Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3930303a3a2f34302d3430203d3e203532393734.roa
File:                     323830343a316239343a3930303a3a2f34302d3430203d3e203532393734.roa (raw, json)
Hash identifier:          SdjIU5i0uMoQjHY/Q7XR1RKtHp0PWAJuaBZZy423fa8=
Subject key identifier:   2B:87:B3:1D:30:24:F0:D2:CE:19:CE:23:CE:BD:1D:DE:CF:CB:E5:73
Certificate issuer:       /CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
Certificate serial:       262F3B0261EA4DE3DED51C006A23C6F6280E436C
Authority key identifier: 9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3930303a3a2f34302d3430203d3e203532393734.roa
Signing time:             Mon 13 Apr 2026 13:53:53 +0000
ROA not before:           Mon 13 Apr 2026 13:48:53 +0000
ROA not after:            Mon 12 Apr 2027 13:53:53 +0000
asID:                     52974
IP address blocks:        2804:1b94:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2f:3b:02:61:ea:4d:e3:de:d5:1c:00:6a:23:c6:f6:28:0e:43:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
        Validity
            Not Before: Apr 13 13:48:53 2026 GMT
            Not After : Apr 12 13:53:53 2027 GMT
        Subject: CN=2B87B31D3024F0D2CE19CE23CEBD1DDECFCBE573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:db:7a:d9:2d:1f:68:84:72:22:ac:2a:e1:
                    5d:ff:d6:8b:7e:08:23:64:fe:ea:e4:fd:a6:94:e1:
                    87:09:60:b4:b5:4f:c6:93:e0:35:14:30:89:0e:46:
                    39:e0:75:c5:eb:a1:dd:3d:65:fb:32:07:75:e1:56:
                    6a:a8:a6:c2:ea:40:4f:fa:d2:6a:75:8a:90:26:11:
                    87:c6:71:73:64:d1:d9:64:52:9f:2e:6f:e4:32:ba:
                    3a:f4:e1:2b:45:3f:e6:5b:a6:ac:69:ce:17:81:9c:
                    a3:eb:6c:cb:7b:11:09:70:b0:09:fa:c8:b2:6d:38:
                    c0:dd:41:a6:01:3b:17:3b:81:d5:1d:b1:9a:72:1d:
                    9f:45:20:43:73:49:b0:b4:ec:3f:ba:2b:d3:df:f7:
                    c7:02:6b:e0:86:54:b3:4f:12:12:3e:19:32:52:d0:
                    2b:61:a4:0b:36:51:f5:a1:db:e0:5e:bd:6a:03:87:
                    dd:49:c8:78:2b:a6:6b:13:fa:70:b1:ae:f8:17:6f:
                    b7:1b:55:44:e1:80:36:ac:11:16:75:24:7b:56:c1:
                    77:e7:5c:03:09:63:ca:b8:29:99:77:2d:04:47:88:
                    c8:fd:9a:87:a5:dd:80:4f:64:11:20:2f:34:45:c5:
                    e8:5c:e2:e1:42:50:26:56:fb:48:77:c8:6e:35:9e:
                    39:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:87:B3:1D:30:24:F0:D2:CE:19:CE:23:CE:BD:1D:DE:CF:CB:E5:73
            X509v3 Authority Key Identifier:
                keyid:9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/323830343a316239343a3930303a3a2f34302d3430203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b94:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:96:72:5e:e6:1b:5e:0b:6e:c1:07:3a:0e:cb:d2:96:ef:28:
         93:c6:3e:c6:ad:2e:cb:ab:02:db:de:c8:b5:3c:f4:7b:2a:c4:
         64:58:2d:60:d8:8e:d3:be:35:49:4f:9f:a2:df:d5:06:c9:4e:
         ae:8b:2c:4a:a4:95:0d:7b:c9:e6:ce:7c:23:99:be:7b:3d:e4:
         18:ae:35:c4:35:2b:e4:10:48:ef:6a:ff:e9:e8:b3:dd:2b:5f:
         6c:06:87:ac:4c:2b:ea:3b:21:6b:ab:65:e1:23:b2:d4:db:34:
         49:c1:92:3f:2d:25:5f:df:22:fa:03:55:a2:3b:5e:6e:06:1f:
         ab:b6:fc:b4:0e:3d:93:04:ea:78:03:13:2a:26:a7:65:9b:eb:
         9e:1d:d6:30:3d:b5:a4:8b:12:8c:d1:f8:c0:f1:ac:09:bb:ee:
         88:56:12:16:0b:3c:d2:60:a1:40:1e:b3:d8:66:79:ae:08:27:
         f0:c9:b0:b1:5d:c8:ed:b9:bf:88:76:3d:1e:0c:43:d1:0a:eb:
         58:cb:73:d5:bd:db:a1:3c:c6:94:a1:38:28:20:fa:af:7c:9b:
         7a:48:ee:23:78:10:de:23:11:2b:6a:e6:a4:d1:aa:4b:14:fb:
         73:30:c0:49:d0:68:9f:a2:3c:aa:fc:ea:af:bb:b4:42:39:2c:
         15:8d:c8:d7
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUJi87AmHqTePe1RwAaiPG9igOQ2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURGQURDRURCRDZGNzIxMjFGQjQyMTk2RjYxRTA1OUEx
QjNEMkY0NTAeFw0yNjA0MTMxMzQ4NTNaFw0yNzA0MTIxMzUzNTNaMDMxMTAvBgNV
BAMTKDJCODdCMzFEMzAyNEYwRDJDRTE5Q0UyM0NFQkQxRERFQ0ZDQkU1NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvdt62S0faIRyIqwq4V3/1ot+
CCNk/urk/aaU4YcJYLS1T8aT4DUUMIkORjngdcXrod09ZfsyB3XhVmqopsLqQE/6
0mp1ipAmEYfGcXNk0dlkUp8ub+Qyujr04StFP+ZbpqxpzheBnKPrbMt7EQlwsAn6
yLJtOMDdQaYBOxc7gdUdsZpyHZ9FIENzSbC07D+6K9Pf98cCa+CGVLNPEhI+GTJS
0CthpAs2UfWh2+BevWoDh91JyHgrpmsT+nCxrvgXb7cbVUThgDasERZ1JHtWwXfn
XAMJY8q4KZl3LQRHiMj9moel3YBPZBEgLzRFxehc4uFCUCZW+0h3yG41njkjAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUK4ezHTAk8NLOGc4jzr0d3s/L5XMwHwYDVR0j
BBgwFoAUnfrc7b1vchIftCGW9h4Fmhs9L0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHU5elRneUF5RE1mQWtpZVBkUUxDM1RKZXZyZ01KS1V6UExpY1cxUHRo
ekwvMC85REZBRENFREJENkY3MjEyMUZCNDIxOTZGNjFFMDU5QTFCM0QyRjQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlERkFEQ0VEQkQ2RjcyMTIx
RkI0MjE5NkY2MUUwNTlBMUIzRDJGNDUuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R1OXpUZ3lBeURNZkFraWVQZFFMQzNUSmV2cmdNSktVelBMaWNXMVB0aHpMLzAv
MzIzODMwMzQzYTMxNjIzOTM0M2EzOTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzNTMyMzkzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAQblAkwDQYJKoZIhvcNAQELBQADggEB
AFGWcl7mG14LbsEHOg7L0pbvKJPGPsatLsurAtveyLU89HsqxGRYLWDYjtO+NUlP
n6Lf1QbJTq6LLEqklQ17yebOfCOZvns95BiuNcQ1K+QQSO9q/+nos90rX2wGh6xM
K+o7IWurZeEjstTbNEnBkj8tJV/fIvoDVaI7Xm4GH6u2/LQOPZME6ngDEyomp2Wb
654d1jA9taSLEozR+MDxrAm77ohWEhYLPNJgoUAes9hmea4IJ/DJsLFdyO25v4h2
PR4MQ9EK61jLc9W926E8xpShOCgg+q98m3pI7iN4EN4jEStq5qTRqksU+3MwwEnQ
aJ+iPKr86q+7tEI5LBWNyNc=
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:25:50 2026 by rpki-client