Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/323830343a366132343a3a2f33322d313238203d3e20323730333135.roa
File:                     323830343a366132343a3a2f33322d313238203d3e20323730333135.roa (raw, json)
Hash identifier:          4z/gPZ4MkjvPR/eCCNQa/Ugo0zirY7gicXBgElrF+qE=
Subject key identifier:   92:BF:70:00:AF:16:6E:16:77:A3:E5:88:84:24:4F:59:4A:90:FC:2D
Certificate issuer:       /CN=F94D5F9934BDAEED4E3E42FD37544823921E5101
Certificate serial:       209BB2A2638E77D38C2328977A631DA1EF9F4E2C
Authority key identifier: F9:4D:5F:99:34:BD:AE:ED:4E:3E:42:FD:37:54:48:23:92:1E:51:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F94D5F9934BDAEED4E3E42FD37544823921E5101.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/323830343a366132343a3a2f33322d313238203d3e20323730333135.roa
Signing time:             Fri 29 May 2026 18:46:56 +0000
ROA not before:           Fri 29 May 2026 18:41:56 +0000
ROA not after:            Fri 28 May 2027 18:46:56 +0000
asID:                     270315
IP address blocks:        2804:6a24::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/F94D5F9934BDAEED4E3E42FD37544823921E5101.crl
                          rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/F94D5F9934BDAEED4E3E42FD37544823921E5101.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F94D5F9934BDAEED4E3E42FD37544823921E5101.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 11:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9b:b2:a2:63:8e:77:d3:8c:23:28:97:7a:63:1d:a1:ef:9f:4e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F94D5F9934BDAEED4E3E42FD37544823921E5101
        Validity
            Not Before: May 29 18:41:56 2026 GMT
            Not After : May 28 18:46:56 2027 GMT
        Subject: CN=92BF7000AF166E1677A3E58884244F594A90FC2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a2:51:04:4f:94:51:e7:bb:75:53:fa:78:8b:
                    04:b5:a9:22:6c:e8:01:61:a1:67:0f:b5:30:5a:dd:
                    55:fc:c5:77:44:cd:16:0a:d7:1f:db:30:56:89:17:
                    98:9c:76:20:e9:c6:e6:7a:80:3a:13:9a:4b:54:ca:
                    82:e5:de:e8:e6:51:c1:c8:35:f3:a9:ec:24:19:81:
                    bb:e0:8a:03:47:2c:33:54:8a:59:81:3f:1f:cc:a7:
                    70:44:46:da:92:6e:79:2b:46:a3:5c:96:59:6b:cb:
                    da:dc:c5:29:7f:25:43:ba:b1:c1:fd:9d:f2:72:4d:
                    20:ac:0a:0b:a5:8b:55:d8:fc:13:e9:b6:f6:46:3c:
                    b6:a6:c2:35:ea:26:33:78:c2:a7:a9:e1:57:7d:d2:
                    53:d5:b6:f2:e9:fb:ad:f1:e1:15:3b:f0:60:f0:1b:
                    e0:2c:2c:f9:d4:df:2b:a8:13:0e:c5:09:7f:bf:57:
                    4c:a3:5c:2f:1e:1a:7c:5c:a7:3c:5c:d5:e3:18:86:
                    2b:db:2b:c7:52:7b:f6:07:07:08:3c:a2:25:8d:3b:
                    aa:4f:93:ce:f5:26:9c:7b:4e:28:d7:30:4d:73:fd:
                    bb:36:b4:f6:45:9d:02:ab:73:e8:67:84:71:41:06:
                    b8:10:e2:b9:b6:56:bd:99:23:38:ec:67:08:23:86:
                    57:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BF:70:00:AF:16:6E:16:77:A3:E5:88:84:24:4F:59:4A:90:FC:2D
            X509v3 Authority Key Identifier:
