Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a3a2f33362d3336203d3e20323635343631.roa
File:                     323830343a333437633a3a2f33362d3336203d3e20323635343631.roa (raw, json)
Hash identifier:          XKOgVlt9h8rrq0VlpuVnaOLO8jILLBXC21LDAAxfwPs=
Subject key identifier:   70:C6:62:66:D7:F6:7D:93:4F:0A:C1:EB:C3:00:7C:CF:A2:36:E3:5A
Certificate issuer:       /CN=065E3409E65889AAF6B851D59C66CD22E4619409
Certificate serial:       67538322F1E671D9E652148D6BFE53A2EAF19601
Authority key identifier: 06:5E:34:09:E6:58:89:AA:F6:B8:51:D5:9C:66:CD:22:E4:61:94:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a3a2f33362d3336203d3e20323635343631.roa
Signing time:             Wed 11 Mar 2026 13:53:43 +0000
ROA not before:           Wed 11 Mar 2026 13:48:43 +0000
ROA not after:            Wed 10 Mar 2027 13:53:43 +0000
asID:                     265461
IP address blocks:        2804:347c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 02:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:53:83:22:f1:e6:71:d9:e6:52:14:8d:6b:fe:53:a2:ea:f1:96:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065E3409E65889AAF6B851D59C66CD22E4619409
        Validity
            Not Before: Mar 11 13:48:43 2026 GMT
            Not After : Mar 10 13:53:43 2027 GMT
        Subject: CN=70C66266D7F67D934F0AC1EBC3007CCFA236E35A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:6c:f5:e0:50:86:aa:21:d1:ce:89:eb:ff:
                    6c:fb:ec:49:f9:93:5d:c7:57:f7:56:4d:31:b1:d0:
                    81:8e:6e:09:4e:42:ab:ae:7b:24:6c:4e:ff:c8:ba:
                    b8:ec:58:6e:4a:74:9e:36:90:24:70:5b:97:a2:4d:
                    6d:79:fe:2e:1c:aa:e0:5c:b1:31:2f:26:cc:8f:2e:
                    d5:ef:43:63:d0:70:1c:75:9c:bb:ce:c9:bc:c9:67:
                    8a:d8:61:06:13:7a:27:f6:81:a6:61:a3:18:40:e2:
                    9b:b2:99:53:44:a5:64:b9:70:c4:83:98:d4:2e:05:
                    d5:1c:c2:de:d9:38:52:09:56:26:25:23:f3:1b:f0:
                    b0:9b:96:97:ec:57:39:ee:80:85:88:69:a0:03:3d:
                    4c:f4:7a:7d:a4:e5:2d:6d:68:0b:35:b1:5c:9e:33:
                    10:35:ed:8c:44:a1:68:a8:dc:40:e6:63:66:e2:37:
                    75:7c:15:81:f6:05:2f:6c:f1:08:22:4f:0d:44:a3:
                    20:5a:ea:b0:52:1c:31:6a:98:23:04:a8:b0:6f:99:
                    7a:ca:78:47:46:1e:d4:86:c9:b7:0a:3c:05:9b:8f:
                    ba:0e:ca:f6:44:36:c8:79:02:47:95:9f:01:ad:cb:
                    e9:d6:21:99:20:13:1b:0d:70:8c:ce:83:a1:01:e4:
                    97:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C6:62:66:D7:F6:7D:93:4F:0A:C1:EB:C3:00:7C:CF:A2:36:E3:5A
            X509v3 Authority Key Identifier:
                keyid:06:5E:34:09:E6:58:89:AA:F6:B8:51:D5:9C:66:CD:22:E4:61:94:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a3a2f33362d3336203d3e20323635343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:347c::/36

