Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa
File:                     323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa (raw, json)
Hash identifier:          h1dDA5ZyeQXs/UC/Gdy8hngAZLXhdJ17+oiJW1xH4HU=
Subject key identifier:   BF:5F:6A:01:5B:BE:F3:94:E9:74:0D:3B:02:76:D2:ED:CC:58:B8:F3
Certificate issuer:       /CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
Certificate serial:       1BC25E0345FCA5A14659EA2DDB78FE8862C14704
Authority key identifier: 67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa
Signing time:             Thu 26 Mar 2026 19:33:13 +0000
ROA not before:           Thu 26 Mar 2026 19:28:13 +0000
ROA not after:            Thu 25 Mar 2027 19:33:13 +0000
asID:                     267373
IP address blocks:        2804:4c7c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl
                          rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c2:5e:03:45:fc:a5:a1:46:59:ea:2d:db:78:fe:88:62:c1:47:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E390BE3E2214C4FBBADD091C55EEBAE671D882
        Validity
            Not Before: Mar 26 19:28:13 2026 GMT
            Not After : Mar 25 19:33:13 2027 GMT
        Subject: CN=BF5F6A015BBEF394E9740D3B0276D2EDCC58B8F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:04:86:27:b9:db:34:a7:23:6b:4a:c4:87:a4:
                    74:85:4e:a7:ec:da:75:78:e8:f6:e6:2c:77:66:ae:
                    93:01:d2:63:6b:4a:67:ca:8c:d0:7b:86:42:2e:41:
                    8a:77:30:20:d9:ed:61:d7:eb:b0:a8:19:d7:33:b2:
                    3e:3e:ae:f3:09:25:ac:1d:6e:57:a8:4b:37:e9:fe:
                    b8:3e:f3:88:7d:41:c2:23:f5:4e:f9:86:b2:76:5a:
                    08:2c:5d:66:f3:f8:11:4d:58:0e:8d:f2:9f:6d:62:
                    da:f7:c7:0e:a5:4c:16:f7:3c:37:66:a6:60:13:6e:
                    81:38:50:cf:2e:b5:34:cc:40:1e:69:0a:ba:7b:a9:
                    50:1d:33:c7:f4:69:95:ac:98:2c:82:05:93:9f:f3:
                    d3:98:5e:56:15:e3:36:12:d1:c5:e2:5f:eb:64:97:
                    e5:66:bf:83:4e:29:38:c3:d1:bd:8e:0f:37:01:38:
                    a2:01:a6:65:82:d1:8c:ff:f0:7c:fd:54:ef:31:35:
                    00:1a:f3:77:88:0a:ef:cd:2c:41:7e:19:c9:2f:4e:
                    d9:6d:9d:ed:88:31:1d:6c:60:9e:54:c8:79:d8:bc:
                    18:ff:a9:4f:e8:ec:05:b1:a8:f8:20:a5:e8:fa:f1:
                    7b:1a:a5:c9:2b:eb:d6:88:dd:99:22:d9:7d:28:20:
                    21:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5F:6A:01:5B:BE:F3:94:E9:74:0D:3B:02:76:D2:ED:CC:58:B8:F3
            X509v3 Authority Key Identifier:
                keyid:67:E3:90:BE:3E:22:14:C4:FB:BA:DD:09:1C:55:EE:BA:E6:71:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/67E390BE3E2214C4FBBADD091C55EEBAE671D882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E390BE3E2214C4FBBADD091C55EEBAE671D882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a383030303a3a2f33332d3333203d3e20323637333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c7c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         28:0c:d1:cb:bf:e1:27:6f:b5:23:3f:82:7f:3c:db:eb:e1:93:
