Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/323830343a366663383a3a2f33362d3438203d3e20323730363834.roa
File:                     323830343a366663383a3a2f33362d3438203d3e20323730363834.roa (raw, json)
Hash identifier:          5a3unZHlv5x+saTsWnXB/GGKIb1OdYsdtK0j2vU/oVE=
Subject key identifier:   95:02:7F:68:89:78:BC:31:31:AE:DF:59:D8:2B:CF:07:7C:FD:46:AB
Certificate issuer:       /CN=597A0EE976AA889BD891E5B5A82635E17925FB5A
Certificate serial:       34752A4FFF490E0FF7B4FE59CD51EF4E4E0E658A
Authority key identifier: 59:7A:0E:E9:76:AA:88:9B:D8:91:E5:B5:A8:26:35:E1:79:25:FB:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/597A0EE976AA889BD891E5B5A82635E17925FB5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/323830343a366663383a3a2f33362d3438203d3e20323730363834.roa
Signing time:             Mon 23 Mar 2026 13:01:24 +0000
ROA not before:           Mon 23 Mar 2026 12:56:24 +0000
ROA not after:            Mon 22 Mar 2027 13:01:24 +0000
asID:                     270684
IP address blocks:        2804:6fc8::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/597A0EE976AA889BD891E5B5A82635E17925FB5A.crl
                          rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/597A0EE976AA889BD891E5B5A82635E17925FB5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/597A0EE976AA889BD891E5B5A82635E17925FB5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 05:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:75:2a:4f:ff:49:0e:0f:f7:b4:fe:59:cd:51:ef:4e:4e:0e:65:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597A0EE976AA889BD891E5B5A82635E17925FB5A
        Validity
            Not Before: Mar 23 12:56:24 2026 GMT
            Not After : Mar 22 13:01:24 2027 GMT
        Subject: CN=95027F688978BC3131AEDF59D82BCF077CFD46AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:0e:64:61:70:bb:85:f6:4c:75:fd:34:b6:
                    5b:ec:4a:c4:8b:91:98:f7:3a:ea:30:21:32:c9:5b:
                    a5:0c:c2:ae:31:28:d4:e5:1e:14:7d:40:79:53:8c:
                    5e:15:cd:8f:3e:3c:e9:ee:77:8b:21:c7:3d:3a:8b:
                    45:92:22:bb:9d:13:bf:4d:dc:86:5f:ee:7a:cf:72:
                    ff:54:fa:fa:a7:88:40:bb:c9:58:80:9d:bc:d3:37:
                    d4:cb:36:99:35:bb:33:6f:8f:5a:fc:94:c3:7d:ad:
                    9f:00:c3:45:77:9a:c5:d1:b1:9d:a2:3d:0a:09:42:
                    aa:89:d3:d5:1f:12:d0:9d:9e:3c:fa:04:7f:f2:9c:
                    3a:af:31:d7:13:cb:b2:21:35:87:83:03:40:ec:c3:
                    09:4e:e9:a1:75:ca:4a:8a:a9:4c:e5:47:be:a0:08:
                    7f:a9:2b:5c:a3:9a:83:b1:23:82:43:37:8e:63:c7:
                    21:ff:51:97:99:01:eb:4c:ed:7e:aa:c3:9f:9b:dc:
                    ca:67:03:06:34:0d:0b:ab:55:88:3e:33:85:55:59:
                    8a:ed:79:90:69:0e:53:b2:9f:47:11:27:8e:01:f3:
                    51:b0:40:97:25:ce:94:af:cf:c4:70:8d:4f:02:98:
                    a1:42:7d:8b:1f:e5:88:31:6b:59:0a:28:65:fc:f6:
                    57:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:02:7F:68:89:78:BC:31:31:AE:DF:59:D8:2B:CF:07:7C:FD:46:AB
            X509v3 Authority Key Identifier:
