Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/323830343a3562383a386338313a3a2f34382d3438203d3e20323632353335.roa
File:                     323830343a3562383a386338313a3a2f34382d3438203d3e20323632353335.roa (raw, json)
Hash identifier:          U4ewQl8lioE2gTm5uC9gVliKgVn2bBXQjhfaTT2cufE=
Subject key identifier:   75:CA:C7:11:9F:82:7E:67:91:CA:0A:E6:16:D4:DC:FD:E1:6C:7A:39
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       09C0DCBEBBF0C159175ACF3BE4FB2604674BA715
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/323830343a3562383a386338313a3a2f34382d3438203d3e20323632353335.roa
Signing time:             Fri 17 Apr 2026 10:48:29 +0000
ROA not before:           Fri 17 Apr 2026 10:43:29 +0000
ROA not after:            Fri 16 Apr 2027 10:48:29 +0000
asID:                     262535
IP address blocks:        2804:5b8:8c81::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 12:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c0:dc:be:bb:f0:c1:59:17:5a:cf:3b:e4:fb:26:04:67:4b:a7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Apr 17 10:43:29 2026 GMT
            Not After : Apr 16 10:48:29 2027 GMT
        Subject: CN=75CAC7119F827E6791CA0AE616D4DCFDE16C7A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:87:bd:c2:d2:a9:e6:72:ab:e7:3f:90:12:df:
                    6f:fd:8b:39:7f:11:f9:f1:af:74:ca:4c:a6:9a:04:
                    b7:9b:b1:5d:43:0c:9b:6d:d4:d8:78:61:df:c6:95:
                    06:12:c0:ab:73:b1:fc:08:4d:48:42:9e:ef:4b:28:
                    52:10:31:89:58:3d:74:d3:26:49:91:91:1a:6e:63:
                    4c:56:12:29:2b:4c:d7:3b:6c:46:bc:e6:a5:8b:02:
                    fe:45:31:a1:20:f1:4d:58:55:97:dd:f6:78:d8:06:
                    35:d0:c3:c1:26:9c:44:4e:53:1a:ec:6f:43:7c:02:
                    a8:68:49:56:e0:b8:a8:6e:33:f4:a4:9d:e3:31:ad:
                    7a:a2:0e:21:21:6f:7f:47:41:ed:c4:0b:bd:7d:c8:
                    12:a5:97:3b:aa:ac:7e:ef:92:e1:e1:09:dc:65:54:
                    23:89:72:94:db:75:14:88:35:1e:16:8e:03:a5:87:
                    94:82:3a:6c:8f:6e:ff:23:f1:e4:c8:fa:62:3c:f2:
                    35:87:b8:c6:d5:3c:96:10:f9:b5:5c:d4:15:31:3b:
                    8f:3f:1a:aa:bc:12:e9:8a:3f:a1:52:9f:f6:59:72:
                    08:e4:41:0c:ac:b2:83:79:88:81:41:3e:d8:2e:7a:
                    e9:1e:c4:bd:41:ec:2a:8c:03:7e:e2:d7:97:53:4e:
                    16:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CA:C7:11:9F:82:7E:67:91:CA:0A:E6:16:D4:DC:FD:E1:6C:7A:39
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/323830343a3562383a386338313a3a2f34382d3438203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b8:8c81::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:cf:ed:a3:32:10:80:24:97:4b:4e:7c:41:38:f8:25:96:aa:
         fd:22:dc:b0:b0:cb:b8:c2:50:69:92:1d:75:b3:f5:ec:37:70:
         49:50:32:6a:46:08:24:7a:0b:ad:6d:2b:8e:13:e3:f2:c7:b0:
         06:61:6b:b0:26:30:34:5e:40:ce:35:e6:3f:b6:2b:d0:f9:44:
         0f:62:99:29:9e:de:ca:d3:a0:71:c3:67:17:de:2d:12:42:8d:
         ad:96:56:48:60:c6:cf:7d:b7:5c:8d:c8:09:62:96:d3:29:58:
         3a:2a:30:99:99:58:04:c2:29:01:7e:5c:16:83:32:28:9e:75:
         1b:c2:dd:60:53:01:72:b9:f9:94:27:0f:63:2f:e7:6f:34:d3:
         6c:81:2c:ca:93:bc:41:86:0f:0a:36:b5:f1:a5:8b:a1:d6:0e:
         e9:0d:14:0b:b2:ad:80:bf:d9:d8:d8:6d:bb:5e:ac:90:53:f0:
         66:bb:ab:42:4f:4f:01:8a:1b:6c:cd:aa:c8:6d:8c:28:f3:e7:
         66:56:aa:0b:a8:39:93:b8:25:6e:61:f3:0a:fa:b0:1b:df:95:
         c4:f6:85:23:53:dc:cb:87:ad:aa:8e:cd:cb:3e:01:c7:fa:8d:
         23:80:b3:42:ea:3e:db:72:32:ed:05:41:77:e2:73:79:98:7a:
         2f:96:f9:7d
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUCcDcvrvwwVkXWs875PsmBGdLpxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDNzcyRjgwMjk0MjAxODYwMTQ4ODA5NUFBNkM1NDdB
MzY5NDc4MjAeFw0yNjA0MTcxMDQzMjlaFw0yNzA0MTYxMDQ4MjlaMDMxMTAvBgNV
BAMTKDc1Q0FDNzExOUY4MjdFNjc5MUNBMEFFNjE2RDREQ0ZERTE2QzdBMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrh73C0qnmcqvnP5AS32/9izl/
Efnxr3TKTKaaBLebsV1DDJtt1Nh4Yd/GlQYSwKtzsfwITUhCnu9LKFIQMYlYPXTT
JkmRkRpuY0xWEikrTNc7bEa85qWLAv5FMaEg8U1YVZfd9njYBjXQw8EmnEROUxrs
b0N8AqhoSVbguKhuM/SkneMxrXqiDiEhb39HQe3EC719yBKllzuqrH7vkuHhCdxl
VCOJcpTbdRSINR4WjgOlh5SCOmyPbv8j8eTI+mI88jWHuMbVPJYQ+bVc1BUxO48/
Gqq8EumKP6FSn/ZZcgjkQQyssoN5iIFBPtgueukexL1B7CqMA37i15dTThbDAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUdcrHEZ+CfmeRygrmFtTc/eFsejkwHwYDVR0j
BBgwFoAUKMdy+AKUIBhgFIgJWqbFR6NpR4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXFtMkFvNDVtOWI3a3JDQm91UWtyWTdSVjlYVzZwV1p1cnIxRXM1R2d4
cmkvMC8yOEM3NzJGODAyOTQyMDE4NjAxNDg4MDk1QUE2QzU0N0EzNjk0NzgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4Qzc3MkY4MDI5NDIwMTg2
MDE0ODgwOTVBQTZDNTQ3QTM2OTQ3ODIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxbTJBbzQ1bTliN2tyQ0JvdVFrclk3UlY5WFc2cFdadXJyMUVzNUdneHJpLzAv
MzIzODMwMzQzYTM1NjIzODNhMzg2MzM4MzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzIzNTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBAW4jIEwDQYJKoZIhvcNAQELBQAD
ggEBALPP7aMyEIAkl0tOfEE4+CWWqv0i3LCwy7jCUGmSHXWz9ew3cElQMmpGCCR6
C61tK44T4/LHsAZha7AmMDReQM415j+2K9D5RA9imSme3srToHHDZxfeLRJCja2W
Vkhgxs99t1yNyAliltMpWDoqMJmZWATCKQF+XBaDMiiedRvC3WBTAXK5+ZQnD2Mv
528002yBLMqTvEGGDwo2tfGli6HWDukNFAuyrYC/2djYbbterJBT8Ga7q0JPTwGK
G2zNqshtjCjz52ZWqguoOZO4JW5h8wr6sBvflcT2hSNT3MuHraqOzcs+Acf6jSOA
s0LqPttyMu0FQXfic3mYei+W+X0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:19:11 2026 by rpki-client