Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33322d3332203d3e20323638313331.roa
File:                     323830343a353837383a3a2f33322d3332203d3e20323638313331.roa (raw, json)
Hash identifier:          qO8uGO9Ke7AVL6lelwQ62oVjzF4UeRDr7QAmyuNaSHg=
Subject key identifier:   4A:2C:43:19:93:81:5B:02:98:16:70:76:75:9B:55:C0:88:C8:93:2D
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       06FDD9558D46182932059986F09705CCF2798EFE
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33322d3332203d3e20323638313331.roa
Signing time:             Tue 05 May 2026 17:09:34 +0000
ROA not before:           Tue 05 May 2026 17:04:34 +0000
ROA not after:            Tue 04 May 2027 17:09:34 +0000
asID:                     268131
IP address blocks:        2804:5878::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fd:d9:55:8d:46:18:29:32:05:99:86:f0:97:05:cc:f2:79:8e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: May  5 17:04:34 2026 GMT
            Not After : May  4 17:09:34 2027 GMT
        Subject: CN=4A2C431993815B0298167076759B55C088C8932D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:b2:6c:10:c4:37:e0:6b:e7:e3:68:7b:18:
                    3c:fe:d8:82:71:a8:27:33:fa:26:a4:55:2b:90:de:
                    aa:3b:0c:d1:16:43:83:33:b1:80:c2:3d:32:51:6f:
                    bc:52:a7:b8:20:4a:f0:5b:ab:cf:28:13:08:92:0b:
                    96:40:bb:0b:30:10:e8:43:f5:1e:42:44:44:73:a3:
                    06:4a:e6:90:dd:8d:bc:7d:fd:2e:20:32:61:f3:7f:
                    19:b2:d9:35:c7:61:6f:26:53:50:87:88:1e:02:d4:
                    5e:5b:b2:ce:f2:14:60:2b:a7:86:e0:d2:4c:80:91:
                    62:06:11:7c:ce:6b:e5:d1:3f:93:50:fd:7d:25:93:
                    6c:46:b7:8c:80:13:6f:16:6a:71:12:83:a5:43:d2:
                    7f:f7:2b:a4:05:9b:13:d8:62:cb:6c:19:ad:6e:ff:
                    70:7e:9b:19:64:95:60:93:1f:68:99:ab:f7:f7:d3:
                    9c:9a:ab:a1:38:66:09:16:39:14:ff:a2:93:de:04:
                    6f:a2:20:72:6f:a1:01:95:2d:6a:2e:b4:2e:f2:2e:
                    7d:17:ec:43:36:c0:3f:b9:b8:97:4c:c4:83:33:b0:
                    03:20:5f:c0:59:52:e2:55:da:62:82:1a:8b:d7:05:
                    97:72:70:58:7c:b9:f4:74:2e:54:6c:8f:6b:7b:f7:
                    95:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2C:43:19:93:81:5B:02:98:16:70:76:75:9B:55:C0:88:C8:93:2D
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33322d3332203d3e20323638313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5878::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:a4:15:f7:f9:18:99:75:7c:d9:1b:be:11:03:05:3e:d9:dc:
         c3:98:f0:86:2a:60:1d:ee:2c:75:1b:1e:f1:7a:c1:2d:02:3e:
         53:62:5a:95:93:4e:7d:c3:9d:47:5d:b6:fd:af:71:7d:1a:4f:
         f1:47:f0:48:42:e6:89:14:ac:f9:bc:8b:f0:a5:b8:cb:c1:4f:
         67:47:78:b5:26:03:48:bb:c4:30:36:51:f9:66:f3:75:d9:d4:
         3b:95:83:06:78:dd:17:3b:ef:7b:12:f3:21:c8:ea:7f:df:07:
         ce:a7:aa:a0:7b:88:30:e3:7a:6e:27:7d:2a:ff:df:f4:52:68:
         3c:ad:df:bc:3e:8f:a1:52:a1:9d:1c:d1:f4:8f:57:e3:d6:76:
         5f:cb:b4:0f:b7:9a:65:59:4f:e0:c8:2f:75:f0:95:af:b9:b4:
         d0:f5:cf:bc:63:cf:08:6c:f1:83:a8:d3:08:7b:2a:df:70:f7:
         fb:6b:31:64:58:4d:e2:07:d6:83:07:6d:e7:e7:2c:33:62:7f:
         1d:28:8c:c4:72:28:c6:89:13:95:ea:c0:47:18:82:83:fb:bb:
         ba:68:85:2c:dc:13:8f:75:68:a1:e7:77:83:57:f6:83:c5:4a:
         f7:51:8f:ac:37:d1:32:65:66:ff:bc:dc:e9:ec:b5:2f:4e:ae:
         1a:3a:01:15
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBv3ZVY1GGCkyBZmG8JcFzPJ5jv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBDREQyQ0Y1ODlERkM0QUI0ODJBQzAyRUMwNUVCQjVD
M0JFNUIxMTAeFw0yNjA1MDUxNzA0MzRaFw0yNzA1MDQxNzA5MzRaMDMxMTAvBgNV
BAMTKDRBMkM0MzE5OTM4MTVCMDI5ODE2NzA3Njc1OUI1NUMwODhDODkzMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCum7JsEMQ34Gvn42h7GDz+2IJx
qCcz+iakVSuQ3qo7DNEWQ4MzsYDCPTJRb7xSp7ggSvBbq88oEwiSC5ZAuwswEOhD
9R5CRERzowZK5pDdjbx9/S4gMmHzfxmy2TXHYW8mU1CHiB4C1F5bss7yFGArp4bg
0kyAkWIGEXzOa+XRP5NQ/X0lk2xGt4yAE28WanESg6VD0n/3K6QFmxPYYstsGa1u
/3B+mxlklWCTH2iZq/f305yaq6E4ZgkWORT/opPeBG+iIHJvoQGVLWoutC7yLn0X
7EM2wD+5uJdMxIMzsAMgX8BZUuJV2mKCGovXBZdycFh8ufR0LlRsj2t795W/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUSixDGZOBWwKYFnB2dZtVwIjIky0wHwYDVR0j
BBgwFoAUoM3Sz1id/Eq0gqwC7AXrtcO+WxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JlN0VQNGVneEJWYmM5NkgzV3ZCMUdNU2V3azlUN0pZMnRXR1Vack5G
QkcvMC9BMENERDJDRjU4OURGQzRBQjQ4MkFDMDJFQzA1RUJCNUMzQkU1QjExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQ0REMkNGNTg5REZDNEFC
NDgyQUMwMkVDMDVFQkI1QzNCRTVCMTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiZTdFUDRlZ3hCVmJjOTZIM1d2QjFHTVNld2s5VDdKWTJ0V0dVWnJORkJHLzAv
MzIzODMwMzQzYTM1MzgzNzM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzEzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARYeDANBgkqhkiG9w0BAQsFAAOCAQEAtKQV9/kY
mXV82Ru+EQMFPtncw5jwhipgHe4sdRse8XrBLQI+U2JalZNOfcOdR122/a9xfRpP
8UfwSELmiRSs+byL8KW4y8FPZ0d4tSYDSLvEMDZR+WbzddnUO5WDBnjdFzvvexLz
Icjqf98HzqeqoHuIMON6bid9Kv/f9FJoPK3fvD6PoVKhnRzR9I9X49Z2X8u0D7ea
ZVlP4MgvdfCVr7m00PXPvGPPCGzxg6jTCHsq33D3+2sxZFhN4gfWgwdt5+csM2J/
HSiMxHIoxokTlerARxiCg/u7umiFLNwTj3Vooed3g1f2g8VK91GPrDfRMmVm/7zc
6ey1L06uGjoBFQ==
-----END CERTIFICATE-----
Generated at Wed May 13 17:10:17 2026 by rpki-client