Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33332d3634203d3e203631363936.roa
File:                     323830343a316165303a3a2f33332d3634203d3e203631363936.roa (raw, json)
Hash identifier:          hkhkMo5McuXxDb02PG2+GNvBy8ImC7Oa3hVorjwfXqc=
Subject key identifier:   2B:9B:19:3C:93:FA:A8:71:23:1C:A0:0B:C1:7B:AF:39:9C:CB:7B:97
Certificate issuer:       /CN=0688357ED433C0A60770FB474BDB2C72796B78BD
Certificate serial:       5F6C1AFB472BBCCA3BB2E726CEB246ED8ADED2D8
Authority key identifier: 06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33332d3634203d3e203631363936.roa
Signing time:             Fri 13 Mar 2026 22:26:31 +0000
ROA not before:           Fri 13 Mar 2026 22:21:31 +0000
ROA not after:            Fri 12 Mar 2027 22:26:31 +0000
asID:                     61696
IP address blocks:        2804:1ae0::/33 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl
                          rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 11:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6c:1a:fb:47:2b:bc:ca:3b:b2:e7:26:ce:b2:46:ed:8a:de:d2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0688357ED433C0A60770FB474BDB2C72796B78BD
        Validity
            Not Before: Mar 13 22:21:31 2026 GMT
            Not After : Mar 12 22:26:31 2027 GMT
        Subject: CN=2B9B193C93FAA871231CA00BC17BAF399CCB7B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6a:b8:94:d8:29:a2:d6:d6:e2:c5:37:fe:02:
                    41:57:54:8d:19:0d:06:eb:fa:69:2c:55:29:5a:8c:
                    21:01:40:72:b8:79:e4:55:1c:59:db:d0:af:5c:ff:
                    b5:2a:7e:fd:fc:22:80:f4:8d:0c:5f:66:47:c0:23:
                    f3:28:c6:31:55:6e:c7:e6:ef:21:2f:fd:0f:cc:cd:
                    cc:ce:d9:98:c7:ce:19:ec:0c:f3:05:82:36:9b:bd:
                    3c:bc:db:5a:00:76:f4:3a:e0:25:92:96:64:49:df:
                    ae:10:2d:f8:8b:33:d8:eb:8b:df:a6:af:25:17:29:
                    56:ec:d3:2e:76:4b:1d:a7:ad:2f:24:0b:72:65:b4:
                    12:44:f0:dc:8e:da:65:6c:95:c8:f0:6f:f1:6f:e3:
                    a6:4d:b1:be:67:dd:f2:b5:af:97:90:a2:b4:e6:2c:
                    45:1a:bb:3f:80:e1:86:0b:33:06:1a:a8:3d:60:08:
                    e6:30:c2:39:a7:b1:3b:35:ba:2d:27:02:a7:58:5b:
                    eb:4b:c0:49:e7:0a:16:aa:ca:15:ad:51:a2:f3:54:
                    60:76:26:6b:ee:85:3e:e0:11:af:7b:04:43:12:64:
                    43:59:12:8d:2c:ec:dc:58:6f:d9:4b:c0:2a:fd:5c:
                    0b:35:f3:14:fb:6d:cf:ce:c6:67:92:7a:8c:6a:6e:
                    68:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9B:19:3C:93:FA:A8:71:23:1C:A0:0B:C1:7B:AF:39:9C:CB:7B:97
            X509v3 Authority Key Identifier:
                keyid:06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/323830343a316165303a3a2f33332d3634203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ae0::/33

    Signature Algorithm: sha256WithRSAEncryption
         39:2a:87:a3:99:16:ab:45:19:d8:7d:48:9f:62:96:76:bb:27:
         60:fc:b0:4b:19:11:b5:5d:10:74:c7:a5:28:b2:e7:40:6b:6f:
         36:12:56:cb:be:eb:40:73:59:16:8e:f2:66:86:3b:0c:b3:c5:
         3d:12:ee:4d:13:f4:ac:ef:77:04:4a:53:b2:66:39:b6:aa:95:
         57:92:5f:2f:a3:fb:7a:8e:74:52:3c:7b:fa:e8:e4:4d:f9:16:
         a2:b3:25:3b:02:69:e2:18:50:f1:11:0a:6f:3e:d6:81:a7:42:
         69:5c:f8:56:56:95:ea:f8:09:d7:8f:82:f8:85:41:0b:86:c1:
         a9:ef:d3:ff:dc:5e:e8:e6:2a:76:aa:6f:5c:21:0c:f7:fc:da:
         af:ae:99:ec:57:0f:c7:75:19:f4:1a:3e:0d:90:1d:74:77:c2:
         30:c7:d4:20:ed:5e:56:44:88:37:b3:c7:50:df:da:e8:ac:9b:
         b2:7d:97:a3:b3:66:d7:e1:b3:e0:18:d8:54:1b:9f:e4:e9:dd:
         d0:da:3d:db:97:e5:8d:e8:d7:74:0a:9c:5f:8e:1f:78:23:91:
         12:2f:13:9c:49:b7:4f:52:60:15:07:17:2b:d8:a8:b6:06:cf:
         f3:29:d4:1b:2e:26:37:68:34:9b:b1:b1:6d:b1:e8:59:88:e1:
         6a:b0:0a:92
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX2wa+0crvMo7sucmzrJG7Yre0tgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY4ODM1N0VENDMzQzBBNjA3NzBGQjQ3NEJEQjJDNzI3
OTZCNzhCRDAeFw0yNjAzMTMyMjIxMzFaFw0yNzAzMTIyMjI2MzFaMDMxMTAvBgNV
BAMTKDJCOUIxOTNDOTNGQUE4NzEyMzFDQTAwQkMxN0JBRjM5OUNDQjdCOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWariU2Cmi1tbixTf+AkFXVI0Z
DQbr+mksVSlajCEBQHK4eeRVHFnb0K9c/7Uqfv38IoD0jQxfZkfAI/MoxjFVbsfm
7yEv/Q/MzczO2ZjHzhnsDPMFgjabvTy821oAdvQ64CWSlmRJ364QLfiLM9jri9+m
ryUXKVbs0y52Sx2nrS8kC3JltBJE8NyO2mVslcjwb/Fv46ZNsb5n3fK1r5eQorTm
LEUauz+A4YYLMwYaqD1gCOYwwjmnsTs1ui0nAqdYW+tLwEnnChaqyhWtUaLzVGB2
JmvuhT7gEa97BEMSZENZEo0s7NxYb9lLwCr9XAs18xT7bc/OxmeSeoxqbmijAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUK5sZPJP6qHEjHKALwXuvOZzLe5cwHwYDVR0j
BBgwFoAUBog1ftQzwKYHcPtHS9sscnlreL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNX
c3gvMC8wNjg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODgzNTdFRDQzM0MwQTYw
NzcwRkI0NzRCREIyQzcyNzk2Qjc4QkQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJYRWlSSk5VZVV3dmVjWGI2TWh6TURpTUpVb1lhZXI4N2ozcXljalRjV3N4LzAv
MzIzODMwMzQzYTMxNjE2NTMwM2EzYTJmMzMzMzJkMzYzNDIwM2QzZTIwMzYzMTM2
MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygEGuAAMA0GCSqGSIb3DQEBCwUAA4IBAQA5KoejmRar
RRnYfUifYpZ2uydg/LBLGRG1XRB0x6UosudAa282ElbLvutAc1kWjvJmhjsMs8U9
Eu5NE/Ss73cESlOyZjm2qpVXkl8vo/t6jnRSPHv66ORN+RaisyU7AmniGFDxEQpv
PtaBp0JpXPhWVpXq+AnXj4L4hUELhsGp79P/3F7o5ip2qm9cIQz3/NqvrpnsVw/H
dRn0Gj4NkB10d8Iwx9Qg7V5WRIg3s8dQ39rorJuyfZejs2bX4bPgGNhUG5/k6d3Q
2j3bl+WN6Nd0Cpxfjh94I5ESLxOcSbdPUmAVBxcr2Ki2Bs/zKdQbLiY3aDSbsbFt
sehZiOFqsAqS
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:28:43 2026 by rpki-client