Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/323830343a333831343a3a2f33322d3438203d3e20323636343534.roa
File:                     323830343a333831343a3a2f33322d3438203d3e20323636343534.roa (raw, json)
Hash identifier:          D5J1HFJsrxrH69rEn6ps23EZ8dZaQlr9Ev+gtiv+PBc=
Subject key identifier:   CB:65:D8:23:09:87:A4:A7:A5:65:99:A3:1B:58:C3:25:5E:CB:19:10
Certificate issuer:       /CN=FE287030880D0123AC89374793BF7EEEFC18D5AE
Certificate serial:       17A0C7C4F8308174594335780811DF59A5F73F85
Authority key identifier: FE:28:70:30:88:0D:01:23:AC:89:37:47:93:BF:7E:EE:FC:18:D5:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/323830343a333831343a3a2f33322d3438203d3e20323636343534.roa
Signing time:             Tue 10 Mar 2026 17:25:46 +0000
ROA not before:           Tue 10 Mar 2026 17:20:46 +0000
ROA not after:            Tue 09 Mar 2027 17:25:46 +0000
asID:                     266454
IP address blocks:        2804:3814::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.crl
                          rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 00:49:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a0:c7:c4:f8:30:81:74:59:43:35:78:08:11:df:59:a5:f7:3f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE287030880D0123AC89374793BF7EEEFC18D5AE
        Validity
            Not Before: Mar 10 17:20:46 2026 GMT
            Not After : Mar  9 17:25:46 2027 GMT
        Subject: CN=CB65D8230987A4A7A56599A31B58C3255ECB1910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:5c:c6:e8:81:a2:aa:ef:ee:28:80:a7:6d:
                    f0:97:8a:62:4a:ff:06:48:77:6c:4d:65:91:ee:41:
                    dc:0f:30:f5:7b:32:23:9c:7b:f2:52:93:d5:62:6a:
                    02:76:39:75:2a:47:c4:54:1e:d6:c1:9f:7b:2f:49:
                    66:c6:c5:a7:2b:7a:a2:bf:6d:34:34:7e:80:73:7d:
                    14:8f:04:ca:b0:64:06:39:5a:55:35:62:46:bb:d3:
                    60:8f:bc:56:d9:26:3a:a6:91:c7:ef:ee:c7:3f:e9:
                    cc:d9:ae:aa:0a:00:5f:3d:bf:e6:f7:30:c0:39:2b:
                    7a:a5:16:e3:a9:2b:0b:78:6a:be:7f:46:bf:9f:b0:
                    ac:23:1d:4e:a6:86:82:76:c5:cc:50:ef:bd:58:27:
                    ed:aa:75:89:69:80:c7:70:2e:2a:ef:3f:cf:02:4e:
                    9e:53:fe:29:1b:1c:8b:f9:86:bd:11:95:fe:c3:d9:
                    f0:78:7a:d3:9f:04:c7:4b:73:f1:86:bd:bb:76:11:
                    83:c2:37:68:27:6a:83:5a:ac:98:a1:1f:7e:ba:3b:
                    94:73:03:25:1f:8a:b6:0d:07:e6:e8:2b:e9:e2:e8:
                    c2:a4:e1:5e:cc:0c:25:0b:cf:9a:04:9a:66:30:72:
                    cd:16:63:89:6d:7e:78:4b:f0:dd:03:c5:cd:67:3c:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:65:D8:23:09:87:A4:A7:A5:65:99:A3:1B:58:C3:25:5E:CB:19:10
            X509v3 Authority Key Identifier:
                keyid:FE:28:70:30:88:0D:01:23:AC:89:37:47:93:BF:7E:EE:FC:18:D5:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/323830343a333831343a3a2f33322d3438203d3e20323636343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3814::/32

