Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/323830343a373135343a383030303a3a2f33332d3333203d3e20323730373832.roa
File:                     323830343a373135343a383030303a3a2f33332d3333203d3e20323730373832.roa (raw, json)
Hash identifier:          J/8TR0b64lTevR1yP3oc8PQoSX2xswFRxJHCtX1+Xqs=
Subject key identifier:   23:91:23:F2:DA:C2:01:A0:60:7D:C3:17:96:C8:1B:80:C1:CC:6C:86
Certificate issuer:       /CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
Certificate serial:       1D313A94E747E9474E1A7C42635021E6C5171821
Authority key identifier: B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/323830343a373135343a383030303a3a2f33332d3333203d3e20323730373832.roa
Signing time:             Fri 27 Feb 2026 19:42:25 +0000
ROA not before:           Fri 27 Feb 2026 19:37:25 +0000
ROA not after:            Fri 26 Feb 2027 19:42:25 +0000
asID:                     270782
IP address blocks:        2804:7154:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl
                          rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 21:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:31:3a:94:e7:47:e9:47:4e:1a:7c:42:63:50:21:e6:c5:17:18:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
        Validity
            Not Before: Feb 27 19:37:25 2026 GMT
            Not After : Feb 26 19:42:25 2027 GMT
        Subject: CN=239123F2DAC201A0607DC31796C81B80C1CC6C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:1c:5d:18:5c:a3:80:2a:d2:a9:c7:0f:7d:
                    1a:12:0b:89:b3:e7:f2:ca:94:39:ad:0a:69:c2:21:
                    f1:90:5d:73:9f:6d:00:94:cc:f4:57:0b:f9:f6:68:
                    a3:a4:64:36:ba:10:86:98:b0:42:c5:1b:c2:cd:61:
                    74:45:b5:fb:8c:fe:61:9a:c7:fe:88:1a:27:84:a6:
                    21:9e:41:51:f3:08:93:6f:be:06:4e:0d:c2:1b:22:
                    7e:a3:9d:cf:ca:c2:4f:0d:f3:a3:a2:79:9c:07:6d:
                    c2:29:07:fc:3c:00:20:d3:26:19:42:17:25:e2:8c:
                    37:e7:15:e2:45:a2:cb:f8:ae:9e:e7:ea:19:1f:ca:
                    7b:dc:e6:42:47:99:94:fb:a2:8a:35:f7:14:d8:58:
                    84:7f:06:45:36:6c:56:39:87:a5:c8:6a:3e:c3:1c:
                    ab:7a:8f:69:18:32:98:7b:96:4c:d1:30:4f:30:8b:
                    9a:51:ac:25:dd:14:38:ef:7e:f5:29:38:50:a0:eb:
                    d8:de:21:44:98:80:0c:3b:7c:41:b1:b9:cb:9d:25:
                    1b:0d:cb:52:a5:af:01:81:85:bb:2c:d0:21:d1:f5:
                    c3:5d:12:08:ac:b0:09:0a:1d:ea:5e:b3:6d:80:6b:
                    fa:f9:59:d9:3a:56:fd:f5:b4:0f:84:ce:0f:d5:d7:
                    db:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:91:23:F2:DA:C2:01:A0:60:7D:C3:17:96:C8:1B:80:C1:CC:6C:86
            X509v3 Authority Key Identifier:
