Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a343030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a343030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          YV2IWmGc1Snx8gKbOPzAQxTchHya4mkFQB3QXq4UNeM=
Subject key identifier:   C0:DE:40:A4:A6:5C:C4:06:4A:7F:34:98:99:A8:1A:7C:3D:56:89:78
Certificate issuer:       /CN=C4B5041C433317D641803C99F33EBAC111F4589E
Certificate serial:       064890CBB2AB5CEDC0DB49D37D335803FB1864C1
Authority key identifier: C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a343030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Wed 15 Apr 2026 17:59:28 +0000
ROA not before:           Wed 15 Apr 2026 17:54:28 +0000
ROA not after:            Wed 14 Apr 2027 17:59:28 +0000
asID:                     264425
IP address blocks:        2804:1e60:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:48:90:cb:b2:ab:5c:ed:c0:db:49:d3:7d:33:58:03:fb:18:64:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B5041C433317D641803C99F33EBAC111F4589E
        Validity
            Not Before: Apr 15 17:54:28 2026 GMT
            Not After : Apr 14 17:59:28 2027 GMT
        Subject: CN=C0DE40A4A65CC4064A7F349899A81A7C3D568978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:27:f2:65:4c:e0:66:0c:72:c5:ce:3e:37:
                    4c:57:d0:2b:47:90:a1:52:b4:e9:33:47:7e:1b:69:
                    0d:3b:a0:4c:5a:6b:04:e9:11:e6:be:94:8e:08:18:
                    e2:c9:98:83:3e:66:eb:94:7d:14:e2:f1:fb:16:cd:
                    77:e3:67:0e:0f:ef:b9:f5:a6:88:b1:8a:40:9b:7e:
                    04:5b:ec:8d:a1:fe:90:14:e7:a4:80:8c:c4:02:87:
                    30:6f:d5:69:d4:d0:11:0f:f1:4f:f5:e2:55:25:bc:
                    c2:a7:bd:b4:2b:46:b5:8d:c6:b4:3a:4a:ed:ae:06:
                    79:7b:7a:cd:f1:5c:4b:4e:e9:d3:66:bd:12:48:c3:
                    b6:1a:ce:0e:38:50:6a:fa:1d:c1:f4:bd:f4:ee:af:
                    f5:6f:e8:34:d1:90:36:62:62:45:2f:3e:dc:92:36:
                    b2:f6:15:f9:f2:11:5e:c5:02:d4:af:19:a1:99:91:
                    8e:ac:eb:d2:35:ae:88:a8:49:5c:e2:ce:81:55:76:
                    85:b4:62:92:15:12:93:ed:a6:ed:20:21:ae:db:56:
                    74:aa:4e:b0:b0:27:88:fc:82:8c:97:dc:fe:00:57:
                    d1:52:55:32:15:5a:b7:28:b7:6b:dc:f8:93:a1:f3:
                    a9:78:c9:1b:8a:f4:11:03:d5:84:de:23:bf:0a:02:
                    cd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DE:40:A4:A6:5C:C4:06:4A:7F:34:98:99:A8:1A:7C:3D:56:89:78
            X509v3 Authority Key Identifier:
                keyid:C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a343030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7c:5b:e7:de:c2:ab:d0:13:f1:2f:34:ae:85:42:82:43:69:0a:
