Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a613030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a613030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          riC5FECCHW/IZZmmsUxiEnU/UwQERdqDmDMBCppt0M8=
Subject key identifier:   05:A5:2A:C7:02:31:11:7A:47:A8:76:2F:C2:6B:E5:0D:9B:42:72:3F
Certificate issuer:       /CN=C4B5041C433317D641803C99F33EBAC111F4589E
Certificate serial:       1A0C88B86E15582BCAAC73345DF6CE592B6D5B33
Authority key identifier: C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a613030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Wed 15 Apr 2026 17:59:26 +0000
ROA not before:           Wed 15 Apr 2026 17:54:26 +0000
ROA not after:            Wed 14 Apr 2027 17:59:26 +0000
asID:                     264425
IP address blocks:        2804:1e60:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0c:88:b8:6e:15:58:2b:ca:ac:73:34:5d:f6:ce:59:2b:6d:5b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B5041C433317D641803C99F33EBAC111F4589E
        Validity
            Not Before: Apr 15 17:54:26 2026 GMT
            Not After : Apr 14 17:59:26 2027 GMT
        Subject: CN=05A52AC70231117A47A8762FC26BE50D9B42723F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:c4:62:cb:94:0e:e1:49:a2:8e:c2:bd:54:
                    fe:81:b0:ee:a4:12:38:b5:86:0b:63:be:11:5f:84:
                    cc:da:b2:59:b0:ec:7e:40:a2:8c:76:a4:33:68:1a:
                    ff:ba:1a:02:97:2c:92:0a:83:e5:61:15:7c:8e:49:
                    27:5d:07:55:87:5c:28:e0:fc:2b:b6:73:c5:ff:74:
                    87:a5:71:6f:b8:9e:e8:b3:7d:53:6c:49:91:37:f2:
                    8d:1a:31:f3:71:9a:95:c2:3a:6b:5f:b6:9c:ef:92:
                    04:08:69:bc:79:7e:4f:39:a4:14:6f:43:df:ce:c5:
                    5a:07:57:38:76:c2:a8:89:72:7b:ed:11:84:be:5c:
                    6f:fd:3b:9f:61:8a:1c:0f:96:56:80:fe:a6:3b:b6:
                    b3:7b:f5:f9:39:01:b8:66:e1:d0:1a:22:10:13:cc:
                    6e:52:e8:cd:b1:9e:1b:8a:31:b9:a4:c8:0d:22:36:
                    ea:3c:bc:5a:72:e5:08:d8:18:c4:be:95:ad:77:7e:
                    ae:81:c1:6c:4f:28:41:e8:84:bb:e9:25:06:93:ff:
                    78:66:6f:2d:3e:9b:e3:dc:81:8b:e4:e7:94:89:3e:
                    9b:f3:45:79:06:cd:75:e7:b0:33:94:18:79:9a:21:
                    94:0b:4c:65:ff:d0:b7:64:b2:ab:d5:c1:b4:9e:69:
                    07:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A5:2A:C7:02:31:11:7A:47:A8:76:2F:C2:6B:E5:0D:9B:42:72:3F
            X509v3 Authority Key Identifier:
                keyid:C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a613030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         72:01:0a:05:d8:5f:0c:fb:7b:8c:ac:77:0f:86:b8:de:15:e0:
         3e:20:06:a4:17:2c:23:71:58:53:96:9d:e7:50:91:51:20:30:
         b3:7e:d6:ac:89:48:2f:58:8b:fd:ea:df:eb:9f:d2:f2:d3:26:
         40:c0:1d:85:51:ba:80:e4:fb:42:63:73:f0:f2:0b:3b:4d:26:
         e3:97:11:9e:50:69:cd:b9:ff:99:2f:09:a8:42:21:d3:51:45:
         40:87:dc:58:2c:bb:9c:46:43:d5:e4:ca:77:c9:7e:1d:31:e3:
         e6:63:3d:8c:c6:1a:4d:71:bf:37:38:cb:80:5e:83:f1:23:28:
         cc:64:32:08:e4:fb:20:6b:b6:1a:90:3c:1c:f0:99:72:49:a5:
         2f:74:c0:51:20:97:0c:63:d7:f7:2b:c1:8c:26:13:04:73:04:
         76:cb:cf:d0:52:64:8c:ae:af:b8:1e:6b:97:42:10:5d:e7:85:
         96:06:5b:37:a4:86:10:f7:55:55:46:c1:d4:5b:ef:5f:d4:67:
         2a:57:7e:e5:8a:4c:12:3d:d2:10:7e:49:b3:d6:27:cd:d5:96:
         a2:4d:b3:12:d6:2d:f7:55:fa:99:c2:51:85:55:02:5b:b4:36:
         3a:ef:20:3a:ce:f4:3a:a3:40:bd:21:97:ae:2f:4d:e4:c5:a8:
         b4:eb:91:76
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGgyIuG4VWCvKrHM0XfbOWSttWzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRCNTA0MUM0MzMzMTdENjQxODAzQzk5RjMzRUJBQzEx
MUY0NTg5RTAeFw0yNjA0MTUxNzU0MjZaFw0yNzA0MTQxNzU5MjZaMDMxMTAvBgNV
BAMTKDA1QTUyQUM3MDIzMTExN0E0N0E4NzYyRkMyNkJFNTBEOUI0MjcyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2eMRiy5QO4UmijsK9VP6BsO6k
Eji1hgtjvhFfhMzaslmw7H5Aoox2pDNoGv+6GgKXLJIKg+VhFXyOSSddB1WHXCjg
/Cu2c8X/dIelcW+4nuizfVNsSZE38o0aMfNxmpXCOmtftpzvkgQIabx5fk85pBRv
Q9/OxVoHVzh2wqiJcnvtEYS+XG/9O59hihwPllaA/qY7trN79fk5Abhm4dAaIhAT
zG5S6M2xnhuKMbmkyA0iNuo8vFpy5QjYGMS+la13fq6BwWxPKEHohLvpJQaT/3hm
by0+m+PcgYvk55SJPpvzRXkGzXXnsDOUGHmaIZQLTGX/0LdksqvVwbSeaQddAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUBaUqxwIxEXpHqHYvwmvlDZtCcj8wHwYDVR0j
BBgwFoAUxLUEHEMzF9ZBgDyZ8z66wRH0WJ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0dSTExtTmg3TjJweGdKNExvWDhHdDFiY2czeXFKV1ZSNUVxNUxYbVpL
NGQvMC9DNEI1MDQxQzQzMzMxN0Q2NDE4MDNDOTlGMzNFQkFDMTExRjQ1ODlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0QjUwNDFDNDMzMzE3RDY0
MTgwM0M5OUYzM0VCQUMxMTFGNDU4OUUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NHUkxMbU5oN04ycHhnSjRMb1g4R3QxYmNnM3lxSldWUjVFcTVMWG1aSzRkLzAv
MzIzODMwMzQzYTMxNjUzNjMwM2E2MTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEHmCgMA0GCSqGSIb3DQEBCwUA
A4IBAQByAQoF2F8M+3uMrHcPhrjeFeA+IAakFywjcVhTlp3nUJFRIDCzftasiUgv
WIv96t/rn9Ly0yZAwB2FUbqA5PtCY3Pw8gs7TSbjlxGeUGnNuf+ZLwmoQiHTUUVA
h9xYLLucRkPV5Mp3yX4dMePmYz2MxhpNcb83OMuAXoPxIyjMZDII5Psga7YakDwc
8JlySaUvdMBRIJcMY9f3K8GMJhMEcwR2y8/QUmSMrq+4HmuXQhBd54WWBls3pIYQ
91VVRsHUW+9f1GcqV37likwSPdIQfkmz1ifN1ZaiTbMS1i33VfqZwlGFVQJbtDY6
7yA6zvQ6o0C9IZeuL03kxai065F2
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:46:14 2026 by rpki-client