Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/323830343a336631303a363230343a3a2f34382d3438203d3e20323632353636.roa
File:                     323830343a336631303a363230343a3a2f34382d3438203d3e20323632353636.roa (raw, json)
Hash identifier:          GtT4gbrUUH3OVl9OUszRZz+XB9sGDCKvLQwORuJ4ew8=
Subject key identifier:   35:5E:53:FA:69:6B:12:80:18:55:A5:D2:25:FC:8B:BE:CC:A6:BA:41
Certificate issuer:       /CN=C8232E7ADA2149C400868144F5DA83930BC26309
Certificate serial:       2D484ACA50217D7BAE0DE17938142E891145C398
Authority key identifier: C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/323830343a336631303a363230343a3a2f34382d3438203d3e20323632353636.roa
Signing time:             Thu 26 Feb 2026 18:55:52 +0000
ROA not before:           Thu 26 Feb 2026 18:50:52 +0000
ROA not after:            Thu 25 Feb 2027 18:55:52 +0000
asID:                     262566
IP address blocks:        2804:3f10:6204::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl
                          rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 12:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:48:4a:ca:50:21:7d:7b:ae:0d:e1:79:38:14:2e:89:11:45:c3:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8232E7ADA2149C400868144F5DA83930BC26309
        Validity
            Not Before: Feb 26 18:50:52 2026 GMT
            Not After : Feb 25 18:55:52 2027 GMT
        Subject: CN=355E53FA696B12801855A5D225FC8BBECCA6BA41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:78:6a:0d:f8:63:c9:bc:04:5f:a8:0a:07:
                    98:cd:c0:63:3f:23:75:c9:ad:ae:14:9e:97:23:03:
                    9f:de:a3:3d:8e:a0:0a:12:29:fd:16:cc:69:03:f9:
                    a9:d7:67:f1:f3:c6:fe:f2:02:2b:94:8d:65:69:04:
                    d2:c8:9d:2c:4c:98:a1:61:98:e5:bc:0f:d0:6a:1e:
                    76:af:e3:ea:f0:4e:81:7d:1f:2f:3b:ec:ce:2c:02:
                    4e:34:51:2f:51:b8:b2:7a:d1:9f:93:0f:8e:ca:9e:
                    af:57:68:aa:46:1f:a1:19:2d:52:b9:54:ce:77:a8:
                    58:38:62:e5:a5:2a:34:50:c9:b0:57:dd:4b:db:8e:
                    31:65:ab:85:52:82:ad:a0:42:3e:37:23:60:74:da:
                    e0:63:50:5f:e9:b8:c1:4d:e5:35:10:f5:8b:ca:dc:
                    15:21:cb:4c:79:29:26:18:d0:fa:71:a5:38:6f:0e:
                    86:42:94:1b:79:8b:51:94:e1:a3:d3:ed:ae:f0:a8:
                    55:f7:04:d6:09:43:79:c1:8c:bc:bb:13:b5:ab:ea:
                    d3:29:27:cd:5d:78:9f:43:6e:b0:68:78:b0:05:94:
                    6a:97:93:d6:b6:70:36:e0:90:61:ab:7e:27:ad:83:
                    f9:1c:77:66:a4:2f:5a:2f:42:ad:0b:ac:f3:3c:78:
                    ca:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5E:53:FA:69:6B:12:80:18:55:A5:D2:25:FC:8B:BE:CC:A6:BA:41
            X509v3 Authority Key Identifier:
