Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pZkjAcTjnraKghaE5CS4Qm7XqqRkgHxrxivRjCxcaRh/0/323830343a366631383a3a2f33322d313238203d3e20323730363338.roa
File:                     323830343a366631383a3a2f33322d313238203d3e20323730363338.roa (raw, json)
Hash identifier:          itp78PjFXzU+fae1EmkouRw1ohq/SCiixCda/haK9JQ=
Subject key identifier:   8C:BF:C3:1F:C5:A8:9F:E8:42:6A:30:43:A1:86:60:E8:F6:E7:57:AF
Certificate issuer:       /CN=BCB094AF9FB9C60EA08D30BD4884E28CC30A11FA
Certificate serial:       5C03D34B763EABC266151104B657BE34FC3B5207
Authority key identifier: BC:B0:94:AF:9F:B9:C6:0E:A0:8D:30:BD:48:84:E2:8C:C3:0A:11:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB094AF9FB9C60EA08D30BD4884E28CC30A11FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pZkjAcTjnraKghaE5CS4Qm7XqqRkgHxrxivRjCxcaRh/0/323830343a366631383a3a2f33322d313238203d3e20323730363338.roa
Signing time:             Mon 09 Mar 2026 17:07:46 +0000
ROA not before:           Mon 09 Mar 2026 17:02:46 +0000
ROA not after:            Mon 08 Mar 2027 17:07:46 +0000
asID:                     270638
IP address blocks:        2804:6f18::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pZkjAcTjnraKghaE5CS4Qm7XqqRkgHxrxivRjCxcaRh/0/BCB094AF9FB9C60EA08D30BD4884E28CC30A11FA.crl
                          rsync://rpki-repo.registro.br/repo/4pZkjAcTjnraKghaE5CS4Qm7XqqRkgHxrxivRjCxcaRh/0/BCB094AF9FB9C60EA08D30BD4884E28CC30A11FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB094AF9FB9C60EA08D30BD4884E28CC30A11FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 23:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:03:d3:4b:76:3e:ab:c2:66:15:11:04:b6:57:be:34:fc:3b:52:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB094AF9FB9C60EA08D30BD4884E28CC30A11FA
        Validity
            Not Before: Mar  9 17:02:46 2026 GMT
            Not After : Mar  8 17:07:46 2027 GMT
        Subject: CN=8CBFC31FC5A89FE8426A3043A18660E8F6E757AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:34:f9:c0:0e:03:35:2c:57:f3:9a:37:1f:36:
                    41:3d:54:d4:be:e7:e8:82:f4:7d:03:15:f6:21:34:
                    be:5b:62:32:26:da:38:f9:6d:72:21:36:20:33:1c:
                    1d:78:f7:62:62:fa:44:71:27:14:14:f0:9e:3e:0c:
                    33:3e:d8:7e:04:e3:7d:d0:8f:8b:19:50:0f:8e:94:
                    f4:fd:41:0b:ba:eb:5f:0d:fb:5b:f7:cb:25:e5:84:
                    7d:6a:21:71:e2:8d:2d:fd:3d:0b:80:c3:9d:fe:2a:
                    98:fd:7f:75:1c:1e:1e:c3:9f:cc:9e:27:ab:5f:03:
                    96:dd:df:7c:16:a5:3c:04:e0:63:cf:f7:2c:08:4b:
                    a2:36:0e:41:91:80:3d:dd:e5:e8:80:4b:d8:7e:8c:
                    8a:48:d2:f0:80:c0:8d:a9:e2:33:73:d3:1d:c9:3d:
                    42:c5:6a:7a:cf:83:6a:c5:92:88:d3:9d:02:83:5f:
                    57:84:50:c8:b8:e8:d1:2c:c7:c7:ec:53:42:35:20:
                    04:f4:1f:20:ef:76:9c:e0:e6:3b:eb:da:07:7b:85:
                    98:6a:01:6d:01:ea:1b:e0:05:05:bf:25:99:ed:8f:
                    83:0a:bf:a2:11:d7:0e:14:08:c9:d4:1b:78:33:64:
                    66:fe:67:d5:9e:04:58:c1:a4:c2:22:5b:2a:75:6d:
                    61:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BF:C3:1F:C5:A8:9F:E8:42:6A:30:43:A1:86:60:E8:F6:E7:57:AF
            X509v3 Authority Key Identifier:
