Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/323830343a353766343a3832303a3a2f34342d3434203d3e20323638303937.roa
File:                     323830343a353766343a3832303a3a2f34342d3434203d3e20323638303937.roa (raw, json)
Hash identifier:          ZaY2xZnUGP5MFwlzNaT0bBsp+qbWKNqrlFl3sNyTTUU=
Subject key identifier:   22:8A:F9:CC:18:36:DE:90:78:6D:B7:18:CF:0E:FB:96:E0:73:0A:8A
Certificate issuer:       /CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
Certificate serial:       537EEB479EE7EAFAF27B30642D297BD527466EB1
Authority key identifier: A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/323830343a353766343a3832303a3a2f34342d3434203d3e20323638303937.roa
Signing time:             Mon 27 Apr 2026 12:14:56 +0000
ROA not before:           Mon 27 Apr 2026 12:09:56 +0000
ROA not after:            Mon 26 Apr 2027 12:14:56 +0000
asID:                     268097
IP address blocks:        2804:57f4:820::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl
                          rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 08:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7e:eb:47:9e:e7:ea:fa:f2:7b:30:64:2d:29:7b:d5:27:46:6e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
        Validity
            Not Before: Apr 27 12:09:56 2026 GMT
            Not After : Apr 26 12:14:56 2027 GMT
        Subject: CN=228AF9CC1836DE90786DB718CF0EFB96E0730A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:ac:49:f8:d5:8a:82:64:95:22:2b:23:c4:
                    51:cc:69:ea:00:ee:e4:26:3d:7c:71:45:c4:7b:82:
                    98:08:3c:cd:47:91:c9:c5:09:5d:8c:fd:f1:f8:67:
                    2e:07:dc:64:dc:4c:19:1c:2a:26:80:40:c1:fb:89:
                    95:0c:79:4d:d0:3b:db:0f:50:fd:35:77:8c:1e:62:
                    6a:17:11:54:3c:30:b5:d4:ee:d7:a9:34:61:2f:0d:
                    56:7c:d9:82:98:68:6a:a9:b6:25:e8:53:c6:6d:57:
                    91:b8:be:4c:b4:e0:6a:2f:bb:80:5b:4c:f4:ac:08:
                    b0:80:81:65:ba:96:da:24:fb:6e:33:f5:b1:09:e7:
                    8b:d4:34:f7:77:45:73:7c:80:7f:0d:fc:bc:9f:9a:
                    e8:91:e2:2f:f7:dc:b7:5e:ab:f7:64:57:70:72:90:
                    2f:fd:a2:74:20:df:96:82:ba:82:73:9f:72:32:e9:
                    e2:82:fe:b4:34:23:8b:65:db:ef:4b:08:11:44:23:
                    45:1c:dc:20:64:2f:19:50:3b:66:c2:db:c3:4c:b7:
                    a1:ca:d8:ea:39:6d:80:d0:e2:24:a9:11:61:7d:82:
                    98:b5:c9:03:9b:f4:15:15:fa:13:9b:80:55:2d:20:
                    5e:b3:22:d2:c9:65:de:aa:67:d5:82:6f:1a:e0:38:
                    f7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8A:F9:CC:18:36:DE:90:78:6D:B7:18:CF:0E:FB:96:E0:73:0A:8A
            X509v3 Authority Key Identifier:
                keyid:A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/323830343a353766343a3832303a3a2f34342d3434203d3e20323638303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57f4:820::/44