                keyid:C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/323830343a336631303a363230343a3a2f34382d3438203d3e20323632353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f10:6204::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:9c:24:19:07:dd:4e:d2:c1:ab:5c:2e:1d:41:6e:39:43:1d:
         0b:7a:4e:5c:5a:97:86:ee:c5:19:a3:b2:1e:f2:4a:d2:f5:60:
         f0:d7:e5:66:39:4a:8b:33:17:00:c5:87:04:77:64:4e:cf:72:
         55:9c:39:df:52:44:45:00:c6:fe:fd:71:48:16:70:41:27:47:
         fe:1c:08:8f:2e:57:f7:22:cd:7d:a0:49:f5:39:c5:2d:04:42:
         91:51:e9:97:b4:79:cc:11:83:d2:31:dc:cd:01:e2:e8:31:24:
         80:6a:bd:d2:84:bf:57:f3:bf:74:4a:33:32:8f:99:a5:3f:9a:
         d8:de:0d:5f:ca:c1:97:30:96:8f:51:23:b7:4e:43:c9:ba:60:
         52:3c:8f:4f:53:ea:98:3f:5c:2b:24:e7:22:f9:2a:53:67:50:
         3b:37:a6:21:17:e2:5a:54:17:d5:b0:aa:23:bb:79:12:d8:f4:
         50:b6:0a:6f:36:dd:77:a8:31:65:53:be:16:c1:cb:c3:b9:fa:
         73:77:0a:85:55:5c:92:e4:fa:be:81:b2:75:1c:e1:61:b5:22:
         07:68:39:0d:b2:67:f2:bd:27:ff:dc:58:65:2d:58:f5:42:81:
         bb:67:8c:49:86:2b:b4:55:b7:1d:29:27:58:fa:1a:66:82:29:
         25:34:03:3e
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIULUhKylAhfXuuDeF5OBQuiRFFw5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgyMzJFN0FEQTIxNDlDNDAwODY4MTQ0RjVEQTgzOTMw
QkMyNjMwOTAeFw0yNjAyMjYxODUwNTJaFw0yNzAyMjUxODU1NTJaMDMxMTAvBgNV
BAMTKDM1NUU1M0ZBNjk2QjEyODAxODU1QTVEMjI1RkM4QkJFQ0NBNkJBNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNQXhqDfhjybwEX6gKB5jNwGM/
I3XJra4UnpcjA5/eoz2OoAoSKf0WzGkD+anXZ/Hzxv7yAiuUjWVpBNLInSxMmKFh
mOW8D9BqHnav4+rwToF9Hy877M4sAk40US9RuLJ60Z+TD47Knq9XaKpGH6EZLVK5
VM53qFg4YuWlKjRQybBX3UvbjjFlq4VSgq2gQj43I2B02uBjUF/puMFN5TUQ9YvK
3BUhy0x5KSYY0PpxpThvDoZClBt5i1GU4aPT7a7wqFX3BNYJQ3nBjLy7E7Wr6tMp
J81deJ9DbrBoeLAFlGqXk9a2cDbgkGGrfietg/kcd2akL1ovQq0LrPM8eMrdAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUNV5T+mlrEoAYVaXSJfyLvsymukEwHwYDVR0j
BBgwFoAUyCMuetohScQAhoFE9dqDkwvCYwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVtaFpGZ0RTb3pLUHZTQmYxanVENWY4TmdLQVZDS0pzWU1oY1RQc29G
VHcvMS9DODIzMkU3QURBMjE0OUM0MDA4NjgxNDRGNURBODM5MzBCQzI2MzA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4MjMyRTdBREEyMTQ5QzQw
MDg2ODE0NEY1REE4MzkzMEJDMjYzMDkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1bWhaRmdEU296S1B2U0JmMWp1RDVmOE5nS0FWQ0tKc1lNaGNUUHNvRlR3LzEv
MzIzODMwMzQzYTMzNjYzMTMwM2EzNjMyMzAzNDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzMjM1MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEPxBiBDANBgkqhkiG9w0BAQsF
AAOCAQEAiJwkGQfdTtLBq1wuHUFuOUMdC3pOXFqXhu7FGaOyHvJK0vVg8NflZjlK
izMXAMWHBHdkTs9yVZw531JERQDG/v1xSBZwQSdH/hwIjy5X9yLNfaBJ9TnFLQRC
kVHpl7R5zBGD0jHczQHi6DEkgGq90oS/V/O/dEozMo+ZpT+a2N4NX8rBlzCWj1Ej
t05DybpgUjyPT1PqmD9cKyTnIvkqU2dQOzemIRfiWlQX1bCqI7t5Etj0ULYKbzbd
d6gxZVO+FsHLw7n6c3cKhVVckuT6voGydRzhYbUiB2g5DbJn8r0n/9xYZS1Y9UKB
u2eMSYYrtFW3HSknWPoaZoIpJTQDPg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:53:49 2026 by rpki-client