Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/323830343a326232633a3a2f33322d3332203d3e20323635313339.roa
File:                     323830343a326232633a3a2f33322d3332203d3e20323635313339.roa (raw, json)
Hash identifier:          k3rjOUNgSxYgnwh/Zor8N2+Yp+eRZCndIifBLyq7SMY=
Subject key identifier:   9F:97:3B:CB:FA:3A:98:91:6A:00:E4:77:40:1F:CE:31:AA:9A:45:37
Certificate issuer:       /CN=9D44FBF1856C3F2357A868EC86B6E77183228583
Certificate serial:       2FEA1B6A44BCCCCBE06A72A2E29A1B8B9E218CF4
Authority key identifier: 9D:44:FB:F1:85:6C:3F:23:57:A8:68:EC:86:B6:E7:71:83:22:85:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D44FBF1856C3F2357A868EC86B6E77183228583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/323830343a326232633a3a2f33322d3332203d3e20323635313339.roa
Signing time:             Thu 19 Mar 2026 14:38:20 +0000
ROA not before:           Thu 19 Mar 2026 14:33:20 +0000
ROA not after:            Thu 18 Mar 2027 14:38:20 +0000
asID:                     265139
IP address blocks:        2804:2b2c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/9D44FBF1856C3F2357A868EC86B6E77183228583.crl
                          rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/9D44FBF1856C3F2357A868EC86B6E77183228583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D44FBF1856C3F2357A868EC86B6E77183228583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 22:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ea:1b:6a:44:bc:cc:cb:e0:6a:72:a2:e2:9a:1b:8b:9e:21:8c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D44FBF1856C3F2357A868EC86B6E77183228583
        Validity
            Not Before: Mar 19 14:33:20 2026 GMT
            Not After : Mar 18 14:38:20 2027 GMT
        Subject: CN=9F973BCBFA3A98916A00E477401FCE31AA9A4537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:86:7d:b2:00:e3:2f:0f:41:36:7e:1d:96:2d:
                    e1:f2:ff:bb:c0:b0:d9:74:65:2b:a4:2d:43:c2:c6:
                    a1:08:59:f2:61:aa:86:d3:b8:1b:9a:04:2e:34:ce:
                    f5:f5:eb:18:29:01:95:19:4e:44:94:9c:0d:30:08:
                    be:1a:fa:ba:1e:4c:58:45:be:f2:a3:c1:f1:7e:38:
                    e8:a6:9a:e0:95:11:6b:39:52:fb:ac:9f:be:2d:91:
                    18:07:45:e3:16:e1:f6:cf:85:74:0e:22:e6:79:14:
                    5f:2e:2e:47:95:25:38:c8:68:66:2a:05:a4:6f:5d:
                    94:75:55:c4:38:1c:0e:ba:fa:7d:6e:8e:8e:e3:61:
                    78:8b:03:4b:e8:b2:dd:a2:66:37:e8:9b:27:fb:83:
                    b1:6a:4c:50:85:d8:b3:91:1b:30:42:ce:17:4d:2d:
                    e8:f1:b5:0c:96:71:d9:6e:3a:32:90:e0:c2:64:eb:
                    59:d1:8f:e4:5a:54:e5:57:de:10:f1:ae:9e:3b:5f:
                    7b:62:1f:2b:63:e5:bd:80:5d:ff:4a:3a:93:68:b6:
                    75:f3:8d:5c:9f:8f:4d:89:29:95:4d:bb:d5:ad:4e:
                    6c:fc:87:85:25:29:09:f2:05:4f:59:9f:67:65:92:
                    1e:15:42:e6:88:3f:73:e6:67:0e:14:24:be:9d:30:
                    fe:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:97:3B:CB:FA:3A:98:91:6A:00:E4:77:40:1F:CE:31:AA:9A:45:37
            X509v3 Authority Key Identifier:
                keyid:9D:44:FB:F1:85:6C:3F:23:57:A8:68:EC:86:B6:E7:71:83:22:85:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/9D44FBF1856C3F2357A868EC86B6E77183228583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D44FBF1856C3F2357A868EC86B6E77183228583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/323830343a326232633a3a2f33322d3332203d3e20323635313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:95:20:c6:58:23:77:43:c4:b5:68:81:31:42:2a:cc:5f:9a:
         80:c1:a5:ea:99:8a:8f:2a:5b:94:1e:ef:81:b1:f1:12:ad:77:
         d8:a0:36:2f:36:aa:66:02:9b:61:27:e5:e7:a2:b5:a6:d5:fe:
         ec:cc:85:bc:d1:ae:37:ca:a2:a7:2f:06:04:b8:10:50:b9:d4:
         a1:f6:91:06:60:22:f5:0c:be:4c:e6:0b:f6:9f:7a:4b:60:5e:
         4e:ab:b6:a1:1d:88:ec:b9:01:de:aa:dc:ef:31:0b:b1:a5:79:
         1b:dc:f1:81:ae:00:f7:8b:79:f2:be:1c:c2:22:7a:0d:fd:8c:
         98:3a:d3:0d:97:c6:b1:46:b7:cb:f5:68:1a:f5:eb:29:00:f3:
         16:a1:ca:45:e0:14:54:58:6b:b3:e8:fe:7a:44:ec:66:1f:15:
         de:0e:3f:fd:48:41:38:5d:f5:a1:88:ac:1d:5c:55:e3:c4:71:
         d6:a5:98:1e:b9:26:c6:fb:75:9c:f4:54:d0:6b:93:2b:5d:03:
         a5:9e:7e:c5:fc:40:7f:12:2b:e3:7c:5b:49:25:38:2a:8a:00:
         3a:ff:f7:40:cd:02:b4:65:8a:0a:cf:5c:d8:c2:34:b7:45:f3:
         51:16:85:82:3f:1c:af:cf:19:f9:2f:3e:1b:c9:bf:4b:a4:2e:
         9f:e5:cd:f9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUL+obakS8zMvganKi4pobi54hjPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ0NEZCRjE4NTZDM0YyMzU3QTg2OEVDODZCNkU3NzE4
MzIyODU4MzAeFw0yNjAzMTkxNDMzMjBaFw0yNzAzMTgxNDM4MjBaMDMxMTAvBgNV
BAMTKDlGOTczQkNCRkEzQTk4OTE2QTAwRTQ3NzQwMUZDRTMxQUE5QTQ1MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUhn2yAOMvD0E2fh2WLeHy/7vA
sNl0ZSukLUPCxqEIWfJhqobTuBuaBC40zvX16xgpAZUZTkSUnA0wCL4a+roeTFhF
vvKjwfF+OOimmuCVEWs5Uvusn74tkRgHReMW4fbPhXQOIuZ5FF8uLkeVJTjIaGYq
BaRvXZR1VcQ4HA66+n1ujo7jYXiLA0vost2iZjfomyf7g7FqTFCF2LORGzBCzhdN
LejxtQyWcdluOjKQ4MJk61nRj+RaVOVX3hDxrp47X3tiHytj5b2AXf9KOpNotnXz
jVyfj02JKZVNu9WtTmz8h4UlKQnyBU9Zn2dlkh4VQuaIP3PmZw4UJL6dMP6PAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUn5c7y/o6mJFqAOR3QB/OMaqaRTcwHwYDVR0j
BBgwFoAUnUT78YVsPyNXqGjshrbncYMihYMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlDQ292QU0zaU1WWlRDN2ExWlhIakVnTUVha25KZlE4Z29QMVZUb2pY
b3ovMC85RDQ0RkJGMTg1NkMzRjIzNTdBODY4RUM4NkI2RTc3MTgzMjI4NTgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlENDRGQkYxODU2QzNGMjM1
N0E4NjhFQzg2QjZFNzcxODMyMjg1ODMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZQ0NvdkFNM2lNVlpUQzdhMVpYSGpFZ01FYWtuSmZROGdvUDFWVG9qWG96LzAv
MzIzODMwMzQzYTMyNjIzMjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQrLDANBgkqhkiG9w0BAQsFAAOCAQEAnZUgxlgj
d0PEtWiBMUIqzF+agMGl6pmKjypblB7vgbHxEq132KA2LzaqZgKbYSfl56K1ptX+
7MyFvNGuN8qipy8GBLgQULnUofaRBmAi9Qy+TOYL9p96S2BeTqu2oR2I7LkB3qrc
7zELsaV5G9zxga4A94t58r4cwiJ6Df2MmDrTDZfGsUa3y/VoGvXrKQDzFqHKReAU
VFhrs+j+ekTsZh8V3g4//UhBOF31oYisHVxV48Rx1qWYHrkmxvt1nPRU0GuTK10D
pZ5+xfxAfxIr43xbSSU4KooAOv/3QM0CtGWKCs9c2MI0t0XzURaFgj8cr88Z+S8+
G8m/S6Qun+XN+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:56:13 2026 by rpki-client