Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/323830343a376630633a336530303a3a2f34302d3430203d3e20323731363633.roa
File:                     323830343a376630633a336530303a3a2f34302d3430203d3e20323731363633.roa (raw, json)
Hash identifier:          SpiIHzqB8x1TINxlw86uwDcFLhykWpedpP0R13nq+dA=
Subject key identifier:   FF:2B:04:92:94:12:B1:0C:5F:14:BB:C8:5B:A1:D8:70:51:B3:76:83
Certificate issuer:       /CN=C157E5F588C0832A94818A6C0EEC46D363140D95
Certificate serial:       023D0AE727FF5C22C0AF182EB84265BDAD780E1F
Authority key identifier: C1:57:E5:F5:88:C0:83:2A:94:81:8A:6C:0E:EC:46:D3:63:14:0D:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/323830343a376630633a336530303a3a2f34302d3430203d3e20323731363633.roa
Signing time:             Wed 22 Apr 2026 21:24:02 +0000
ROA not before:           Wed 22 Apr 2026 21:19:02 +0000
ROA not after:            Wed 21 Apr 2027 21:24:02 +0000
asID:                     271663
IP address blocks:        2804:7f0c:3e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.crl
                          rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3d:0a:e7:27:ff:5c:22:c0:af:18:2e:b8:42:65:bd:ad:78:0e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C157E5F588C0832A94818A6C0EEC46D363140D95
        Validity
            Not Before: Apr 22 21:19:02 2026 GMT
            Not After : Apr 21 21:24:02 2027 GMT
        Subject: CN=FF2B04929412B10C5F14BBC85BA1D87051B37683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:97:f5:7a:6f:7c:1a:5b:08:11:05:7f:6c:
                    f7:33:cd:0a:2a:d2:30:9e:f6:7a:ef:b2:ff:b3:7d:
                    00:a3:1d:d8:96:4e:f7:87:1c:00:4c:b8:e0:d5:8d:
                    f4:98:ab:a7:20:46:92:86:4d:79:4a:b6:88:9d:0d:
                    0f:00:99:4f:89:08:fb:3d:ce:40:fc:c9:43:de:ad:
                    05:21:6a:bf:b5:36:1f:c5:e9:3a:f6:b7:ba:ec:9b:
                    f4:24:2b:08:3a:57:56:9e:8b:1d:16:95:64:52:2e:
                    b1:db:f2:82:31:8a:db:2c:89:8a:5f:44:65:13:79:
                    48:24:41:2e:21:3e:7c:17:61:73:9e:c6:21:3f:1c:
                    db:ff:ce:6b:60:03:db:14:ab:00:82:ff:fd:d0:29:
                    fc:25:fb:5d:ea:e2:2d:1d:9c:de:ab:80:76:58:bc:
                    0d:cb:47:bc:72:46:2c:e0:4f:c6:43:eb:3a:cf:b0:
                    d9:c7:e6:dd:a8:34:42:bc:2a:aa:f9:14:29:c5:61:
                    eb:1e:b5:af:f8:49:78:77:fe:88:74:3d:33:af:50:
                    44:ce:ca:35:7a:f5:e6:b9:e9:a5:91:7c:6e:15:8f:
                    44:a8:5c:87:88:c5:a8:da:1c:a4:36:6d:59:2e:53:
                    56:0f:07:f1:b7:c7:3d:6d:e7:b1:82:fc:44:fd:c7:
                    3c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2B:04:92:94:12:B1:0C:5F:14:BB:C8:5B:A1:D8:70:51:B3:76:83
            X509v3 Authority Key Identifier:
                keyid:C1:57:E5:F5:88:C0:83:2A:94:81:8A:6C:0E:EC:46:D3:63:14:0D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/323830343a376630633a336530303a3a2f34302d3430203d3e20323731363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f0c:3e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:eb:26:2e:47:7e:91:e6:ba:4f:98:ee:77:e8:4b:83:7c:88:
         cc:16:7b:ef:c9:6d:0b:e3:c7:af:ae:c3:f8:c9:56:48:1f:43:
         25:97:33:f1:56:a3:54:f4:8b:7a:3f:22:a5:f4:02:82:ee:ac:
         32:cb:fc:7a:07:7d:2f:cd:0a:2d:30:55:c9:73:3c:9a:21:3c:
         0e:5f:b6:4b:14:1d:c2:9d:5a:cc:43:5f:10:5e:da:14:76:71:
         03:42:b5:b8:b9:ef:86:9b:ea:7e:27:9b:49:35:ca:8e:81:8e:
         f8:78:4f:27:86:35:05:a0:fe:fe:e0:e7:6d:37:3f:b3:f3:86:
         28:da:d9:f7:b6:27:6e:95:ec:89:11:70:12:21:74:53:4e:f2:
         af:c8:bc:5f:c8:c5:cb:1a:f5:0d:d2:a7:eb:f9:ee:c9:ae:6a:
         08:f4:86:14:68:95:57:6f:1d:9f:67:10:7b:54:8d:fe:05:c5:
         da:af:c2:44:41:18:e7:db:ad:d4:ab:21:df:40:98:12:34:af:
         91:f3:82:f3:bd:0e:e1:57:d9:de:09:33:eb:f9:30:76:1d:4b:
         58:90:44:5b:29:4b:f2:83:41:f8:a6:e6:81:83:01:89:30:1a:
         7b:0c:4b:ce:b6:21:d7:a4:15:b7:d9:e8:9b:8d:cb:b0:98:2a:
         72:0e:96:69
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAj0K5yf/XCLArxguuEJlva14Dh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzE1N0U1RjU4OEMwODMyQTk0ODE4QTZDMEVFQzQ2RDM2
MzE0MEQ5NTAeFw0yNjA0MjIyMTE5MDJaFw0yNzA0MjEyMTI0MDJaMDMxMTAvBgNV
BAMTKEZGMkIwNDkyOTQxMkIxMEM1RjE0QkJDODVCQTFEODcwNTFCMzc2ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgnZf1em98GlsIEQV/bPczzQoq
0jCe9nrvsv+zfQCjHdiWTveHHABMuODVjfSYq6cgRpKGTXlKtoidDQ8AmU+JCPs9
zkD8yUPerQUhar+1Nh/F6Tr2t7rsm/QkKwg6V1aeix0WlWRSLrHb8oIxitssiYpf
RGUTeUgkQS4hPnwXYXOexiE/HNv/zmtgA9sUqwCC//3QKfwl+13q4i0dnN6rgHZY
vA3LR7xyRizgT8ZD6zrPsNnH5t2oNEK8Kqr5FCnFYeseta/4SXh3/oh0PTOvUETO
yjV69ea56aWRfG4Vj0SoXIeIxajaHKQ2bVkuU1YPB/G3xz1t57GC/ET9xzzRAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU/ysEkpQSsQxfFLvIW6HYcFGzdoMwHwYDVR0j
BBgwFoAUwVfl9YjAgyqUgYpsDuxG02MUDZUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmpXYUxTdHNuYkNwVUd1YzdZUUNFM2lRcU5qamdjdUVFOGVyN054MThK
cEcvMC9DMTU3RTVGNTg4QzA4MzJBOTQ4MThBNkMwRUVDNDZEMzYzMTQwRDk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxNTdFNUY1ODhDMDgzMkE5
NDgxOEE2QzBFRUM0NkQzNjMxNDBEOTUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJqV2FMU3RzbmJDcFVHdWM3WVFDRTNpUXFOampnY3VFRThlcjdOeDE4SnBHLzAv
MzIzODMwMzQzYTM3NjYzMDYzM2EzMzY1MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMTM2MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEfww+MA0GCSqGSIb3DQEBCwUA
A4IBAQAQ6yYuR36R5rpPmO536EuDfIjMFnvvyW0L48evrsP4yVZIH0MllzPxVqNU
9It6PyKl9AKC7qwyy/x6B30vzQotMFXJczyaITwOX7ZLFB3CnVrMQ18QXtoUdnED
QrW4ue+Gm+p+J5tJNcqOgY74eE8nhjUFoP7+4OdtNz+z84Yo2tn3tiduleyJEXAS
IXRTTvKvyLxfyMXLGvUN0qfr+e7JrmoI9IYUaJVXbx2fZxB7VI3+BcXar8JEQRjn
263UqyHfQJgSNK+R84LzvQ7hV9neCTPr+TB2HUtYkERbKUvyg0H4puaBgwGJMBp7
DEvOtiHXpBW32eibjcuwmCpyDpZp
-----END CERTIFICATE-----
Generated at Wed May 13 20:14:06 2026 by rpki-client