Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/323830343a313038383a3a2f33322d313238203d3e203532393133.roa
File:                     323830343a313038383a3a2f33322d313238203d3e203532393133.roa (raw, json)
Hash identifier:          PuDs9UEY2wHxNVKfZaEvKw/VqnmgORMciwYehQdD0pQ=
Subject key identifier:   FF:AB:9A:65:A5:9F:C6:5C:D4:FF:43:F2:90:3A:1C:16:E2:11:2D:03
Certificate issuer:       /CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE
Certificate serial:       715A37B70AB240E281347107012AFD1B66685C9C
Authority key identifier: 60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/323830343a313038383a3a2f33322d313238203d3e203532393133.roa
Signing time:             Mon 04 May 2026 20:19:57 +0000
ROA not before:           Mon 04 May 2026 20:14:57 +0000
ROA not after:            Mon 03 May 2027 20:19:57 +0000
asID:                     52913
IP address blocks:        2804:1088::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:5a:37:b7:0a:b2:40:e2:81:34:71:07:01:2a:fd:1b:66:68:5c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE
        Validity
            Not Before: May  4 20:14:57 2026 GMT
            Not After : May  3 20:19:57 2027 GMT
        Subject: CN=FFAB9A65A59FC65CD4FF43F2903A1C16E2112D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:f3:38:db:0d:66:43:5d:99:27:16:a6:b6:
                    57:25:27:eb:50:94:ab:8b:c2:68:13:99:f5:ce:a7:
                    8c:67:fa:6a:b7:64:c3:0c:cf:66:84:a6:3a:a6:51:
                    9e:c5:83:0f:5c:cb:7a:21:50:3a:20:75:f8:26:ba:
                    14:ce:82:45:c5:5a:cb:8e:8f:f4:3f:48:d1:62:fe:
                    b8:0f:5e:79:1f:d0:f2:3a:19:64:fd:70:41:40:7d:
                    71:74:9a:8d:3e:93:45:46:5d:ab:de:72:b5:1f:82:
                    30:4d:85:da:04:0d:16:82:38:95:2e:7f:fa:59:7d:
                    ef:5a:8e:69:d1:15:88:0e:3a:7c:88:13:e5:2a:ba:
                    84:04:40:ed:c1:41:1c:b8:18:7b:ab:16:8c:03:a4:
                    39:50:ae:66:b9:3c:2d:ff:bc:73:e3:d1:dd:e5:f2:
                    bd:29:63:fc:61:ec:27:9d:16:84:e1:ca:28:88:f7:
                    98:55:68:bf:5c:13:50:46:e4:0d:a9:85:cf:9c:04:
                    98:6e:e4:e4:77:a0:41:94:26:0c:90:fa:a8:7c:a7:
                    cd:ec:0d:aa:a0:74:fa:93:53:f2:8e:6f:9b:e2:9a:
                    d9:1c:49:3e:19:78:80:e5:9d:55:57:72:8c:9c:f4:
                    ed:77:f4:4a:8f:f5:e1:4e:ea:77:f6:dc:14:b6:ee:
                    1a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AB:9A:65:A5:9F:C6:5C:D4:FF:43:F2:90:3A:1C:16:E2:11:2D:03
            X509v3 Authority Key Identifier:
                keyid:60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/323830343a313038383a3a2f33322d313238203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1088::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:d6:dc:97:7f:6b:15:fe:9c:21:f7:ec:50:ac:8b:e2:2a:33:
         79:84:aa:b1:80:70:1b:61:e5:92:3c:eb:37:00:d9:2d:2e:4d:
         a8:23:4f:6c:ab:9a:a5:ae:f7:b2:58:0b:2a:b6:fe:00:da:64:
         eb:ba:23:33:ef:79:b4:81:28:44:84:83:7e:c1:be:f1:74:b1:
         ff:55:c6:f1:ca:26:4f:15:8a:d0:d7:f8:7f:93:2a:0e:8a:92:
         7f:6c:85:0a:5f:8b:e0:ae:07:d8:e1:c8:b7:e7:e9:d3:96:b1:
         f6:02:b3:70:fb:0c:17:ac:91:ad:e8:b9:76:61:9e:4d:e1:9e:
         8d:37:d1:c2:92:50:0b:4a:4b:ea:96:44:a4:d8:e2:75:66:90:
         c9:fd:56:c0:7f:4a:37:41:06:20:8d:23:6c:cb:68:59:9f:57:
         f0:e4:ad:d6:89:d9:29:6f:c7:64:78:f1:46:80:9b:70:a5:4d:
         17:90:f6:d9:8f:fa:3f:6d:e5:a9:78:dc:f8:f4:29:8c:32:a8:
         29:c9:90:5b:b4:31:f2:da:c8:a3:5c:22:b4:df:43:64:d1:47:
         ca:03:11:02:af:20:05:83:46:3a:d8:64:00:d1:10:f5:e7:f4:
         fb:9a:62:f5:eb:73:d6:00:dd:71:ee:0c:b9:6a:9d:d0:1e:2a:
         f8:df:48:72
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcVo3twqyQOKBNHEHASr9G2ZoXJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBDQjFBOEZFQ0EzQkE3OTg0QUJEQzAyQURERjMyRTNE
MEI5RkFDRTAeFw0yNjA1MDQyMDE0NTdaFw0yNzA1MDMyMDE5NTdaMDMxMTAvBgNV
BAMTKEZGQUI5QTY1QTU5RkM2NUNENEZGNDNGMjkwM0ExQzE2RTIxMTJEMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/AfM42w1mQ12ZJxamtlclJ+tQ
lKuLwmgTmfXOp4xn+mq3ZMMMz2aEpjqmUZ7Fgw9cy3ohUDogdfgmuhTOgkXFWsuO
j/Q/SNFi/rgPXnkf0PI6GWT9cEFAfXF0mo0+k0VGXavecrUfgjBNhdoEDRaCOJUu
f/pZfe9ajmnRFYgOOnyIE+UquoQEQO3BQRy4GHurFowDpDlQrma5PC3/vHPj0d3l
8r0pY/xh7CedFoThyiiI95hVaL9cE1BG5A2phc+cBJhu5OR3oEGUJgyQ+qh8p83s
DaqgdPqTU/KOb5vimtkcST4ZeIDlnVVXcoyc9O139EqP9eFO6nf23BS27hpLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU/6uaZaWfxlzU/0PykDocFuIRLQMwHwYDVR0j
BBgwFoAUYMsaj+yjunmEq9wCrd8y49C5+s4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1NWd1JheEQzU3dacEV0dUxkRk1MY056d2FDM0ZCdXJXVUFOZFc3bTRM
TnIvMC82MENCMUE4RkVDQTNCQTc5ODRBQkRDMDJBRERGMzJFM0QwQjlGQUNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwQ0IxQThGRUNBM0JBNzk4
NEFCREMwMkFEREYzMkUzRDBCOUZBQ0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNTVndSYXhEM1N3WnBFdHVMZEZNTGNOendhQzNGQnVyV1VBTmRXN200TE5yLzAv
MzIzODMwMzQzYTMxMzAzODM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNTMy
MzkzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQQiDANBgkqhkiG9w0BAQsFAAOCAQEANNbcl39r
Ff6cIffsUKyL4iozeYSqsYBwG2HlkjzrNwDZLS5NqCNPbKuapa73slgLKrb+ANpk
67ojM+95tIEoRISDfsG+8XSx/1XG8comTxWK0Nf4f5MqDoqSf2yFCl+L4K4H2OHI
t+fp05ax9gKzcPsMF6yRrei5dmGeTeGejTfRwpJQC0pL6pZEpNjidWaQyf1WwH9K
N0EGII0jbMtoWZ9X8OSt1onZKW/HZHjxRoCbcKVNF5D22Y/6P23lqXjc+PQpjDKo
KcmQW7Qx8trIo1witN9DZNFHygMRAq8gBYNGOthkANEQ9ef0+5pi9etz1gDdce4M
uWqd0B4q+N9Icg==
-----END CERTIFICATE-----
Generated at Wed May 13 16:17:00 2026 by rpki-client