Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a633030303a3a2f33352d3335203d3e203238323532.roa
File:                     323830343a313534343a633030303a3a2f33352d3335203d3e203238323532.roa (raw, json)
Hash identifier:          SNaY7lOEyLHHMxexLDANJeZ8EyK60pCZBMMN9r5xAQg=
Subject key identifier:   30:B2:20:FC:14:23:9D:27:91:0C:1C:4E:07:04:E8:32:06:0F:D2:E1
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       7D5E9F458367C92A7D88E31FC6010F502CABA3E5
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a633030303a3a2f33352d3335203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:10 +0000
ROA not before:           Wed 11 Mar 2026 19:08:10 +0000
ROA not after:            Wed 10 Mar 2027 19:13:10 +0000
asID:                     28252
IP address blocks:        2804:1544:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5e:9f:45:83:67:c9:2a:7d:88:e3:1f:c6:01:0f:50:2c:ab:a3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:10 2026 GMT
            Not After : Mar 10 19:13:10 2027 GMT
        Subject: CN=30B220FC14239D27910C1C4E0704E832060FD2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:14:c2:10:33:3b:82:32:fa:04:d0:d1:8f:
                    c1:48:1f:a9:40:ba:b2:6f:83:b2:35:4d:73:d3:7b:
                    e3:17:0d:b9:d0:31:64:b6:45:07:96:8e:09:24:61:
                    c7:a2:9b:a6:12:73:f0:c0:4a:be:b4:6e:b7:90:df:
                    36:b5:16:01:25:5a:30:1d:9a:3a:4f:07:2a:e2:2a:
                    fd:36:ed:c9:3e:70:41:55:d3:60:59:fa:24:cf:53:
                    94:a4:b8:7f:61:9a:d7:57:e8:ed:f1:e6:97:14:b9:
                    1a:2c:22:eb:59:87:a3:02:de:94:5e:e3:6e:c4:d5:
                    27:65:3d:04:13:56:c0:82:29:0d:75:81:ff:33:03:
                    30:4a:37:15:c3:e3:74:e0:00:e0:d2:35:78:7c:a4:
                    fe:74:5f:7b:07:8b:ef:78:b5:45:94:18:05:ac:f8:
                    26:47:5f:56:96:44:d2:34:e0:0e:64:ff:43:e5:ea:
                    e5:f1:63:73:56:8f:36:9f:73:d7:f4:ef:21:c6:17:
                    f7:3b:0c:09:11:83:13:fe:2c:17:c2:d6:a2:92:ac:
                    01:22:41:e3:72:11:dd:1f:4d:ba:00:27:b6:4b:56:
                    77:ed:f6:65:bb:35:7e:f4:50:18:62:09:46:ea:bc:
                    a9:d4:78:ab:d2:f6:d3:e1:3f:ee:2d:88:9a:a6:7a:
                    a4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B2:20:FC:14:23:9D:27:91:0C:1C:4E:07:04:E8:32:06:0F:D2:E1
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a633030303a3a2f33352d3335203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1544:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         28:8a:b0:aa:59:7d:f0:a6:ff:09:ba:c4:64:fa:2a:3a:53:47:
         ce:d7:34:7b:ad:49:90:73:3f:f4:51:69:17:65:52:19:0a:03:
         ec:d9:d6:28:9c:b3:76:ca:b4:75:fe:0e:96:5c:99:6b:87:a4:
         34:4d:43:d2:60:90:54:fa:11:59:48:3a:5a:74:8e:92:3f:09:
         e2:3e:e8:77:be:49:e7:4a:27:17:e3:af:e8:71:19:31:8f:ea:
         0f:f7:b8:96:64:87:2d:1d:2d:72:fa:79:7c:f8:71:c2:a7:e9:
         c4:70:59:1d:3a:e2:52:99:94:f6:34:1e:ed:6e:04:c9:d1:d9:
         99:20:ab:bb:29:27:95:3c:3a:80:28:ec:60:0f:6d:f6:2f:2e:
         fb:da:b9:8e:c8:30:0c:40:6e:66:d0:f3:18:f8:b6:e3:b2:f8:
         b3:01:79:28:aa:96:55:ea:c7:02:df:0c:2d:f1:80:65:b1:50:
         5f:76:a4:32:02:68:e2:7f:10:48:be:00:39:1e:6a:b1:39:d3:
         f9:43:f3:87:49:1d:00:bb:f1:77:74:f4:b7:48:5e:c7:ba:23:
         01:ff:3e:c9:66:9e:76:bf:c7:11:a9:1c:11:70:4d:9b:a8:4d:
         d5:4f:84:55:e3:ae:be:28:ab:69:a6:7b:48:45:ff:6f:b1:c9:
         04:c4:c9:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfV6fRYNnySp9iOMfxgEPUCyro+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4RTJDNzNBQTdFQzlEQUIzMDZEODBCNUJBQTREQkVD
M0RDQUIzNDAeFw0yNjAzMTExOTA4MTBaFw0yNzAzMTAxOTEzMTBaMDMxMTAvBgNV
BAMTKDMwQjIyMEZDMTQyMzlEMjc5MTBDMUM0RTA3MDRFODMyMDYwRkQyRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCysBTCEDM7gjL6BNDRj8FIH6lA
urJvg7I1TXPTe+MXDbnQMWS2RQeWjgkkYceim6YSc/DASr60breQ3za1FgElWjAd
mjpPByriKv027ck+cEFV02BZ+iTPU5SkuH9hmtdX6O3x5pcUuRosIutZh6MC3pRe
427E1SdlPQQTVsCCKQ11gf8zAzBKNxXD43TgAODSNXh8pP50X3sHi+94tUWUGAWs
+CZHX1aWRNI04A5k/0Pl6uXxY3NWjzafc9f07yHGF/c7DAkRgxP+LBfC1qKSrAEi
QeNyEd0fTboAJ7ZLVnft9mW7NX70UBhiCUbqvKnUeKvS9tPhP+4tiJqmeqQfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUMLIg/BQjnSeRDBxOBwToMgYP0uEwHwYDVR0j
BBgwFoAUFo4sc6p+ydqzBtgLW6pNvsPcqzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1
bTMvMC8xNjhFMkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEUyQzczQUE3RUM5REFC
MzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv
MzIzODMwMzQzYTMxMzUzNDM0M2E2MzMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzgzMjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBBVEwDANBgkqhkiG9w0BAQsFAAOC
AQEAKIqwqll98Kb/CbrEZPoqOlNHztc0e61JkHM/9FFpF2VSGQoD7NnWKJyzdsq0
df4OllyZa4ekNE1D0mCQVPoRWUg6WnSOkj8J4j7od75J50onF+Ov6HEZMY/qD/e4
lmSHLR0tcvp5fPhxwqfpxHBZHTriUpmU9jQe7W4EydHZmSCruyknlTw6gCjsYA9t
9i8u+9q5jsgwDEBuZtDzGPi247L4swF5KKqWVerHAt8MLfGAZbFQX3akMgJo4n8Q
SL4AOR5qsTnT+UPzh0kdALvxd3T0t0hex7ojAf8+yWaedr/HEakcEXBNm6hN1U+E
VeOuviiraaZ7SEX/b7HJBMTJog==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:30:15 2026 by rpki-client