Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yEBQKfkr3WzzDWC32dgNSX8885t7wvZfkmyqyPeSKr8/0/323830343a393137303a3a2f33322d3332203d3e20323734363431.roa
File:                     323830343a393137303a3a2f33322d3332203d3e20323734363431.roa (raw, json)
Hash identifier:          dwE1ghQUv9RfccCZKC10eswxbvY+iLq0V4n8PHsaD+E=
Subject key identifier:   5F:F5:04:CA:DB:91:A8:14:8F:93:D6:59:0A:E8:0C:DC:9A:24:E1:04
Certificate issuer:       /CN=F3AB27BA263D3671CDF55E55E8D271166F03ED5B
Certificate serial:       0BE9BF11B09BBC76C59B25C4D3A6A1BE55E6A9BF
Authority key identifier: F3:AB:27:BA:26:3D:36:71:CD:F5:5E:55:E8:D2:71:16:6F:03:ED:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AB27BA263D3671CDF55E55E8D271166F03ED5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yEBQKfkr3WzzDWC32dgNSX8885t7wvZfkmyqyPeSKr8/0/323830343a393137303a3a2f33322d3332203d3e20323734363431.roa
Signing time:             Thu 07 May 2026 19:02:21 +0000
ROA not before:           Thu 07 May 2026 18:57:21 +0000
ROA not after:            Thu 06 May 2027 19:02:21 +0000
asID:                     274641
IP address blocks:        2804:9170::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5yEBQKfkr3WzzDWC32dgNSX8885t7wvZfkmyqyPeSKr8/0/F3AB27BA263D3671CDF55E55E8D271166F03ED5B.crl
                          rsync://rpki-repo.registro.br/repo/5yEBQKfkr3WzzDWC32dgNSX8885t7wvZfkmyqyPeSKr8/0/F3AB27BA263D3671CDF55E55E8D271166F03ED5B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AB27BA263D3671CDF55E55E8D271166F03ED5B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e9:bf:11:b0:9b:bc:76:c5:9b:25:c4:d3:a6:a1:be:55:e6:a9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3AB27BA263D3671CDF55E55E8D271166F03ED5B
        Validity
            Not Before: May  7 18:57:21 2026 GMT
            Not After : May  6 19:02:21 2027 GMT
        Subject: CN=5FF504CADB91A8148F93D6590AE80CDC9A24E104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:af:29:3b:5a:0a:57:b5:1b:55:99:16:a6:
                    80:64:6e:81:c4:60:cc:49:0b:4d:ad:08:ba:6f:7c:
                    45:e6:c1:b1:d6:54:03:46:1c:0c:a6:f9:42:4d:49:
                    8c:1c:dd:0b:01:5f:ca:e5:99:10:7e:50:14:41:98:
                    08:2a:32:59:59:b3:32:36:3e:6c:bb:8b:57:b9:0a:
                    96:0d:4b:d1:9e:e6:0b:38:90:20:7f:d2:88:45:e0:
                    c6:6d:d8:d0:36:89:f9:b8:16:f0:d7:0b:4a:e2:95:
                    77:65:d4:e6:4c:ac:17:b3:12:b2:cc:e3:05:44:0d:
                    81:d1:45:64:4c:6d:cf:41:ac:d7:08:93:39:59:50:
                    34:03:d1:96:83:a0:a9:60:9b:4f:e7:87:7d:1e:57:
                    b1:62:8b:d5:e6:ac:73:cd:5a:e7:d6:57:d0:e0:5e:
                    0e:6e:fc:40:54:a9:0f:49:45:5b:df:9a:87:77:76:
                    17:ff:f1:66:12:e6:e9:f9:4b:f4:34:d0:ed:7e:1b:
                    18:cb:7b:cd:a6:e3:13:9b:b0:da:6d:f9:ad:03:06:
                    5c:d7:b8:83:9d:b0:6f:51:d7:87:9b:80:a6:0f:df:
                    ed:cc:4a:70:e2:8f:45:49:e0:ab:a5:47:ef:da:98:
                    64:c7:11:dc:5b:72:34:0e:e9:08:92:35:1b:44:4a:
                    52:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F5:04:CA:DB:91:A8:14:8F:93:D6:59:0A:E8:0C:DC:9A:24:E1:04
            X509v3 Authority Key Identifier:
                keyid:F3:AB:27:BA:26:3D:36:71:CD:F5:5E:55:E8:D2:71:16:6F:03:ED:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yEBQKfkr3WzzDWC32dgNSX8885t7wvZfkmyqyPeSKr8/0/F3AB27BA263D3671CDF55E55E8D271166F03ED5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AB27BA263D3671CDF55E55E8D271166F03ED5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yEBQKfkr3WzzDWC32dgNSX8885t7wvZfkmyqyPeSKr8/0/323830343a393137303a3a2f33322d3332203d3e20323734363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9170::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:dd:8b:30:80:ef:98:33:e9:74:f3:db:0e:b2:ec:11:20:a0:
         11:01:06:50:78:87:b1:8e:3a:89:90:41:6c:fc:38:0d:ca:ac:
         fc:44:49:c3:f3:49:63:60:04:c1:43:bc:88:31:ab:d9:62:3c:
         bb:4b:26:5b:1e:40:f8:28:90:d2:1d:e4:ab:4b:9f:4e:4b:35:
         af:b8:ef:56:66:30:fa:03:2f:c8:b1:be:2f:26:83:ce:3f:23:
         6a:65:38:00:aa:b6:0f:bb:14:dc:62:18:a1:e5:27:85:33:d7:
         b3:f2:64:bb:10:55:4b:26:e6:91:cd:4e:01:fa:21:13:21:30:
         82:27:64:44:7d:bd:02:4b:71:d9:10:92:c7:39:4f:b4:3f:c4:
         f4:a5:77:34:00:ad:3e:3f:7b:ee:6d:84:71:f2:82:4e:44:80:
         84:f1:2d:f6:87:d3:c5:32:bf:50:7f:b2:80:25:3a:ce:2f:2e:
         83:8a:5f:d0:b5:df:90:e3:03:ad:18:b2:9c:98:5a:d1:98:b4:
         f6:29:1b:be:e4:c0:4d:22:b3:88:c1:1c:89:b8:bb:6c:73:50:
         92:dc:8a:7a:f5:c0:2f:99:34:da:b2:55:9e:07:dc:be:f8:6f:
         d7:e4:fe:fa:f4:96:82:ee:f2:b1:07:5d:37:73:e5:38:e4:25:
         90:d9:07:36
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUC+m/EbCbvHbFmyXE06ahvlXmqb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNBQjI3QkEyNjNEMzY3MUNERjU1RTU1RThEMjcxMTY2
RjAzRUQ1QjAeFw0yNjA1MDcxODU3MjFaFw0yNzA1MDYxOTAyMjFaMDMxMTAvBgNV
BAMTKDVGRjUwNENBREI5MUE4MTQ4RjkzRDY1OTBBRTgwQ0RDOUEyNEUxMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCnK8pO1oKV7UbVZkWpoBkboHE
YMxJC02tCLpvfEXmwbHWVANGHAym+UJNSYwc3QsBX8rlmRB+UBRBmAgqMllZszI2
Pmy7i1e5CpYNS9Ge5gs4kCB/0ohF4MZt2NA2ifm4FvDXC0rilXdl1OZMrBezErLM
4wVEDYHRRWRMbc9BrNcIkzlZUDQD0ZaDoKlgm0/nh30eV7Fii9XmrHPNWufWV9Dg
Xg5u/EBUqQ9JRVvfmod3dhf/8WYS5un5S/Q00O1+GxjLe82m4xObsNpt+a0DBlzX
uIOdsG9R14ebgKYP3+3MSnDij0VJ4KulR+/amGTHEdxbcjQO6QiSNRtESlKVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUX/UEytuRqBSPk9ZZCugM3Jok4QQwHwYDVR0j
BBgwFoAU86snuiY9NnHN9V5V6NJxFm8D7VswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXlFQlFLZmtyM1d6ekRXQzMyZGdOU1g4ODg1dDd3dlpma215cXlQZVNL
cjgvMC9GM0FCMjdCQTI2M0QzNjcxQ0RGNTVFNTVFOEQyNzExNjZGMDNFRDVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzQUIyN0JBMjYzRDM2NzFD
REY1NUU1NUU4RDI3MTE2NkYwM0VENUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV5RUJRS2ZrcjNXenpEV0MzMmRnTlNYODg4NXQ3d3ZaZmtteXF5UGVTS3I4LzAv
MzIzODMwMzQzYTM5MzEzNzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzM0
MzYzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASRcDANBgkqhkiG9w0BAQsFAAOCAQEADd2LMIDv
mDPpdPPbDrLsESCgEQEGUHiHsY46iZBBbPw4Dcqs/ERJw/NJY2AEwUO8iDGr2WI8
u0smWx5A+CiQ0h3kq0ufTks1r7jvVmYw+gMvyLG+LyaDzj8jamU4AKq2D7sU3GIY
oeUnhTPXs/JkuxBVSybmkc1OAfohEyEwgidkRH29Aktx2RCSxzlPtD/E9KV3NACt
Pj977m2EcfKCTkSAhPEt9ofTxTK/UH+ygCU6zi8ug4pf0LXfkOMDrRiynJha0Zi0
9ikbvuTATSKziMEcibi7bHNQktyKevXAL5k02rJVngfcvvhv1+T++vSWgu7ysQdd
N3PlOOQlkNkHNg==
-----END CERTIFICATE-----
Generated at Wed May 13 16:52:42 2026 by rpki-client