                keyid:BC:B0:94:AF:9F:B9:C6:0E:A0:8D:30:BD:48:84:E2:8C:C3:0A:11:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pZkjAcTjnraKghaE5CS4Qm7XqqRkgHxrxivRjCxcaRh/0/BCB094AF9FB9C60EA08D30BD4884E28CC30A11FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB094AF9FB9C60EA08D30BD4884E28CC30A11FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pZkjAcTjnraKghaE5CS4Qm7XqqRkgHxrxivRjCxcaRh/0/323830343a366631383a3a2f33322d313238203d3e20323730363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f18::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:f1:bc:91:06:90:9b:e7:28:ca:9f:64:c0:29:c9:8d:be:35:
         9b:75:12:ba:5f:c0:da:7d:b5:6a:f3:fe:a3:6a:61:ed:c3:53:
         f1:51:a4:f5:15:bb:38:48:5b:41:6f:6d:56:97:1b:f3:61:63:
         14:f2:cc:b1:79:fd:01:8c:7a:48:07:c9:b9:a4:e5:4a:f2:7c:
         89:7f:00:8c:69:d9:27:0e:7e:ae:ba:bc:26:b4:32:5e:ca:4a:
         ed:7d:48:63:80:3f:04:4e:7a:49:32:9f:82:24:e1:9a:43:a6:
         0a:e3:21:ef:7f:c1:15:4a:92:5c:50:93:b3:91:cb:68:d3:91:
         d8:4a:ff:d1:40:f8:32:b3:aa:25:10:23:c9:b0:be:12:e9:01:
         99:f9:9a:a9:02:63:15:81:0c:c2:1a:f7:35:29:4c:51:89:09:
         c7:af:4c:89:95:c7:3f:64:14:88:52:d1:8d:9f:68:9b:7c:9c:
         ed:ce:45:78:cc:3c:6e:fc:48:25:77:34:f5:47:7c:7b:1b:9d:
         a9:ec:24:ac:cb:4c:bd:02:1a:ea:69:63:5f:0f:c7:3e:3c:e0:
         95:fb:59:f7:aa:34:42:10:4d:d5:0b:24:32:03:34:ed:d0:d2:
         c2:54:bf:86:5b:09:6c:af:13:3e:7e:6e:89:41:7d:b6:96:f8:
         a0:20:2f:2a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUXAPTS3Y+q8JmFREEtle+NPw7UgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNCMDk0QUY5RkI5QzYwRUEwOEQzMEJENDg4NEUyOEND
MzBBMTFGQTAeFw0yNjAzMDkxNzAyNDZaFw0yNzAzMDgxNzA3NDZaMDMxMTAvBgNV
BAMTKDhDQkZDMzFGQzVBODlGRTg0MjZBMzA0M0ExODY2MEU4RjZFNzU3QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHNPnADgM1LFfzmjcfNkE9VNS+
5+iC9H0DFfYhNL5bYjIm2jj5bXIhNiAzHB1492Ji+kRxJxQU8J4+DDM+2H4E433Q
j4sZUA+OlPT9QQu6618N+1v3yyXlhH1qIXHijS39PQuAw53+Kpj9f3UcHh7Dn8ye
J6tfA5bd33wWpTwE4GPP9ywIS6I2DkGRgD3d5eiAS9h+jIpI0vCAwI2p4jNz0x3J
PULFanrPg2rFkojTnQKDX1eEUMi46NEsx8fsU0I1IAT0HyDvdpzg5jvr2gd7hZhq
AW0B6hvgBQW/JZntj4MKv6IR1w4UCMnUG3gzZGb+Z9WeBFjBpMIiWyp1bWFVAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUjL/DH8Won+hCajBDoYZg6PbnV68wHwYDVR0j
BBgwFoAUvLCUr5+5xg6gjTC9SITijMMKEfowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHBaa2pBY1RqbnJhS2doYUU1Q1M0UW03WHFxUmtnSHhyeGl2UmpDeGNh
UmgvMC9CQ0IwOTRBRjlGQjlDNjBFQTA4RDMwQkQ0ODg0RTI4Q0MzMEExMUZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDQjA5NEFGOUZCOUM2MEVB
MDhEMzBCRDQ4ODRFMjhDQzMwQTExRkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRwWmtqQWNUam5yYUtnaGFFNUNTNFFtN1hxcVJrZ0h4cnhpdlJqQ3hjYVJoLzAv
MzIzODMwMzQzYTM2NjYzMTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzNjMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBG8YMA0GCSqGSIb3DQEBCwUAA4IBAQCl8byR
BpCb5yjKn2TAKcmNvjWbdRK6X8DafbVq8/6jamHtw1PxUaT1Fbs4SFtBb21Wlxvz
YWMU8syxef0BjHpIB8m5pOVK8nyJfwCMadknDn6uurwmtDJeykrtfUhjgD8ETnpJ
Mp+CJOGaQ6YK4yHvf8EVSpJcUJOzkcto05HYSv/RQPgys6olECPJsL4S6QGZ+Zqp
AmMVgQzCGvc1KUxRiQnHr0yJlcc/ZBSIUtGNn2ibfJztzkV4zDxu/EgldzT1R3x7
G52p7CSsy0y9AhrqaWNfD8c+POCV+1n3qjRCEE3VCyQyAzTt0NLCVL+GWwlsrxM+
fm6JQX22lvigIC8q
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:20:27 2026 by rpki-client