         ac:d7:5e:54:ea:c4:54:c5:c5:db:a4:3c:42:a1:a2:09:12:a4:
         66:53:85:1a:9b:09:62:84:ca:42:a1:b8:5c:d4:35:aa:9d:84:
         26:c0:95:bf:a0:2d:b9:4b:e4:9a:f9:18:90:1a:f2:aa:5c:05:
         c6:9b:ae:76:38:d4:4d:a4:8a:e4:11:8d:50:17:8c:ab:ce:dd:
         ed:97:af:d6:74:e8:f4:59:fd:79:3b:fa:f4:63:93:07:86:1e:
         82:0f:62:07:b5:70:c6:b6:60:c1:5e:d6:ee:e3:ac:32:79:08:
         f1:8c:61:69:32:36:91:73:a2:4b:f3:e0:b8:2e:cb:7d:9d:16:
         b0:22:c1:2f:bf:59:23:45:f1:f5:51:fc:00:f4:6a:18:08:dc:
         87:0c:f8:c3:a4:0e:21:1d:54:6c:1e:83:25:54:ac:1a:d3:9a:
         4d:6c:c5:7c:74:47:e0:ff:7c:48:56:d1:c8:0d:37:1d:77:05:
         21:41:d7:b3:ab:3f:bb:e8:91:03:4a:2f:2e:03:28:04:25:ee:
         9b:17:1e:1c:92:7e:74:10:1b:db:11:47:95:5e:cf:43:9c:73:
         a5:02:c0:de:d6:6c:5d:bb:c1:0f:14:6e:b4:ac:36:4a:2b:9c:
         82:93:35:5e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBkiQy7KrXO3A20nTfTNYA/sYZMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRCNTA0MUM0MzMzMTdENjQxODAzQzk5RjMzRUJBQzEx
MUY0NTg5RTAeFw0yNjA0MTUxNzU0MjhaFw0yNzA0MTQxNzU5MjhaMDMxMTAvBgNV
BAMTKEMwREU0MEE0QTY1Q0M0MDY0QTdGMzQ5ODk5QTgxQTdDM0Q1Njg5NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2dCfyZUzgZgxyxc4+N0xX0CtH
kKFStOkzR34baQ07oExaawTpEea+lI4IGOLJmIM+ZuuUfRTi8fsWzXfjZw4P77n1
poixikCbfgRb7I2h/pAU56SAjMQChzBv1WnU0BEP8U/14lUlvMKnvbQrRrWNxrQ6
Su2uBnl7es3xXEtO6dNmvRJIw7Yazg44UGr6HcH0vfTur/Vv6DTRkDZiYkUvPtyS
NrL2FfnyEV7FAtSvGaGZkY6s69I1roioSVzizoFVdoW0YpIVEpPtpu0gIa7bVnSq
TrCwJ4j8goyX3P4AV9FSVTIVWrcot2vc+JOh86l4yRuK9BED1YTeI78KAs1jAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUwN5ApKZcxAZKfzSYmagafD1WiXgwHwYDVR0j
BBgwFoAUxLUEHEMzF9ZBgDyZ8z66wRH0WJ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0dSTExtTmg3TjJweGdKNExvWDhHdDFiY2czeXFKV1ZSNUVxNUxYbVpL
NGQvMC9DNEI1MDQxQzQzMzMxN0Q2NDE4MDNDOTlGMzNFQkFDMTExRjQ1ODlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0QjUwNDFDNDMzMzE3RDY0
MTgwM0M5OUYzM0VCQUMxMTFGNDU4OUUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NHUkxMbU5oN04ycHhnSjRMb1g4R3QxYmNnM3lxSldWUjVFcTVMWG1aSzRkLzAv
MzIzODMwMzQzYTMxNjUzNjMwM2EzNDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEHmBAMA0GCSqGSIb3DQEBCwUA
A4IBAQB8W+fewqvQE/EvNK6FQoJDaQqs115U6sRUxcXbpDxCoaIJEqRmU4Uamwli
hMpCobhc1DWqnYQmwJW/oC25S+Sa+RiQGvKqXAXGm652ONRNpIrkEY1QF4yrzt3t
l6/WdOj0Wf15O/r0Y5MHhh6CD2IHtXDGtmDBXtbu46wyeQjxjGFpMjaRc6JL8+C4
Lst9nRawIsEvv1kjRfH1UfwA9GoYCNyHDPjDpA4hHVRsHoMlVKwa05pNbMV8dEfg
/3xIVtHIDTcddwUhQdezqz+76JEDSi8uAygEJe6bFx4ckn50EBvbEUeVXs9DnHOl
AsDe1mxdu8EPFG60rDZKK5yCkzVe
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:46:15 2026 by rpki-client