Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a313931383a3a2f33322d3438203d3e203532383632.roa
File:                     323830343a313931383a3a2f33322d3438203d3e203532383632.roa (raw, json)
Hash identifier:          DkoVHMCAmY6okTIkOeYdSTGZDL2tk1W2nYseh+V1aDQ=
Subject key identifier:   1B:69:1A:DD:B3:89:C1:3C:0B:39:4B:06:E5:D7:7A:D3:88:F8:B1:B4
Certificate issuer:       /CN=14DDB445EE01FBDDDEFE9DCF3AE3DC4E209944A7
Certificate serial:       6D6827E30F79885D82EFAA6823D940146D1081EE
Authority key identifier: 14:DD:B4:45:EE:01:FB:DD:DE:FE:9D:CF:3A:E3:DC:4E:20:99:44:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DDB445EE01FBDDDEFE9DCF3AE3DC4E209944A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a313931383a3a2f33322d3438203d3e203532383632.roa
Signing time:             Tue 24 Feb 2026 12:40:11 +0000
ROA not before:           Tue 24 Feb 2026 12:35:11 +0000
ROA not after:            Tue 23 Feb 2027 12:40:11 +0000
asID:                     52862
IP address blocks:        2804:1918::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/14DDB445EE01FBDDDEFE9DCF3AE3DC4E209944A7.crl
                          rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/14DDB445EE01FBDDDEFE9DCF3AE3DC4E209944A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DDB445EE01FBDDDEFE9DCF3AE3DC4E209944A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 16:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:68:27:e3:0f:79:88:5d:82:ef:aa:68:23:d9:40:14:6d:10:81:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DDB445EE01FBDDDEFE9DCF3AE3DC4E209944A7
        Validity
            Not Before: Feb 24 12:35:11 2026 GMT
            Not After : Feb 23 12:40:11 2027 GMT
        Subject: CN=1B691ADDB389C13C0B394B06E5D77AD388F8B1B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:2f:c5:93:1a:d2:92:04:f8:4d:86:1b:14:
                    c5:13:b8:65:e3:35:5f:70:82:16:c3:cd:75:7f:cb:
                    05:9c:10:fa:85:22:cc:0a:d7:b0:39:6b:7c:0d:20:
                    9b:79:b2:7a:fc:ed:89:ca:d8:58:c8:3a:4b:75:1a:
                    10:fd:9d:67:79:c6:d9:b1:0f:4d:53:e4:6f:8f:4a:
                    c9:05:ee:1d:18:b8:4c:5b:43:89:0e:2b:17:c1:4a:
                    f0:ee:32:0c:cf:1b:2b:c8:1f:5f:eb:42:fc:48:d2:
                    fa:74:4b:4b:89:90:0b:a1:cb:7a:00:3d:78:aa:a5:
                    d2:4a:8f:c4:6b:9d:36:bc:28:c3:cb:fe:4c:6e:79:
                    ff:e4:8d:3d:4e:b0:a8:d3:d4:a5:5d:c7:0f:28:80:
                    6f:02:30:28:d8:95:8b:e9:89:7f:5a:8c:c2:84:f4:
                    2a:ca:d6:45:d0:78:74:20:7d:98:d1:e1:df:48:87:
                    31:99:81:d1:b5:9c:74:49:01:1f:78:96:e4:22:e0:
                    0d:97:d0:e3:73:43:47:d6:ea:3d:8d:de:3a:1d:76:
                    d9:d7:f3:92:28:db:69:b2:00:c0:8c:e3:a2:70:a4:
                    68:34:36:de:e2:4c:90:e5:10:f4:d0:b9:40:04:1b:
                    ae:2c:fc:be:7f:1d:21:7c:37:8c:b4:8c:69:2c:a9:
                    82:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:69:1A:DD:B3:89:C1:3C:0B:39:4B:06:E5:D7:7A:D3:88:F8:B1:B4
            X509v3 Authority Key Identifier:
                keyid:14:DD:B4:45:EE:01:FB:DD:DE:FE:9D:CF:3A:E3:DC:4E:20:99:44:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/14DDB445EE01FBDDDEFE9DCF3AE3DC4E209944A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DDB445EE01FBDDDEFE9DCF3AE3DC4E209944A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a313931383a3a2f33322d3438203d3e203532383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1918::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:5b:fa:3b:a5:69:25:22:09:50:2c:04:a3:ca:f6:a5:d7:8a:
         36:e7:a4:1a:c4:f2:72:24:d5:30:68:fc:f4:22:6d:82:ef:7c:
         05:7d:92:13:6b:21:1e:d1:fd:3d:8b:7c:09:64:08:87:a1:59:
         46:38:cc:ab:5f:bb:6d:fb:fa:58:c8:43:3b:d9:e7:be:18:30:
         a4:94:8f:bf:32:2a:ec:6e:6b:57:8b:3c:11:fe:65:42:d2:71:
         96:67:92:d8:4c:1f:35:d2:91:ed:5e:fa:fb:89:22:79:5d:63:
         a1:07:aa:03:23:7a:7f:da:a0:8f:5d:0d:1e:10:eb:b9:1d:48:
         87:cf:5f:14:af:c3:f1:cb:9a:57:fb:d9:90:6f:60:12:07:ee:
         88:bb:57:3f:83:61:ea:84:4c:3a:d3:2d:5e:c6:fd:92:65:4f:
         49:02:aa:ee:d8:83:4a:48:34:2d:17:fc:ad:8b:d4:17:45:9c:
         23:a3:d5:2b:46:69:9b:b4:28:65:04:fc:3f:63:15:5b:a8:00:
         31:e4:29:e9:ed:d1:31:1d:01:0f:dc:72:76:74:31:f4:41:d3:
         7c:5c:03:9d:43:c9:d9:94:ef:ff:6a:ff:3d:93:4a:6d:a6:03:
         f4:5f:17:46:c0:66:1b:4a:f9:9f:89:ce:d3:fd:4a:d6:34:d7:
         8c:bf:dc:9e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUbWgn4w95iF2C76poI9lAFG0Qge4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTREREI0NDVFRTAxRkJERERFRkU5RENGM0FFM0RDNEUy
MDk5NDRBNzAeFw0yNjAyMjQxMjM1MTFaFw0yNzAyMjMxMjQwMTFaMDMxMTAvBgNV
BAMTKDFCNjkxQUREQjM4OUMxM0MwQjM5NEIwNkU1RDc3QUQzODhGOEIxQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0si/FkxrSkgT4TYYbFMUTuGXj
NV9wghbDzXV/ywWcEPqFIswK17A5a3wNIJt5snr87YnK2FjIOkt1GhD9nWd5xtmx
D01T5G+PSskF7h0YuExbQ4kOKxfBSvDuMgzPGyvIH1/rQvxI0vp0S0uJkAuhy3oA
PXiqpdJKj8RrnTa8KMPL/kxuef/kjT1OsKjT1KVdxw8ogG8CMCjYlYvpiX9ajMKE
9CrK1kXQeHQgfZjR4d9IhzGZgdG1nHRJAR94luQi4A2X0ONzQ0fW6j2N3joddtnX
85Io22myAMCM46JwpGg0Nt7iTJDlEPTQuUAEG64s/L5/HSF8N4y0jGksqYKBAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUG2ka3bOJwTwLOUsG5dd604j4sbQwHwYDVR0j
BBgwFoAUFN20Re4B+93e/p3POuPcTiCZRKcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODFnbVVWREVUOGZ1SzY2b2Y0UlpRSFNhS2I5aVZIdjNCVzR5d3VXOUFQ
NGIvMC8xNEREQjQ0NUVFMDFGQkREREVGRTlEQ0YzQUUzREM0RTIwOTk0NEE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0RERCNDQ1RUUwMUZCRERE
RUZFOURDRjNBRTNEQzRFMjA5OTQ0QTcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgxZ21VVkRFVDhmdUs2Nm9mNFJaUUhTYUtiOWlWSHYzQlc0eXd1VzlBUDRiLzAv
MzIzODMwMzQzYTMxMzkzMTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMjM4
MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGRgwDQYJKoZIhvcNAQELBQADggEBABZb+julaSUi
CVAsBKPK9qXXijbnpBrE8nIk1TBo/PQibYLvfAV9khNrIR7R/T2LfAlkCIehWUY4
zKtfu237+ljIQzvZ574YMKSUj78yKuxua1eLPBH+ZULScZZnkthMHzXSke1e+vuJ
InldY6EHqgMjen/aoI9dDR4Q67kdSIfPXxSvw/HLmlf72ZBvYBIH7oi7Vz+DYeqE
TDrTLV7G/ZJlT0kCqu7Yg0pINC0X/K2L1BdFnCOj1StGaZu0KGUE/D9jFVuoADHk
Kent0TEdAQ/ccnZ0MfRB03xcA51DydmU7/9q/z2TSm2mA/RfF0bAZhtK+Z+JztP9
StY014y/3J4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:59:51 2026 by rpki-client