Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/323830343a336238633a3a2f33322d3634203d3e20323636313536.roa
File:                     323830343a336238633a3a2f33322d3634203d3e20323636313536.roa (raw, json)
Hash identifier:          H1CKJ/yWt115x4RvsRXsl49Qq7CfhsqbGq+ASg3gB+k=
Subject key identifier:   72:99:C4:81:BE:12:5E:83:E2:EA:E4:C0:40:25:41:25:4A:64:0F:4F
Certificate issuer:       /CN=6B4CC171DFBE7D197B119332192B5E7E9C131C42
Certificate serial:       7A1AF6736DCEF14A04C2038D7B5BE6BB534ACA9B
Authority key identifier: 6B:4C:C1:71:DF:BE:7D:19:7B:11:93:32:19:2B:5E:7E:9C:13:1C:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B4CC171DFBE7D197B119332192B5E7E9C131C42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/323830343a336238633a3a2f33322d3634203d3e20323636313536.roa
Signing time:             Wed 18 Mar 2026 11:04:37 +0000
ROA not before:           Wed 18 Mar 2026 10:59:37 +0000
ROA not after:            Wed 17 Mar 2027 11:04:37 +0000
asID:                     266156
IP address blocks:        2804:3b8c::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.crl
                          rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B4CC171DFBE7D197B119332192B5E7E9C131C42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 23:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1a:f6:73:6d:ce:f1:4a:04:c2:03:8d:7b:5b:e6:bb:53:4a:ca:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B4CC171DFBE7D197B119332192B5E7E9C131C42
        Validity
            Not Before: Mar 18 10:59:37 2026 GMT
            Not After : Mar 17 11:04:37 2027 GMT
        Subject: CN=7299C481BE125E83E2EAE4C0402541254A640F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0d:65:7d:f8:0a:49:0f:d3:95:f7:8a:f1:a1:
                    6e:5a:2b:a9:81:40:40:1b:ff:2f:1a:5e:45:e9:92:
                    10:c1:7c:58:6b:6c:06:44:99:e2:5c:93:eb:3b:67:
                    2f:70:38:47:fc:6c:57:5c:0b:2b:0b:06:68:85:08:
                    1c:2f:06:17:8f:72:6d:3e:9c:82:5a:c7:7d:a5:e8:
                    64:59:71:7b:c9:2d:10:7e:bf:b9:cb:73:6b:8d:f1:
                    63:af:f4:a2:52:66:55:4e:ff:8c:3b:ca:fb:08:bb:
                    09:9f:b9:44:25:c1:d5:87:08:28:86:c8:75:8a:95:
                    b9:d5:ba:7f:a7:4b:97:4a:ba:3b:3a:1c:9e:0c:da:
                    2e:28:d1:52:61:ac:32:cc:2e:b9:60:cd:af:74:bc:
                    ec:78:08:a1:6d:13:ab:5a:e1:72:23:9f:ee:be:81:
                    e1:a5:72:b4:aa:06:5c:91:78:94:0b:eb:6f:22:09:
                    fc:1a:68:c9:77:c7:2b:19:e0:b0:62:17:96:bc:01:
                    55:97:b0:23:d8:eb:92:82:56:d0:c2:a7:74:62:9b:
                    0a:db:cc:7c:05:09:01:5b:db:7a:c0:07:e7:e5:ea:
                    03:28:ac:22:e5:b0:be:ce:86:be:a8:62:77:3c:dc:
                    a1:9a:54:96:da:62:df:56:18:2d:e4:0c:a9:ef:be:
                    68:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:99:C4:81:BE:12:5E:83:E2:EA:E4:C0:40:25:41:25:4A:64:0F:4F
            X509v3 Authority Key Identifier:
                keyid:6B:4C:C1:71:DF:BE:7D:19:7B:11:93:32:19:2B:5E:7E:9C:13:1C:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B4CC171DFBE7D197B119332192B5E7E9C131C42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/323830343a336238633a3a2f33322d3634203d3e20323636313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:e2:eb:a9:c9:55:cb:36:f1:dd:6b:28:69:73:c3:3e:85:27:
         7d:1e:76:82:40:0b:08:9d:c3:38:6e:c8:2f:da:3a:a5:3f:80:
         a6:16:94:1b:f1:41:f2:ca:ce:d9:de:76:24:fc:37:3d:a9:0d:
         4c:4d:94:64:4f:13:ac:46:9d:4f:00:5f:94:2f:39:0e:54:7a:
         4e:a0:dd:15:c8:9b:cb:51:9d:86:a1:10:47:ee:ed:48:d1:4f:
         85:98:8d:b1:33:e5:f5:0b:05:e6:94:ce:bf:62:42:06:d1:5d:
         b3:ab:44:f4:99:95:e2:a4:51:dd:d3:ae:9e:85:91:bc:b2:c3:
         60:3c:ae:a5:5b:41:2a:22:36:08:91:1f:ae:d6:d7:18:bd:05:
         cc:9c:d4:2d:50:9a:c2:bf:9b:07:b9:e8:0e:db:fd:2f:e6:82:
         9b:e0:8b:d6:26:5c:cb:46:e0:65:fc:b3:9a:e7:5f:33:75:b9:
         5f:3b:6d:c0:ea:e7:41:28:18:df:a8:5d:3c:c6:83:84:4b:36:
         9c:8b:37:98:2d:15:fc:25:a9:8c:6a:9f:10:5c:59:ac:68:4b:
         00:ed:9d:27:72:37:6c:c2:94:43:0a:e9:64:3f:ea:16:f8:35:
         b4:19:06:44:37:9d:e6:08:54:d4:27:97:d0:b3:c7:ed:cc:8d:
         cf:87:ec:38
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUehr2c23O8UoEwgONe1vmu1NKypswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI0Q0MxNzFERkJFN0QxOTdCMTE5MzMyMTkyQjVFN0U5
QzEzMUM0MjAeFw0yNjAzMTgxMDU5MzdaFw0yNzAzMTcxMTA0MzdaMDMxMTAvBgNV
BAMTKDcyOTlDNDgxQkUxMjVFODNFMkVBRTRDMDQwMjU0MTI1NEE2NDBGNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPDWV9+ApJD9OV94rxoW5aK6mB
QEAb/y8aXkXpkhDBfFhrbAZEmeJck+s7Zy9wOEf8bFdcCysLBmiFCBwvBhePcm0+
nIJax32l6GRZcXvJLRB+v7nLc2uN8WOv9KJSZlVO/4w7yvsIuwmfuUQlwdWHCCiG
yHWKlbnVun+nS5dKujs6HJ4M2i4o0VJhrDLMLrlgza90vOx4CKFtE6ta4XIjn+6+
geGlcrSqBlyReJQL628iCfwaaMl3xysZ4LBiF5a8AVWXsCPY65KCVtDCp3Rimwrb
zHwFCQFb23rAB+fl6gMorCLlsL7Ohr6oYnc83KGaVJbaYt9WGC3kDKnvvmgpAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUcpnEgb4SXoPi6uTAQCVBJUpkD08wHwYDVR0j
BBgwFoAUa0zBcd++fRl7EZMyGStefpwTHEIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTRKQ1NzUlF0Vnp4S3RLd0U5emZFRmVnZ2NjVlY4TkRSQ1ZKYWQ4d3dk
dm0vMC82QjRDQzE3MURGQkU3RDE5N0IxMTkzMzIxOTJCNUU3RTlDMTMxQzQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCNENDMTcxREZCRTdEMTk3
QjExOTMzMjE5MkI1RTdFOUMxMzFDNDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E0SkNTc1JRdFZ6eEt0S3dFOXpmRUZlZ2djY1ZWOE5EUkNWSmFkOHd3ZHZtLzAv
MzIzODMwMzQzYTMzNjIzODYzM2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzIzNjM2
MzEzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ7jDANBgkqhkiG9w0BAQsFAAOCAQEAeeLrqclV
yzbx3WsoaXPDPoUnfR52gkALCJ3DOG7IL9o6pT+AphaUG/FB8srO2d52JPw3PakN
TE2UZE8TrEadTwBflC85DlR6TqDdFciby1GdhqEQR+7tSNFPhZiNsTPl9QsF5pTO
v2JCBtFds6tE9JmV4qRR3dOunoWRvLLDYDyupVtBKiI2CJEfrtbXGL0FzJzULVCa
wr+bB7noDtv9L+aCm+CL1iZcy0bgZfyzmudfM3W5XzttwOrnQSgY36hdPMaDhEs2
nIs3mC0V/CWpjGqfEFxZrGhLAO2dJ3I3bMKUQwrpZD/qFvg1tBkGRDed5ghU1CeX
0LPH7cyNz4fsOA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:00:55 2026 by rpki-client