Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/323830343a323739633a3a2f33322d313238203d3e20323633393133.roa
File:                     323830343a323739633a3a2f33322d313238203d3e20323633393133.roa (raw, json)
Hash identifier:          TZ7t9yRt6nYqnrU57K9fhiYScA6XfbXu+v9COLg47bY=
Subject key identifier:   06:C6:EB:58:CE:96:CD:55:36:DA:CD:12:14:59:AB:79:49:E4:1A:68
Certificate issuer:       /CN=EC28538427BF2A4CA218209DB9A2008B4E587ABA
Certificate serial:       55E9C81F526718230E3937DD0B9A1C9236D013A5
Authority key identifier: EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/323830343a323739633a3a2f33322d313238203d3e20323633393133.roa
Signing time:             Fri 27 Feb 2026 02:35:54 +0000
ROA not before:           Fri 27 Feb 2026 02:30:54 +0000
ROA not after:            Fri 26 Feb 2027 02:35:54 +0000
asID:                     263913
IP address blocks:        2804:279c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl
                          rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 22:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e9:c8:1f:52:67:18:23:0e:39:37:dd:0b:9a:1c:92:36:d0:13:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC28538427BF2A4CA218209DB9A2008B4E587ABA
        Validity
            Not Before: Feb 27 02:30:54 2026 GMT
            Not After : Feb 26 02:35:54 2027 GMT
        Subject: CN=06C6EB58CE96CD5536DACD121459AB7949E41A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:85:ed:8c:8b:5e:b0:2d:80:06:bb:7b:e8:9c:
                    a8:07:c1:92:8e:6f:8e:5e:eb:bb:19:57:77:5d:9c:
                    b9:fa:75:f4:86:43:7d:72:c9:67:5a:87:1c:3d:04:
                    ae:ef:e2:9e:00:a7:df:94:c9:51:d3:c7:a0:d8:c5:
                    e5:c0:b5:79:91:0c:7c:2e:e2:1a:01:91:31:df:c4:
                    d1:63:1b:a6:fe:12:43:c3:8e:11:dd:0e:17:f7:f3:
                    9b:02:36:33:ab:a0:9d:4b:23:5b:26:9c:84:ed:4f:
                    83:e4:42:f5:00:96:84:23:43:5f:e3:47:0b:12:d4:
                    39:5a:43:9c:90:eb:29:7b:70:6f:51:3d:ea:d4:4c:
                    e6:74:91:03:11:2d:98:2d:4d:3a:61:1a:3a:b3:d3:
                    6a:3e:7a:c0:d8:83:f2:e2:7a:e7:39:f7:60:e2:34:
                    fe:d1:06:18:29:f0:d3:58:e2:2d:5c:3e:e5:19:af:
                    17:fc:64:28:45:8a:71:2b:54:a6:59:c2:44:7f:af:
                    98:45:db:da:0c:44:ee:ba:2a:b6:ba:5f:df:dc:23:
                    e8:f2:18:cd:9d:14:20:6c:32:a8:98:59:e2:3b:25:
                    18:ea:77:84:36:db:31:f1:1e:63:c4:d8:2f:34:04:
                    85:0b:35:ab:89:f5:23:0d:e5:55:0d:28:1f:1c:12:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C6:EB:58:CE:96:CD:55:36:DA:CD:12:14:59:AB:79:49:E4:1A:68
            X509v3 Authority Key Identifier:
                keyid:EC:28:53:84:27:BF:2A:4C:A2:18:20:9D:B9:A2:00:8B:4E:58:7A:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/EC28538427BF2A4CA218209DB9A2008B4E587ABA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC28538427BF2A4CA218209DB9A2008B4E587ABA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/323830343a323739633a3a2f33322d313238203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:279c::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:51:d3:75:42:98:dc:0a:d6:96:cc:b1:7f:b3:0c:4c:09:b0:
         4b:8c:69:52:d6:b8:d5:1d:eb:99:ae:fa:ba:f6:b6:b7:40:34:
         ac:d6:3b:76:bf:bd:e4:b0:33:c5:fb:5c:fe:3e:b2:21:5b:dc:
         e8:86:de:0b:5a:ec:77:76:bd:2d:4a:60:cd:22:d8:50:58:8e:
         47:2e:68:e4:da:69:4c:58:b2:f9:10:3d:e6:09:85:40:c7:e2:
         18:d1:57:00:4a:bf:48:24:4e:97:ad:1c:6c:09:4a:62:0e:28:
         44:80:0e:60:b2:db:3f:34:eb:7b:0c:25:bc:5d:fd:41:46:38:
         cf:fa:2a:0a:30:f9:9e:51:6d:1d:4d:d1:84:fb:43:49:e0:d1:
         1a:7d:e6:55:62:c7:ad:13:eb:ba:dc:2d:ce:1b:d1:03:24:06:
         f9:df:ac:7e:0c:77:d6:09:a9:36:50:52:a0:98:3a:7f:f9:43:
         b2:80:31:00:ca:b9:11:44:77:30:d0:55:c3:ae:65:b4:9a:a4:
         71:79:91:d1:c7:57:10:c6:c4:e4:15:a0:93:5a:27:01:8a:54:
         80:0d:12:ac:8b:c9:46:13:84:23:07:a7:3d:56:9c:19:50:24:
         de:4e:65:d9:09:83:c8:ad:47:af:6b:65:5e:e1:e3:5c:5b:cf:
         9d:c3:95:6b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUVenIH1JnGCMOOTfdC5ockjbQE6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyODUzODQyN0JGMkE0Q0EyMTgyMDlEQjlBMjAwOEI0
RTU4N0FCQTAeFw0yNjAyMjcwMjMwNTRaFw0yNzAyMjYwMjM1NTRaMDMxMTAvBgNV
BAMTKDA2QzZFQjU4Q0U5NkNENTUzNkRBQ0QxMjE0NTlBQjc5NDlFNDFBNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohe2Mi16wLYAGu3vonKgHwZKO
b45e67sZV3ddnLn6dfSGQ31yyWdahxw9BK7v4p4Ap9+UyVHTx6DYxeXAtXmRDHwu
4hoBkTHfxNFjG6b+EkPDjhHdDhf385sCNjOroJ1LI1smnITtT4PkQvUAloQjQ1/j
RwsS1DlaQ5yQ6yl7cG9RPerUTOZ0kQMRLZgtTTphGjqz02o+esDYg/Lieuc592Di
NP7RBhgp8NNY4i1cPuUZrxf8ZChFinErVKZZwkR/r5hF29oMRO66Kra6X9/cI+jy
GM2dFCBsMqiYWeI7JRjqd4Q22zHxHmPE2C80BIULNauJ9SMN5VUNKB8cEtrJAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUBsbrWM6WzVU22s0SFFmreUnkGmgwHwYDVR0j
BBgwFoAU7ChThCe/KkyiGCCduaIAi05YerowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1dUOWlvM3JtTVBOTWVVdURTdW9kaDR6UWM2V282cktXeDZ4OHFzSGh3
aFcvMC9FQzI4NTM4NDI3QkYyQTRDQTIxODIwOURCOUEyMDA4QjRFNTg3QUJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDMjg1Mzg0MjdCRjJBNENB
MjE4MjA5REI5QTIwMDhCNEU1ODdBQkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NXVDlpbzNybU1QTk1lVXVEU3VvZGg0elFjNldvNnJLV3g2eDhxc0hod2hXLzAv
MzIzODMwMzQzYTMyMzczOTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzOTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCecMA0GCSqGSIb3DQEBCwUAA4IBAQBmUdN1
QpjcCtaWzLF/swxMCbBLjGlS1rjVHeuZrvq69ra3QDSs1jt2v73ksDPF+1z+PrIh
W9zoht4LWux3dr0tSmDNIthQWI5HLmjk2mlMWLL5ED3mCYVAx+IY0VcASr9IJE6X
rRxsCUpiDihEgA5gsts/NOt7DCW8Xf1BRjjP+ioKMPmeUW0dTdGE+0NJ4NEafeZV
YsetE+u63C3OG9EDJAb536x+DHfWCak2UFKgmDp/+UOygDEAyrkRRHcw0FXDrmW0
mqRxeZHRx1cQxsTkFaCTWicBilSADRKsi8lGE4QjB6c9VpwZUCTeTmXZCYPIrUev
a2Ve4eNcW8+dw5Vr
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:02:38 2026 by rpki-client