Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/323830343a343835303a3a2f33322d3438203d3e20323637313133.roa
File:                     323830343a343835303a3a2f33322d3438203d3e20323637313133.roa (raw, json)
Hash identifier:          ht/fpQn+g8xKZfgtNUGP14GWE7gSNCc8UR3KTU8Y+60=
Subject key identifier:   D6:5B:CB:08:A6:7E:40:3E:DE:F0:F9:31:28:FB:99:12:5A:9D:96:E0
Certificate issuer:       /CN=22C965CFD1C68B15DAE2F2D8CAE324448D335934
Certificate serial:       5F7E7AD3A25E725F71FCF38DAD8FE79784EF5134
Authority key identifier: 22:C9:65:CF:D1:C6:8B:15:DA:E2:F2:D8:CA:E3:24:44:8D:33:59:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22C965CFD1C68B15DAE2F2D8CAE324448D335934.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/323830343a343835303a3a2f33322d3438203d3e20323637313133.roa
Signing time:             Thu 30 Apr 2026 15:36:29 +0000
ROA not before:           Thu 30 Apr 2026 15:31:29 +0000
ROA not after:            Thu 29 Apr 2027 15:36:29 +0000
asID:                     267113
IP address blocks:        2804:4850::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/22C965CFD1C68B15DAE2F2D8CAE324448D335934.crl
                          rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/22C965CFD1C68B15DAE2F2D8CAE324448D335934.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22C965CFD1C68B15DAE2F2D8CAE324448D335934.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7e:7a:d3:a2:5e:72:5f:71:fc:f3:8d:ad:8f:e7:97:84:ef:51:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22C965CFD1C68B15DAE2F2D8CAE324448D335934
        Validity
            Not Before: Apr 30 15:31:29 2026 GMT
            Not After : Apr 29 15:36:29 2027 GMT
        Subject: CN=D65BCB08A67E403EDEF0F93128FB99125A9D96E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:30:b0:a3:a8:f5:cd:bb:72:e3:66:e4:ee:f6:
                    a7:1a:e7:74:69:12:4d:13:da:3e:3b:67:a6:22:e1:
                    d0:2f:6a:30:03:8b:00:31:d9:30:94:d0:3b:f2:e6:
                    15:12:ea:64:0f:71:11:9d:f8:05:52:7c:6c:7e:76:
                    38:6a:28:b8:07:14:83:da:93:c0:c9:71:87:fd:17:
                    d3:9f:60:39:5b:23:0d:f8:25:f2:02:99:c6:05:5e:
                    99:5d:d7:b8:58:5e:6c:78:0c:3d:fc:32:51:ac:fd:
                    68:7d:71:9f:f7:ce:c3:13:ff:b3:6a:4d:84:06:1b:
                    13:13:50:8a:35:b1:70:7c:fb:39:9c:d2:af:22:f8:
                    1c:e9:fe:ae:0b:8a:c2:cc:d4:1b:ab:4e:b6:e9:96:
                    0f:03:53:1e:ce:76:db:1a:23:18:f8:9b:f8:95:01:
                    16:22:09:36:f3:f4:a9:39:2b:89:27:89:52:b6:90:
                    5f:7c:4e:fd:67:91:5b:68:b3:39:b7:cb:9f:9a:73:
                    71:1c:59:34:2b:ae:b6:6e:51:dc:5e:6c:9c:65:6f:
                    fd:05:7f:fe:c2:1a:d1:0c:48:22:41:2c:5a:c4:53:
                    3a:06:95:e2:fa:65:12:a0:19:79:2e:07:3c:23:7b:
                    5c:94:50:99:bf:7e:ac:82:d2:77:bd:2c:ae:2f:e9:
                    e4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5B:CB:08:A6:7E:40:3E:DE:F0:F9:31:28:FB:99:12:5A:9D:96:E0
            X509v3 Authority Key Identifier:
                keyid:22:C9:65:CF:D1:C6:8B:15:DA:E2:F2:D8:CA:E3:24:44:8D:33:59:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/22C965CFD1C68B15DAE2F2D8CAE324448D335934.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22C965CFD1C68B15DAE2F2D8CAE324448D335934.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/0/323830343a343835303a3a2f33322d3438203d3e20323637313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4850::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:cc:3a:50:ce:0f:c0:f4:b4:b5:c3:5e:be:28:1b:76:bc:9d:
         df:3d:cd:af:35:cb:a4:41:61:ee:6b:58:18:10:fe:3a:2f:f8:
         9b:36:a6:6b:d9:d5:7c:f2:3c:9a:c8:b6:99:07:81:fb:bb:25:
         21:8f:cf:03:7e:8a:17:35:a6:3a:cc:ac:1f:24:9e:61:e3:9f:
         06:aa:1b:ff:3f:f7:b4:b4:30:a8:2a:19:89:2b:42:81:c3:74:
         bf:61:8b:b5:02:29:b8:6d:43:83:41:f0:d9:89:de:0a:b9:db:
         64:30:67:72:67:16:96:bc:e8:ac:24:e1:d9:32:bd:96:73:28:
         00:11:0c:90:ce:a0:78:0b:0f:f0:7f:44:82:bb:9c:f9:a2:5b:
         f8:c9:3d:fd:e5:b2:75:7d:7b:a4:65:42:b9:f4:c3:83:a7:d3:
         b4:cd:a2:9b:5e:eb:b9:95:e0:0d:a1:96:c8:f2:f6:ad:df:60:
         99:4c:9c:0d:c1:66:c7:00:91:1a:a5:2e:20:e1:2a:90:0b:ad:
         b5:cd:3f:86:a5:80:f2:07:9d:44:17:ac:30:a7:e1:11:b2:5c:
         54:93:37:99:fe:cb:52:33:a8:c2:fa:20:d8:6c:6e:82:e5:16:
         e3:74:49:a4:e8:5b:b6:a0:46:d3:f0:a4:f3:1d:2c:3c:74:27:
         b8:8d:01:81
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUX35606Jecl9x/PONrY/nl4TvUTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJDOTY1Q0ZEMUM2OEIxNURBRTJGMkQ4Q0FFMzI0NDQ4
RDMzNTkzNDAeFw0yNjA0MzAxNTMxMjlaFw0yNzA0MjkxNTM2MjlaMDMxMTAvBgNV
BAMTKEQ2NUJDQjA4QTY3RTQwM0VERUYwRjkzMTI4RkI5OTEyNUE5RDk2RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3MLCjqPXNu3LjZuTu9qca53Rp
Ek0T2j47Z6Yi4dAvajADiwAx2TCU0Dvy5hUS6mQPcRGd+AVSfGx+djhqKLgHFIPa
k8DJcYf9F9OfYDlbIw34JfICmcYFXpld17hYXmx4DD38MlGs/Wh9cZ/3zsMT/7Nq
TYQGGxMTUIo1sXB8+zmc0q8i+Bzp/q4LisLM1BurTrbplg8DUx7OdtsaIxj4m/iV
ARYiCTbz9Kk5K4kniVK2kF98Tv1nkVtoszm3y5+ac3EcWTQrrrZuUdxebJxlb/0F
f/7CGtEMSCJBLFrEUzoGleL6ZRKgGXkuBzwje1yUUJm/fqyC0ne9LK4v6eTZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1lvLCKZ+QD7e8PkxKPuZElqdluAwHwYDVR0j
BBgwFoAUIsllz9HGixXa4vLYyuMkRI0zWTQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW5uNHF1blNpb2l4d1pOajdXdkYxdWpNOXB6cWg5M0VuckdmSG5odUhN
WkovMC8yMkM5NjVDRkQxQzY4QjE1REFFMkYyRDhDQUUzMjQ0NDhEMzM1OTM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyQzk2NUNGRDFDNjhCMTVE
QUUyRjJEOENBRTMyNDQ0OEQzMzU5MzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlubjRxdW5TaW9peHdaTmo3V3ZGMXVqTTlwenFoOTNFbnJHZkhuaHVITVpKLzAv
MzIzODMwMzQzYTM0MzgzNTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzEzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARIUDANBgkqhkiG9w0BAQsFAAOCAQEAxsw6UM4P
wPS0tcNevigbdryd3z3NrzXLpEFh7mtYGBD+Oi/4mzama9nVfPI8msi2mQeB+7sl
IY/PA36KFzWmOsysHySeYeOfBqob/z/3tLQwqCoZiStCgcN0v2GLtQIpuG1Dg0Hw
2YneCrnbZDBncmcWlrzorCTh2TK9lnMoABEMkM6geAsP8H9Egruc+aJb+Mk9/eWy
dX17pGVCufTDg6fTtM2im17ruZXgDaGWyPL2rd9gmUycDcFmxwCRGqUuIOEqkAut
tc0/hqWA8gedRBesMKfhEbJcVJM3mf7LUjOowvog2GxuguUW43RJpOhbtqBG0/Ck
8x0sPHQnuI0BgQ==
-----END CERTIFICATE-----
Generated at Wed May 13 19:56:43 2026 by rpki-client