         7b:bf:e5:00:43:10:a0:4f:8d:e6:00:38:fa:42:a7:ef:d4:5c:
         5c:7e:03:51:be:cf:44:b1:51:9e:aa:ea:9c:56:08:b9:e0:28:
         ab:1a:c2:13:b3:9a:44:75:58:d9:90:6d:73:d5:2f:c1:f6:7a:
         bb:f4:b5:64:af:d6:a5:a8:ad:0c:e1:51:42:25:c6:c6:c8:e0:
         d1:72:11:6c:36:49:82:60:4e:ba:49:16:cb:80:bc:f2:5e:3c:
         18:59:b0:fc:8c:37:5c:b4:d6:80:f2:13:2b:93:56:fc:43:23:
         bf:dc:cd:54:13:03:18:9a:32:2c:27:7f:78:39:de:d8:f4:c4:
         46:1d:53:54:7f:6f:98:a4:d5:c3:a8:b0:78:c0:9c:80:d1:88:
         09:c2:a6:9b:86:05:65:b4:46:d3:e1:15:24:4f:fd:d6:ca:a5:
         93:4d:22:05:61:27:bf:e8:fa:9f:9f:d2:ee:14:02:08:d7:34:
         75:56:c7:b8:47:13:04:6a:79:d8:97:c8:ef:33:8f:4a:8d:a7:
         52:53:4b:77:08:ce:60:d8:20:bc:e4:0c:5e:8c:06:6f:88:5d:
         1a:b9:ba:89:68:15:ad:10:9a:8c:86:bf:68:34:9b:50:9f:a8:
         cb:e2:5c:bd
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUG8JeA0X8paFGWeot23j+iGLBRwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdFMzkwQkUzRTIyMTRDNEZCQkFERDA5MUM1NUVFQkFF
NjcxRDg4MjAeFw0yNjAzMjYxOTI4MTNaFw0yNzAzMjUxOTMzMTNaMDMxMTAvBgNV
BAMTKEJGNUY2QTAxNUJCRUYzOTRFOTc0MEQzQjAyNzZEMkVEQ0M1OEI4RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXBIYnuds0pyNrSsSHpHSFTqfs
2nV46PbmLHdmrpMB0mNrSmfKjNB7hkIuQYp3MCDZ7WHX67CoGdczsj4+rvMJJawd
bleoSzfp/rg+84h9QcIj9U75hrJ2WggsXWbz+BFNWA6N8p9tYtr3xw6lTBb3PDdm
pmATboE4UM8utTTMQB5pCrp7qVAdM8f0aZWsmCyCBZOf89OYXlYV4zYS0cXiX+tk
l+Vmv4NOKTjD0b2ODzcBOKIBpmWC0Yz/8Hz9VO8xNQAa83eICu/NLEF+GckvTtlt
ne2IMR1sYJ5UyHnYvBj/qU/o7AWxqPggpej68Xsapckr69aI3Zki2X0oICGbAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUv19qAVu+85TpdA07AnbS7cxYuPMwHwYDVR0j
BBgwFoAUZ+OQvj4iFMT7ut0JHFXuuuZx2IIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnBQZmZEclFNWHdEaXBYRmFiWEY5M3VuS1VLOXczZmFac3lZTGF1WWpW
d2svMC82N0UzOTBCRTNFMjIxNEM0RkJCQUREMDkxQzU1RUVCQUU2NzFEODgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3RTM5MEJFM0UyMjE0QzRG
QkJBREQwOTFDNTVFRUJBRTY3MUQ4ODIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJwUGZmRHJRTVh3RGlwWEZhYlhGOTN1bktVSzl3M2ZhWnN5WUxhdVlqVndrLzAv
MzIzODMwMzQzYTM0NjMzNzYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNzMzMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygETHyAMA0GCSqGSIb3DQEBCwUA
A4IBAQAoDNHLv+Enb7UjP4J/PNvr4ZN7v+UAQxCgT43mADj6Qqfv1FxcfgNRvs9E
sVGequqcVgi54CirGsITs5pEdVjZkG1z1S/B9nq79LVkr9alqK0M4VFCJcbGyODR
chFsNkmCYE66SRbLgLzyXjwYWbD8jDdctNaA8hMrk1b8QyO/3M1UEwMYmjIsJ394
Od7Y9MRGHVNUf2+YpNXDqLB4wJyA0YgJwqabhgVltEbT4RUkT/3WyqWTTSIFYSe/
6Pqfn9LuFAII1zR1Vse4RxMEannYl8jvM49KjadSU0t3CM5g2CC85AxejAZviF0a
ubqJaBWtEJqMhr9oNJtQn6jL4ly9
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:46:26 2026 by rpki-client