Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/323830343a373738303a3a2f33322d3336203d3e20323731313832.roa
File:                     323830343a373738303a3a2f33322d3336203d3e20323731313832.roa (raw, json)
Hash identifier:          yKSEt0DDKvq8S6Oe1Ksm27UvPt7InMSJb3p0W02xHdU=
Subject key identifier:   9B:51:E5:74:CB:D0:89:78:CB:9F:99:84:E5:3C:55:DA:65:D2:27:F8
Certificate issuer:       /CN=26B066E352765D8DA9DB3642D744A849C33B3211
Certificate serial:       5AA6C10566F1BC87FB9A888352A29B07D9DC434D
Authority key identifier: 26:B0:66:E3:52:76:5D:8D:A9:DB:36:42:D7:44:A8:49:C3:3B:32:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26B066E352765D8DA9DB3642D744A849C33B3211.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/323830343a373738303a3a2f33322d3336203d3e20323731313832.roa
Signing time:             Wed 20 May 2026 13:38:33 +0000
ROA not before:           Wed 20 May 2026 13:33:33 +0000
ROA not after:            Wed 19 May 2027 13:38:33 +0000
asID:                     271182
IP address blocks:        2804:7780::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/26B066E352765D8DA9DB3642D744A849C33B3211.crl
                          rsync://rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/26B066E352765D8DA9DB3642D744A849C33B3211.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26B066E352765D8DA9DB3642D744A849C33B3211.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 01:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a6:c1:05:66:f1:bc:87:fb:9a:88:83:52:a2:9b:07:d9:dc:43:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26B066E352765D8DA9DB3642D744A849C33B3211
        Validity
            Not Before: May 20 13:33:33 2026 GMT
            Not After : May 19 13:38:33 2027 GMT
        Subject: CN=9B51E574CBD08978CB9F9984E53C55DA65D227F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:2f:82:10:a3:e2:0f:d2:5e:ee:13:4a:35:0c:
                    46:80:36:49:1b:c7:1c:4f:67:7d:04:61:ee:31:b1:
                    57:cd:7b:ee:b2:0c:0e:cc:61:43:4e:71:17:9f:51:
                    21:b6:c7:16:40:bb:63:ee:5d:99:d4:75:c0:1b:20:
                    d6:9b:b7:48:47:ad:c8:e3:58:6d:71:8e:5b:b5:48:
                    62:d1:76:92:1d:9d:1b:ce:ef:e0:90:69:d5:78:09:
                    99:f6:fc:9d:02:b0:3c:5f:38:9c:f6:bd:31:4b:bf:
                    fc:82:58:da:41:44:4b:2b:33:6d:7e:ef:7b:a6:e8:
                    f5:9e:c9:d4:96:6d:44:86:96:2b:e7:ac:ca:42:88:
                    eb:4d:8c:f0:6d:23:f6:04:3e:79:06:a9:da:de:95:
                    3d:fb:03:2e:b1:ce:66:4c:3a:17:40:fd:80:89:82:
                    41:d9:05:c3:d6:fe:d7:ef:83:dd:34:8d:93:ee:52:
                    ad:bf:0d:6a:0c:fc:81:68:fe:4a:ed:d6:b9:db:80:
                    b1:25:18:67:83:e3:a6:5c:c0:83:6e:25:15:8f:82:
                    aa:c3:ca:a9:c4:df:96:fa:2b:07:1b:8f:42:54:2f:
                    a3:c0:84:9a:bc:7a:46:a1:99:13:88:af:d3:21:d5:
                    8b:e9:ec:cc:09:81:09:9f:40:db:57:db:3a:1f:40:
                    bb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:51:E5:74:CB:D0:89:78:CB:9F:99:84:E5:3C:55:DA:65:D2:27:F8
            X509v3 Authority Key Identifier:
                keyid:26:B0:66:E3:52:76:5D:8D:A9:DB:36:42:D7:44:A8:49:C3:3B:32:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/26B066E352765D8DA9DB3642D744A849C33B3211.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26B066E352765D8DA9DB3642D744A849C33B3211.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVMNfbMJRdPuZm33wrSQPhuaojM5DEFnFPvNa21hQnCq/0/323830343a373738303a3a2f33322d3336203d3e20323731313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7780::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:ed:30:7c:af:f6:80:c0:76:c9:57:96:2a:fc:e7:af:c7:8d:
         0c:2d:5b:52:df:4c:46:6c:71:b2:0f:4b:37:af:95:1d:b6:53:
         89:9d:35:6b:29:66:59:10:2e:97:73:c5:55:49:fa:da:3f:c7:
         b8:96:c0:5c:eb:92:4e:f9:d5:2f:5c:2f:c3:74:ad:1d:77:44:
         99:aa:7d:eb:ba:43:34:a7:c0:65:ae:8d:ce:8b:84:db:b9:9d:
         c1:cb:b5:19:ba:e0:a4:8d:6e:8e:65:da:34:92:24:a8:1e:05:
         8a:3c:75:b5:0a:0a:2a:df:e7:9c:2b:0d:ab:83:67:15:b3:a0:
         d9:f4:a1:57:96:82:5d:e2:21:20:fb:f4:d9:dd:45:7b:60:c2:
         8f:f1:58:75:80:e9:61:9d:b9:e5:22:a7:34:ef:ce:69:03:6a:
         9a:e8:e7:77:a1:68:82:07:25:b9:ba:2d:5a:e6:09:be:5d:6b:
         75:9f:6f:e2:b4:28:2a:51:32:12:2f:53:86:59:03:4d:c0:9b:
         90:f3:e8:b2:72:6c:ee:de:60:a4:7a:19:03:65:59:c1:26:1c:
         94:85:8a:d6:3d:0a:9f:c1:37:75:bf:d5:e3:47:e6:f2:ad:51:
         33:e0:9c:c4:1d:70:b7:38:0a:0c:66:81:5f:1d:8f:e7:9c:b5:
         08:84:69:ed
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWqbBBWbxvIf7moiDUqKbB9ncQ00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZCMDY2RTM1Mjc2NUQ4REE5REIzNjQyRDc0NEE4NDlD
MzNCMzIxMTAeFw0yNjA1MjAxMzMzMzNaFw0yNzA1MTkxMzM4MzNaMDMxMTAvBgNV
BAMTKDlCNTFFNTc0Q0JEMDg5NzhDQjlGOTk4NEU1M0M1NURBNjVEMjI3RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0L4IQo+IP0l7uE0o1DEaANkkb
xxxPZ30EYe4xsVfNe+6yDA7MYUNOcRefUSG2xxZAu2PuXZnUdcAbINabt0hHrcjj
WG1xjlu1SGLRdpIdnRvO7+CQadV4CZn2/J0CsDxfOJz2vTFLv/yCWNpBREsrM21+
73um6PWeydSWbUSGlivnrMpCiOtNjPBtI/YEPnkGqdrelT37Ay6xzmZMOhdA/YCJ
gkHZBcPW/tfvg900jZPuUq2/DWoM/IFo/krt1rnbgLElGGeD46ZcwINuJRWPgqrD
yqnE35b6Kwcbj0JUL6PAhJq8ekahmROIr9Mh1Yvp7MwJgQmfQNtX2zofQLvhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUm1HldMvQiXjLn5mE5TxV2mXSJ/gwHwYDVR0j
BBgwFoAUJrBm41J2XY2p2zZC10SoScM7MhEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlZNTmZiTUpSZFB1Wm0zM3dyU1FQaHVhb2pNNURFRm5GUHZOYTIxaFFu
Q3EvMC8yNkIwNjZFMzUyNzY1RDhEQTlEQjM2NDJENzQ0QTg0OUMzM0IzMjExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2QjA2NkUzNTI3NjVEOERB
OURCMzY0MkQ3NDRBODQ5QzMzQjMyMTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZWTU5mYk1KUmRQdVptMzN3clNRUGh1YW9qTTVERUZuRlB2TmEyMWhRbkNxLzAv
MzIzODMwMzQzYTM3MzczODMwM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNzMx
MzEzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR3gDANBgkqhkiG9w0BAQsFAAOCAQEAIe0wfK/2
gMB2yVeWKvznr8eNDC1bUt9MRmxxsg9LN6+VHbZTiZ01aylmWRAul3PFVUn62j/H
uJbAXOuSTvnVL1wvw3StHXdEmap967pDNKfAZa6NzouE27mdwcu1GbrgpI1ujmXa
NJIkqB4Fijx1tQoKKt/nnCsNq4NnFbOg2fShV5aCXeIhIPv02d1Fe2DCj/FYdYDp
YZ255SKnNO/OaQNqmujnd6FoggclubotWuYJvl1rdZ9v4rQoKlEyEi9ThlkDTcCb
kPPosnJs7t5gpHoZA2VZwSYclIWK1j0Kn8E3db/V40fm8q1RM+CcxB1wtzgKDGaB
Xx2P55y1CIRp7Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:32:52 2026 by rpki-client