Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a383030303a3a2f33332d3333203d3e20323637363038.roa
File:                     323830343a343433303a383030303a3a2f33332d3333203d3e20323637363038.roa (raw, json)
Hash identifier:          IqgQ5tDB4FUh7zH3mRPjbpz7o4Z4tZ25FYrz6qp8m18=
Subject key identifier:   B0:6E:99:2A:B4:C0:2A:99:04:44:D6:A3:2B:4F:F3:A0:68:F9:A1:AF
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       24D9E6137135E2DCBD44A3727ADC0C3EFFC3A1BA
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a383030303a3a2f33332d3333203d3e20323637363038.roa
Signing time:             Sat 02 May 2026 00:03:20 +0000
ROA not before:           Fri 01 May 2026 23:58:20 +0000
ROA not after:            Sat 01 May 2027 00:03:20 +0000
asID:                     267608
IP address blocks:        2804:4430:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d9:e6:13:71:35:e2:dc:bd:44:a3:72:7a:dc:0c:3e:ff:c3:a1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: May  1 23:58:20 2026 GMT
            Not After : May  1 00:03:20 2027 GMT
        Subject: CN=B06E992AB4C02A990444D6A32B4FF3A068F9A1AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:ae:9b:ef:8c:37:22:c3:e5:40:d6:0a:cf:
                    b7:ee:4f:cc:08:f2:cb:b3:74:32:d5:c1:2c:48:88:
                    cd:2a:41:05:65:3a:35:6c:b2:ed:d9:67:31:df:e1:
                    fb:5a:0e:e0:72:3b:ea:f2:f6:f8:9a:d0:9c:0e:44:
                    96:3f:c1:69:14:86:0b:4e:5a:6e:1b:d0:a1:63:2f:
                    c2:b8:c4:80:c0:b3:26:1e:66:cb:e2:a8:cd:67:ff:
                    7e:cc:63:58:63:33:a5:f7:39:55:53:5f:a5:31:23:
                    24:1c:0d:d6:f8:a8:99:54:50:13:4f:7d:c9:c7:d8:
                    f5:87:b6:ea:51:f2:a5:63:99:8e:46:39:5b:98:c3:
                    42:84:94:3a:a6:20:19:dd:94:11:07:a5:15:4c:2b:
                    8a:19:63:ff:51:b3:ce:88:0f:68:52:a2:37:f3:c9:
                    d4:ab:6d:ab:fa:3d:9c:4a:c3:31:7f:ee:c7:2b:4d:
                    8b:20:1f:a3:6b:91:16:68:ed:67:ef:34:58:4e:e7:
                    b4:0a:7e:eb:83:6b:12:ed:6f:fd:11:a2:c3:98:cd:
                    8a:df:0f:6b:10:f0:ad:ef:d6:2b:97:f6:4f:84:f6:
                    bd:5c:87:f8:67:a9:e1:8a:1e:80:4c:ac:00:ed:fa:
                    fe:43:6d:e8:e9:f9:7e:9a:41:03:d5:f3:3d:de:27:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6E:99:2A:B4:C0:2A:99:04:44:D6:A3:2B:4F:F3:A0:68:F9:A1:AF
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a383030303a3a2f33332d3333203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4430:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         39:e1:d7:5f:6d:00:9d:af:03:6f:32:c3:c2:48:4c:34:7e:26:
         3b:9a:6f:8b:5f:9e:b1:05:e0:c1:fa:de:fa:bd:0f:03:93:b6:
         e0:99:4b:b9:61:c3:1b:c9:5a:e6:d8:1e:3b:b6:c1:b7:fe:09:
         84:20:dd:2d:37:e0:9d:b8:cd:6c:27:3e:a4:ff:27:30:f8:b1:
         be:bd:ae:fc:bd:9e:c3:91:f5:30:37:c4:64:57:00:5d:a1:60:
         1f:a9:e6:c4:fb:a2:cb:33:20:d5:41:45:66:84:35:d0:71:36:
         c6:f9:14:e2:10:3a:fb:86:41:ed:46:1b:13:53:ce:f8:3d:2f:
         d1:0b:c1:c2:01:ce:bd:90:ca:ff:dd:8e:32:f5:31:6e:fd:79:
         d5:7d:fc:25:94:27:c8:fe:05:4f:2d:a0:ec:c8:9f:f4:5e:38:
         11:92:c9:5c:bf:7d:2e:b1:99:d1:e6:de:a4:f2:5e:e3:04:91:
         ce:b7:fb:3d:3c:c2:dc:ed:3a:a6:4c:73:fb:84:c5:64:b9:62:
         72:f7:0b:9a:59:5a:0d:dc:f0:97:9a:9b:20:08:8b:39:5a:f7:
         15:c9:a5:b7:a7:0f:ad:87:f8:2a:dd:f8:f0:68:f7:13:cc:22:
         1a:5e:3b:31:b0:19:95:da:ba:b0:75:fb:1f:a5:11:51:45:3f:
         03:fd:50:a7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJNnmE3E14ty9RKNyetwMPv/DobowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcxMDcwREIzQUY5NDg5QUMwNDRBMDE4OTRGN0YzREVB
NTAxNkMxRjAeFw0yNjA1MDEyMzU4MjBaFw0yNzA1MDEwMDAzMjBaMDMxMTAvBgNV
BAMTKEIwNkU5OTJBQjRDMDJBOTkwNDQ0RDZBMzJCNEZGM0EwNjhGOUExQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRq6b74w3IsPlQNYKz7fuT8wI
8suzdDLVwSxIiM0qQQVlOjVssu3ZZzHf4ftaDuByO+ry9via0JwORJY/wWkUhgtO
Wm4b0KFjL8K4xIDAsyYeZsviqM1n/37MY1hjM6X3OVVTX6UxIyQcDdb4qJlUUBNP
fcnH2PWHtupR8qVjmY5GOVuYw0KElDqmIBndlBEHpRVMK4oZY/9Rs86ID2hSojfz
ydSrbav6PZxKwzF/7scrTYsgH6NrkRZo7WfvNFhO57QKfuuDaxLtb/0RosOYzYrf
D2sQ8K3v1iuX9k+E9r1ch/hnqeGKHoBMrADt+v5Dbejp+X6aQQPV8z3eJy/JAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUsG6ZKrTAKpkERNajK0/zoGj5oa8wHwYDVR0j
BBgwFoAUNxBw2zr5SJrARKAYlPfz3qUBbB8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZ6aTNEbll3aG8yOFZEbUtqUmFVWDUzZG1ldEs2eVB3ZFZ4REVVWDlO
TG8vMS8zNzEwNzBEQjNBRjk0ODlBQzA0NEEwMTg5NEY3RjNERUE1MDE2QzFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3MTA3MERCM0FGOTQ4OUFD
MDQ0QTAxODk0RjdGM0RFQTUwMTZDMUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FmemkzRG5Zd2hvMjhWRG1LalJhVVg1M2RtZXRLNnlQd2RWeERFVVg5TkxvLzEv
MzIzODMwMzQzYTM0MzQzMzMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNzM2MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygERDCAMA0GCSqGSIb3DQEBCwUA
A4IBAQA54ddfbQCdrwNvMsPCSEw0fiY7mm+LX56xBeDB+t76vQ8Dk7bgmUu5YcMb
yVrm2B47tsG3/gmEIN0tN+CduM1sJz6k/ycw+LG+va78vZ7DkfUwN8RkVwBdoWAf
qebE+6LLMyDVQUVmhDXQcTbG+RTiEDr7hkHtRhsTU874PS/RC8HCAc69kMr/3Y4y
9TFu/XnVffwllCfI/gVPLaDsyJ/0XjgRkslcv30usZnR5t6k8l7jBJHOt/s9PMLc
7TqmTHP7hMVkuWJy9wuaWVoN3PCXmpsgCIs5WvcVyaW3pw+th/gq3fjwaPcTzCIa
XjsxsBmV2rqwdfsfpRFRRT8D/VCn
-----END CERTIFICATE-----
Generated at Wed May 13 16:41:17 2026 by rpki-client