Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33322d3332203d3e20323732353031.roa
File:                     323830343a383232343a3a2f33322d3332203d3e20323732353031.roa (raw, json)
Hash identifier:          mpqSu2vppyE85xkR/iis3eQT/RqkjGSn8nwaZovspZw=
Subject key identifier:   89:6E:49:05:1D:DF:3E:10:66:41:6E:4D:84:B5:CC:AC:AA:A6:D9:CA
Certificate issuer:       /CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF
Certificate serial:       45E1A8B644C43BFFD4508DFA4F63EC1A1834123C
Authority key identifier: E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33322d3332203d3e20323732353031.roa
Signing time:             Tue 24 Feb 2026 23:20:57 +0000
ROA not before:           Tue 24 Feb 2026 23:15:57 +0000
ROA not after:            Tue 23 Feb 2027 23:20:57 +0000
asID:                     272501
IP address blocks:        2804:8224::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.crl
                          rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 14:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e1:a8:b6:44:c4:3b:ff:d4:50:8d:fa:4f:63:ec:1a:18:34:12:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF
        Validity
            Not Before: Feb 24 23:15:57 2026 GMT
            Not After : Feb 23 23:20:57 2027 GMT
        Subject: CN=896E49051DDF3E1066416E4D84B5CCACAAA6D9CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bb:99:d1:1a:ac:fe:f4:d5:5a:d0:73:5f:f3:
                    73:21:4a:0b:48:b3:ec:a8:e2:d6:eb:41:a8:ac:95:
                    9e:04:33:57:74:6e:fc:c3:f8:10:82:d0:2c:e0:65:
                    8f:dd:bc:46:2b:0b:54:17:08:1f:c5:b1:7c:ce:16:
                    11:17:13:fc:44:0f:0c:41:fa:98:1e:bf:18:80:04:
                    3f:51:83:38:d8:0d:38:fc:06:0b:bd:dc:e7:9d:6a:
                    f8:89:97:0c:25:c3:a1:43:ef:08:17:28:00:41:2e:
                    aa:0a:91:df:25:24:b9:7d:d6:8d:9b:3a:de:42:82:
                    e6:ae:67:96:31:dd:d5:e5:c3:ed:68:ba:41:77:db:
                    b5:ed:f7:ab:f8:5d:31:56:9c:7d:91:eb:11:02:e1:
                    cb:ad:f9:49:08:80:cb:c7:46:0e:d5:93:32:27:15:
                    ec:c8:28:a9:1b:8b:a1:07:45:89:df:7d:b4:86:49:
                    f0:a8:a7:68:85:e3:f6:f2:f1:02:f1:3b:1a:df:6e:
                    2e:02:be:02:78:3c:3c:d8:d0:13:46:30:24:20:66:
                    87:fd:46:e2:c7:a2:b4:e0:e7:ad:b6:ac:3b:cf:f5:
                    3a:65:17:3c:ff:c9:e5:49:43:5e:77:73:4f:ca:fe:
                    7a:5d:49:93:54:5e:80:17:b8:ce:cb:7b:4e:47:d5:
                    84:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6E:49:05:1D:DF:3E:10:66:41:6E:4D:84:B5:CC:AC:AA:A6:D9:CA
            X509v3 Authority Key Identifier:
                keyid:E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33322d3332203d3e20323732353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8224::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:e2:dc:53:18:16:f0:76:98:8c:2c:23:95:3d:b3:35:bf:81:
         cc:26:ae:19:63:ae:a9:59:53:20:37:27:e0:d0:a1:21:7c:39:
         24:84:f6:b6:74:e5:4f:ea:46:d5:d6:b2:b0:4b:23:d1:94:c7:
         39:86:4b:de:07:df:ef:21:77:5d:b9:f1:df:7a:38:d6:7e:99:
         36:a1:33:a5:1f:99:98:3f:0c:5a:01:58:6f:34:67:86:94:66:
         8e:66:e5:bb:0b:84:99:d9:ad:ad:1a:19:c1:bb:e4:ad:7f:e3:
         e0:c3:e6:b5:2f:88:ed:c3:f0:5e:a2:4d:0b:a3:8f:0b:fe:25:
         99:83:44:81:12:e7:ab:24:a2:06:8a:09:24:56:7a:48:5d:cc:
         22:1e:f7:77:61:55:fb:1d:49:33:ac:0c:3a:15:64:41:e5:17:
         8d:77:42:ff:62:5f:51:d1:82:9c:10:2c:5c:79:14:73:76:58:
         d5:1f:de:71:2b:b4:48:9a:1a:10:6c:1b:1a:08:98:8a:c4:a2:
         01:b1:c4:fa:3a:37:1f:78:b3:c1:5a:77:62:cd:a9:55:7e:21:
         3a:76:7d:f4:eb:eb:7c:63:0b:d8:37:75:ed:d3:b0:6a:f9:bb:
         b0:08:c7:f4:d3:36:3f:e0:96:17:49:75:b7:c5:8b:b1:49:f6:
         f7:fe:2a:f7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUReGotkTEO//UUI36T2PsGhg0EjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU5Q0JCRjE4RkM3QTc5REM4MzI4QkFERTE2QUM3MTJD
OTlDRkZCRjAeFw0yNjAyMjQyMzE1NTdaFw0yNzAyMjMyMzIwNTdaMDMxMTAvBgNV
BAMTKDg5NkU0OTA1MURERjNFMTA2NjQxNkU0RDg0QjVDQ0FDQUFBNkQ5Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfu5nRGqz+9NVa0HNf83MhSgtI
s+yo4tbrQaislZ4EM1d0bvzD+BCC0CzgZY/dvEYrC1QXCB/FsXzOFhEXE/xEDwxB
+pgevxiABD9RgzjYDTj8Bgu93OedaviJlwwlw6FD7wgXKABBLqoKkd8lJLl91o2b
Ot5CguauZ5Yx3dXlw+1oukF327Xt96v4XTFWnH2R6xEC4cut+UkIgMvHRg7VkzIn
FezIKKkbi6EHRYnffbSGSfCop2iF4/by8QLxOxrfbi4CvgJ4PDzY0BNGMCQgZof9
RuLHorTg5622rDvP9TplFzz/yeVJQ153c0/K/npdSZNUXoAXuM7Le05H1YTvAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUiW5JBR3fPhBmQW5NhLXMrKqm2cowHwYDVR0j
BBgwFoAU5Zy78Y/Hp53IMout4WrHEsmc/78wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGVoNWRTV042MXpUa3BYZ0x3OG5OTkFoNTNnU0Q3YjlIWUFSaVZ6ejRO
SFMvMC9FNTlDQkJGMThGQzdBNzlEQzgzMjhCQURFMTZBQzcxMkM5OUNGRkJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1OUNCQkYxOEZDN0E3OURD
ODMyOEJBREUxNkFDNzEyQzk5Q0ZGQkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hlaDVkU1dONjF6VGtwWGdMdzhuTk5BaDUzZ1NEN2I5SFlBUmlWeno0TkhTLzAv
MzIzODMwMzQzYTM4MzIzMjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMy
MzUzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASCJDANBgkqhkiG9w0BAQsFAAOCAQEAZeLcUxgW
8HaYjCwjlT2zNb+BzCauGWOuqVlTIDcn4NChIXw5JIT2tnTlT+pG1daysEsj0ZTH
OYZL3gff7yF3Xbnx33o41n6ZNqEzpR+ZmD8MWgFYbzRnhpRmjmbluwuEmdmtrRoZ
wbvkrX/j4MPmtS+I7cPwXqJNC6OPC/4lmYNEgRLnqySiBooJJFZ6SF3MIh73d2FV
+x1JM6wMOhVkQeUXjXdC/2JfUdGCnBAsXHkUc3ZY1R/ecSu0SJoaEGwbGgiYisSi
AbHE+jo3H3izwVp3Ys2pVX4hOnZ99OvrfGML2Dd17dOwavm7sAjH9NM2P+CWF0l1
t8WLsUn29/4q9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:59:28 2026 by rpki-client