Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CAPWGy3aa3gkV29C55gZJ3NHjY7es1EHskTtoiixrVNo/0/323830343a383563343a3a2f33322d3438203d3e20323732353939.roa
File:                     323830343a383563343a3a2f33322d3438203d3e20323732353939.roa (raw, json)
Hash identifier:          KZCyvKC3M1iDhqisD5WpPUFUlv0ddjqaZwDIH/dWY2E=
Subject key identifier:   DD:AE:37:8D:1B:7B:BA:7F:17:EF:9A:3A:4C:FF:AB:1D:3D:29:1D:54
Certificate issuer:       /CN=50970D158E8D770114263E72B9064DA0132D236C
Certificate serial:       4E8A79947EAA96CB8102051F2534D8D22F89B3A8
Authority key identifier: 50:97:0D:15:8E:8D:77:01:14:26:3E:72:B9:06:4D:A0:13:2D:23:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50970D158E8D770114263E72B9064DA0132D236C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAPWGy3aa3gkV29C55gZJ3NHjY7es1EHskTtoiixrVNo/0/323830343a383563343a3a2f33322d3438203d3e20323732353939.roa
Signing time:             Sat 28 Feb 2026 13:56:01 +0000
ROA not before:           Sat 28 Feb 2026 13:51:01 +0000
ROA not after:            Sat 27 Feb 2027 13:56:01 +0000
asID:                     272599
IP address blocks:        2804:85c4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CAPWGy3aa3gkV29C55gZJ3NHjY7es1EHskTtoiixrVNo/0/50970D158E8D770114263E72B9064DA0132D236C.crl
                          rsync://rpki-repo.registro.br/repo/CAPWGy3aa3gkV29C55gZJ3NHjY7es1EHskTtoiixrVNo/0/50970D158E8D770114263E72B9064DA0132D236C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50970D158E8D770114263E72B9064DA0132D236C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 04:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8a:79:94:7e:aa:96:cb:81:02:05:1f:25:34:d8:d2:2f:89:b3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50970D158E8D770114263E72B9064DA0132D236C
        Validity
            Not Before: Feb 28 13:51:01 2026 GMT
            Not After : Feb 27 13:56:01 2027 GMT
        Subject: CN=DDAE378D1B7BBA7F17EF9A3A4CFFAB1D3D291D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5b:29:27:e2:a4:3a:95:a4:0c:be:5e:7c:a7:
                    9a:ba:27:3a:27:4b:8a:df:66:72:09:fa:4f:b9:56:
                    9c:94:c4:fc:e4:bd:f7:b6:c1:cd:a3:ae:69:14:5f:
                    59:71:ec:d1:05:5e:6e:23:bf:24:4d:70:d3:3e:b6:
                    25:5e:db:45:bd:44:76:21:9b:80:7f:c0:80:d7:b7:
                    34:f5:90:31:8d:38:5a:47:63:93:53:d6:11:02:cc:
                    9b:66:af:f3:4b:7a:6a:82:c3:09:e9:62:f0:f1:11:
                    21:87:d5:c5:0b:7e:20:65:e5:a9:04:f3:92:aa:7c:
                    e6:20:38:b6:d4:1a:1e:0f:3a:77:cf:7b:aa:4a:2e:
                    2d:06:03:27:99:df:d5:0e:72:8f:28:87:a1:25:07:
                    ce:5d:4c:08:03:84:5a:ff:26:5f:91:55:f6:5f:9f:
                    aa:8f:95:d1:d1:17:3a:cc:ba:c0:c2:93:02:ff:12:
                    d5:3d:82:ca:95:23:47:9c:32:43:b0:9a:d8:d2:cc:
                    d4:c1:6b:23:e4:c7:e4:94:ff:51:b5:24:e8:9f:4d:
                    cb:86:eb:60:0d:12:42:24:84:a0:79:97:7b:aa:19:
                    2a:4e:b3:c4:db:ca:a9:d6:96:49:68:7b:8f:14:4a:
                    46:fe:0d:e3:ae:56:a2:c0:35:c9:4b:90:90:83:71:
                    49:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AE:37:8D:1B:7B:BA:7F:17:EF:9A:3A:4C:FF:AB:1D:3D:29:1D:54
            X509v3 Authority Key Identifier:
