Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/323830343a363038303a3a2f33332d3333203d3e20323639313731.roa
File:                     323830343a363038303a3a2f33332d3333203d3e20323639313731.roa (raw, json)
Hash identifier:          CgbTx3v8qCxvoFcTkOCqSiL5iM9ONex/jN9Nb2BQBgA=
Subject key identifier:   F2:85:2A:AA:E4:94:82:30:6E:08:AD:C6:68:78:96:39:21:E3:69:9C
Certificate issuer:       /CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
Certificate serial:       582C17FFBA975BC7F7C2FE604F48EA9C5AAD8F51
Authority key identifier: 36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/323830343a363038303a3a2f33332d3333203d3e20323639313731.roa
Signing time:             Fri 10 Apr 2026 00:02:31 +0000
ROA not before:           Thu 09 Apr 2026 23:57:31 +0000
ROA not after:            Fri 09 Apr 2027 00:02:31 +0000
asID:                     269171
IP address blocks:        2804:6080::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl
                          rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 05:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2c:17:ff:ba:97:5b:c7:f7:c2:fe:60:4f:48:ea:9c:5a:ad:8f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
        Validity
            Not Before: Apr  9 23:57:31 2026 GMT
            Not After : Apr  9 00:02:31 2027 GMT
        Subject: CN=F2852AAAE49482306E08ADC66878963921E3699C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e3:dd:b9:b7:61:5e:de:de:9a:67:3b:a7:af:
                    5d:1a:bd:b3:37:7a:9d:26:5a:7c:42:9a:14:f6:f0:
                    b4:0f:60:80:ff:44:45:07:0c:29:aa:93:b7:1b:80:
                    c1:a3:e7:f5:d0:08:f2:65:fe:a7:c5:32:57:68:8b:
                    34:f8:aa:a8:2d:ba:2c:97:2e:6d:e4:d9:74:69:95:
                    c6:6f:b8:e0:f3:d5:fb:05:0d:29:d0:11:48:88:b4:
                    10:b5:19:1f:db:ba:a0:ae:67:45:a6:dc:3c:3e:36:
                    fa:e5:48:43:05:94:e3:e5:7c:14:0f:35:26:68:ec:
                    f3:3e:42:22:12:94:24:a0:22:43:e3:17:31:25:68:
                    b6:fa:38:ef:0b:75:e6:5c:da:29:00:9d:b0:a3:39:
                    c8:82:07:d6:ff:99:33:05:03:3b:14:1d:18:c4:d4:
                    68:b0:6b:70:5a:2b:6a:1c:5d:b3:7b:1f:d4:9e:70:
                    d7:80:3d:83:da:08:45:87:38:b6:68:80:ed:b7:80:
                    e2:e3:05:5c:7f:01:bb:7f:61:db:72:1d:92:6d:8a:
                    ef:1c:c4:f7:f8:4f:e4:c1:90:f9:23:27:9c:c5:b5:
                    9c:cc:1d:f8:51:42:02:79:80:78:46:4e:6c:d6:b6:
                    23:7b:32:1b:b6:35:6b:d2:17:c3:2c:6d:9d:30:55:
                    a0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:85:2A:AA:E4:94:82:30:6E:08:AD:C6:68:78:96:39:21:E3:69:9C
            X509v3 Authority Key Identifier:
                keyid:36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/323830343a363038303a3a2f33332d3333203d3e20323639313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6080::/33

