Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f34302d3430203d3e20323638373930.roa
File:                     323830343a356162343a383030303a3a2f34302d3430203d3e20323638373930.roa (raw, json)
Hash identifier:          YnCdzx3WY4W6aZ4iYmRwMBxoO9AKIMVRm3kBXRLj4xI=
Subject key identifier:   29:05:6F:85:A5:6D:18:88:74:6A:5B:0F:69:45:E4:A6:14:CE:26:63
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       6DB15CA2642A26E4CA3271B4780D9202AE6F1EF7
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f34302d3430203d3e20323638373930.roa
Signing time:             Tue 17 Mar 2026 22:38:02 +0000
ROA not before:           Tue 17 Mar 2026 22:33:02 +0000
ROA not after:            Tue 16 Mar 2027 22:38:02 +0000
asID:                     268790
IP address blocks:        2804:5ab4:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b1:5c:a2:64:2a:26:e4:ca:32:71:b4:78:0d:92:02:ae:6f:1e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Mar 17 22:33:02 2026 GMT
            Not After : Mar 16 22:38:02 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:79:b8:cb:ed:89:3d:a9:a5:8e:e8:8e:05:8b:
                    76:b9:05:e7:95:1f:68:8f:87:bb:75:f8:92:60:a0:
                    8f:a0:76:28:2f:19:b6:7e:32:1b:3d:fc:c1:0b:93:
                    e5:fa:ed:84:07:f2:19:72:5c:1c:13:33:8f:78:c1:
                    74:37:48:af:9d:9c:5a:22:02:cd:5e:07:0b:cd:84:
                    e9:aa:f3:33:62:04:50:26:8e:0c:0e:15:68:80:d1:
                    78:cf:85:92:85:f6:17:99:bd:27:a8:1a:87:2e:73:
                    78:9e:c4:7f:9e:5c:d3:2f:61:a2:f9:12:93:85:1e:
                    0e:81:ff:7e:ef:bc:46:84:3c:6f:0a:e3:70:d3:ae:
                    a0:87:d2:69:63:58:68:73:47:59:46:b5:56:e9:bf:
                    04:1d:98:f5:c6:ad:0a:67:3c:6d:3f:c3:7b:ad:2b:
                    d8:18:63:16:fd:6b:20:a8:d9:a3:4e:0d:2e:21:24:
                    42:0f:f2:6e:28:b9:8d:4e:f4:b1:97:93:52:79:84:
                    8c:ee:66:26:17:cf:af:bd:6e:a1:8e:99:c8:4c:84:
                    f9:9c:3c:75:b6:4a:90:4f:0f:86:39:c3:db:b4:c7:
                    d7:b4:4d:66:77:8f:13:29:de:4e:22:40:3f:ce:5b:
                    fb:02:bd:ea:70:0f:4a:cd:72:86:71:01:05:72:fe:
                    22:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:05:6F:85:A5:6D:18:88:74:6A:5B:0F:69:45:E4:A6:14:CE:26:63
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f34302d3430203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:15:8b:16:0e:0d:23:0b:4c:3e:41:3a:9d:8f:ae:70:31:df:
         91:39:6e:c8:61:7c:a3:6d:f1:de:ed:aa:26:1e:d4:d9:2c:81:
         fb:e3:19:c4:a8:b1:e0:98:34:b9:87:bb:ff:10:43:3c:3a:d7:
         82:dd:16:6f:42:dd:19:95:f2:d9:5c:ee:26:dd:ed:c2:31:71:
         3e:2b:83:46:8a:3a:b7:03:50:6b:a9:ac:88:f8:04:ad:28:d9:
         10:5d:8f:e6:7a:84:85:ee:86:21:c7:57:fa:c0:be:d8:d9:ba:
         b6:af:b8:24:f2:5b:67:52:77:cd:2b:ee:c6:0e:3a:9c:77:eb:
         4b:bf:f9:12:8c:b9:19:e1:8d:65:ab:ce:3a:82:2e:2b:d5:d6:
         49:61:c3:0d:2e:58:ce:5b:85:eb:d1:dd:74:03:bd:13:cb:37:
         dd:d5:d2:f1:0b:61:1a:9e:f0:34:80:68:47:02:78:67:2b:bd:
         2f:6b:17:f6:cb:32:8f:63:18:8c:a9:cd:2b:42:5a:eb:24:8e:
         d8:d6:c7:dc:01:83:46:2a:62:65:74:ae:4c:f9:1f:a6:90:43:
         95:51:75:82:a4:b4:bc:b8:a3:15:9d:be:aa:43:d9:e8:cc:69:
         00:b4:22:1d:e9:58:86:f6:19:00:2d:3d:6d:f4:20:fa:ec:60:
         21:48:17:ee
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUbbFcomQqJuTKMnG0eA2SAq5vHvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCNEM5MUVCRTA3RDcwN0VFNzc1QTE1N0FBNTgyQkY0
QjUzM0M2MjAeFw0yNjAzMTcyMjMzMDJaFw0yNzAzMTYyMjM4MDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREY3OUI4Q0JFRDg5M0RBOUE1
OEVFODhFMDU4Qjc2QjkwNUU3OTUxRjY4OEY4N0JCNzVGODkyNjBBMDhGQTA3NjI4
MkYxOUI2N0UzMjFCM0RGQ0MxMEI5M0U1RkFFRDg0MDdGMjE5NzI1QzFDMTMzMzhG
NzhDMTc0Mzc0OEFGOUQ5QzVBMjIwMkNENUUwNzBCQ0Q4NEU5QUFGMzMzNjIwNDUw
MjY4RTBDMEUxNTY4ODBEMTc4Q0Y4NTkyODVGNjE3OTlCRDI3QTgxQTg3MkU3Mzc4
OUVDNDdGOUU1Q0QzMkY2MUEyRjkxMjkzODUxRTBFODFGRjdFRUZCQzQ2ODQzQzZG
MEFFMzcwRDNBRUEwODdEMjY5NjM1ODY4NzM0NzU5NDZCNTU2RTlCRjA0MUQ5OEY1
QzZBRDBBNjczQzZEM0ZDMzdCQUQyQkQ4MTg2MzE2RkQ2QjIwQThEOUEzNEUwRDJF
MjEyNDQyMEZGMjZFMjhCOThENEVGNEIxOTc5MzUyNzk4NDhDRUU2NjI2MTdDRkFG
QkQ2RUExOEU5OUM4NEM4NEY5OUMzQzc1QjY0QTkwNEYwRjg2MzlDM0RCQjRDN0Q3
QjQ0RDY2Nzc4RjEzMjlERTRFMjI0MDNGQ0U1QkZCMDJCREVBNzAwRjRBQ0Q3Mjg2
NzEwMTA1NzJGRTIyQkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA33m4y+2JPamljuiOBYt2uQXnlR9oj4e7dfiSYKCPoHYoLxm2fjIb
PfzBC5Pl+u2EB/IZclwcEzOPeMF0N0ivnZxaIgLNXgcLzYTpqvMzYgRQJo4MDhVo
gNF4z4WShfYXmb0nqBqHLnN4nsR/nlzTL2Gi+RKThR4Ogf9+77xGhDxvCuNw066g
h9JpY1hoc0dZRrVW6b8EHZj1xq0KZzxtP8N7rSvYGGMW/WsgqNmjTg0uISRCD/Ju
KLmNTvSxl5NSeYSM7mYmF8+vvW6hjpnITIT5nDx1tkqQTw+GOcPbtMfXtE1md48T
Kd5OIkA/zlv7Ar3qcA9KzXKGcQEFcv4ivwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FCkFb4WlbRiIdGpbD2lF5KYUziZjMB8GA1UdIwQYMBaAFNK0yR6+B9cH7ndaFXql
gr9LUzxiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRyeW9HU1o0bmNaN01j
OGRoQ1ViczVWaHNBa1RDMm95QzFoNm1OQzhIVlpYLzEvRDJCNEM5MUVCRTA3RDcw
N0VFNzc1QTE1N0FBNTgyQkY0QjUzM0M2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9EMkI0QzkxRUJFMDdENzA3RUU3NzVBMTU3QUE1ODJCRjRCNTMz
QzYyLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80cnlvR1NaNG5jWjdNYzhkaENV
YnM1VmhzQWtUQzJveUMxaDZtTkM4SFZaWC8xLzMyMzgzMDM0M2EzNTYxNjIzNDNh
MzgzMDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzgzNzM5MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAoBFq0gDANBgkqhkiG9w0BAQsFAAOCAQEAbxWLFg4NIwtMPkE6nY+u
cDHfkTluyGF8o23x3u2qJh7U2SyB++MZxKix4Jg0uYe7/xBDPDrXgt0Wb0LdGZXy
2VzuJt3twjFxPiuDRoo6twNQa6msiPgErSjZEF2P5nqEhe6GIcdX+sC+2Nm6tq+4
JPJbZ1J3zSvuxg46nHfrS7/5Eoy5GeGNZavOOoIuK9XWSWHDDS5YzluF69HddAO9
E8s33dXS8QthGp7wNIBoRwJ4Zyu9L2sX9ssyj2MYjKnNK0Ja6ySO2NbH3AGDRipi
ZXSuTPkfppBDlVF1gqS0vLijFZ2+qkPZ6MxpALQiHelYhvYZAC09bfQg+uxgIUgX
7g==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:50:35 2026 by rpki-client