    Signature Algorithm: sha256WithRSAEncryption
         25:39:d4:72:e8:b3:98:09:be:de:c7:5c:02:37:fa:87:c6:be:
         a5:f6:5c:55:9a:7e:a6:ac:e2:dd:22:33:7d:5a:7f:5d:40:cb:
         30:b6:67:17:cb:87:ab:86:65:a0:f6:26:10:67:96:54:72:30:
         2a:db:de:b4:ef:e8:63:51:71:c4:bb:85:ce:23:07:dd:28:cc:
         a6:d3:b4:ce:25:cb:be:f1:bc:1d:46:1c:b0:41:b9:7d:3e:4b:
         16:7e:f9:60:5e:13:e8:73:58:44:7a:56:d7:1b:4f:0f:80:2b:
         fa:fd:a7:79:3d:10:b1:7e:04:41:22:1a:b9:0d:fd:99:de:62:
         03:29:ed:dd:5f:58:d9:46:b7:f2:d1:d6:33:8b:33:04:5f:f4:
         59:6c:db:ba:d5:1c:66:08:15:85:60:b1:ec:81:cd:2f:eb:12:
         3b:fd:02:1d:0b:d1:6a:ee:b0:46:88:de:40:aa:1c:9a:2b:bc:
         9a:24:51:b2:b6:7c:14:bf:c7:c8:bd:fe:8d:2c:a7:18:a6:58:
         ac:a1:9b:60:60:3b:dc:8e:6b:f5:82:ed:0a:45:46:60:38:db:
         53:55:4e:fd:3f:9f:5e:b8:3a:d2:25:a9:cb:02:31:97:7a:e2:
         24:2b:40:44:90:d9:bc:b4:c7:0f:58:f9:b8:8d:c7:b3:f7:9a:
         e9:7e:cd:50
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUU37rR57n6vryezBkLSl71SdGbrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBDMkM5QzI2MTc1RjcyMTNBREE3MkQ4QkZGMjk1OUE2
RDY2MUM2MDAeFw0yNjA0MjcxMjA5NTZaFw0yNzA0MjYxMjE0NTZaMDMxMTAvBgNV
BAMTKDIyOEFGOUNDMTgzNkRFOTA3ODZEQjcxOENGMEVGQjk2RTA3MzBBOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPKxJ+NWKgmSVIisjxFHMaeoA
7uQmPXxxRcR7gpgIPM1HkcnFCV2M/fH4Zy4H3GTcTBkcKiaAQMH7iZUMeU3QO9sP
UP01d4weYmoXEVQ8MLXU7tepNGEvDVZ82YKYaGqptiXoU8ZtV5G4vky04Govu4Bb
TPSsCLCAgWW6ltok+24z9bEJ54vUNPd3RXN8gH8N/LyfmuiR4i/33Ldeq/dkV3By
kC/9onQg35aCuoJzn3Iy6eKC/rQ0I4tl2+9LCBFEI0Uc3CBkLxlQO2bC28NMt6HK
2Oo5bYDQ4iSpEWF9gpi1yQOb9BUV+hObgFUtIF6zItLJZd6qZ9WCbxrgOPcVAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUIor5zBg23pB4bbcYzw77luBzCoowHwYDVR0j
BBgwFoAUoMLJwmF19yE62nLYv/KVmm1mHGAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVTYWtnYUJOdU1MbzNCZG5WZ0RlcHU0OVlMdFd0akZHY0ozdVFoampB
MWgvMS9BMEMyQzlDMjYxNzVGNzIxM0FEQTcyRDhCRkYyOTU5QTZENjYxQzYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQzJDOUMyNjE3NUY3MjEz
QURBNzJEOEJGRjI5NTlBNkQ2NjFDNjAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1U2FrZ2FCTnVNTG8zQmRuVmdEZXB1NDlZTHRXdGpGR2NKM3VRaGpqQTFoLzEv
MzIzODMwMzQzYTM1Mzc2NjM0M2EzODMyMzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNl
MjAzMjM2MzgzMDM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoBFf0CCAwDQYJKoZIhvcNAQELBQAD
ggEBACU51HLos5gJvt7HXAI3+ofGvqX2XFWafqas4t0iM31af11AyzC2ZxfLh6uG
ZaD2JhBnllRyMCrb3rTv6GNRccS7hc4jB90ozKbTtM4ly77xvB1GHLBBuX0+SxZ+
+WBeE+hzWER6VtcbTw+AK/r9p3k9ELF+BEEiGrkN/ZneYgMp7d1fWNlGt/LR1jOL
MwRf9Fls27rVHGYIFYVgseyBzS/rEjv9Ah0L0WrusEaI3kCqHJorvJokUbK2fBS/
x8i9/o0spximWKyhm2BgO9yOa/WC7QpFRmA421NVTv0/n164OtIlqcsCMZd64iQr
QESQ2by0xw9Y+biNx7P3mul+zVA=
-----END CERTIFICATE-----
Generated at Wed May 13 18:53:12 2026 by rpki-client