Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/323830343a373430303a633030303a3a2f34302d3430203d3e20323730393531.roa
File:                     323830343a373430303a633030303a3a2f34302d3430203d3e20323730393531.roa (raw, json)
Hash identifier:          tzAP/OVAsrt73Hp8ltpEtEQhkThz9II/FVJBiGbOrb4=
Subject key identifier:   A6:B0:5A:42:35:6D:A3:B9:BF:74:EE:AA:B2:A1:A4:F1:41:86:0F:E7
Certificate issuer:       /CN=2855A71E150CFAB4453167F74DEE4613F739EA02
Certificate serial:       171249ACC5403B1DCCAF75669F88A84234DC9559
Authority key identifier: 28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/323830343a373430303a633030303a3a2f34302d3430203d3e20323730393531.roa
Signing time:             Fri 10 Apr 2026 17:14:56 +0000
ROA not before:           Fri 10 Apr 2026 17:09:56 +0000
ROA not after:            Fri 09 Apr 2027 17:14:56 +0000
asID:                     270951
IP address blocks:        2804:7400:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl
                          rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 04:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:12:49:ac:c5:40:3b:1d:cc:af:75:66:9f:88:a8:42:34:dc:95:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855A71E150CFAB4453167F74DEE4613F739EA02
        Validity
            Not Before: Apr 10 17:09:56 2026 GMT
            Not After : Apr  9 17:14:56 2027 GMT
        Subject: CN=A6B05A42356DA3B9BF74EEAAB2A1A4F141860FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6f:f8:f5:c3:f1:99:d2:bc:46:0f:a3:55:cb:
                    1f:f1:67:d7:7d:d7:6f:2c:a3:05:b7:f9:1c:d9:44:
                    22:ec:7b:98:65:73:35:6b:33:d6:3b:8b:3b:07:29:
                    3b:87:c1:59:23:24:58:40:fb:36:37:67:94:c5:73:
                    ad:eb:e4:b9:73:e2:c8:4b:9c:16:18:5d:dc:cd:ae:
                    4d:ab:85:4f:39:19:6a:34:91:66:85:b3:69:1d:12:
                    33:81:90:a2:cf:07:03:cf:bb:5b:f6:1a:a4:aa:e0:
                    62:80:1e:be:e6:04:b5:d2:68:3b:84:4c:af:c0:88:
                    29:71:ff:3a:67:52:34:36:18:a9:f9:85:a0:cb:75:
                    02:7f:77:94:51:94:fb:07:f4:be:bb:b8:1e:58:f9:
                    9a:0b:50:89:f8:6b:23:39:bf:36:b9:c3:45:39:3a:
                    3d:45:33:d7:51:0e:cf:1f:d9:73:75:d3:6b:95:c2:
                    76:fb:1f:1a:fd:2c:e3:0e:89:6b:2b:93:9d:ce:16:
                    ca:3d:50:ac:8e:b9:db:52:68:60:d5:80:b1:2a:e9:
                    89:1c:34:14:c5:15:1a:74:5b:0b:39:2b:5b:0f:67:
                    ab:1d:66:96:64:30:27:04:d9:56:5e:eb:08:1a:67:
                    71:68:bd:78:20:65:5c:1e:2f:45:6c:61:ea:55:1d:
                    6d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B0:5A:42:35:6D:A3:B9:BF:74:EE:AA:B2:A1:A4:F1:41:86:0F:E7
            X509v3 Authority Key Identifier:
                keyid:28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/323830343a373430303a633030303a3a2f34302d3430203d3e20323730393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7400:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:aa:d1:82:fc:03:5f:57:f5:93:28:88:5e:17:9f:a6:56:75:
         e1:30:02:61:6d:07:2d:58:58:2a:97:fd:c4:a4:15:19:51:bf:
         2d:21:38:fd:e6:fb:f5:41:f0:46:53:22:c4:0f:9a:99:92:78:
         f5:6f:a5:b0:6b:40:5b:4b:4a:a2:d9:59:7e:0d:ed:94:ea:79:
         94:96:08:8c:5c:8c:3a:0c:a7:05:84:08:b0:29:6e:fb:39:19:
         49:85:c9:88:94:0e:0e:47:ba:f7:c5:2b:fa:89:fd:20:cc:87:
         ac:0f:a4:c8:ed:e2:87:86:79:5b:da:0e:73:36:88:76:c7:24:
         48:1d:e8:47:df:68:92:5c:d3:ba:3c:68:c5:78:82:78:c4:01:
         f7:a2:2e:7b:27:35:06:ca:78:77:a0:70:50:ef:65:aa:90:78:
         f2:cc:ab:1a:2b:cf:f1:81:d2:f2:0a:25:75:db:31:09:41:83:
         74:67:e9:bf:89:eb:e0:5e:c3:1f:2e:61:b4:1a:3a:ae:6a:da:
         50:3b:c5:10:44:f7:54:18:d8:1a:85:82:a6:10:c9:55:91:40:
         06:13:79:18:38:6c:b9:14:88:f7:a6:e0:8a:78:92:b2:56:12:
         ec:af:70:99:c2:6b:23:2a:6e:e6:73:ec:23:11:18:f7:5a:99:
         89:8f:09:19
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUFxJJrMVAOx3Mr3Vmn4ioQjTclVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg1NUE3MUUxNTBDRkFCNDQ1MzE2N0Y3NERFRTQ2MTNG
NzM5RUEwMjAeFw0yNjA0MTAxNzA5NTZaFw0yNzA0MDkxNzE0NTZaMDMxMTAvBgNV
BAMTKEE2QjA1QTQyMzU2REEzQjlCRjc0RUVBQUIyQTFBNEYxNDE4NjBGRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvb/j1w/GZ0rxGD6NVyx/xZ9d9
128sowW3+RzZRCLse5hlczVrM9Y7izsHKTuHwVkjJFhA+zY3Z5TFc63r5Llz4shL
nBYYXdzNrk2rhU85GWo0kWaFs2kdEjOBkKLPBwPPu1v2GqSq4GKAHr7mBLXSaDuE
TK/AiClx/zpnUjQ2GKn5haDLdQJ/d5RRlPsH9L67uB5Y+ZoLUIn4ayM5vza5w0U5
Oj1FM9dRDs8f2XN102uVwnb7Hxr9LOMOiWsrk53OFso9UKyOudtSaGDVgLEq6Ykc
NBTFFRp0Wws5K1sPZ6sdZpZkMCcE2VZe6wgaZ3FovXggZVweL0VsYepVHW23AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUprBaQjVto7m/dO6qsqGk8UGGD+cwHwYDVR0j
BBgwFoAUKFWnHhUM+rRFMWf3Te5GE/c56gIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTF6Ym5Yajk4NGtMNFdrWHU4UW5CeFA5Q21XaVpKZTZFaTRwanpZRndv
cXEvMC8yODU1QTcxRTE1MENGQUI0NDUzMTY3Rjc0REVFNDYxM0Y3MzlFQTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4NTVBNzFFMTUwQ0ZBQjQ0
NTMxNjdGNzRERUU0NjEzRjczOUVBMDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkxemJuWGo5ODRrTDRXa1h1OFFuQnhQOUNtV2laSmU2RWk0cGp6WUZ3b3FxLzAv
MzIzODMwMzQzYTM3MzQzMDMwM2E2MzMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMDM5MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEdADAMA0GCSqGSIb3DQEBCwUA
A4IBAQClqtGC/ANfV/WTKIheF5+mVnXhMAJhbQctWFgql/3EpBUZUb8tITj95vv1
QfBGUyLED5qZknj1b6Wwa0BbS0qi2Vl+De2U6nmUlgiMXIw6DKcFhAiwKW77ORlJ
hcmIlA4OR7r3xSv6if0gzIesD6TI7eKHhnlb2g5zNoh2xyRIHehH32iSXNO6PGjF
eIJ4xAH3oi57JzUGynh3oHBQ72WqkHjyzKsaK8/xgdLyCiV12zEJQYN0Z+m/ievg
XsMfLmG0GjquatpQO8UQRPdUGNgahYKmEMlVkUAGE3kYOGy5FIj3puCKeJKyVhLs
r3CZwmsjKm7mc+wjERj3WpmJjwkZ
-----END CERTIFICATE-----
Generated at Sat Apr 18 08:12:48 2026 by rpki-client