Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/323830343a333932383a383030303a3a2f33342d3334203d3e20323636303135.roa
File:                     323830343a333932383a383030303a3a2f33342d3334203d3e20323636303135.roa (raw, json)
Hash identifier:          4S6Jau/OfgFrXeiVE5B1oLNK9HoAGgKmWBDKDmqp+UU=
Subject key identifier:   D9:B3:6F:94:40:FE:57:EA:84:80:A8:59:56:13:0B:4E:8B:92:8A:13
Certificate issuer:       /CN=F59B95C5AACBB4149873F9DA399F4E1A9D40A767
Certificate serial:       3EC43911B3EB29081A1AAE9612794AC831FBD73C
Authority key identifier: F5:9B:95:C5:AA:CB:B4:14:98:73:F9:DA:39:9F:4E:1A:9D:40:A7:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/323830343a333932383a383030303a3a2f33342d3334203d3e20323636303135.roa
Signing time:             Wed 15 Apr 2026 14:47:54 +0000
ROA not before:           Wed 15 Apr 2026 14:42:54 +0000
ROA not after:            Wed 14 Apr 2027 14:47:54 +0000
asID:                     266015
IP address blocks:        2804:3928:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.crl
                          rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 04:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c4:39:11:b3:eb:29:08:1a:1a:ae:96:12:79:4a:c8:31:fb:d7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F59B95C5AACBB4149873F9DA399F4E1A9D40A767
        Validity
            Not Before: Apr 15 14:42:54 2026 GMT
            Not After : Apr 14 14:47:54 2027 GMT
        Subject: CN=D9B36F9440FE57EA8480A85956130B4E8B928A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:75:31:db:f1:88:0d:6e:4b:cd:8c:48:fd:
                    3b:eb:75:52:3e:39:5d:91:ae:df:47:6c:4c:62:31:
                    36:6b:3d:ef:34:7c:2c:a7:0c:39:d8:60:8c:4e:8d:
                    f7:57:59:85:4d:3a:b9:40:c5:83:f9:49:f5:16:65:
                    0e:fc:b1:f8:39:92:c5:d9:fc:14:0a:c3:b5:19:ea:
                    84:0d:53:5b:9a:1a:7e:6c:28:82:ae:34:be:04:51:
                    e1:e1:25:6f:34:bd:2c:be:db:82:fe:83:a2:32:67:
                    18:37:70:4f:c4:e7:a0:a0:3f:a3:ca:14:ac:dd:92:
                    5a:92:60:a3:4f:dd:13:a9:b0:06:26:ec:fe:4f:4c:
                    1d:c0:cf:ed:11:8d:b5:ae:56:db:c5:ba:f0:27:aa:
                    3f:91:18:aa:3e:00:cd:83:47:63:04:8c:6a:34:c6:
                    17:ef:82:91:18:8b:e8:b9:51:bb:25:81:39:57:4c:
                    ed:4e:18:2b:ca:d8:63:b0:fc:1c:cc:87:6d:94:fe:
                    71:a0:8c:61:b1:b5:cf:80:26:ca:b8:3b:ea:05:80:
                    f6:fb:c9:0e:68:2d:49:7d:77:e5:74:d2:a4:f8:6c:
                    0e:15:94:f2:42:04:ad:c6:59:14:68:5d:6c:18:0a:
                    19:01:d8:85:0f:47:66:dd:19:7c:a6:48:52:70:8a:
                    7c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B3:6F:94:40:FE:57:EA:84:80:A8:59:56:13:0B:4E:8B:92:8A:13
            X509v3 Authority Key Identifier:
                keyid:F5:9B:95:C5:AA:CB:B4:14:98:73:F9:DA:39:9F:4E:1A:9D:40:A7:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59B95C5AACBB4149873F9DA399F4E1A9D40A767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/323830343a333932383a383030303a3a2f33342d3334203d3e20323636303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3928:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5f:ec:d8:40:7e:f9:69:c2:2a:6b:44:1a:03:2f:70:58:fa:9c:
         0a:e0:b2:6a:26:fb:fd:3f:6c:6b:ef:e1:69:9b:f2:6e:6a:b0:
         d1:5a:37:67:4e:53:e8:c9:db:59:c1:4e:cd:01:3a:24:8b:6f:
         9f:1c:75:f1:f8:b7:3e:d2:5a:e9:38:18:41:8a:a1:4c:47:9b:
         dd:d3:0a:5f:a6:26:b8:61:cb:fa:04:e9:50:30:2c:10:51:b9:
         67:83:5b:2f:d0:69:5f:19:fd:12:55:36:49:a4:5f:fe:94:b4:
         aa:2a:b8:68:56:f1:5b:be:93:a6:81:78:f0:f2:2b:97:45:0e:
         0f:54:ab:9a:f9:26:c7:ef:07:3b:25:bc:55:c5:22:9b:75:13:
         bd:f9:18:29:c2:33:88:76:26:78:dd:10:2f:3d:bd:ce:24:69:
         ea:aa:d3:2b:c3:49:ab:dd:b5:a4:31:7d:bf:2c:37:72:43:fe:
         52:62:5e:2f:bd:d4:cd:09:fb:a3:df:30:b4:ea:e5:75:b8:7b:
         4a:99:84:c5:bb:9c:01:b1:0a:ad:ee:18:8a:88:0b:66:ae:dc:
         e6:4f:39:3c:d5:eb:17:66:27:02:8f:01:90:e7:e5:17:c2:0b:
         df:13:13:3c:f6:c4:89:ff:ba:21:c8:6a:d4:ce:b4:5a:08:7e:
         27:c8:4d:ad
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPsQ5EbPrKQgaGq6WEnlKyDH71zwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU5Qjk1QzVBQUNCQjQxNDk4NzNGOURBMzk5RjRFMUE5
RDQwQTc2NzAeFw0yNjA0MTUxNDQyNTRaFw0yNzA0MTQxNDQ3NTRaMDMxMTAvBgNV
BAMTKEQ5QjM2Rjk0NDBGRTU3RUE4NDgwQTg1OTU2MTMwQjRFOEI5MjhBMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6nHUx2/GIDW5LzYxI/TvrdVI+
OV2Rrt9HbExiMTZrPe80fCynDDnYYIxOjfdXWYVNOrlAxYP5SfUWZQ78sfg5ksXZ
/BQKw7UZ6oQNU1uaGn5sKIKuNL4EUeHhJW80vSy+24L+g6IyZxg3cE/E56CgP6PK
FKzdklqSYKNP3ROpsAYm7P5PTB3Az+0RjbWuVtvFuvAnqj+RGKo+AM2DR2MEjGo0
xhfvgpEYi+i5UbslgTlXTO1OGCvK2GOw/BzMh22U/nGgjGGxtc+AJsq4O+oFgPb7
yQ5oLUl9d+V00qT4bA4VlPJCBK3GWRRoXWwYChkB2IUPR2bdGXymSFJwinyHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU2bNvlED+V+qEgKhZVhMLTouSihMwHwYDVR0j
BBgwFoAU9ZuVxarLtBSYc/naOZ9OGp1Ap2cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWNQaEVzTFYzMW9XNDNFVmFRNGg4ekw4M2RLYXJBcHB4Z2ZMS2RZOTJy
ZU4vMC9GNTlCOTVDNUFBQ0JCNDE0OTg3M0Y5REEzOTlGNEUxQTlENDBBNzY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1OUI5NUM1QUFDQkI0MTQ5
ODczRjlEQTM5OUY0RTFBOUQ0MEE3NjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzljUGhFc0xWMzFvVzQzRVZhUTRoOHpMODNkS2FyQXBweGdmTEtkWTkycmVOLzAv
MzIzODMwMzQzYTMzMzkzMjM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjMwMzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEOSiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBf7NhAfvlpwiprRBoDL3BY+pwK4LJqJvv9P2xr7+Fpm/JuarDRWjdnTlPo
ydtZwU7NAToki2+fHHXx+Lc+0lrpOBhBiqFMR5vd0wpfpia4Ycv6BOlQMCwQUbln
g1sv0GlfGf0SVTZJpF/+lLSqKrhoVvFbvpOmgXjw8iuXRQ4PVKua+SbH7wc7JbxV
xSKbdRO9+RgpwjOIdiZ43RAvPb3OJGnqqtMrw0mr3bWkMX2/LDdyQ/5SYl4vvdTN
Cfuj3zC06uV1uHtKmYTFu5wBsQqt7hiKiAtmrtzmTzk81esXZicCjwGQ5+UXwgvf
ExM89sSJ/7ohyGrUzrRaCH4nyE2t
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:46:14 2026 by rpki-client