Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383230303a3a2f34302d3430203d3e20323638303931.roa
File:                     323830343a353764633a383230303a3a2f34302d3430203d3e20323638303931.roa (raw, json)
Hash identifier:          b4oONMaQodM+4eT1XMDDAKnwzNFLNNdQg/rwAPGbSU8=
Subject key identifier:   30:F2:75:A2:51:64:A6:1A:12:24:97:75:6C:3E:74:C8:39:0E:E1:50
Certificate issuer:       /CN=89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C
Certificate serial:       4B277D0EB5C64FEC06CC9786B7B44D54C4BD43D3
Authority key identifier: 89:48:9A:8E:2C:AF:2E:A1:6C:1D:AA:6E:07:FB:00:46:3F:4F:78:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383230303a3a2f34302d3430203d3e20323638303931.roa
Signing time:             Thu 09 Apr 2026 18:53:04 +0000
ROA not before:           Thu 09 Apr 2026 18:48:04 +0000
ROA not after:            Thu 08 Apr 2027 18:53:04 +0000
asID:                     268091
IP address blocks:        2804:57dc:8200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.crl
                          rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 02:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:27:7d:0e:b5:c6:4f:ec:06:cc:97:86:b7:b4:4d:54:c4:bd:43:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C
        Validity
            Not Before: Apr  9 18:48:04 2026 GMT
            Not After : Apr  8 18:53:04 2027 GMT
        Subject: CN=30F275A25164A61A122497756C3E74C8390EE150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:e4:0e:28:f2:c9:df:ff:0b:94:a1:42:74:
                    17:c1:50:7d:73:f4:48:2a:31:37:c7:83:92:71:bb:
                    df:61:fc:3a:c5:16:33:2e:13:df:b8:da:ab:80:37:
                    f9:fb:f9:2c:2f:11:3f:1e:68:3e:f7:39:3c:1f:ae:
                    88:ae:42:b5:f5:ac:3c:54:7d:89:97:2d:06:af:8c:
                    d8:bc:45:84:c3:7b:a4:1f:c7:55:02:21:c2:3e:41:
                    ac:e1:d9:92:06:3e:22:54:28:36:af:96:59:5e:8e:
                    9a:18:2b:3f:32:59:40:6c:80:04:3f:f7:c1:e6:6d:
                    2e:cb:09:3f:b6:8b:01:2f:23:b8:66:03:22:cc:f3:
                    d8:c1:26:96:4e:35:5b:79:39:14:9b:e0:b9:a3:9a:
                    8f:22:12:41:63:b6:65:dc:83:78:4e:53:f4:1b:80:
                    d8:04:58:82:9e:36:d6:ad:8a:eb:33:f3:2a:40:bf:
                    71:09:2d:5c:d7:74:e5:11:f3:a1:1f:c0:fa:4c:16:
                    9a:3c:fc:5d:e3:a9:92:e3:46:c0:60:f4:ce:ab:bf:
                    e3:8d:3b:83:75:c9:59:1d:a0:d6:95:62:e0:41:1b:
                    4a:3e:ce:2a:89:f7:74:b8:7d:c4:61:f1:03:7a:4a:
                    62:66:fd:39:d4:fa:5d:cd:f7:a0:2a:5c:78:7e:d9:
                    f7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F2:75:A2:51:64:A6:1A:12:24:97:75:6C:3E:74:C8:39:0E:E1:50
            X509v3 Authority Key Identifier:
                keyid:89:48:9A:8E:2C:AF:2E:A1:6C:1D:AA:6E:07:FB:00:46:3F:4F:78:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89489A8E2CAF2EA16C1DAA6E07FB00463F4F788C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383230303a3a2f34302d3430203d3e20323638303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57dc:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:22:bc:4a:35:1a:a1:7c:34:52:f1:2d:3a:19:7f:aa:e7:ac:
         fd:0d:1a:4c:49:d2:0e:78:ed:c1:b2:97:7d:32:69:f6:81:9e:
         fa:ea:f7:57:ec:a6:04:8a:71:51:ed:20:af:8a:03:0c:23:dc:
         ff:fc:6f:74:33:7e:ff:4a:9e:ea:09:1c:e9:85:28:44:98:88:
         6a:89:83:24:d2:ff:68:94:05:8d:bb:79:59:26:1b:2c:4b:a9:
         24:0a:5b:6e:4c:29:39:5b:80:b5:88:81:58:0d:45:bb:e6:1e:
         18:ce:32:6a:8f:6e:ce:0a:39:ce:f9:e6:16:04:02:64:b8:42:
         e9:bb:87:a2:e3:b5:ec:76:0c:8f:68:74:05:c7:84:0c:24:77:
         ec:11:f8:26:3b:60:ca:1b:11:8a:b3:61:6d:02:7b:4b:51:57:
         8d:35:26:85:d5:d6:04:8e:c1:60:66:73:64:d0:74:23:ac:1c:
         66:8b:f0:77:af:d2:d9:e3:76:49:b7:b7:cb:37:f9:e4:45:4a:
         93:9e:20:b0:04:2f:2d:e9:42:3d:97:0c:95:f6:37:7d:ae:ac:
         35:14:0e:57:74:da:f6:20:ef:36:98:56:65:69:b9:13:0b:a8:
         41:94:97:79:af:55:b3:51:b7:4e:7d:1e:f4:36:87:b3:0f:65:
         b7:81:05:af
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUSyd9DrXGT+wGzJeGt7RNVMS9Q9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk0ODlBOEUyQ0FGMkVBMTZDMURBQTZFMDdGQjAwNDYz
RjRGNzg4QzAeFw0yNjA0MDkxODQ4MDRaFw0yNzA0MDgxODUzMDRaMDMxMTAvBgNV
BAMTKDMwRjI3NUEyNTE2NEE2MUExMjI0OTc3NTZDM0U3NEM4MzkwRUUxNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwV+QOKPLJ3/8LlKFCdBfBUH1z
9EgqMTfHg5Jxu99h/DrFFjMuE9+42quAN/n7+SwvET8eaD73OTwfroiuQrX1rDxU
fYmXLQavjNi8RYTDe6Qfx1UCIcI+Qazh2ZIGPiJUKDavlllejpoYKz8yWUBsgAQ/
98HmbS7LCT+2iwEvI7hmAyLM89jBJpZONVt5ORSb4Lmjmo8iEkFjtmXcg3hOU/Qb
gNgEWIKeNtatiusz8ypAv3EJLVzXdOUR86EfwPpMFpo8/F3jqZLjRsBg9M6rv+ON
O4N1yVkdoNaVYuBBG0o+ziqJ93S4fcRh8QN6SmJm/TnU+l3N96AqXHh+2fdNAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUMPJ1olFkphoSJJd1bD50yDkO4VAwHwYDVR0j
BBgwFoAUiUiajiyvLqFsHapuB/sARj9PeIwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2E4S1ROYVJMZlMxZ1I5eDQ5cHV1Ymt0OXpuZk1OaHVlS2gyVmVXSzVn
RTgvMC84OTQ4OUE4RTJDQUYyRUExNkMxREFBNkUwN0ZCMDA0NjNGNEY3ODhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5NDg5QThFMkNBRjJFQTE2
QzFEQUE2RTA3RkIwMDQ2M0Y0Rjc4OEMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdhOEtUTmFSTGZTMWdSOXg0OXB1dWJrdDl6bmZNTmh1ZUtoMlZlV0s1Z0U4LzAv
MzIzODMwMzQzYTM1Mzc2NDYzM2EzODMyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzODMwMzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEV9yCMA0GCSqGSIb3DQEBCwUA
A4IBAQBjIrxKNRqhfDRS8S06GX+q56z9DRpMSdIOeO3Bspd9Mmn2gZ766vdX7KYE
inFR7SCvigMMI9z//G90M37/Sp7qCRzphShEmIhqiYMk0v9olAWNu3lZJhssS6kk
CltuTCk5W4C1iIFYDUW75h4YzjJqj27OCjnO+eYWBAJkuELpu4ei47XsdgyPaHQF
x4QMJHfsEfgmO2DKGxGKs2FtAntLUVeNNSaF1dYEjsFgZnNk0HQjrBxmi/B3r9LZ
43ZJt7fLN/nkRUqTniCwBC8t6UI9lwyV9jd9rqw1FA5XdNr2IO82mFZlabkTC6hB
lJd5r1WzUbdOfR70NoezD2W3gQWv
-----END CERTIFICATE-----
Generated at Sat Apr 18 10:31:19 2026 by rpki-client