Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/323830343a336264633a3a2f33322d3332203d3e20323636313736.roa
File:                     323830343a336264633a3a2f33322d3332203d3e20323636313736.roa (raw, json)
Hash identifier:          Yt+kOBlBg2CMlVMzl7wtZ7v7LdXDqd81g01VaQhDhmU=
Subject key identifier:   CD:21:73:11:56:C7:F0:E0:46:18:5B:99:BF:03:87:35:8A:72:C6:F8
Certificate issuer:       /CN=39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E
Certificate serial:       7B999CC6A00C65257C286619F0E490190BB9F974
Authority key identifier: 39:DB:9E:8B:0D:7E:2A:74:C7:FA:D5:FB:DF:12:55:B5:5A:8F:DD:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/323830343a336264633a3a2f33322d3332203d3e20323636313736.roa
Signing time:             Thu 19 Mar 2026 14:15:59 +0000
ROA not before:           Thu 19 Mar 2026 14:10:59 +0000
ROA not after:            Thu 18 Mar 2027 14:15:59 +0000
asID:                     266176
IP address blocks:        2804:3bdc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.crl
                          rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:99:9c:c6:a0:0c:65:25:7c:28:66:19:f0:e4:90:19:0b:b9:f9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E
        Validity
            Not Before: Mar 19 14:10:59 2026 GMT
            Not After : Mar 18 14:15:59 2027 GMT
        Subject: CN=CD21731156C7F0E046185B99BF0387358A72C6F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:71:f2:3f:23:64:1d:d5:6d:82:af:45:8f:
                    f2:65:76:da:59:74:90:3c:3f:b0:3d:6f:3e:18:25:
                    1e:2d:08:7d:b7:75:1e:c0:08:bd:b4:a6:44:c2:ad:
                    e2:dc:6e:fe:0f:0a:b8:aa:9b:50:a2:a4:8a:1c:8c:
                    e2:09:ea:f2:ed:7e:c7:16:e8:d4:f5:00:b5:e9:a8:
                    d8:48:78:c6:dd:24:88:b7:84:3a:29:3e:ba:bf:46:
                    b4:23:eb:98:8b:e9:3d:5c:30:2b:dd:ff:91:38:c4:
                    3e:77:0f:36:df:3f:7d:4c:4b:a0:d0:d6:19:28:3a:
                    e8:64:7b:f9:3e:75:e8:c0:cd:79:b0:72:3a:26:5a:
                    90:e5:b5:bd:35:bf:9a:27:23:97:f7:04:21:ac:26:
                    4b:9c:33:fd:eb:72:da:ea:3a:a5:ef:52:bf:41:85:
                    67:a3:a7:ec:f1:e9:ed:b2:19:28:0c:47:35:c4:f3:
                    2e:50:c5:56:92:3d:8a:0a:c0:1f:08:06:19:5a:d8:
                    90:de:c1:fa:dc:2e:b2:bd:97:67:88:94:98:93:b2:
                    aa:43:f0:be:86:92:ce:f0:37:c0:22:53:b2:ee:09:
                    5d:17:3b:da:b4:88:75:cd:37:5f:ab:6a:52:01:4f:
                    15:3b:4b:85:50:55:59:d6:3b:99:89:40:34:0d:c2:
                    e9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:21:73:11:56:C7:F0:E0:46:18:5B:99:BF:03:87:35:8A:72:C6:F8
            X509v3 Authority Key Identifier:
                keyid:39:DB:9E:8B:0D:7E:2A:74:C7:FA:D5:FB:DF:12:55:B5:5A:8F:DD:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/323830343a336264633a3a2f33322d3332203d3e20323636313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:5f:25:01:1b:cb:f7:a4:a5:a4:24:13:0f:66:5d:4d:19:94:
         e1:c8:f3:b6:20:75:08:d3:b7:54:10:f3:c7:3e:7a:12:2f:2c:
         68:33:08:3f:4e:35:22:96:84:17:5a:ba:b6:98:4d:58:2c:2b:
         75:2e:d8:0c:e6:08:f4:72:95:04:61:a6:b6:6d:52:91:89:67:
         fe:ea:41:02:44:8f:19:43:57:70:e5:e7:fb:3a:86:d8:e0:b6:
         4f:53:21:8a:89:49:11:5a:c7:3c:3b:24:bc:34:75:0c:e0:10:
         7a:6c:c2:af:3c:9b:df:7a:6d:58:d3:14:69:e3:2d:c1:53:c2:
         35:6b:fb:44:59:78:df:d7:57:48:63:1f:9a:36:4c:bb:c4:b0:
         0d:89:c8:9b:91:17:f8:27:d5:54:14:6b:d9:24:bc:93:58:93:
         26:2f:d6:bf:66:6c:e6:7e:c7:f1:13:0f:b2:2e:be:af:17:c2:
         66:0c:4f:09:a9:9c:41:87:13:4e:38:88:cd:1d:7d:44:80:12:
         4e:8c:a2:d5:2a:97:fa:ae:d1:e8:b1:b5:32:60:10:95:dd:27:
         37:ea:9a:5b:05:13:b6:2d:2b:a8:07:64:e5:6f:90:27:5a:54:
         88:8f:85:36:96:c2:a6:cf:a7:ef:ee:30:5d:42:a8:19:45:e9:
         cb:51:f7:dd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUe5mcxqAMZSV8KGYZ8OSQGQu5+XQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlEQjlFOEIwRDdFMkE3NEM3RkFENUZCREYxMjU1QjU1
QThGREQ1RTAeFw0yNjAzMTkxNDEwNTlaFw0yNzAzMTgxNDE1NTlaMDMxMTAvBgNV
BAMTKENEMjE3MzExNTZDN0YwRTA0NjE4NUI5OUJGMDM4NzM1OEE3MkM2RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9dXHyPyNkHdVtgq9Fj/JldtpZ
dJA8P7A9bz4YJR4tCH23dR7ACL20pkTCreLcbv4PCriqm1CipIocjOIJ6vLtfscW
6NT1ALXpqNhIeMbdJIi3hDopPrq/RrQj65iL6T1cMCvd/5E4xD53DzbfP31MS6DQ
1hkoOuhke/k+dejAzXmwcjomWpDltb01v5onI5f3BCGsJkucM/3rctrqOqXvUr9B
hWejp+zx6e2yGSgMRzXE8y5QxVaSPYoKwB8IBhla2JDewfrcLrK9l2eIlJiTsqpD
8L6Gks7wN8AiU7LuCV0XO9q0iHXNN1+ralIBTxU7S4VQVVnWO5mJQDQNwunXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUzSFzEVbH8OBGGFuZvwOHNYpyxvgwHwYDVR0j
BBgwFoAUOdueiw1+KnTH+tX73xJVtVqP3V4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmRjdDdHUDZydXJUY3p5RlQ5N3JTZ3FIOTlUTjJudmNxaHlxdEx2RVRQ
NEUvMC8zOURCOUU4QjBEN0UyQTc0QzdGQUQ1RkJERjEyNTVCNTVBOEZERDVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5REI5RThCMEQ3RTJBNzRD
N0ZBRDVGQkRGMTI1NUI1NUE4RkRENUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZkY3Q3R1A2cnVyVGN6eUZUOTdyU2dxSDk5VE4ybnZjcWh5cXRMdkVUUDRFLzAv
MzIzODMwMzQzYTMzNjI2NDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzEzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ73DANBgkqhkiG9w0BAQsFAAOCAQEAyV8lARvL
96SlpCQTD2ZdTRmU4cjztiB1CNO3VBDzxz56Ei8saDMIP041IpaEF1q6tphNWCwr
dS7YDOYI9HKVBGGmtm1SkYln/upBAkSPGUNXcOXn+zqG2OC2T1MhiolJEVrHPDsk
vDR1DOAQemzCrzyb33ptWNMUaeMtwVPCNWv7RFl439dXSGMfmjZMu8SwDYnIm5EX
+CfVVBRr2SS8k1iTJi/Wv2Zs5n7H8RMPsi6+rxfCZgxPCamcQYcTTjiIzR19RIAS
Toyi1SqX+q7R6LG1MmAQld0nN+qaWwUTti0rqAdk5W+QJ1pUiI+FNpbCps+n7+4w
XUKoGUXpy1H33Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:29:41 2026 by rpki-client