    Signature Algorithm: sha256WithRSAEncryption
         d1:52:a5:c7:7d:69:a9:45:c6:28:82:24:5d:8a:8d:ad:1c:2c:
         8c:26:a4:42:38:8e:aa:c5:e4:21:69:bb:99:72:f9:58:81:04:
         82:8c:4c:8b:d0:b5:5f:19:3a:39:4d:ef:ba:bd:03:af:20:e2:
         d2:2c:d3:f0:d6:09:47:ac:97:4e:b2:04:cf:78:da:e1:51:b3:
         f5:98:d1:36:ad:e7:e2:f2:f8:ed:2c:0a:9b:ae:4f:81:05:73:
         9a:a6:45:0a:c4:2a:d6:3d:5d:ed:80:c3:2e:35:91:19:14:ad:
         5c:42:05:02:2f:dd:b3:48:17:b3:35:78:5f:16:dd:79:19:d5:
         02:d8:28:76:ff:d3:6b:2f:c5:22:8b:16:ad:9b:91:0e:4a:61:
         29:78:de:c0:0d:62:62:e5:31:37:88:d9:16:84:80:69:1a:49:
         25:f8:92:53:4a:23:cd:50:db:f9:f4:9f:a2:89:dd:a3:c5:03:
         ac:6c:d6:08:03:cf:ad:16:e4:03:d9:57:c0:40:8f:89:86:df:
         08:8b:a4:a9:e3:c6:8f:a9:79:a6:16:52:6b:c1:e4:03:70:61:
         78:1b:ec:8d:de:97:2f:5c:8f:fc:7c:fa:6b:9d:6e:1c:ce:f5:
         ae:0c:5a:44:79:81:50:d2:f8:71:0b:64:82:42:ff:ca:5d:7f:
         b2:91:de:e0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUF6DHxPgwgXRZQzV4CBHfWaX3P4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUyODcwMzA4ODBEMDEyM0FDODkzNzQ3OTNCRjdFRUVG
QzE4RDVBRTAeFw0yNjAzMTAxNzIwNDZaFw0yNzAzMDkxNzI1NDZaMDMxMTAvBgNV
BAMTKENCNjVEODIzMDk4N0E0QTdBNTY1OTlBMzFCNThDMzI1NUVDQjE5MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0FzG6IGiqu/uKICnbfCXimJK
/wZId2xNZZHuQdwPMPV7MiOce/JSk9ViagJ2OXUqR8RUHtbBn3svSWbGxacreqK/
bTQ0foBzfRSPBMqwZAY5WlU1Yka702CPvFbZJjqmkcfv7sc/6czZrqoKAF89v+b3
MMA5K3qlFuOpKwt4ar5/Rr+fsKwjHU6mhoJ2xcxQ771YJ+2qdYlpgMdwLirvP88C
Tp5T/ikbHIv5hr0Rlf7D2fB4etOfBMdLc/GGvbt2EYPCN2gnaoNarJihH366O5Rz
AyUfirYNB+boK+ni6MKk4V7MDCULz5oEmmYwcs0WY4ltfnhL8N0Dxc1nPG+TAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUy2XYIwmHpKelZZmjG1jDJV7LGRAwHwYDVR0j
BBgwFoAU/ihwMIgNASOsiTdHk79+7vwY1a4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlhwNWV3aURiQ25GZDN4bkMyVjVwcG1WYWt1WVVZeER3ZHZmWURtd2dk
M1MvMC9GRTI4NzAzMDg4MEQwMTIzQUM4OTM3NDc5M0JGN0VFRUZDMThENUFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFMjg3MDMwODgwRDAxMjNB
Qzg5Mzc0NzkzQkY3RUVFRkMxOEQ1QUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJYcDVld2lEYkNuRmQzeG5DMlY1cHBtVmFrdVlVWXhEd2R2ZllEbXdnZDNTLzAv
MzIzODMwMzQzYTMzMzgzMTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzQzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ4FDANBgkqhkiG9w0BAQsFAAOCAQEA0VKlx31p
qUXGKIIkXYqNrRwsjCakQjiOqsXkIWm7mXL5WIEEgoxMi9C1Xxk6OU3vur0DryDi
0izT8NYJR6yXTrIEz3ja4VGz9ZjRNq3n4vL47SwKm65PgQVzmqZFCsQq1j1d7YDD
LjWRGRStXEIFAi/ds0gXszV4XxbdeRnVAtgodv/Tay/FIosWrZuRDkphKXjewA1i
YuUxN4jZFoSAaRpJJfiSU0ojzVDb+fSfoondo8UDrGzWCAPPrRbkA9lXwECPiYbf
CIukqePGj6l5phZSa8HkA3BheBvsjd6XL1yP/Hz6a51uHM71rgxaRHmBUNL4cQtk
gkL/yl1/spHe4A==
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:37:53 2026 by rpki-client