Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a313530303a3a2f34322d3432203d3e20323733373034.roa
File:                     323830343a386166383a313530303a3a2f34322d3432203d3e20323733373034.roa (raw, json)
Hash identifier:          83JklOF9HZgB1CnW8HEpKUPkspKEFKZ5IrguUaDEtiQ=
Subject key identifier:   50:FA:2E:BD:D8:56:28:32:28:EE:F8:A2:41:46:25:B7:03:E2:DD:F9
Certificate issuer:       /CN=21A1F812DC436FBAF80C04C11B4C6AA40A35A84F
Certificate serial:       301573B45EF16DC0C2E4C206712F958EC65B896A
Authority key identifier: 21:A1:F8:12:DC:43:6F:BA:F8:0C:04:C1:1B:4C:6A:A4:0A:35:A8:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a313530303a3a2f34322d3432203d3e20323733373034.roa
Signing time:             Fri 12 Jun 2026 16:38:50 +0000
ROA not before:           Fri 12 Jun 2026 16:33:50 +0000
ROA not after:            Fri 11 Jun 2027 16:38:50 +0000
asID:                     273704
IP address blocks:        2804:8af8:1500::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.crl
                          rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:15:73:b4:5e:f1:6d:c0:c2:e4:c2:06:71:2f:95:8e:c6:5b:89:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A1F812DC436FBAF80C04C11B4C6AA40A35A84F
        Validity
            Not Before: Jun 12 16:33:50 2026 GMT
            Not After : Jun 11 16:38:50 2027 GMT
        Subject: CN=50FA2EBDD856283228EEF8A2414625B703E2DDF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:42:df:5f:95:24:52:b7:ff:62:ce:b8:3c:
                    f2:f1:76:43:5a:4a:3b:aa:1d:22:1c:99:ee:7f:d5:
                    a3:9f:e9:4c:6e:2e:20:d3:4f:0a:8b:cb:bd:ed:d0:
                    af:5a:a4:dc:00:1e:2e:09:f3:22:48:81:c7:3e:72:
                    97:2d:bd:14:8a:e9:a9:b5:5f:2f:e5:18:ee:aa:39:
                    d1:66:50:21:f6:4e:3b:50:fd:e4:7d:ab:af:9a:c4:
                    23:10:5a:37:3a:ba:25:c3:c9:c6:61:e9:e7:82:42:
                    6e:31:9e:33:4b:d6:1d:28:ac:6b:99:b1:30:54:53:
                    90:b3:a5:32:e9:9d:ad:ce:29:be:6a:57:77:f9:37:
                    44:e2:8d:39:3f:8c:c2:1f:b7:dd:2d:92:31:a4:97:
                    f0:2b:a5:0b:86:89:2a:32:7c:a8:d5:17:8e:6e:78:
                    6e:8a:0a:84:3c:51:75:25:9d:3b:e4:c0:ba:5e:25:
                    6d:53:77:fb:12:2b:c3:dd:3b:bc:ca:ad:65:5e:7a:
                    b6:c3:4e:c2:1b:20:10:44:83:45:90:c3:db:41:9a:
                    1f:a6:47:fc:a6:eb:2d:3c:55:fa:ba:43:6a:05:bc:
                    5f:9f:81:46:26:9b:e2:e6:fa:1a:5b:47:c2:fb:f9:
                    d2:73:30:0a:13:a7:47:1c:35:1d:bb:3e:dd:9c:ee:
                    8c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FA:2E:BD:D8:56:28:32:28:EE:F8:A2:41:46:25:B7:03:E2:DD:F9
            X509v3 Authority Key Identifier:
                keyid:21:A1:F8:12:DC:43:6F:BA:F8:0C:04:C1:1B:4C:6A:A4:0A:35:A8:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21A1F812DC436FBAF80C04C11B4C6AA40A35A84F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a313530303a3a2f34322d3432203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8:1500::/42

