f0:7c:d7:e4:b4:
                    de:28:c4:81:55:c8:26:1a:bc:47:93:70:ee:f5:ac:
                    e1:f2:58:68:1c:9b:3f:7a:ed:89:f5:28:df:f0:be:
                    7d:f1:ac:14:ea:bb:a8:42:9f:43:d3:56:cf:09:30:
                    25:bf:3d:49:27:c3:1e:04:3f:2f:ef:ba:e4:83:ec:
                    c8:9e:15:9c:3d:0a:eb:67:96:df:7c:48:d2:b5:69:
                    78:36:00:a5:00:03:ae:8a:40:4e:5a:8d:2b:7f:fe:
                    8c:7c:96:d1:7e:49:e1:ab:35:32:a1:88:a2:c5:47:
                    39:9b:4e:09:5d:b5:f2:ba:8d:52:9b:7a:50:65:77:
                    0d:8b:07:d4:55:0c:40:13:b3:c7:37:e6:d7:71:9f:
                    b1:76:63:ee:bd:4c:58:76:d5:37:2f:78:7b:76:5a:
                    8b:12:8e:7b:f7:f3:11:5b:9b:04:bc:40:f7:28:f0:
                    70:0b:e6:aa:3b:80:7d:e2:b3:5e:00:c2:89:a8:35:
                    58:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F3:BC:77:49:CE:5B:02:CB:C6:84:FD:FB:D3:26:BD:2E:EE:20:40
            X509v3 Authority Key Identifier:
                keyid:78:3C:F2:D0:21:31:A2:1E:33:31:13:BE:EE:87:8B:C3:8B:61:04:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/783CF2D02131A21E333113BEEE878BC38B6104B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783CF2D02131A21E333113BEEE878BC38B6104B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/323830343a313037383a3a2f33322d3438203d3e20323633363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1078::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:71:93:cc:87:e0:ea:2c:5e:ef:88:98:1a:15:fb:05:40:83:
         e0:2f:9c:ec:4b:d2:f4:2f:d1:3a:6b:5e:57:66:59:01:92:e6:
         e1:a3:7a:60:8e:84:4e:63:dd:9e:dd:b8:d4:81:f5:c7:9b:a7:
         97:79:a8:8e:01:f9:58:f4:8a:4b:6c:7c:b9:22:fc:72:57:52:
         18:6d:a1:23:e6:31:c2:ae:7c:6b:f2:ba:4a:84:6f:d8:bd:04:
         ec:bb:e3:d4:f2:d4:7e:bb:c9:c2:77:00:87:45:a6:54:b4:1b:
         db:00:d0:03:ac:83:d2:1a:68:52:fe:55:7d:16:01:bc:66:71:
         d2:8b:ba:2a:77:7f:f6:8f:82:36:73:80:ff:15:71:be:c5:83:
         43:bb:2b:74:b6:e7:f3:45:c7:de:61:42:50:c9:81:e0:84:6e:
         ae:e9:40:8a:f8:89:3e:ed:c3:2f:2b:ed:1a:e1:2b:c3:d3:9b:
         c5:cb:11:eb:8b:d2:ad:73:47:4d:a0:26:03:03:2e:18:66:66:
         b1:a8:3e:9f:bc:cd:2c:16:e1:c9:6b:c2:95:e7:24:f4:2f:35:
         2f:f3:e3:f6:fd:ba:b5:68:8f:b6:cf:57:48:17:c0:54:a3:4a:
         c3:bb:26:10:59:d9:10:3e:a3:8a:3f:92:d3:69:61:a2:f6:7f:
         04:a2:1f:58
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDTD8UDnZaO4K6z4kenOT6EwOdr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgzQ0YyRDAyMTMxQTIxRTMzMzExM0JFRUU4NzhCQzM4
QjYxMDRCNjAeFw0yNjA0MTAxMzQxNDRaFw0yNzA0MDkxMzQ2NDRaMDMxMTAvBgNV
BAMTKDFCRjNCQzc3NDlDRTVCMDJDQkM2ODRGREZCRDMyNkJEMkVFRTIwNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcKZ1R29eHTz7WoFSkuG4YnxT5
9mPEGXDEuRRZW1wfqbnB2oJU2bo+9GFjmpc2juvpdPqWBcGYDRYU7sTYPgLPAHq8
jePwfNfktN4oxIFVyCYavEeTcO71rOHyWGgcmz967Yn1KN/wvn3xrBTqu6hCn0PT
Vs8JMCW/PUknwx4EPy/vuuSD7MieFZw9Cutnlt98SNK1aXg2AKUAA66KQE5ajSt/
/ox8ltF+SeGrNTKhiKLFRzmbTgldtfK6jVKbelBldw2LB9RVDEATs8c35tdxn7F2
Y+69TFh21TcveHt2WosSjnv38xFbmwS8QPco8HAL5qo7gH3is14AwomoNVi3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUG/O8d0nOWwLLxoT9+9MmvS7uIEAwHwYDVR0j
BBgwFoAUeDzy0CExoh4zMRO+7oeLw4thBLYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm5yOG9aMTFaSDd1ek5OSjVYR1VWdkRLN0VzdEw2WjJMQmJVQ1lnN1Jt
ZVAvMS83ODNDRjJEMDIxMzFBMjFFMzMzMTEzQkVFRTg3OEJDMzhCNjEwNEI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4M0NGMkQwMjEzMUEyMUUz
MzMxMTNCRUVFODc4QkMzOEI2MTA0QjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZucjhvWjExWkg3dXpOTko1WEdVVnZESzdFc3RMNloyTEJiVUNZZzdSbWVQLzEv
MzIzODMwMzQzYTMxMzAzNzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzYzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQQeDANBgkqhkiG9w0BAQsFAAOCAQEAYnGTzIfg
6ixe74iYGhX7BUCD4C+c7EvS9C/ROmteV2ZZAZLm4aN6YI6ETmPdnt241IH1x5un
l3mojgH5WPSKS2x8uSL8cldSGG2hI+Yxwq58a/K6SoRv2L0E7Lvj1PLUfrvJwncA
h0WmVLQb2wDQA6yD0hpoUv5VfRYBvGZx0ou6Knd/9o+CNnOA/xVxvsWDQ7srdLbn
80XH3mFCUMmB4IRurulAiviJPu3DLyvtGuErw9ObxcsR64vSrXNHTaAmAwMuGGZm
sag+n7zNLBbhyWvCleck9C81L/Pj9v26tWiPts9XSBfAVKNKw7smEFnZED6jij+S
02lhovZ/BKIfWA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:25:42 2026 by rpki-client