                keyid:F9:4D:5F:99:34:BD:AE:ED:4E:3E:42:FD:37:54:48:23:92:1E:51:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/F94D5F9934BDAEED4E3E42FD37544823921E5101.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F94D5F9934BDAEED4E3E42FD37544823921E5101.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/323830343a366132343a3a2f33322d313238203d3e20323730333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a24::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:fb:56:14:ee:14:8f:2a:9e:83:8a:81:73:b9:22:26:77:b3:
         f7:3e:4e:45:85:5a:fc:59:45:a0:ac:ff:2e:ba:ad:df:7e:41:
         28:9e:7e:0f:63:81:50:7d:84:51:bb:b5:64:ca:de:97:08:3e:
         0a:8f:a4:61:34:fd:91:c7:1f:ca:92:0a:96:c9:9a:94:a9:11:
         1d:46:f8:10:86:4d:ae:8f:28:27:15:d2:35:f9:21:a2:aa:df:
         1b:b5:45:3f:60:d2:cc:ce:5d:d5:72:18:cf:1a:c3:8c:c3:86:
         3f:5d:4b:03:13:f9:15:86:bb:3b:eb:4a:71:10:f3:c4:00:ae:
         bf:a8:63:81:49:29:11:fc:ef:c7:91:aa:29:4a:f4:f7:ac:ac:
         35:d0:38:1d:27:b1:4f:32:c2:fb:c8:48:e5:13:72:d2:fa:04:
         35:0c:71:9f:92:22:57:c2:67:5d:b2:93:cd:b0:22:fa:36:7e:
         11:48:c1:b9:3a:98:7f:36:e1:b3:a9:81:d2:6f:24:cf:3c:8c:
         d1:08:32:f9:3a:b0:d3:54:97:9f:9f:05:2b:73:e1:ca:b1:79:
         50:26:07:d1:c9:9f:21:fb:f7:db:86:d5:a0:7a:3f:fb:4a:d0:
         4d:13:70:60:90:ec:ca:c2:cf:73:ba:3d:5c:67:d1:4c:36:be:
         17:0b:da:3a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUIJuyomOOd9OMIyiXemMdoe+fTiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk0RDVGOTkzNEJEQUVFRDRFM0U0MkZEMzc1NDQ4MjM5
MjFFNTEwMTAeFw0yNjA1MjkxODQxNTZaFw0yNzA1MjgxODQ2NTZaMDMxMTAvBgNV
BAMTKDkyQkY3MDAwQUYxNjZFMTY3N0EzRTU4ODg0MjQ0RjU5NEE5MEZDMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUolEET5RR57t1U/p4iwS1qSJs
6AFhoWcPtTBa3VX8xXdEzRYK1x/bMFaJF5icdiDpxuZ6gDoTmktUyoLl3ujmUcHI
NfOp7CQZgbvgigNHLDNUilmBPx/Mp3BERtqSbnkrRqNclllry9rcxSl/JUO6scH9
nfJyTSCsCguli1XY/BPptvZGPLamwjXqJjN4wqep4Vd90lPVtvLp+63x4RU78GDw
G+AsLPnU3yuoEw7FCX+/V0yjXC8eGnxcpzxc1eMYhivbK8dSe/YHBwg8oiWNO6pP
k871Jpx7TijXME1z/bs2tPZFnQKrc+hnhHFBBrgQ4rm2Vr2ZIzjsZwgjhlclAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUkr9wAK8WbhZ3o+WIhCRPWUqQ/C0wHwYDVR0j
BBgwFoAU+U1fmTS9ru1OPkL9N1RII5IeUQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHFGSnZjV01TdGR1WDlxOExHeWRlNUVkUUNXeEF1R2Z6MjJBOFN0cXNO
NTQvMC9GOTRENUY5OTM0QkRBRUVENEUzRTQyRkQzNzU0NDgyMzkyMUU1MTAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5NEQ1Rjk5MzRCREFFRUQ0
RTNFNDJGRDM3NTQ0ODIzOTIxRTUxMDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RxRkp2Y1dNU3RkdVg5cThMR3lkZTVFZFFDV3hBdUdmejIyQThTdHFzTjU0LzAv
MzIzODMwMzQzYTM2NjEzMjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzMzMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGokMA0GCSqGSIb3DQEBCwUAA4IBAQCq+1YU
7hSPKp6DioFzuSImd7P3Pk5FhVr8WUWgrP8uuq3ffkEonn4PY4FQfYRRu7Vkyt6X
CD4Kj6RhNP2Rxx/KkgqWyZqUqREdRvgQhk2ujygnFdI1+SGiqt8btUU/YNLMzl3V
chjPGsOMw4Y/XUsDE/kVhrs760pxEPPEAK6/qGOBSSkR/O/HkaopSvT3rKw10Dgd
J7FPMsL7yEjlE3LS+gQ1DHGfkiJXwmddspPNsCL6Nn4RSMG5Oph/NuGzqYHSbyTP
PIzRCDL5OrDTVJefnwUrc+HKsXlQJgfRyZ8h+/fbhtWgej/7StBNE3BgkOzKws9z
uj1cZ9FMNr4XC9o6
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:40:53 2026 by rpki-client