Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa
File:                     323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa (raw, json)
Hash identifier:          Gcr13duqXuruc/ZkulixPFoAKinNVjMuiiiDjJ239ow=
Subject key identifier:   52:6C:F4:55:CF:0A:BC:72:D2:48:F0:A9:C0:7C:E8:31:AA:19:F2:4D
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       2FA7D7DE3D7F54EA8FBD740DAD9DCE1BC4B9656B
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa
Signing time:             Tue 05 May 2026 17:09:36 +0000
ROA not before:           Tue 05 May 2026 17:04:36 +0000
ROA not after:            Tue 04 May 2027 17:09:36 +0000
asID:                     268131
IP address blocks:        2804:5878:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a7:d7:de:3d:7f:54:ea:8f:bd:74:0d:ad:9d:ce:1b:c4:b9:65:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: May  5 17:04:36 2026 GMT
            Not After : May  4 17:09:36 2027 GMT
        Subject: CN=526CF455CF0ABC72D248F0A9C07CE831AA19F24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:5b:99:e3:eb:52:26:6e:f0:5c:e5:af:d1:
                    d1:6d:83:31:32:c9:7f:b7:e8:53:24:12:aa:0c:e1:
                    2c:aa:cb:d4:b3:c1:0a:01:66:16:90:af:70:27:15:
                    78:38:c4:c7:15:24:a2:ed:c4:e0:94:e1:94:11:88:
                    03:54:44:41:be:11:60:15:c2:60:96:2e:d6:03:8b:
                    80:bb:e4:76:82:b9:f2:bd:a9:a4:8f:5f:de:de:c8:
                    41:84:7c:8b:f5:c4:16:73:74:02:f5:60:ae:cf:fa:
                    d5:26:a4:c6:1d:fc:3b:f9:57:50:6a:f5:13:55:69:
                    d0:90:ad:ca:90:31:4f:e8:aa:7d:74:ab:b1:4e:cc:
                    85:92:a9:0c:d5:b6:66:6f:51:7d:db:bc:c2:c3:1d:
                    5d:3b:7a:5a:c4:ec:0e:6a:a0:ed:11:22:3a:ec:7f:
                    59:57:27:ed:13:81:af:98:03:2c:bb:a9:15:88:34:
                    c8:7a:7b:2b:8b:4c:47:f8:5b:3f:7b:a8:c4:27:79:
                    c0:dd:4e:54:6e:6b:7e:5c:80:21:da:4d:f6:c2:51:
                    e6:37:ca:30:1c:8c:03:af:19:d2:74:46:49:91:51:
                    23:50:ad:1b:62:f8:65:aa:df:b7:14:8d:7c:79:c9:
                    2c:b1:3d:4f:44:fd:e2:ff:ad:64:f3:f0:e7:5f:4f:
                    00:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6C:F4:55:CF:0A:BC:72:D2:48:F0:A9:C0:7C:E8:31:AA:19:F2:4D
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a383030303a3a2f33332d3333203d3e20323638313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5878:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         70:14:7b:fb:e4:96:9d:a3:e0:50:1d:8e:d4:60:67:a8:aa:74:
         e2:e1:e6:01:4b:3c:dc:12:1f:74:db:d1:f1:4e:4b:a2:4b:b0:
         8a:13:fd:7b:6b:39:be:35:df:3b:ab:2e:72:64:af:c6:bb:87:
         39:55:fa:a2:f2:d4:b8:94:97:da:14:5e:dc:38:4e:98:19:13:
         3a:c4:aa:c0:2c:d4:61:43:1e:a1:a6:f6:e3:c8:51:7a:bd:4a:
         c9:0b:0f:2c:13:e3:ce:03:d2:62:21:e0:10:fc:4c:cf:7e:e2:
         33:72:b9:f4:8f:05:27:4d:2f:60:af:ea:0b:99:cb:b7:7c:bf:
         71:8b:98:fc:b3:58:2d:5d:7e:a7:54:95:a0:55:aa:75:94:c2:
         2e:17:81:fe:b7:58:23:f5:0a:0e:c0:31:2f:94:fb:4e:c1:5a:
         87:57:0e:db:32:79:3a:e2:f5:2a:77:13:e2:52:b8:36:0d:9a:
         93:9b:70:a2:af:b5:f4:65:9d:20:0f:32:28:e9:cb:b4:e2:b6:
         5c:3f:39:cc:85:71:05:31:e1:d8:26:92:69:ce:18:3a:47:bb:
         55:75:8f:70:14:64:e3:12:0e:15:ba:c3:73:57:82:69:8b:e7:
         8b:6b:f3:18:f2:5e:86:46:1c:18:11:5f:79:c0:e1:fb:4c:f6:
         37:13:c5:42
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUL6fX3j1/VOqPvXQNrZ3OG8S5ZWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBDREQyQ0Y1ODlERkM0QUI0ODJBQzAyRUMwNUVCQjVD
M0JFNUIxMTAeFw0yNjA1MDUxNzA0MzZaFw0yNzA1MDQxNzA5MzZaMDMxMTAvBgNV
BAMTKDUyNkNGNDU1Q0YwQUJDNzJEMjQ4RjBBOUMwN0NFODMxQUExOUYyNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtAluZ4+tSJm7wXOWv0dFtgzEy
yX+36FMkEqoM4Syqy9SzwQoBZhaQr3AnFXg4xMcVJKLtxOCU4ZQRiANUREG+EWAV
wmCWLtYDi4C75HaCufK9qaSPX97eyEGEfIv1xBZzdAL1YK7P+tUmpMYd/Dv5V1Bq
9RNVadCQrcqQMU/oqn10q7FOzIWSqQzVtmZvUX3bvMLDHV07elrE7A5qoO0RIjrs
f1lXJ+0Tga+YAyy7qRWINMh6eyuLTEf4Wz97qMQnecDdTlRua35cgCHaTfbCUeY3
yjAcjAOvGdJ0RkmRUSNQrRti+GWq37cUjXx5ySyxPU9E/eL/rWTz8OdfTwBhAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUUmz0Vc8KvHLSSPCpwHzoMaoZ8k0wHwYDVR0j
BBgwFoAUoM3Sz1id/Eq0gqwC7AXrtcO+WxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JlN0VQNGVneEJWYmM5NkgzV3ZCMUdNU2V3azlUN0pZMnRXR1Vack5G
QkcvMC9BMENERDJDRjU4OURGQzRBQjQ4MkFDMDJFQzA1RUJCNUMzQkU1QjExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQ0REMkNGNTg5REZDNEFC
NDgyQUMwMkVDMDVFQkI1QzNCRTVCMTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiZTdFUDRlZ3hCVmJjOTZIM1d2QjFHTVNld2s5VDdKWTJ0V0dVWnJORkJHLzAv
MzIzODMwMzQzYTM1MzgzNzM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzODMxMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEWHiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBwFHv75Jado+BQHY7UYGeoqnTi4eYBSzzcEh9029HxTkuiS7CKE/17azm+
Nd87qy5yZK/Gu4c5Vfqi8tS4lJfaFF7cOE6YGRM6xKrALNRhQx6hpvbjyFF6vUrJ
Cw8sE+POA9JiIeAQ/EzPfuIzcrn0jwUnTS9gr+oLmcu3fL9xi5j8s1gtXX6nVJWg
Vap1lMIuF4H+t1gj9QoOwDEvlPtOwVqHVw7bMnk64vUqdxPiUrg2DZqTm3Cir7X0
ZZ0gDzIo6cu04rZcPznMhXEFMeHYJpJpzhg6R7tVdY9wFGTjEg4VusNzV4Jpi+eL
a/MY8l6GRhwYEV95wOH7TPY3E8VC
-----END CERTIFICATE-----
Generated at Wed May 13 17:07:19 2026 by rpki-client