                keyid:50:97:0D:15:8E:8D:77:01:14:26:3E:72:B9:06:4D:A0:13:2D:23:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAPWGy3aa3gkV29C55gZJ3NHjY7es1EHskTtoiixrVNo/0/50970D158E8D770114263E72B9064DA0132D236C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50970D158E8D770114263E72B9064DA0132D236C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAPWGy3aa3gkV29C55gZJ3NHjY7es1EHskTtoiixrVNo/0/323830343a383563343a3a2f33322d3438203d3e20323732353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:85c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:27:2c:55:2f:ba:c0:44:1e:9a:9a:dc:50:b5:76:27:5d:6c:
         d6:f9:b3:db:cd:11:63:4f:f2:01:3a:71:1e:74:c5:d3:03:24:
         36:00:03:0c:bb:10:9f:c6:72:40:b4:05:5f:f4:60:78:fa:68:
         ce:31:27:bf:ac:af:34:3a:d3:51:a2:d8:d7:90:67:09:39:ba:
         6d:01:c6:d4:64:86:52:bd:b9:01:8a:7e:d4:11:46:35:ef:5f:
         86:b6:b2:74:a2:88:47:22:31:c9:90:eb:66:74:b2:a5:d2:37:
         c8:20:50:51:9e:15:4f:de:a3:6b:03:de:a3:3a:9c:bf:c8:ea:
         6e:8e:36:75:27:bc:53:cd:46:dc:9f:7e:25:94:bd:d7:38:36:
         05:a4:bf:4d:eb:9f:45:6a:08:4c:dc:83:9d:06:db:ef:34:ab:
         2c:72:08:23:7f:c1:a2:57:6e:62:7e:d0:2d:16:25:a4:f7:85:
         22:e0:09:8d:b8:a0:31:84:fe:a5:81:d3:bf:82:e3:ac:82:40:
         0f:4a:35:05:7c:fc:a8:74:e7:4a:52:38:f0:c7:55:b8:a1:da:
         94:d3:03:e1:d5:97:fa:c2:18:3f:37:36:9f:9c:dd:c5:12:e0:
         38:28:dc:75:77:17:9e:85:01:47:30:00:e3:0d:9d:35:c7:6e:
         96:28:94:08
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUTop5lH6qlsuBAgUfJTTY0i+Js6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA5NzBEMTU4RThENzcwMTE0MjYzRTcyQjkwNjREQTAx
MzJEMjM2QzAeFw0yNjAyMjgxMzUxMDFaFw0yNzAyMjcxMzU2MDFaMDMxMTAvBgNV
BAMTKEREQUUzNzhEMUI3QkJBN0YxN0VGOUEzQTRDRkZBQjFEM0QyOTFENTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgWykn4qQ6laQMvl58p5q6Jzon
S4rfZnIJ+k+5VpyUxPzkvfe2wc2jrmkUX1lx7NEFXm4jvyRNcNM+tiVe20W9RHYh
m4B/wIDXtzT1kDGNOFpHY5NT1hECzJtmr/NLemqCwwnpYvDxESGH1cULfiBl5akE
85KqfOYgOLbUGh4POnfPe6pKLi0GAyeZ39UOco8oh6ElB85dTAgDhFr/Jl+RVfZf
n6qPldHRFzrMusDCkwL/EtU9gsqVI0ecMkOwmtjSzNTBayPkx+SU/1G1JOifTcuG
62ANEkIkhKB5l3uqGSpOs8TbyqnWlkloe48USkb+DeOuVqLANclLkJCDcUnRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU3a43jRt7un8X75o6TP+rHT0pHVQwHwYDVR0j
BBgwFoAUUJcNFY6NdwEUJj5yuQZNoBMtI2wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0FQV0d5M2FhM2drVjI5QzU1Z1pKM05Ialk3ZXMxRUhza1R0b2lpeHJW
Tm8vMC81MDk3MEQxNThFOEQ3NzAxMTQyNjNFNzJCOTA2NERBMDEzMkQyMzZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwOTcwRDE1OEU4RDc3MDEx
NDI2M0U3MkI5MDY0REEwMTMyRDIzNkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NBUFdHeTNhYTNna1YyOUM1NWdaSjNOSGpZN2VzMUVIc2tUdG9paXhyVk5vLzAv
MzIzODMwMzQzYTM4MzU2MzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMy
MzUzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASFxDANBgkqhkiG9w0BAQsFAAOCAQEAMCcsVS+6
wEQemprcULV2J11s1vmz280RY0/yATpxHnTF0wMkNgADDLsQn8ZyQLQFX/RgePpo
zjEnv6yvNDrTUaLY15BnCTm6bQHG1GSGUr25AYp+1BFGNe9fhraydKKIRyIxyZDr
ZnSypdI3yCBQUZ4VT96jawPeozqcv8jqbo42dSe8U81G3J9+JZS91zg2BaS/Teuf
RWoITNyDnQbb7zSrLHIII3/BolduYn7QLRYlpPeFIuAJjbigMYT+pYHTv4LjrIJA
D0o1BXz8qHTnSlI48MdVuKHalNMD4dWX+sIYPzc2n5zdxRLgOCjcdXcXnoUBRzAA
4w2dNcduliiUCA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:22:51 2026 by rpki-client