Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/323830343a393336383a3a2f33342d3334203d3e20323734373735.roa
File:                     323830343a393336383a3a2f33342d3334203d3e20323734373735.roa (raw, json)
Hash identifier:          RRv99zhwQWstuFKghgciKLjMO5OH1gTFLOi040hTj5A=
Subject key identifier:   F1:ED:4D:16:0A:EE:50:93:27:FD:52:EC:D4:D3:F8:2B:54:02:F7:FE
Certificate issuer:       /CN=72498970A4E832211C0DA0ED3526B1CE579C5172
Certificate serial:       49C096D32E633AE97BF422C2A176CF8010427974
Authority key identifier: 72:49:89:70:A4:E8:32:21:1C:0D:A0:ED:35:26:B1:CE:57:9C:51:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72498970A4E832211C0DA0ED3526B1CE579C5172.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/323830343a393336383a3a2f33342d3334203d3e20323734373735.roa
Signing time:             Thu 11 Jun 2026 14:13:45 +0000
ROA not before:           Thu 11 Jun 2026 14:08:45 +0000
ROA not after:            Thu 10 Jun 2027 14:13:45 +0000
asID:                     274775
IP address blocks:        2804:9368::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/72498970A4E832211C0DA0ED3526B1CE579C5172.crl
                          rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/72498970A4E832211C0DA0ED3526B1CE579C5172.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72498970A4E832211C0DA0ED3526B1CE579C5172.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 21:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c0:96:d3:2e:63:3a:e9:7b:f4:22:c2:a1:76:cf:80:10:42:79:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72498970A4E832211C0DA0ED3526B1CE579C5172
        Validity
            Not Before: Jun 11 14:08:45 2026 GMT
            Not After : Jun 10 14:13:45 2027 GMT
        Subject: CN=F1ED4D160AEE509327FD52ECD4D3F82B5402F7FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:91:cf:92:a9:01:6d:e1:5c:19:65:de:e3:8d:
                    f2:aa:bd:92:4b:42:4a:94:a3:c9:1c:74:74:c1:d5:
                    b2:8e:a2:6d:08:26:c7:c2:b0:67:b3:cc:8c:00:96:
                    70:dc:70:b7:de:64:a1:21:83:d2:f1:a0:c1:2e:64:
                    d6:bd:e2:2e:5a:78:7e:4f:17:d4:b2:94:5a:23:6c:
                    fa:31:aa:84:e8:03:c2:ad:29:be:6d:b3:2c:b6:c2:
                    d8:e9:24:cb:c6:27:82:dd:5e:1e:39:d0:b2:45:5a:
                    8f:1c:b9:59:4c:c9:8e:29:cd:3d:18:0f:b1:43:cd:
                    24:3e:f4:1e:ff:b1:1c:7d:5f:0f:8f:e3:9e:68:d6:
                    f0:8d:ef:f3:b7:94:2a:41:67:79:26:89:ea:79:07:
                    8c:91:e8:c8:fa:e7:7e:3a:15:88:f6:9e:fe:67:56:
                    1a:c3:7f:fc:24:cc:02:4b:a9:68:2c:23:f2:cc:82:
                    79:47:c1:cb:05:11:0b:9f:7c:25:22:ad:1c:37:7a:
                    85:e6:4a:26:68:f3:14:14:82:51:15:ec:ff:94:13:
                    b9:a1:e8:33:8e:7c:a8:fe:71:09:df:6a:71:07:3f:
                    3f:a0:08:c6:d3:89:8c:8c:01:2b:49:39:6e:88:30:
                    25:1d:09:d9:64:c1:6a:1d:e9:77:71:92:e3:57:e1:
                    ca:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:ED:4D:16:0A:EE:50:93:27:FD:52:EC:D4:D3:F8:2B:54:02:F7:FE
            X509v3 Authority Key Identifier:
                keyid:72:49:89:70:A4:E8:32:21:1C:0D:A0:ED:35:26:B1:CE:57:9C:51:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/72498970A4E832211C0DA0ED3526B1CE579C5172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72498970A4E832211C0DA0ED3526B1CE579C5172.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/323830343a393336383a3a2f33342d3334203d3e20323734373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9368::/34

    Signature Algorithm: sha256WithRSAEncryption
         60:d9:73:73:de:37:35:0e:99:df:be:c6:06:53:54:97:0b:17:
         af:57:f4:ce:86:b9:d1:30:55:3f:e3:6d:d9:00:41:cd:82:58:
         38:fa:50:d6:79:13:8b:3a:8e:64:53:48:ae:ee:40:97:cd:22:
         1a:a5:00:82:3a:08:5a:0a:93:d1:27:41:51:8d:c6:78:11:80:
         e2:63:ba:f2:82:d9:fb:6a:35:cb:f4:60:7d:cf:9d:13:13:44:
         a6:5a:cc:a1:5e:83:1e:39:7c:23:8b:1c:9b:c1:e1:d8:91:07:
         e2:73:d2:3b:55:91:db:68:cd:05:b4:59:84:8c:ed:b6:c2:7f:
         cb:ac:c0:83:41:30:b5:5e:68:5e:8c:ed:b8:b1:65:eb:14:8c:
         72:7b:87:54:7a:3c:5a:eb:41:ff:58:91:39:da:62:37:1e:e2:
         63:0f:e5:84:ec:1b:30:b0:67:6f:a0:11:64:aa:57:58:a9:39:
         ee:6a:ca:0b:52:ec:83:be:6b:85:a7:ae:ed:76:e2:00:c8:a3:
         27:48:65:ba:c3:2b:90:92:93:1b:33:3a:a4:26:5a:36:60:28:
         bd:0c:ac:ab:25:75:a6:ed:49:bf:1d:b4:42:31:7a:ed:32:3e:
         5c:82:37:73:3f:47:b6:53:05:e3:ba:de:9d:ee:a2:79:4f:93:
         99:ad:77:b0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUScCW0y5jOul79CLCoXbPgBBCeXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI0OTg5NzBBNEU4MzIyMTFDMERBMEVEMzUyNkIxQ0U1
NzlDNTE3MjAeFw0yNjA2MTExNDA4NDVaFw0yNzA2MTAxNDEzNDVaMDMxMTAvBgNV
BAMTKEYxRUQ0RDE2MEFFRTUwOTMyN0ZENTJFQ0Q0RDNGODJCNTQwMkY3RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkc+SqQFt4VwZZd7jjfKqvZJL
QkqUo8kcdHTB1bKOom0IJsfCsGezzIwAlnDccLfeZKEhg9LxoMEuZNa94i5aeH5P
F9SylFojbPoxqoToA8KtKb5tsyy2wtjpJMvGJ4LdXh450LJFWo8cuVlMyY4pzT0Y
D7FDzSQ+9B7/sRx9Xw+P455o1vCN7/O3lCpBZ3kmiep5B4yR6Mj65346FYj2nv5n
VhrDf/wkzAJLqWgsI/LMgnlHwcsFEQuffCUirRw3eoXmSiZo8xQUglEV7P+UE7mh
6DOOfKj+cQnfanEHPz+gCMbTiYyMAStJOW6IMCUdCdlkwWod6XdxkuNX4crhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8e1NFgruUJMn/VLs1NP4K1QC9/4wHwYDVR0j
BBgwFoAUckmJcKToMiEcDaDtNSaxzlecUXIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjF6TUVZNGVDRUxUWDkxYWFyNWI5RFAxMnFYZXQyd1B5Q3J4QlpZcDhU
OFUvMC83MjQ5ODk3MEE0RTgzMjIxMUMwREEwRUQzNTI2QjFDRTU3OUM1MTcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyNDk4OTcwQTRFODMyMjEx
QzBEQTBFRDM1MjZCMUNFNTc5QzUxNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Yxek1FWTRlQ0VMVFg5MWFhcjViOURQMTJxWGV0MndQeUNyeEJaWXA4VDhVLzAv
MzIzODMwMzQzYTM5MzMzNjM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzM0
MzczNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKASTaAAwDQYJKoZIhvcNAQELBQADggEBAGDZc3Pe
NzUOmd++xgZTVJcLF69X9M6GudEwVT/jbdkAQc2CWDj6UNZ5E4s6jmRTSK7uQJfN
IhqlAII6CFoKk9EnQVGNxngRgOJjuvKC2ftqNcv0YH3PnRMTRKZazKFegx45fCOL
HJvB4diRB+Jz0jtVkdtozQW0WYSM7bbCf8uswINBMLVeaF6M7bixZesUjHJ7h1R6
PFrrQf9YkTnaYjce4mMP5YTsGzCwZ2+gEWSqV1ipOe5qygtS7IO+a4Wnru124gDI
oydIZbrDK5CSkxszOqQmWjZgKL0MrKsldabtSb8dtEIxeu0yPlyCN3M/R7ZTBeO6
3p3uonlPk5mtd7A=
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:39:15 2026 by rpki-client