Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/323830343a313638633a3a2f33322d3332203d3e20323633323931.roa
File:                     323830343a313638633a3a2f33322d3332203d3e20323633323931.roa (raw, json)
Hash identifier:          cgavYskKYNxjT9MVRhWp6BuyruddghV89BfeR9KoBuE=
Subject key identifier:   5E:57:31:A0:41:CF:03:B9:DD:95:CD:61:0C:6E:16:6D:13:6F:EE:8D
Certificate issuer:       /CN=687D143A47680F9364250E4B389BE42D4587BC1D
Certificate serial:       410ADB08D88DF68C2AD6400CC25BCD173DB8DC8E
Authority key identifier: 68:7D:14:3A:47:68:0F:93:64:25:0E:4B:38:9B:E4:2D:45:87:BC:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D143A47680F9364250E4B389BE42D4587BC1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/323830343a313638633a3a2f33322d3332203d3e20323633323931.roa
Signing time:             Fri 08 May 2026 19:51:19 +0000
ROA not before:           Fri 08 May 2026 19:46:19 +0000
ROA not after:            Fri 07 May 2027 19:51:19 +0000
asID:                     263291
IP address blocks:        2804:168c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/687D143A47680F9364250E4B389BE42D4587BC1D.crl
                          rsync://rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/687D143A47680F9364250E4B389BE42D4587BC1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D143A47680F9364250E4B389BE42D4587BC1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0a:db:08:d8:8d:f6:8c:2a:d6:40:0c:c2:5b:cd:17:3d:b8:dc:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687D143A47680F9364250E4B389BE42D4587BC1D
        Validity
            Not Before: May  8 19:46:19 2026 GMT
            Not After : May  7 19:51:19 2027 GMT
        Subject: CN=5E5731A041CF03B9DD95CD610C6E166D136FEE8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:91:28:a0:78:e2:3c:86:13:a2:52:2f:76:6d:
                    8d:d2:9d:34:b7:d3:e6:e8:9f:bd:06:20:1c:4b:8f:
                    71:c7:06:e3:68:a9:b9:45:12:7b:60:b0:ef:14:eb:
                    55:c3:71:dd:bb:43:87:16:6a:5f:14:90:e5:38:05:
                    ac:c1:4a:7e:17:e5:4b:0e:fc:01:14:09:01:e1:78:
                    31:62:14:e0:1a:03:69:f9:f0:7b:0b:b3:99:36:cb:
                    73:0b:fd:5f:6f:75:f9:97:f6:52:f0:de:a2:ee:34:
                    76:ab:ef:8f:de:e3:18:1e:ed:c7:84:77:6d:8e:94:
                    ca:17:51:38:87:77:56:12:5a:b1:8d:5a:da:11:f4:
                    88:7a:57:1c:d2:da:0e:9b:7a:82:75:9f:18:1e:de:
                    3d:01:44:b0:4e:31:6a:6a:ed:91:14:ef:ec:21:65:
                    e0:a8:df:bb:83:61:6b:87:a9:90:7a:ab:a3:c3:49:
                    28:cc:25:57:c0:5c:a9:76:06:db:8f:1b:6d:67:e4:
                    ff:25:6c:15:d7:6c:5f:f8:12:93:be:17:0f:89:17:
                    2c:0d:35:55:6f:cd:ef:3e:ab:11:96:c8:29:e2:cc:
                    0f:c5:1b:26:cb:dd:10:62:29:6f:c5:08:e1:42:34:
                    e2:5a:33:84:4b:18:37:72:cf:b9:2f:65:e6:d7:ce:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:57:31:A0:41:CF:03:B9:DD:95:CD:61:0C:6E:16:6D:13:6F:EE:8D
            X509v3 Authority Key Identifier:
                keyid:68:7D:14:3A:47:68:0F:93:64:25:0E:4B:38:9B:E4:2D:45:87:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/687D143A47680F9364250E4B389BE42D4587BC1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D143A47680F9364250E4B389BE42D4587BC1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/323830343a313638633a3a2f33322d3332203d3e20323633323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:168c::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:e6:21:00:5a:b7:61:70:14:76:84:8e:8d:94:af:42:63:e6:
         6f:55:f8:e0:25:17:9c:11:b3:95:49:c6:a6:d8:82:d3:c7:ae:
         7a:0d:99:47:e4:c5:75:07:97:8e:f9:21:bd:b0:0a:6e:0c:f1:
         22:85:b8:98:42:6f:2d:00:9d:74:d2:54:a7:98:7b:c9:a2:bc:
         c1:88:b5:73:30:9e:24:3b:35:03:86:65:11:d6:53:0a:dd:2a:
         bd:bc:53:23:be:61:78:4a:06:02:2f:fe:12:34:cd:53:ac:e6:
         5a:f9:4c:e1:30:3f:89:7c:44:b8:43:1e:a2:5e:e8:aa:c0:b1:
         3a:c7:49:13:0b:48:bf:8f:f8:b1:4f:ab:0a:ed:5e:fd:ba:e8:
         65:54:18:c8:38:2e:40:2e:4f:f2:b9:cc:6f:94:ce:28:9a:50:
         d4:f3:e1:95:c0:91:57:dc:9f:2a:b4:c0:62:db:18:d8:29:57:
         5c:fa:3a:15:b0:21:bc:a2:ba:85:43:ac:e9:23:73:7d:17:42:
         c8:a5:b7:b1:43:7c:e1:cf:ce:b8:a9:12:d4:16:18:a2:1f:b9:
         4a:a4:ce:ae:29:93:0e:b5:47:7e:af:96:53:60:9d:fb:0b:71:
         f6:1c:1b:a2:7b:f2:0d:3c:80:9d:f9:58:79:9f:8a:ab:86:3c:
         10:c4:15:65
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQQrbCNiN9owq1kAMwlvNFz243I4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg3RDE0M0E0NzY4MEY5MzY0MjUwRTRCMzg5QkU0MkQ0
NTg3QkMxRDAeFw0yNjA1MDgxOTQ2MTlaFw0yNzA1MDcxOTUxMTlaMDMxMTAvBgNV
BAMTKDVFNTczMUEwNDFDRjAzQjlERDk1Q0Q2MTBDNkUxNjZEMTM2RkVFOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXkSigeOI8hhOiUi92bY3SnTS3
0+bon70GIBxLj3HHBuNoqblFEntgsO8U61XDcd27Q4cWal8UkOU4BazBSn4X5UsO
/AEUCQHheDFiFOAaA2n58HsLs5k2y3ML/V9vdfmX9lLw3qLuNHar74/e4xge7ceE
d22OlMoXUTiHd1YSWrGNWtoR9Ih6VxzS2g6beoJ1nxge3j0BRLBOMWpq7ZEU7+wh
ZeCo37uDYWuHqZB6q6PDSSjMJVfAXKl2BtuPG21n5P8lbBXXbF/4EpO+Fw+JFywN
NVVvze8+qxGWyCnizA/FGybL3RBiKW/FCOFCNOJaM4RLGDdyz7kvZebXzuplAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXlcxoEHPA7ndlc1hDG4WbRNv7o0wHwYDVR0j
BBgwFoAUaH0UOkdoD5NkJQ5LOJvkLUWHvB0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMncxWjN2MWR4NFRuQXB1WVRyc1hRWEp3Mk1qdkt6SHM1Nk12YVdHckwy
RzkvMC82ODdEMTQzQTQ3NjgwRjkzNjQyNTBFNEIzODlCRTQyRDQ1ODdCQzFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4N0QxNDNBNDc2ODBGOTM2
NDI1MEU0QjM4OUJFNDJENDU4N0JDMUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ3MVozdjFkeDRUbkFwdVlUcnNYUVhKdzJNanZLekhzNTZNdmFXR3JMMkc5LzAv
MzIzODMwMzQzYTMxMzYzODYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzIzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQWjDANBgkqhkiG9w0BAQsFAAOCAQEAUeYhAFq3
YXAUdoSOjZSvQmPmb1X44CUXnBGzlUnGptiC08eueg2ZR+TFdQeXjvkhvbAKbgzx
IoW4mEJvLQCddNJUp5h7yaK8wYi1czCeJDs1A4ZlEdZTCt0qvbxTI75heEoGAi/+
EjTNU6zmWvlM4TA/iXxEuEMeol7oqsCxOsdJEwtIv4/4sU+rCu1e/broZVQYyDgu
QC5P8rnMb5TOKJpQ1PPhlcCRV9yfKrTAYtsY2ClXXPo6FbAhvKK6hUOs6SNzfRdC
yKW3sUN84c/OuKkS1BYYoh+5SqTOrimTDrVHfq+WU2Cd+wtx9hwbonvyDTyAnflY
eZ+Kq4Y8EMQVZQ==
-----END CERTIFICATE-----
Generated at Wed May 13 17:29:58 2026 by rpki-client