Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a3a2f33322d3332203d3e203238323532.roa
File:                     323830343a313534343a3a2f33322d3332203d3e203238323532.roa (raw, json)
Hash identifier:          Xk9cDCrygDHy3tKuRYVekWQaHAeHcOQvU34xz/xplkg=
Subject key identifier:   73:3E:3E:07:9B:82:02:6E:42:B8:FD:2C:85:BB:B9:A5:3A:98:5E:0A
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       4B927EE92B433871EB4493F24CF6D20813D946F3
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a3a2f33322d3332203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:22 +0000
ROA not before:           Wed 11 Mar 2026 19:08:22 +0000
ROA not after:            Wed 10 Mar 2027 19:13:22 +0000
asID:                     28252
IP address blocks:        2804:1544::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:92:7e:e9:2b:43:38:71:eb:44:93:f2:4c:f6:d2:08:13:d9:46:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:22 2026 GMT
            Not After : Mar 10 19:13:22 2027 GMT
        Subject: CN=733E3E079B82026E42B8FD2C85BBB9A53A985E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b9:48:80:d7:ab:1c:c4:0b:90:90:eb:f6:f1:
                    08:5a:ce:2e:4d:2c:09:5d:52:a4:23:bd:0a:b3:e6:
                    58:9f:d0:9d:9e:f2:b1:e1:8a:59:35:38:02:24:83:
                    f9:f8:ac:6e:f1:95:98:d1:1b:39:ef:f0:06:16:cc:
                    fe:27:08:a2:4d:93:78:ee:72:2d:aa:be:b6:6b:ec:
                    53:84:9c:cd:bf:ec:1a:86:6e:d7:b4:5f:c8:1d:14:
                    0f:da:e5:82:71:c8:8f:0d:36:23:ef:df:03:c8:62:
                    c8:22:72:30:4a:76:55:99:c1:e9:af:cc:ba:e9:46:
                    7b:1b:62:74:9e:84:85:74:65:26:4b:11:8a:4b:3e:
                    5d:03:66:e0:3b:0f:26:a8:9b:f4:fa:eb:a8:4b:30:
                    d5:39:bd:42:15:f5:69:ef:64:85:20:c0:6e:6f:e2:
                    e2:e9:29:10:d1:f7:97:cc:ba:1e:96:70:93:cc:e2:
                    ff:11:e2:3d:e4:c8:4f:0c:26:8f:e7:f4:18:d9:a2:
                    c1:dc:cc:fb:d8:5f:91:ca:e2:e8:73:f6:08:f2:3b:
                    08:1d:b1:c3:74:a8:9d:14:1b:95:f8:04:7b:49:78:
                    92:23:5f:59:de:9b:da:7b:74:a4:68:45:fa:7f:ba:
                    70:90:94:04:59:dd:c4:d3:3f:13:d6:8c:ee:7f:8e:
                    d4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3E:3E:07:9B:82:02:6E:42:B8:FD:2C:85:BB:B9:A5:3A:98:5E:0A
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a3a2f33322d3332203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1544::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:0c:56:f4:1d:d5:bf:e4:c5:61:2d:05:b6:e3:92:77:fb:f5:
         4d:fa:b7:74:73:27:6a:fb:29:b3:45:c2:c1:77:c0:c6:01:e0:
         75:37:48:72:3f:b7:89:a5:d3:89:00:0a:a2:a6:34:dc:36:f7:
         19:f1:2b:2d:7c:75:d6:bf:75:4f:37:bd:ae:b1:b3:91:65:4c:
         02:1b:c4:a6:af:d0:af:83:7b:14:7d:6d:48:74:99:43:ad:ac:
         b8:dd:56:7c:17:61:ec:1f:0c:dd:79:9a:c1:e7:36:16:de:4b:
         4a:f9:60:03:44:aa:63:7f:f0:53:59:3f:f5:be:8e:36:dc:a1:
         a5:ad:56:bc:a6:dd:f1:60:1b:f9:8b:52:d6:bc:d7:a8:b1:52:
         97:23:92:0b:34:01:d9:9e:6c:e2:79:a8:8e:ae:6f:d5:80:ae:
         23:be:8d:1a:71:b5:a1:fb:d8:22:64:3f:53:1a:74:35:68:5b:
         aa:04:98:0b:9d:8f:99:b5:1e:20:de:9b:8c:c6:a8:a2:49:51:
         db:fe:94:5f:67:16:79:16:56:33:ed:48:3b:16:c7:a7:2a:41:
         ea:9d:c4:e4:7e:6a:db:f1:a8:93:f4:96:59:59:2c:b5:4f:7a:
         ed:f8:8e:33:a8:9f:ae:ff:0f:7e:a0:c4:b4:10:52:ae:ab:36:
         9f:3f:37:7c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUS5J+6StDOHHrRJPyTPbSCBPZRvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4RTJDNzNBQTdFQzlEQUIzMDZEODBCNUJBQTREQkVD
M0RDQUIzNDAeFw0yNjAzMTExOTA4MjJaFw0yNzAzMTAxOTEzMjJaMDMxMTAvBgNV
BAMTKDczM0UzRTA3OUI4MjAyNkU0MkI4RkQyQzg1QkJCOUE1M0E5ODVFMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCquUiA16scxAuQkOv28Qhazi5N
LAldUqQjvQqz5lif0J2e8rHhilk1OAIkg/n4rG7xlZjRGznv8AYWzP4nCKJNk3ju
ci2qvrZr7FOEnM2/7BqGbte0X8gdFA/a5YJxyI8NNiPv3wPIYsgicjBKdlWZwemv
zLrpRnsbYnSehIV0ZSZLEYpLPl0DZuA7Dyaom/T666hLMNU5vUIV9WnvZIUgwG5v
4uLpKRDR95fMuh6WcJPM4v8R4j3kyE8MJo/n9BjZosHczPvYX5HK4uhz9gjyOwgd
scN0qJ0UG5X4BHtJeJIjX1nem9p7dKRoRfp/unCQlARZ3cTTPxPWjO5/jtQLAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUcz4+B5uCAm5CuP0shbu5pTqYXgowHwYDVR0j
BBgwFoAUFo4sc6p+ydqzBtgLW6pNvsPcqzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1
bTMvMC8xNjhFMkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEUyQzczQUE3RUM5REFC
MzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv
MzIzODMwMzQzYTMxMzUzNDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzODMy
MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEFUQwDQYJKoZIhvcNAQELBQADggEBAAQMVvQd1b/k
xWEtBbbjknf79U36t3RzJ2r7KbNFwsF3wMYB4HU3SHI/t4ml04kACqKmNNw29xnx
Ky18dda/dU83va6xs5FlTAIbxKav0K+DexR9bUh0mUOtrLjdVnwXYewfDN15msHn
NhbeS0r5YANEqmN/8FNZP/W+jjbcoaWtVrym3fFgG/mLUta816ixUpcjkgs0Adme
bOJ5qI6ub9WAriO+jRpxtaH72CJkP1MadDVoW6oEmAudj5m1HiDem4zGqKJJUdv+
lF9nFnkWVjPtSDsWx6cqQeqdxOR+atvxqJP0lllZLLVPeu34jjOon67/D36gxLQQ
Uq6rNp8/N3w=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:02 2026 by rpki-client