    Signature Algorithm: sha256WithRSAEncryption
         b4:23:fd:fd:8e:3d:05:b4:3e:9d:7e:f8:81:fd:49:1b:bc:d2:
         bd:cd:71:64:a0:d7:93:d1:9c:53:d2:a9:1f:37:36:85:f0:ef:
         04:15:18:41:8a:ac:ae:83:01:63:bc:60:cc:ba:59:22:52:0b:
         e4:ae:cf:77:1f:24:49:7f:7c:f0:c4:fc:a7:91:04:5e:44:bd:
         7f:66:f7:01:cf:42:df:e7:de:ad:7c:8f:ef:00:33:e2:6d:71:
         c1:b5:b7:e2:79:f6:b2:3e:c3:ff:1e:b2:cb:65:3f:8a:ed:a0:
         8e:a8:a6:85:de:91:58:cc:a8:7b:6f:1f:b5:a1:3a:62:a7:0f:
         34:51:47:8d:54:6c:b3:8e:85:1f:cc:2d:d8:de:96:65:0d:20:
         8e:a4:09:d6:ac:cb:50:2c:77:02:06:ad:6c:1d:7f:45:df:c6:
         8f:ca:96:c8:53:92:65:aa:8b:8a:95:a0:6e:b2:f8:c1:60:dc:
         b2:24:58:88:d3:17:ad:ed:12:68:7f:c4:36:b3:0d:21:71:ef:
         80:3b:5e:78:b0:1e:a0:73:8b:17:2b:fe:79:46:46:5d:f5:0a:
         f2:f6:09:c0:55:9b:73:c3:fd:be:1f:46:37:22:07:5f:77:9d:
         59:da:1e:67:c6:15:d3:bb:43:66:f2:f4:8a:08:5b:4d:95:be:
         81:73:68:dd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWCwX/7qXW8f3wv5gT0jqnFqtj1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYxQzRCNkQ3M0M2NTYxNURCQUZCM0U2MDVERkI3NzIw
RjlEMkM1QzAeFw0yNjA0MDkyMzU3MzFaFw0yNzA0MDkwMDAyMzFaMDMxMTAvBgNV
BAMTKEYyODUyQUFBRTQ5NDgyMzA2RTA4QURDNjY4Nzg5NjM5MjFFMzY5OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX4925t2Fe3t6aZzunr10avbM3
ep0mWnxCmhT28LQPYID/REUHDCmqk7cbgMGj5/XQCPJl/qfFMldoizT4qqgtuiyX
Lm3k2XRplcZvuODz1fsFDSnQEUiItBC1GR/buqCuZ0Wm3Dw+NvrlSEMFlOPlfBQP
NSZo7PM+QiISlCSgIkPjFzElaLb6OO8LdeZc2ikAnbCjOciCB9b/mTMFAzsUHRjE
1Giwa3BaK2ocXbN7H9SecNeAPYPaCEWHOLZogO23gOLjBVx/Abt/YdtyHZJtiu8c
xPf4T+TBkPkjJ5zFtZzMHfhRQgJ5gHhGTmzWtiN7Mhu2NWvSF8MsbZ0wVaD5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8oUqquSUgjBuCK3GaHiWOSHjaZwwHwYDVR0j
BBgwFoAUNhxLbXPGVhXbr7PmBd+3cg+dLFwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG54Y0hSTE1xNHl3RERzMlZWdTkzTDZZM0FKWVpkQ21NN05ENW5ncUJZ
aU4vMC8zNjFDNEI2RDczQzY1NjE1REJBRkIzRTYwNURGQjc3MjBGOUQyQzVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2MUM0QjZENzNDNjU2MTVE
QkFGQjNFNjA1REZCNzcyMEY5RDJDNUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hueGNIUkxNcTR5d0REczJWVnU5M0w2WTNBSllaZENtTTdORDVuZ3FCWWlOLzAv
MzIzODMwMzQzYTM2MzAzODMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM5
MzEzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARggAAwDQYJKoZIhvcNAQELBQADggEBALQj/f2O
PQW0Pp1++IH9SRu80r3NcWSg15PRnFPSqR83NoXw7wQVGEGKrK6DAWO8YMy6WSJS
C+Suz3cfJEl/fPDE/KeRBF5EvX9m9wHPQt/n3q18j+8AM+JtccG1t+J59rI+w/8e
sstlP4rtoI6opoXekVjMqHtvH7WhOmKnDzRRR41UbLOOhR/MLdjelmUNII6kCdas
y1AsdwIGrWwdf0Xfxo/KlshTkmWqi4qVoG6y+MFg3LIkWIjTF63tEmh/xDazDSFx
74A7XniwHqBzixcr/nlGRl31CvL2CcBVm3PD/b4fRjciB193nVnaHmfGFdO7Q2by
9IoIW02VvoFzaN0=
-----END CERTIFICATE-----
Generated at Sat Apr 18 11:32:15 2026 by rpki-client