                keyid:B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/323830343a373135343a383030303a3a2f33332d3333203d3e20323730373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7154:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3c:50:ae:07:a2:8f:69:d7:76:d4:1b:5d:b8:d7:3b:c0:97:b1:
         86:65:02:b3:b6:aa:8e:8f:62:05:58:6f:62:70:8f:f8:32:3c:
         0d:1b:9a:ca:dd:5a:82:3f:c4:bb:77:c2:de:e1:5b:41:5c:06:
         06:03:9a:e4:d8:55:f0:17:23:26:26:9b:d3:8f:46:52:ed:5a:
         d4:7c:e7:13:a1:f2:4c:a9:54:1d:a7:b1:11:3b:6d:1e:3f:98:
         78:df:14:3a:44:9f:c6:e9:6d:05:32:7d:7e:51:c5:39:42:2d:
         52:98:72:98:cd:22:20:36:09:8b:9f:bf:71:4a:70:0a:66:5f:
         c9:9e:72:33:79:26:2c:bf:c7:0f:c9:c6:cb:b2:1b:ae:13:c0:
         08:70:dc:3f:a6:c8:89:2c:77:66:20:46:18:1e:12:80:e3:a4:
         0b:2d:16:3e:9d:b0:38:39:ed:09:6b:7b:57:7c:85:88:41:1f:
         15:68:7b:cb:e6:88:54:d2:d7:30:ec:7f:a4:24:8b:33:6b:c7:
         61:07:a5:8d:0f:59:68:cf:54:ba:30:70:ae:5e:2a:10:5d:0e:
         6f:6e:9c:5e:06:63:a6:34:7e:cb:ac:be:ca:3b:e2:7a:cf:cc:
         e1:c7:06:49:5f:96:e2:55:1c:ad:66:01:ce:2c:69:e3:71:df:
         71:c1:dd:85
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHTE6lOdH6UdOGnxCY1Ah5sUXGCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFFMkNDNjNDMTQwQjI5MTMwRDM0NjAxODRCNzMxNEQz
QkMxMzRDOTAeFw0yNjAyMjcxOTM3MjVaFw0yNzAyMjYxOTQyMjVaMDMxMTAvBgNV
BAMTKDIzOTEyM0YyREFDMjAxQTA2MDdEQzMxNzk2QzgxQjgwQzFDQzZDODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5WhxdGFyjgCrSqccPfRoSC4mz
5/LKlDmtCmnCIfGQXXOfbQCUzPRXC/n2aKOkZDa6EIaYsELFG8LNYXRFtfuM/mGa
x/6IGieEpiGeQVHzCJNvvgZODcIbIn6jnc/Kwk8N86OieZwHbcIpB/w8ACDTJhlC
FyXijDfnFeJFosv4rp7n6hkfynvc5kJHmZT7ooo19xTYWIR/BkU2bFY5h6XIaj7D
HKt6j2kYMph7lkzRME8wi5pRrCXdFDjvfvUpOFCg69jeIUSYgAw7fEGxucudJRsN
y1KlrwGBhbss0CHR9cNdEgissAkKHepes22Aa/r5Wdk6Vv31tA+Ezg/V19uhAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUI5Ej8trCAaBgfcMXlsgbgMHMbIYwHwYDVR0j
BBgwFoAUseLMY8FAspEw00YBhLcxTTvBNMkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZxZ2tRUXN2c1hTb2oyaFMyd3RtMVhSZFVWcnB5YjdveHBvRzhtUjI3
QlcvMC9CMUUyQ0M2M0MxNDBCMjkxMzBEMzQ2MDE4NEI3MzE0RDNCQzEzNEM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxRTJDQzYzQzE0MEIyOTEz
MEQzNDYwMTg0QjczMTREM0JDMTM0QzkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGcWdrUVFzdnNYU29qMmhTMnd0bTFYUmRVVnJweWI3b3hwb0c4bVIyN0JXLzAv
MzIzODMwMzQzYTM3MzEzNTM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMDM3MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEcVSAMA0GCSqGSIb3DQEBCwUA
A4IBAQA8UK4Hoo9p13bUG1241zvAl7GGZQKztqqOj2IFWG9icI/4MjwNG5rK3VqC
P8S7d8Le4VtBXAYGA5rk2FXwFyMmJpvTj0ZS7VrUfOcTofJMqVQdp7ERO20eP5h4
3xQ6RJ/G6W0FMn1+UcU5Qi1SmHKYzSIgNgmLn79xSnAKZl/JnnIzeSYsv8cPycbL
shuuE8AIcNw/psiJLHdmIEYYHhKA46QLLRY+nbA4Oe0Ja3tXfIWIQR8VaHvL5ohU
0tcw7H+kJIsza8dhB6WND1loz1S6MHCuXioQXQ5vbpxeBmOmNH7LrL7KO+J6z8zh
xwZJX5biVRytZgHOLGnjcd9xwd2F
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:47:17 2026 by rpki-client