Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a343030303a3a2f33342d3334203d3e20323732373031.roa
File:                     323830343a383735303a343030303a3a2f33342d3334203d3e20323732373031.roa (raw, json)
Hash identifier:          +w/eDkAPLmxe635LziIMWAH3o1Z7o3G+ON5dj4IKweI=
Subject key identifier:   75:D3:DE:A8:50:FC:8E:49:6C:CE:5F:9D:2F:A0:FB:F3:4A:34:B8:E7
Certificate issuer:       /CN=E01C509DBE2A66987F85D9F7040DF42AFECFB53B
Certificate serial:       54AA60C34A7444DE4497E6C5CFBC1F193D54A53A
Authority key identifier: E0:1C:50:9D:BE:2A:66:98:7F:85:D9:F7:04:0D:F4:2A:FE:CF:B5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a343030303a3a2f33342d3334203d3e20323732373031.roa
Signing time:             Mon 16 Mar 2026 22:03:04 +0000
ROA not before:           Mon 16 Mar 2026 21:58:04 +0000
ROA not after:            Mon 15 Mar 2027 22:03:04 +0000
asID:                     272701
IP address blocks:        2804:8750:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.crl
                          rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 06:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:aa:60:c3:4a:74:44:de:44:97:e6:c5:cf:bc:1f:19:3d:54:a5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01C509DBE2A66987F85D9F7040DF42AFECFB53B
        Validity
            Not Before: Mar 16 21:58:04 2026 GMT
            Not After : Mar 15 22:03:04 2027 GMT
        Subject: CN=75D3DEA850FC8E496CCE5F9D2FA0FBF34A34B8E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:f2:47:18:5c:56:ad:0e:37:f7:7f:6a:2e:
                    1b:4b:15:87:0c:79:a0:1d:26:31:25:36:1f:12:cb:
                    78:79:84:4b:f8:ae:d4:9a:d1:67:8e:5a:fc:90:74:
                    6d:e5:1c:5a:a3:c1:fc:35:81:64:1e:4f:96:b1:24:
                    41:40:50:8e:0a:5e:3e:72:91:fc:07:17:7b:ab:00:
                    26:19:56:7c:07:6f:8d:af:f7:88:43:48:8f:64:4a:
                    52:bb:ff:01:3f:78:ba:14:a2:65:12:b1:aa:22:64:
                    13:fe:78:55:bf:e0:9b:d6:94:a6:f6:dc:41:fb:c1:
                    30:bd:7b:8f:8a:23:2b:99:fc:3c:c4:53:83:ae:02:
                    88:82:7b:d0:83:8f:4b:10:f7:f5:a4:ee:8f:f2:82:
                    98:07:aa:dd:e8:ba:43:46:ab:f0:b9:02:8f:d7:ae:
                    85:25:55:3f:e6:fd:23:6f:14:a4:f4:94:6a:b9:71:
                    55:46:4e:a8:e4:d0:d7:0c:b4:90:29:74:28:e8:88:
                    61:0a:34:54:2e:91:66:c0:f7:c8:6b:8f:34:ed:ab:
                    12:e4:7f:50:67:52:84:01:ec:4f:8e:09:7b:94:20:
                    40:2b:03:ec:da:a2:ea:90:bf:5d:09:e6:be:58:7b:
                    97:5c:b0:bb:34:80:34:af:48:96:7c:f6:51:14:c8:
                    23:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D3:DE:A8:50:FC:8E:49:6C:CE:5F:9D:2F:A0:FB:F3:4A:34:B8:E7
            X509v3 Authority Key Identifier:
                keyid:E0:1C:50:9D:BE:2A:66:98:7F:85:D9:F7:04:0D:F4:2A:FE:CF:B5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a343030303a3a2f33342d3334203d3e20323732373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8750:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6d:29:1c:ef:c8:84:87:15:ae:9d:01:7e:26:8b:0e:a0:8b:82:
         8c:36:8a:18:91:4f:bd:40:b0:e1:5d:e4:76:40:14:73:a8:90:
         df:22:08:cb:5e:0a:8e:1a:b7:b9:a0:c3:ae:1b:23:31:31:4f:
         6c:2a:45:91:4a:e8:38:bd:44:60:fe:6b:b2:cc:aa:b1:c0:7b:
         32:b7:19:35:23:e7:13:48:70:14:fe:8d:ac:60:00:38:93:71:
         dd:c3:82:60:b2:d3:c4:7a:14:0b:21:35:d3:89:5e:07:1b:6e:
         0b:ec:23:16:93:88:81:2b:4a:bc:d2:ac:86:19:e8:79:28:d2:
         2d:23:b8:d9:03:36:3f:3e:d8:2e:54:e5:f4:c6:95:10:0b:6d:
         24:fd:7e:7e:aa:3f:f4:3f:f8:77:24:76:73:a6:24:2b:41:a4:
         87:86:27:d5:3d:89:6e:19:d3:cc:05:e9:b2:5e:88:95:cc:0a:
         8d:4c:20:0f:8b:b9:09:43:28:1e:09:c0:4e:b2:e7:1a:51:1a:
         2a:3e:9a:15:70:93:7e:47:f8:15:8e:54:44:9f:e1:f3:ff:aa:
         10:ba:d4:c7:3e:0d:45:f7:88:ac:2f:2d:a0:67:71:2c:44:6d:
         81:d2:d3:4c:51:a6:4a:52:15:d2:7b:5e:64:90:8f:68:87:15:
         6b:88:2c:2c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVKpgw0p0RN5El+bFz7wfGT1UpTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAxQzUwOURCRTJBNjY5ODdGODVEOUY3MDQwREY0MkFG
RUNGQjUzQjAeFw0yNjAzMTYyMTU4MDRaFw0yNzAzMTUyMjAzMDRaMDMxMTAvBgNV
BAMTKDc1RDNERUE4NTBGQzhFNDk2Q0NFNUY5RDJGQTBGQkYzNEEzNEI4RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+/JHGFxWrQ43939qLhtLFYcM
eaAdJjElNh8Sy3h5hEv4rtSa0WeOWvyQdG3lHFqjwfw1gWQeT5axJEFAUI4KXj5y
kfwHF3urACYZVnwHb42v94hDSI9kSlK7/wE/eLoUomUSsaoiZBP+eFW/4JvWlKb2
3EH7wTC9e4+KIyuZ/DzEU4OuAoiCe9CDj0sQ9/Wk7o/ygpgHqt3oukNGq/C5Ao/X
roUlVT/m/SNvFKT0lGq5cVVGTqjk0NcMtJApdCjoiGEKNFQukWbA98hrjzTtqxLk
f1BnUoQB7E+OCXuUIEArA+zaouqQv10J5r5Ye5dcsLs0gDSvSJZ89lEUyCPHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUddPeqFD8jklszl+dL6D780o0uOcwHwYDVR0j
BBgwFoAU4BxQnb4qZph/hdn3BA30Kv7PtTswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1g1eFp4N25pNHRSWUNZUHg2VEpvc2lwZWluaDU5MTdCQUVHbTJEOFBn
OUIvMS9FMDFDNTA5REJFMkE2Njk4N0Y4NUQ5RjcwNDBERjQyQUZFQ0ZCNTNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwMUM1MDlEQkUyQTY2OTg3
Rjg1RDlGNzA0MERGNDJBRkVDRkI1M0IuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdYNXhaeDduaTR0UllDWVB4NlRKb3NpcGVpbmg1OTE3QkFFR20yRDhQZzlCLzEv
MzIzODMwMzQzYTM4MzczNTMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjM3MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEh1BAMA0GCSqGSIb3DQEBCwUA
A4IBAQBtKRzvyISHFa6dAX4miw6gi4KMNooYkU+9QLDhXeR2QBRzqJDfIgjLXgqO
Gre5oMOuGyMxMU9sKkWRSug4vURg/muyzKqxwHsytxk1I+cTSHAU/o2sYAA4k3Hd
w4JgstPEehQLITXTiV4HG24L7CMWk4iBK0q80qyGGeh5KNItI7jZAzY/PtguVOX0
xpUQC20k/X5+qj/0P/h3JHZzpiQrQaSHhifVPYluGdPMBemyXoiVzAqNTCAPi7kJ
QygeCcBOsucaURoqPpoVcJN+R/gVjlREn+Hz/6oQutTHPg1F94isLy2gZ3EsRG2B
0tNMUaZKUhXSe15kkI9ohxVriCws
-----END CERTIFICATE-----
Generated at Fri Mar 27 07:13:35 2026 by rpki-client