Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/323830343a333734343a3a2f33322d313238203d3e20323636343030.roa
File:                     323830343a333734343a3a2f33322d313238203d3e20323636343030.roa (raw, json)
Hash identifier:          lbYnRXKmnTUjhA+nAcmzKv46cEpdFXAE4Rl5JmwXVzE=
Subject key identifier:   C0:12:78:92:24:68:70:60:9E:6D:18:2C:89:2D:0A:4C:68:79:FC:F7
Certificate issuer:       /CN=A653D5055FC338B089E2C732382682788F082F11
Certificate serial:       17D1B881D675446BEF2F760493D9D53F723E10DC
Authority key identifier: A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/323830343a333734343a3a2f33322d313238203d3e20323636343030.roa
Signing time:             Thu 05 Feb 2026 11:00:31 +0000
ROA not before:           Thu 05 Feb 2026 10:55:31 +0000
ROA not after:            Thu 04 Feb 2027 11:00:31 +0000
asID:                     266400
IP address blocks:        2804:3744::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl
                          rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 12:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d1:b8:81:d6:75:44:6b:ef:2f:76:04:93:d9:d5:3f:72:3e:10:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A653D5055FC338B089E2C732382682788F082F11
        Validity
            Not Before: Feb  5 10:55:31 2026 GMT
            Not After : Feb  4 11:00:31 2027 GMT
        Subject: CN=C0127892246870609E6D182C892D0A4C6879FCF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:7c:c2:a3:89:67:89:63:7d:a7:f9:f6:88:
                    6b:8a:9e:0c:ef:03:51:d2:9f:88:91:53:74:bc:f4:
                    a5:4b:a1:37:5f:22:06:c2:aa:58:a5:a1:f0:8a:d4:
                    7c:12:83:ba:c4:71:06:15:8f:90:18:9e:ed:3e:ab:
                    44:29:84:0c:a8:b8:53:c1:4d:ea:b3:e7:b3:d1:cc:
                    bc:95:4d:85:36:33:1b:6f:c4:22:17:bb:2d:aa:e3:
                    29:58:9f:ab:04:0a:70:7a:9a:60:66:15:2c:b9:18:
                    ac:0b:43:73:d5:38:27:77:66:d1:dd:88:32:66:4f:
                    4e:19:1c:5b:c4:78:13:6d:22:fd:e8:9d:16:d5:c6:
                    5b:40:bc:47:65:49:e7:3e:a4:90:1a:47:fc:ab:ea:
                    fc:5d:62:15:da:a9:ba:fb:e7:a9:4b:28:ce:51:13:
                    81:4d:d4:46:68:0f:f1:97:4d:56:c0:4b:ae:95:80:
                    d0:7a:8b:6f:62:6d:05:f0:77:0f:cb:58:e6:91:8f:
                    42:5b:cd:c9:90:60:7f:06:22:bf:a7:17:5a:6b:24:
                    5a:3b:51:ed:65:30:9c:72:c2:74:fd:1b:67:c9:67:
                    f0:46:67:1a:25:18:7e:fe:66:cd:b3:05:f5:da:96:
                    7d:50:92:a5:e2:42:86:55:82:7e:3a:fb:54:05:19:
                    85:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:12:78:92:24:68:70:60:9E:6D:18:2C:89:2D:0A:4C:68:79:FC:F7
            X509v3 Authority Key Identifier:
                keyid:A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/323830343a333734343a3a2f33322d313238203d3e20323636343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3744::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:f6:ad:54:22:e5:32:05:46:9c:41:2c:66:89:9f:f9:94:de:
         6b:60:57:b9:36:98:5b:51:a5:8e:ba:74:3f:d7:bb:c8:fe:7b:
         16:9e:b4:da:1e:45:6a:2a:7c:f8:1b:74:14:ed:86:a3:c0:17:
         1a:81:f0:96:64:7f:b1:70:05:e6:6d:96:3f:4c:8c:7b:95:d1:
         d4:50:80:00:69:97:42:f8:79:65:a0:39:78:56:52:30:85:19:
         57:f0:28:2c:b7:29:de:26:c8:50:e2:d3:58:0b:35:4e:b9:97:
         b8:0b:bd:a2:6b:f4:2a:9d:f2:2d:e1:77:30:ab:83:ea:68:9e:
         19:9a:f4:79:9d:a2:d4:dd:18:39:17:24:30:d5:7b:e1:8b:65:
         6e:96:2b:cd:f7:c6:50:1a:20:82:8d:bb:be:65:47:ef:72:ad:
         4b:6a:ba:97:0e:24:c4:4f:e0:49:11:c5:a6:d2:df:6f:87:33:
         b4:d3:bd:b9:69:3f:b7:58:f0:a5:5a:8a:ce:af:44:3b:87:34:
         e8:4a:bf:35:f4:4e:b4:d3:dd:a1:66:a6:5a:52:65:bd:df:6c:
         2b:49:0c:ee:af:7a:cd:35:c7:76:fe:99:b4:97:fa:6c:a0:0c:
         06:bb:e3:07:7c:c6:53:23:8d:34:47:1f:1d:9c:df:46:9e:b9:
         81:30:9f:18
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUF9G4gdZ1RGvvL3YEk9nVP3I+ENwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY1M0Q1MDU1RkMzMzhCMDg5RTJDNzMyMzgyNjgyNzg4
RjA4MkYxMTAeFw0yNjAyMDUxMDU1MzFaFw0yNzAyMDQxMTAwMzFaMDMxMTAvBgNV
BAMTKEMwMTI3ODkyMjQ2ODcwNjA5RTZEMTgyQzg5MkQwQTRDNjg3OUZDRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7oXzCo4lniWN9p/n2iGuKngzv
A1HSn4iRU3S89KVLoTdfIgbCqlilofCK1HwSg7rEcQYVj5AYnu0+q0QphAyouFPB
Teqz57PRzLyVTYU2MxtvxCIXuy2q4ylYn6sECnB6mmBmFSy5GKwLQ3PVOCd3ZtHd
iDJmT04ZHFvEeBNtIv3onRbVxltAvEdlSec+pJAaR/yr6vxdYhXaqbr756lLKM5R
E4FN1EZoD/GXTVbAS66VgNB6i29ibQXwdw/LWOaRj0JbzcmQYH8GIr+nF1prJFo7
Ue1lMJxywnT9G2fJZ/BGZxolGH7+Zs2zBfXaln1QkqXiQoZVgn46+1QFGYWVAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUwBJ4kiRocGCebRgsiS0KTGh5/PcwHwYDVR0j
BBgwFoAUplPVBV/DOLCJ4scyOCaCeI8ILxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0J2QmNLODNqZkttdGVVWmhKS3FnN1B0a2R4N1h0TnFGZ0RqNGI0cmdv
aXgvMS9BNjUzRDUwNTVGQzMzOEIwODlFMkM3MzIzODI2ODI3ODhGMDgyRjExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2NTNENTA1NUZDMzM4QjA4
OUUyQzczMjM4MjY4Mjc4OEYwODJGMTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NCdkJjSzgzamZLbXRlVVpoSktxZzdQdGtkeDdYdE5xRmdEajRiNHJnb2l4LzEv
MzIzODMwMzQzYTMzMzczNDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzNDMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDdEMA0GCSqGSIb3DQEBCwUAA4IBAQCj9q1U
IuUyBUacQSxmiZ/5lN5rYFe5NphbUaWOunQ/17vI/nsWnrTaHkVqKnz4G3QU7Yaj
wBcagfCWZH+xcAXmbZY/TIx7ldHUUIAAaZdC+HlloDl4VlIwhRlX8CgstyneJshQ
4tNYCzVOuZe4C72ia/QqnfIt4Xcwq4PqaJ4ZmvR5naLU3Rg5FyQw1Xvhi2VulivN
98ZQGiCCjbu+ZUfvcq1LarqXDiTET+BJEcWm0t9vhzO00725aT+3WPClWorOr0Q7
hzToSr819E60092hZqZaUmW932wrSQzur3rNNcd2/pm0l/psoAwGu+MHfMZTI400
Rx8dnN9GnrmBMJ8Y
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:17:19 2026 by rpki-client