    Signature Algorithm: sha256WithRSAEncryption
         ba:bb:f8:e1:c2:e0:27:39:b1:c0:92:24:c6:a1:22:0a:ac:73:
         00:42:f1:9e:be:a4:a8:a5:aa:82:e4:67:8f:82:7b:63:31:42:
         26:b5:52:15:10:d5:4b:54:a0:36:99:6b:8a:a9:d5:ac:b0:8f:
         f3:a3:0d:73:d3:cf:d6:38:f7:b4:21:38:8d:90:5b:f1:6b:f2:
         d6:e0:02:81:05:bd:8b:32:ee:a0:ae:6c:9d:56:1d:39:fc:b3:
         e3:d9:7d:f0:dd:dc:1c:a1:a9:0e:c9:75:0a:d6:20:4d:6d:6f:
         cf:14:f0:4c:d1:2b:94:85:9a:d8:7f:f6:a8:3a:f8:03:ab:8d:
         bd:84:a4:f5:c0:14:81:ff:42:87:5f:44:9d:a0:d9:19:55:f9:
         d5:55:0f:bd:1a:c4:ae:7e:8a:6d:99:3c:6e:f1:7c:6b:73:b8:
         a1:ed:ab:6b:e7:84:6b:28:9a:b1:4b:a3:39:28:51:59:11:dc:
         2b:da:df:8e:f4:68:75:a7:6d:77:10:1d:28:f2:78:63:09:3f:
         b6:8d:25:9e:63:13:43:9d:d1:73:74:5f:11:f6:d8:d7:59:8a:
         af:c1:6a:f5:03:e5:36:6b:43:2c:fb:ba:17:48:46:0e:e6:37:
         0c:5f:40:38:f9:8a:8a:e7:04:db:ab:09:c7:5a:9b:23:10:4c:
         aa:20:a6:44
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZ1ODIvHmcdnmUhSNa/5TourxlgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY1RTM0MDlFNjU4ODlBQUY2Qjg1MUQ1OUM2NkNEMjJF
NDYxOTQwOTAeFw0yNjAzMTExMzQ4NDNaFw0yNzAzMTAxMzUzNDNaMDMxMTAvBgNV
BAMTKDcwQzY2MjY2RDdGNjdEOTM0RjBBQzFFQkMzMDA3Q0NGQTIzNkUzNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19Gz14FCGqiHRzonr/2z77En5
k13HV/dWTTGx0IGObglOQquueyRsTv/IurjsWG5KdJ42kCRwW5eiTW15/i4cquBc
sTEvJsyPLtXvQ2PQcBx1nLvOybzJZ4rYYQYTeif2gaZhoxhA4puymVNEpWS5cMSD
mNQuBdUcwt7ZOFIJViYlI/Mb8LCblpfsVznugIWIaaADPUz0en2k5S1taAs1sVye
MxA17YxEoWio3EDmY2biN3V8FYH2BS9s8QgiTw1EoyBa6rBSHDFqmCMEqLBvmXrK
eEdGHtSGybcKPAWbj7oOyvZENsh5AkeVnwGty+nWIZkgExsNcIzOg6EB5Je5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcMZiZtf2fZNPCsHrwwB8z6I241owHwYDVR0j
BBgwFoAUBl40CeZYiar2uFHVnGbNIuRhlAkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVpZdFViWmlwaFE5aXc5eVZjNHZzZEdIaEVCWXU4Ymd4bW9YTGZIZmNi
MncvMC8wNjVFMzQwOUU2NTg4OUFBRjZCODUxRDU5QzY2Q0QyMkU0NjE5NDA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2NUUzNDA5RTY1ODg5QUFG
NkI4NTFENTlDNjZDRDIyRTQ2MTk0MDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlaWXRVYlppcGhROWl3OXlWYzR2c2RHSGhFQll1OGJneG1vWExmSGZjYjJ3LzAv
MzIzODMwMzQzYTMzMzQzNzYzM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNjM1
MzQzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKAQ0fAAwDQYJKoZIhvcNAQELBQADggEBALq7+OHC
4Cc5scCSJMahIgqscwBC8Z6+pKilqoLkZ4+Ce2MxQia1UhUQ1UtUoDaZa4qp1ayw
j/OjDXPTz9Y497QhOI2QW/Fr8tbgAoEFvYsy7qCubJ1WHTn8s+PZffDd3ByhqQ7J
dQrWIE1tb88U8EzRK5SFmth/9qg6+AOrjb2EpPXAFIH/QodfRJ2g2RlV+dVVD70a
xK5+im2ZPG7xfGtzuKHtq2vnhGsomrFLozkoUVkR3Cva3470aHWnbXcQHSjyeGMJ
P7aNJZ5jE0Od0XN0XxH22NdZiq/BavUD5TZrQyz7uhdIRg7mNwxfQDj5iornBNur
CcdamyMQTKogpkQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:19:18 2026 by rpki-client