    Signature Algorithm: sha256WithRSAEncryption
         71:f5:0c:de:02:e8:d2:00:90:05:36:12:e3:26:03:79:86:b1:
         fd:34:46:83:24:bb:ed:de:ca:b5:a8:6e:f8:1f:94:74:b3:93:
         51:77:ab:3c:62:d7:15:2b:c3:1f:05:9d:61:1c:0b:13:45:ba:
         da:0c:dc:11:ac:21:54:46:58:b5:06:d7:45:62:1a:fd:81:d8:
         6d:6d:bd:10:93:c5:ae:81:02:23:93:29:47:51:e8:db:61:46:
         47:e8:1f:76:f7:db:4e:e5:79:81:55:b0:c9:bd:29:15:8c:f6:
         2e:9d:d1:3b:6d:4c:e0:fc:de:53:c4:07:c8:16:7c:34:dc:bf:
         74:2b:d1:1b:32:d3:a1:96:86:07:85:a2:05:bf:07:c7:0b:da:
         01:08:34:4f:8a:46:d9:dc:24:6f:23:bb:67:2d:b1:a0:35:5a:
         1c:8a:67:e3:b8:83:a4:4b:93:19:d1:a0:7a:73:4e:78:4d:77:
         66:02:30:a3:30:a9:5c:61:43:6f:a8:3b:44:db:38:70:82:56:
         fa:e6:1d:4d:d7:3c:a4:64:76:e5:8e:04:b7:b6:79:23:49:3b:
         b3:07:b6:a6:8f:20:40:af:ca:23:6d:ae:a3:f2:1a:aa:e3:ef:
         26:6f:bc:ee:3f:80:b9:2d:50:fa:0b:b0:d6:ae:40:df:aa:ee:
         f5:b7:dc:02
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUMBVztF7xbcDC5MIGcS+VjsZbiWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBMUY4MTJEQzQzNkZCQUY4MEMwNEMxMUI0QzZBQTQw
QTM1QTg0RjAeFw0yNjA2MTIxNjMzNTBaFw0yNzA2MTExNjM4NTBaMDMxMTAvBgNV
BAMTKDUwRkEyRUJERDg1NjI4MzIyOEVFRjhBMjQxNDYyNUI3MDNFMkRERjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGskLfX5UkUrf/Ys64PPLxdkNa
SjuqHSIcme5/1aOf6UxuLiDTTwqLy73t0K9apNwAHi4J8yJIgcc+cpctvRSK6am1
Xy/lGO6qOdFmUCH2TjtQ/eR9q6+axCMQWjc6uiXDycZh6eeCQm4xnjNL1h0orGuZ
sTBUU5CzpTLpna3OKb5qV3f5N0TijTk/jMIft90tkjGkl/ArpQuGiSoyfKjVF45u
eG6KCoQ8UXUlnTvkwLpeJW1Td/sSK8PdO7zKrWVeerbDTsIbIBBEg0WQw9tBmh+m
R/ym6y08Vfq6Q2oFvF+fgUYmm+Lm+hpbR8L7+dJzMAoTp0ccNR27Pt2c7oydAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUUPouvdhWKDIo7viiQUYltwPi3fkwHwYDVR0j
BBgwFoAUIaH4EtxDb7r4DATBG0xqpAo1qE8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2o5WW5jSkZtb3hqNVBLeEpDMURueHNzS1dKOEFoWUpZM0xaa0VLQkdW
WGovMC8yMUExRjgxMkRDNDM2RkJBRjgwQzA0QzExQjRDNkFBNDBBMzVBODRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQTFGODEyREM0MzZGQkFG
ODBDMDRDMTFCNEM2QUE0MEEzNUE4NEYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NqOVluY0pGbW94ajVQS3hKQzFEbnhzc0tXSjhBaFlKWTNMWmtFS0JHVlhqLzAv
MzIzODMwMzQzYTM4NjE2NjM4M2EzMTM1MzAzMDNhM2EyZjM0MzIyZDM0MzIyMDNk
M2UyMDMyMzczMzM3MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBigEivgVADANBgkqhkiG9w0BAQsF
AAOCAQEAcfUM3gLo0gCQBTYS4yYDeYax/TRGgyS77d7Ktahu+B+UdLOTUXerPGLX
FSvDHwWdYRwLE0W62gzcEawhVEZYtQbXRWIa/YHYbW29EJPFroECI5MpR1Ho22FG
R+gfdvfbTuV5gVWwyb0pFYz2Lp3RO21M4PzeU8QHyBZ8NNy/dCvRGzLToZaGB4Wi
Bb8HxwvaAQg0T4pG2dwkbyO7Zy2xoDVaHIpn47iDpEuTGdGgenNOeE13ZgIwozCp
XGFDb6g7RNs4cIJW+uYdTdc8pGR25Y4Et7Z5I0k7swe2po8gQK/KI22uo/IaquPv
Jm+87j+AuS1Q+guw1q5A36ru9bfcAg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:07:55 2026 by rpki-client