                keyid:59:7A:0E:E9:76:AA:88:9B:D8:91:E5:B5:A8:26:35:E1:79:25:FB:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/597A0EE976AA889BD891E5B5A82635E17925FB5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/597A0EE976AA889BD891E5B5A82635E17925FB5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/323830343a366663383a3a2f33362d3438203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8::/36

    Signature Algorithm: sha256WithRSAEncryption
         4a:20:bb:a4:76:43:aa:2d:bf:22:2f:13:39:af:5c:27:7c:28:
         a4:d1:da:02:6e:6e:ca:24:82:be:37:ac:3a:de:49:cb:58:0e:
         b6:62:19:3d:2b:65:fc:69:34:aa:3b:d3:4a:a8:d6:8c:b0:8a:
         a9:03:9a:e8:08:2d:22:d8:93:0e:62:d7:30:b0:bb:d2:c7:27:
         c6:0c:97:26:b0:b7:15:bd:27:14:e0:96:aa:cd:36:f0:2f:2a:
         b9:3c:b1:b0:9c:29:7e:77:4c:0f:32:61:b8:ab:4b:6e:7c:f4:
         70:cb:88:97:4d:b6:ee:7d:c5:be:b7:f7:7c:dd:84:ca:91:d9:
         8d:09:be:8b:4e:59:ae:f0:98:fb:f4:14:b4:25:b0:c5:6f:4f:
         8f:5c:c4:9c:a8:68:a1:d6:8d:bb:4e:e6:4e:6e:d0:34:b4:d7:
         ac:88:dc:44:8e:7e:34:5c:27:35:38:4b:c0:7e:41:cc:36:a7:
         70:dd:7d:09:ca:1e:95:d5:de:9a:1b:53:d1:fe:c4:45:a0:b7:
         94:ad:6a:d9:9a:1f:de:99:91:78:ac:db:6a:26:cf:2a:b3:23:
         15:69:85:df:65:46:24:9e:8f:49:2b:8c:b5:97:2e:a2:5a:1c:
         ea:f7:b3:10:2f:b5:ab:b0:1a:ab:46:5b:e6:00:c2:fa:84:a2:
         9e:b8:0a:25
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNHUqT/9JDg/3tP5ZzVHvTk4OZYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk3QTBFRTk3NkFBODg5QkQ4OTFFNUI1QTgyNjM1RTE3
OTI1RkI1QTAeFw0yNjAzMjMxMjU2MjRaFw0yNzAzMjIxMzAxMjRaMDMxMTAvBgNV
BAMTKDk1MDI3RjY4ODk3OEJDMzEzMUFFREY1OUQ4MkJDRjA3N0NGRDQ2QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXQ5kYXC7hfZMdf00tlvsSsSL
kZj3OuowITLJW6UMwq4xKNTlHhR9QHlTjF4VzY8+POnud4shxz06i0WSIrudE79N
3IZf7nrPcv9U+vqniEC7yViAnbzTN9TLNpk1uzNvj1r8lMN9rZ8Aw0V3msXRsZ2i
PQoJQqqJ09UfEtCdnjz6BH/ynDqvMdcTy7IhNYeDA0DswwlO6aF1ykqKqUzlR76g
CH+pK1yjmoOxI4JDN45jxyH/UZeZAetM7X6qw5+b3MpnAwY0DQurVYg+M4VVWYrt
eZBpDlOyn0cRJ44B81GwQJclzpSvz8RwjU8CmKFCfYsf5Ygxa1kKKGX89ldrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlQJ/aIl4vDExrt9Z2CvPB3z9RqswHwYDVR0j
BBgwFoAUWXoO6XaqiJvYkeW1qCY14Xkl+1owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1Nmd0pYMUtZeTEyVmdKWUVQTlI4ZFJZSmVaZzNya2I3VnRLNkxXWFpp
UVMvMC81OTdBMEVFOTc2QUE4ODlCRDg5MUU1QjVBODI2MzVFMTc5MjVGQjVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU5N0EwRUU5NzZBQTg4OUJE
ODkxRTVCNUE4MjYzNUUxNzkyNUZCNUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNTZndKWDFLWXkxMlZnSllFUE5SOGRSWUplWmczcmtiN1Z0SzZMV1haaVFTLzAv
MzIzODMwMzQzYTM2NjY2MzM4M2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIzNzMw
MzYzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKARvyAAwDQYJKoZIhvcNAQELBQADggEBAEogu6R2
Q6otvyIvEzmvXCd8KKTR2gJubsokgr43rDreSctYDrZiGT0rZfxpNKo700qo1oyw
iqkDmugILSLYkw5i1zCwu9LHJ8YMlyawtxW9JxTglqrNNvAvKrk8sbCcKX53TA8y
YbirS2589HDLiJdNtu59xb6393zdhMqR2Y0JvotOWa7wmPv0FLQlsMVvT49cxJyo
aKHWjbtO5k5u0DS016yI3ESOfjRcJzU4S8B+Qcw2p3DdfQnKHpXV3pobU9H+xEWg
t5StatmaH96ZkXis22omzyqzIxVphd9lRiSej0krjLWXLqJaHOr3sxAvtauwGqtG
W+YAwvqEop64CiU=
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:28:40 2026 by rpki-client