Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/323830343a6131383a633030303a3a2f33342d3334203d3e20323633303232.roa
File:                     323830343a6131383a633030303a3a2f33342d3334203d3e20323633303232.roa (raw, json)
Hash identifier:          9bxBWAExyUAWbQlqsp4oGCIk8MxvoQTJE/UYc1Rvtls=
Subject key identifier:   B2:A2:EB:8E:8F:88:EE:76:AE:6B:80:4E:04:EC:2B:7B:73:BB:03:A0
Certificate issuer:       /CN=E6A54FF71E395BA75DF9DE63D180369AF8715EB1
Certificate serial:       13672A49DBA624792DB89BAA5F62702ED4DFB455
Authority key identifier: E6:A5:4F:F7:1E:39:5B:A7:5D:F9:DE:63:D1:80:36:9A:F8:71:5E:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/323830343a6131383a633030303a3a2f33342d3334203d3e20323633303232.roa
Signing time:             Sat 21 Mar 2026 01:42:35 +0000
ROA not before:           Sat 21 Mar 2026 01:37:35 +0000
ROA not after:            Sat 20 Mar 2027 01:42:35 +0000
asID:                     263022
IP address blocks:        2804:a18:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:67:2a:49:db:a6:24:79:2d:b8:9b:aa:5f:62:70:2e:d4:df:b4:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A54FF71E395BA75DF9DE63D180369AF8715EB1
        Validity
            Not Before: Mar 21 01:37:35 2026 GMT
            Not After : Mar 20 01:42:35 2027 GMT
        Subject: CN=B2A2EB8E8F88EE76AE6B804E04EC2B7B73BB03A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:69:d2:e0:65:09:eb:33:14:e5:73:13:57:01:
                    06:d2:ae:f5:df:8b:96:95:16:b6:02:d3:64:b0:07:
                    fa:18:09:82:9b:d9:f4:fd:f4:6e:e9:57:db:3f:2f:
                    1e:44:85:dd:a3:19:3d:2a:aa:25:f9:5d:c2:d5:19:
                    a7:c5:b1:b3:84:25:94:fd:6e:76:57:f8:72:fe:a5:
                    5b:1d:af:0a:14:ab:77:ae:32:1f:4a:96:02:cb:b9:
                    7d:a2:2f:ef:c8:26:a9:c2:b5:77:ff:fa:eb:36:44:
                    fd:ff:72:a2:6f:68:cd:58:bb:15:90:0f:f5:fe:67:
                    8f:31:47:9c:dc:1f:3e:e2:91:6e:4e:7f:8e:41:69:
                    ec:b9:24:b4:34:9d:93:a2:f0:25:ad:ab:67:71:29:
                    80:08:bb:75:32:1f:94:2e:18:f9:32:12:0a:fc:92:
                    87:a9:62:9d:b9:bf:e2:e0:f6:14:ba:0c:77:61:ea:
                    e3:a8:24:ef:68:41:37:8c:68:d4:47:49:b8:0a:a2:
                    9a:b2:e5:25:26:e8:09:57:2f:66:d5:bd:19:42:50:
                    ab:e4:ef:d3:a4:2a:bb:98:65:f7:08:78:40:91:3b:
                    d9:59:03:2b:ef:13:69:27:5b:cf:b2:41:e5:46:1b:
                    c6:b9:b2:19:85:e1:12:b6:87:37:5e:5a:e2:74:f7:
                    4c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A2:EB:8E:8F:88:EE:76:AE:6B:80:4E:04:EC:2B:7B:73:BB:03:A0
            X509v3 Authority Key Identifier:
                keyid:E6:A5:4F:F7:1E:39:5B:A7:5D:F9:DE:63:D1:80:36:9A:F8:71:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/323830343a6131383a633030303a3a2f33342d3334203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a18:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3a:20:53:64:e5:74:1e:1a:ef:18:05:15:06:b5:7c:11:7b:4c:
         cb:aa:4b:35:fa:5e:3f:d2:d7:56:16:01:34:a4:13:2f:8d:4f:
         bb:4f:0c:95:4b:d8:7e:46:28:19:f6:80:76:a8:2c:32:50:50:
         8e:1c:93:c3:cb:cf:42:f4:c5:7a:09:28:5c:0a:da:9c:b5:1f:
         af:54:b4:d9:ef:21:c4:19:b5:fa:17:a3:77:e5:07:d6:b3:bb:
         14:6e:be:bf:87:ae:50:7b:6b:10:aa:64:02:f4:80:17:6e:16:
         e3:03:b2:1d:25:e9:41:18:67:dc:92:6d:f0:dc:f9:4d:52:7a:
         9b:69:32:f1:64:ea:1a:93:81:98:85:ee:95:da:69:e6:ff:61:
         1c:90:27:a0:54:4e:b8:97:bd:46:dd:60:3a:f7:50:88:cd:31:
         d7:e0:f6:86:12:6b:c7:46:2b:06:a7:07:70:b0:42:86:06:73:
         55:73:81:96:07:fc:ae:73:6b:a2:4e:47:51:70:85:2b:2d:ad:
         6e:49:fb:6d:08:ff:d3:77:7a:92:79:95:0a:d1:3d:41:31:21:
         1c:f9:65:1f:8b:f6:67:20:ae:16:5d:e8:12:8c:39:96:3e:2d:
         47:81:b0:02:3a:dc:69:30:5b:e0:26:12:ec:1e:96:06:c5:f5:
         1f:26:42:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUE2cqSdumJHktuJuqX2JwLtTftFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZBNTRGRjcxRTM5NUJBNzVERjlERTYzRDE4MDM2OUFG
ODcxNUVCMTAeFw0yNjAzMjEwMTM3MzVaFw0yNzAzMjAwMTQyMzVaMDMxMTAvBgNV
BAMTKEIyQTJFQjhFOEY4OEVFNzZBRTZCODA0RTA0RUMyQjdCNzNCQjAzQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRadLgZQnrMxTlcxNXAQbSrvXf
i5aVFrYC02SwB/oYCYKb2fT99G7pV9s/Lx5Ehd2jGT0qqiX5XcLVGafFsbOEJZT9
bnZX+HL+pVsdrwoUq3euMh9KlgLLuX2iL+/IJqnCtXf/+us2RP3/cqJvaM1YuxWQ
D/X+Z48xR5zcHz7ikW5Of45Baey5JLQ0nZOi8CWtq2dxKYAIu3UyH5QuGPkyEgr8
koepYp25v+Lg9hS6DHdh6uOoJO9oQTeMaNRHSbgKopqy5SUm6AlXL2bVvRlCUKvk
79OkKruYZfcIeECRO9lZAyvvE2knW8+yQeVGG8a5shmF4RK2hzdeWuJ090z9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsqLrjo+I7naua4BOBOwre3O7A6AwHwYDVR0j
BBgwFoAU5qVP9x45W6dd+d5j0YA2mvhxXrEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXB0M3JLeWVqTWVkNXhoOFA4dXhVQ29zeTVpaVFyY1ZGelpGeFhUNUJx
QkMvMC9FNkE1NEZGNzFFMzk1QkE3NURGOURFNjNEMTgwMzY5QUY4NzE1RUIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2QTU0RkY3MUUzOTVCQTc1
REY5REU2M0QxODAzNjlBRjg3MTVFQjEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlwdDNyS3llak1lZDV4aDhQOHV4VUNvc3k1aWlRcmNWRnpaRnhYVDVCcUJDLzAv
MzIzODMwMzQzYTYxMzEzODNhNjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzMjM2MzMzMDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBAoYwDANBgkqhkiG9w0BAQsFAAOC
AQEAOiBTZOV0HhrvGAUVBrV8EXtMy6pLNfpeP9LXVhYBNKQTL41Pu08MlUvYfkYo
GfaAdqgsMlBQjhyTw8vPQvTFegkoXAranLUfr1S02e8hxBm1+hejd+UH1rO7FG6+
v4euUHtrEKpkAvSAF24W4wOyHSXpQRhn3JJt8Nz5TVJ6m2ky8WTqGpOBmIXuldpp
5v9hHJAnoFROuJe9Rt1gOvdQiM0x1+D2hhJrx0YrBqcHcLBChgZzVXOBlgf8rnNr
ok5HUXCFKy2tbkn7bQj/03d6knmVCtE9QTEhHPllH4v2ZyCuFl3oEow5lj4tR4Gw
AjrcaTBb4CYS7B6WBsX1HyZCvQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:58:13 2026 by rpki-client