Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030313a3a2f34382d3438203d3e203238323532.roa
File:                     323830343a313534343a323030313a3a2f34382d3438203d3e203238323532.roa (raw, json)
Hash identifier:          NmBXJQAy2XFW0fvAWmXR5kxFlmXV4iNiABnyemSWkA0=
Subject key identifier:   45:62:C0:5C:AD:C9:62:0B:66:FD:80:20:EB:18:10:50:A2:82:2C:61
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       5DD31664D77C21D5DB5C4764CB1D301C01B8FE14
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030313a3a2f34382d3438203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:21 +0000
ROA not before:           Wed 11 Mar 2026 19:08:21 +0000
ROA not after:            Wed 10 Mar 2027 19:13:21 +0000
asID:                     28252
IP address blocks:        2804:1544:2001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d3:16:64:d7:7c:21:d5:db:5c:47:64:cb:1d:30:1c:01:b8:fe:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:21 2026 GMT
            Not After : Mar 10 19:13:21 2027 GMT
        Subject: CN=4562C05CADC9620B66FD8020EB181050A2822C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7c:53:6b:4f:17:7b:e3:2a:d9:26:e6:d8:f7:
                    3f:f3:96:f7:16:1c:fa:33:08:de:48:93:2b:5d:69:
                    0c:70:09:6c:58:5f:0b:3e:67:28:71:95:c8:46:d2:
                    92:4c:9c:45:ff:89:06:99:d3:b1:84:c5:98:ec:36:
                    30:7e:b8:1b:d9:44:13:d5:7f:b9:5c:f4:8c:f5:a3:
                    52:6f:f3:ae:84:36:2c:2f:1d:7a:aa:27:da:25:07:
                    a5:2f:cd:6a:4a:06:7c:9b:10:45:63:4e:df:53:a1:
                    04:db:2b:84:d5:9e:db:35:93:de:de:af:a9:eb:0d:
                    db:b5:ec:d1:50:bd:68:f6:00:6d:54:41:e0:7d:dc:
                    c3:3d:80:35:73:31:0b:fd:18:cb:bd:67:f5:c5:48:
                    e6:9e:be:27:5c:90:d3:fa:7e:56:be:f6:ee:1e:40:
                    ca:0b:29:d8:85:8f:70:a5:84:b1:30:da:21:d9:e1:
                    d0:f2:ee:bd:21:d2:26:d3:03:9a:6d:cd:19:ec:97:
                    ff:a8:79:55:c1:50:93:4e:34:60:25:b4:09:f2:8e:
                    57:54:fb:ae:79:d3:36:41:4c:a3:89:5f:04:13:6c:
                    9c:75:9f:0d:e1:03:1d:5e:37:96:e5:dd:e9:45:a0:
                    ae:40:75:84:ef:98:8b:af:91:36:1d:b6:6b:13:cb:
                    4e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:62:C0:5C:AD:C9:62:0B:66:FD:80:20:EB:18:10:50:A2:82:2C:61
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030313a3a2f34382d3438203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1544:2001::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:ee:54:78:ed:cd:32:42:ad:3a:d3:24:22:59:06:6c:8c:b6:
         f4:4d:ae:ef:92:1c:79:69:1e:1f:e4:ae:06:0a:f5:91:c7:ee:
         fa:42:02:d9:d3:6c:aa:22:35:6d:60:7f:4d:a9:45:5a:b1:39:
         66:ca:0d:07:77:56:17:e9:26:87:70:de:14:28:c8:88:96:c4:
         e1:3e:62:a5:1a:f6:35:7c:be:b6:3e:a6:34:b2:9a:19:e2:c5:
         a8:a2:9d:b4:68:a8:9a:87:85:bd:36:23:67:cf:da:f1:f9:c5:
         18:9d:e8:36:6d:e1:ec:6b:de:e7:a0:7c:66:44:ce:78:4d:fa:
         26:05:04:80:65:e3:30:f8:f5:db:38:7f:fd:33:1d:d0:57:9e:
         9a:bb:7d:84:7b:e6:f3:57:fc:d9:6e:d8:58:2f:fc:f4:24:d7:
         c9:42:f6:85:72:70:cc:73:b4:ef:22:83:49:50:09:58:5e:64:
         c6:16:ca:5e:2c:67:e8:64:df:23:5d:5c:b7:17:a2:61:63:c9:
         82:b5:5d:79:e8:9b:1d:39:7f:16:e1:d5:ae:25:b6:4d:d3:78:
         95:12:11:14:d7:df:ab:b2:0f:cc:10:d1:e6:d1:94:14:cc:60:
         37:20:2a:02:f4:c3:b9:2e:7f:5e:02:3c:d4:d6:e5:de:9e:1e:
         a1:9b:04:20
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUXdMWZNd8IdXbXEdkyx0wHAG4/hQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4RTJDNzNBQTdFQzlEQUIzMDZEODBCNUJBQTREQkVD
M0RDQUIzNDAeFw0yNjAzMTExOTA4MjFaFw0yNzAzMTAxOTEzMjFaMDMxMTAvBgNV
BAMTKDQ1NjJDMDVDQURDOTYyMEI2NkZEODAyMEVCMTgxMDUwQTI4MjJDNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDffFNrTxd74yrZJubY9z/zlvcW
HPozCN5IkytdaQxwCWxYXws+ZyhxlchG0pJMnEX/iQaZ07GExZjsNjB+uBvZRBPV
f7lc9Iz1o1Jv866ENiwvHXqqJ9olB6UvzWpKBnybEEVjTt9ToQTbK4TVnts1k97e
r6nrDdu17NFQvWj2AG1UQeB93MM9gDVzMQv9GMu9Z/XFSOaevidckNP6fla+9u4e
QMoLKdiFj3ClhLEw2iHZ4dDy7r0h0ibTA5ptzRnsl/+oeVXBUJNONGAltAnyjldU
+6550zZBTKOJXwQTbJx1nw3hAx1eN5bl3elFoK5AdYTvmIuvkTYdtmsTy05VAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQURWLAXK3JYgtm/YAg6xgQUKKCLGEwHwYDVR0j
BBgwFoAUFo4sc6p+ydqzBtgLW6pNvsPcqzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1
bTMvMC8xNjhFMkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEUyQzczQUE3RUM5REFC
MzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv
MzIzODMwMzQzYTMxMzUzNDM0M2EzMjMwMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzgzMjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBBVEIAEwDQYJKoZIhvcNAQELBQAD
ggEBACTuVHjtzTJCrTrTJCJZBmyMtvRNru+SHHlpHh/krgYK9ZHH7vpCAtnTbKoi
NW1gf02pRVqxOWbKDQd3VhfpJodw3hQoyIiWxOE+YqUa9jV8vrY+pjSymhnixaii
nbRoqJqHhb02I2fP2vH5xRid6DZt4exr3uegfGZEznhN+iYFBIBl4zD49ds4f/0z
HdBXnpq7fYR75vNX/Nlu2Fgv/PQk18lC9oVycMxztO8ig0lQCVheZMYWyl4sZ+hk
3yNdXLcXomFjyYK1XXnomx05fxbh1a4ltk3TeJUSERTX36uyD8wQ0ebRlBTMYDcg
KgL0w7kuf14CPNTW5d6eHqGbBCA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:32:06 2026 by rpki-client