Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/323830343a313037303a3a2f33322d3438203d3e203238323039.roa
File:                     323830343a313037303a3a2f33322d3438203d3e203238323039.roa (raw, json)
Hash identifier:          BNCRxJAnG7i5iqMRb8ayN42KriV0rIcKMwyld9OP52k=
Subject key identifier:   B9:BE:D1:15:A5:4F:22:B3:F6:5A:D1:F2:D6:C1:80:D1:C4:CC:24:9F
Certificate issuer:       /CN=B2E457E7500CCBE093B56886E0919B4530713E84
Certificate serial:       0629C189E4208A7D56CFC004778108A994E465FE
Authority key identifier: B2:E4:57:E7:50:0C:CB:E0:93:B5:68:86:E0:91:9B:45:30:71:3E:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2E457E7500CCBE093B56886E0919B4530713E84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/323830343a313037303a3a2f33322d3438203d3e203238323039.roa
Signing time:             Tue 10 Mar 2026 14:36:15 +0000
ROA not before:           Tue 10 Mar 2026 14:31:15 +0000
ROA not after:            Tue 09 Mar 2027 14:36:15 +0000
asID:                     28209
IP address blocks:        2804:1070::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/B2E457E7500CCBE093B56886E0919B4530713E84.crl
                          rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/B2E457E7500CCBE093B56886E0919B4530713E84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2E457E7500CCBE093B56886E0919B4530713E84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 18:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:29:c1:89:e4:20:8a:7d:56:cf:c0:04:77:81:08:a9:94:e4:65:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2E457E7500CCBE093B56886E0919B4530713E84
        Validity
            Not Before: Mar 10 14:31:15 2026 GMT
            Not After : Mar  9 14:36:15 2027 GMT
        Subject: CN=B9BED115A54F22B3F65AD1F2D6C180D1C4CC249F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:56:d4:d7:b8:c0:b1:ca:ae:f3:77:99:d4:
                    3c:0a:7e:a9:47:dc:bd:4a:ba:bd:62:1e:29:2d:48:
                    48:ad:f7:3b:f4:07:26:72:72:de:6a:03:40:fc:31:
                    8b:16:68:48:12:05:b2:cd:a9:fa:91:e1:22:8f:01:
                    93:e9:34:01:3f:c8:1b:ea:42:b0:1f:9e:44:e5:9b:
                    2a:88:e7:80:3d:21:00:fc:0b:db:6a:50:ce:4b:dc:
                    89:cd:e0:1f:c2:cf:4c:c1:08:99:f5:c4:4f:6e:c5:
                    7f:b0:82:b0:34:24:21:72:05:ca:9a:95:ce:28:17:
                    36:62:83:64:60:84:74:4f:17:f4:60:79:9d:9e:22:
                    77:b0:ea:18:7f:bd:83:ed:79:7f:3b:88:34:b2:bb:
                    3d:f0:92:9b:bd:e4:20:b7:73:42:0c:69:27:15:a5:
                    85:8c:27:7e:de:70:b0:9e:0a:7b:91:f8:fa:88:18:
                    97:46:31:de:4a:03:5a:c9:0f:5f:82:54:47:e7:8c:
                    f4:7a:e5:55:f5:7c:86:3b:5f:56:af:f4:87:26:14:
                    61:80:3f:95:1d:43:28:e2:4c:44:ac:05:54:6c:07:
                    c9:67:cf:69:72:ae:64:70:70:c8:d8:b2:56:76:ba:
                    1a:42:60:0e:cd:64:b1:c0:33:7a:53:62:64:70:6c:
                    4e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BE:D1:15:A5:4F:22:B3:F6:5A:D1:F2:D6:C1:80:D1:C4:CC:24:9F
            X509v3 Authority Key Identifier:
                keyid:B2:E4:57:E7:50:0C:CB:E0:93:B5:68:86:E0:91:9B:45:30:71:3E:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/B2E457E7500CCBE093B56886E0919B4530713E84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2E457E7500CCBE093B56886E0919B4530713E84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/323830343a313037303a3a2f33322d3438203d3e203238323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1070::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:f2:29:82:08:64:44:cd:13:d8:53:4d:6f:86:2d:b1:40:e6:
         41:49:8f:b7:32:e4:75:80:aa:00:4a:54:2a:4b:8c:71:a4:85:
         35:d5:b4:40:ff:ef:6e:4b:6f:05:7a:4f:a4:40:66:63:61:23:
         d2:3a:56:c6:0b:ab:91:9b:ac:3d:8f:ac:33:78:60:a2:3f:b2:
         f6:f2:34:76:24:34:5c:32:7f:39:88:c0:6f:23:83:88:ba:0e:
         66:9a:70:f5:fd:a9:f3:b1:7e:d4:f8:d4:53:7c:2a:3a:7d:72:
         03:51:cb:ba:70:63:37:02:83:a7:70:84:9b:72:e2:43:26:f8:
         42:5c:65:65:ab:7b:52:dc:9b:ed:a1:83:3f:3a:93:d2:84:55:
         d8:74:f2:55:c1:90:c9:e0:9f:b7:3d:08:96:fb:29:2e:66:f4:
         ef:ea:3c:e1:82:21:67:1d:2d:e3:8c:fa:27:c9:ef:89:1c:54:
         1d:dd:bb:0a:8a:fd:a4:69:b6:1e:8b:88:0f:01:b3:d4:9a:d4:
         36:2d:84:0d:29:c3:1f:b3:a6:59:6b:db:07:d5:f1:cb:8e:2e:
         c2:90:f1:21:9d:f4:27:73:bb:eb:b2:1a:27:bb:ab:05:3f:bc:
         52:08:05:15:bd:83:01:25:b1:4e:16:4a:a1:25:98:aa:04:a1:
         b0:f1:f8:da
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUBinBieQgin1Wz8AEd4EIqZTkZf4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJFNDU3RTc1MDBDQ0JFMDkzQjU2ODg2RTA5MTlCNDUz
MDcxM0U4NDAeFw0yNjAzMTAxNDMxMTVaFw0yNzAzMDkxNDM2MTVaMDMxMTAvBgNV
BAMTKEI5QkVEMTE1QTU0RjIyQjNGNjVBRDFGMkQ2QzE4MEQxQzRDQzI0OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8wlbU17jAscqu83eZ1DwKfqlH
3L1Kur1iHiktSEit9zv0ByZyct5qA0D8MYsWaEgSBbLNqfqR4SKPAZPpNAE/yBvq
QrAfnkTlmyqI54A9IQD8C9tqUM5L3InN4B/Cz0zBCJn1xE9uxX+wgrA0JCFyBcqa
lc4oFzZig2RghHRPF/RgeZ2eInew6hh/vYPteX87iDSyuz3wkpu95CC3c0IMaScV
pYWMJ37ecLCeCnuR+PqIGJdGMd5KA1rJD1+CVEfnjPR65VX1fIY7X1av9IcmFGGA
P5UdQyjiTESsBVRsB8lnz2lyrmRwcMjYslZ2uhpCYA7NZLHAM3pTYmRwbE6DAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUub7RFaVPIrP2WtHy1sGA0cTMJJ8wHwYDVR0j
BBgwFoAUsuRX51AMy+CTtWiG4JGbRTBxPoQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlBBRlh5RGJjaEUzU3hGZ1dEaHluWnJERWl2bjRQOEFKNWRXSGY1WVJV
dkovMC9CMkU0NTdFNzUwMENDQkUwOTNCNTY4ODZFMDkxOUI0NTMwNzEzRTg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyRTQ1N0U3NTAwQ0NCRTA5
M0I1Njg4NkUwOTE5QjQ1MzA3MTNFODQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZQQUZYeURiY2hFM1N4RmdXRGh5blpyREVpdm40UDhBSjVkV0hmNVlSVXZKLzAv
MzIzODMwMzQzYTMxMzAzNzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzODMy
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEEHAwDQYJKoZIhvcNAQELBQADggEBACXyKYIIZETN
E9hTTW+GLbFA5kFJj7cy5HWAqgBKVCpLjHGkhTXVtED/725LbwV6T6RAZmNhI9I6
VsYLq5GbrD2PrDN4YKI/svbyNHYkNFwyfzmIwG8jg4i6DmaacPX9qfOxftT41FN8
Kjp9cgNRy7pwYzcCg6dwhJty4kMm+EJcZWWre1Lcm+2hgz86k9KEVdh08lXBkMng
n7c9CJb7KS5m9O/qPOGCIWcdLeOM+ifJ74kcVB3duwqK/aRpth6LiA8Bs9Sa1DYt
hA0pwx+zpllr2wfV8cuOLsKQ8SGd9Cdzu+uyGie7qwU/vFIIBRW9gwElsU4WSqEl
mKoEobDx+No=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:04 2026 by rpki-client