Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/323830343a333362343a3a2f33322d313238203d3e20323635343132.roa
File:                     323830343a333362343a3a2f33322d313238203d3e20323635343132.roa (raw, json)
Hash identifier:          gJzMxgvlFGl2V8QDxVBVyw02ZU9YG2+08+qwQykXhWs=
Subject key identifier:   97:F2:85:B7:1D:E0:91:88:45:33:EC:25:AA:D3:24:E9:B5:A9:81:D5
Certificate issuer:       /CN=734395CAD74F94DFE2CE3AE6F4290723DA45BB7E
Certificate serial:       6303678E006692C3E37966A5FB5E627AF7D380D4
Authority key identifier: 73:43:95:CA:D7:4F:94:DF:E2:CE:3A:E6:F4:29:07:23:DA:45:BB:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734395CAD74F94DFE2CE3AE6F4290723DA45BB7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/323830343a333362343a3a2f33322d313238203d3e20323635343132.roa
Signing time:             Thu 19 Mar 2026 20:59:13 +0000
ROA not before:           Thu 19 Mar 2026 20:54:13 +0000
ROA not after:            Thu 18 Mar 2027 20:59:13 +0000
asID:                     265412
IP address blocks:        2804:33b4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/734395CAD74F94DFE2CE3AE6F4290723DA45BB7E.crl
                          rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/734395CAD74F94DFE2CE3AE6F4290723DA45BB7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734395CAD74F94DFE2CE3AE6F4290723DA45BB7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 20:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:03:67:8e:00:66:92:c3:e3:79:66:a5:fb:5e:62:7a:f7:d3:80:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734395CAD74F94DFE2CE3AE6F4290723DA45BB7E
        Validity
            Not Before: Mar 19 20:54:13 2026 GMT
            Not After : Mar 18 20:59:13 2027 GMT
        Subject: CN=97F285B71DE091884533EC25AAD324E9B5A981D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:16:59:67:d4:e2:3e:2d:90:67:67:9a:b5:
                    56:ad:89:ec:84:da:1d:2f:1a:a7:99:61:67:b3:6c:
                    a7:8c:f0:81:e2:de:6b:35:75:73:3a:7d:94:b1:b9:
                    e1:58:f8:85:56:79:0b:50:85:54:7a:4b:78:7b:73:
                    ff:b7:d5:c8:d9:cc:23:b7:a4:2a:75:53:06:52:8f:
                    e7:b2:28:50:4d:f1:13:3d:ce:48:fe:d7:1d:85:4a:
                    c0:cb:99:9e:68:74:9e:ff:82:35:b9:3d:b1:e4:73:
                    b2:cd:eb:d8:f1:30:fd:48:c5:b9:df:d8:42:33:7a:
                    bd:a1:ff:d6:75:4c:3d:b6:a5:8c:f8:5d:19:95:5a:
                    98:f3:0e:77:5a:2c:81:a2:c9:14:43:24:ce:25:ed:
                    10:8a:af:06:35:96:cb:b0:a5:bb:96:e1:8d:87:bb:
                    0b:18:7a:2c:df:f0:cc:31:bf:40:3d:56:97:96:8e:
                    be:ac:b2:c7:ac:99:29:22:b3:2f:15:d0:91:25:14:
                    48:6e:7c:bb:18:f9:99:29:6e:d0:54:16:39:50:37:
                    fd:4c:4f:ae:3b:85:7e:91:72:e3:7f:01:37:73:ce:
                    e8:24:08:c6:eb:cd:46:96:ba:8d:b0:8c:ca:71:81:
                    5d:08:1e:11:d9:b9:96:ef:b3:b0:94:7e:da:2a:8d:
                    1d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F2:85:B7:1D:E0:91:88:45:33:EC:25:AA:D3:24:E9:B5:A9:81:D5
            X509v3 Authority Key Identifier:
                keyid:73:43:95:CA:D7:4F:94:DF:E2:CE:3A:E6:F4:29:07:23:DA:45:BB:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/734395CAD74F94DFE2CE3AE6F4290723DA45BB7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734395CAD74F94DFE2CE3AE6F4290723DA45BB7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmTs7Rbx6Nm5JosfWJZzuYuuqHog4tGGzGbvJa1Zux8X/0/323830343a333362343a3a2f33322d313238203d3e20323635343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:11:7b:b8:23:96:81:b0:c9:b1:a1:73:11:cc:e3:6b:df:09:
         7f:24:17:a3:6b:9b:63:ce:92:05:78:83:50:48:71:96:4a:99:
         16:07:1d:2f:53:57:f8:46:c8:87:95:1a:1e:87:7a:95:cf:54:
         1d:f8:a7:25:de:9b:21:0a:ab:58:82:95:e4:aa:9f:05:e9:fb:
         d3:d4:41:1f:d5:2d:8b:01:88:76:c8:98:8e:96:c9:81:af:e4:
         42:9b:af:a4:09:aa:ce:a5:4c:be:77:0f:63:b1:0b:a0:d5:a0:
         75:40:48:5b:4d:82:a0:17:a1:6f:74:c8:2b:42:8a:51:11:7f:
         7d:b2:65:84:2e:d1:82:38:74:f1:39:2c:58:af:6a:da:07:26:
         67:43:38:a9:32:c3:1a:71:ac:e0:ff:f6:05:33:2b:a2:c1:8d:
         22:c4:56:82:e9:f6:5d:84:fc:11:31:66:c0:d0:94:15:69:03:
         e0:21:38:6b:39:4b:9a:c0:98:e3:78:b8:b7:cd:34:59:cf:38:
         cd:82:e5:74:f9:03:48:17:a8:8c:72:86:d6:94:2c:c4:79:3f:
         29:b2:56:26:34:51:17:8e:65:fd:32:c1:0f:0e:6b:92:4c:87:
         d6:a5:63:d6:61:b4:36:58:bc:b8:b2:a8:9f:78:44:99:93:cf:
         68:d7:31:dd
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUYwNnjgBmksPjeWal+15ievfTgNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM0Mzk1Q0FENzRGOTRERkUyQ0UzQUU2RjQyOTA3MjNE
QTQ1QkI3RTAeFw0yNjAzMTkyMDU0MTNaFw0yNzAzMTgyMDU5MTNaMDMxMTAvBgNV
BAMTKDk3RjI4NUI3MURFMDkxODg0NTMzRUMyNUFBRDMyNEU5QjVBOTgxRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNuRZZZ9TiPi2QZ2eatVatieyE
2h0vGqeZYWezbKeM8IHi3ms1dXM6fZSxueFY+IVWeQtQhVR6S3h7c/+31cjZzCO3
pCp1UwZSj+eyKFBN8RM9zkj+1x2FSsDLmZ5odJ7/gjW5PbHkc7LN69jxMP1Ixbnf
2EIzer2h/9Z1TD22pYz4XRmVWpjzDndaLIGiyRRDJM4l7RCKrwY1lsuwpbuW4Y2H
uwsYeizf8Mwxv0A9VpeWjr6sssesmSkisy8V0JElFEhufLsY+ZkpbtBUFjlQN/1M
T647hX6RcuN/ATdzzugkCMbrzUaWuo2wjMpxgV0IHhHZuZbvs7CUftoqjR0PAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUl/KFtx3gkYhFM+wlqtMk6bWpgdUwHwYDVR0j
BBgwFoAUc0OVytdPlN/izjrm9CkHI9pFu34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm1UczdSYng2Tm01Sm9zZldKWnp1WXV1cUhvZzR0R0d6R2J2SmExWnV4
OFgvMC83MzQzOTVDQUQ3NEY5NERGRTJDRTNBRTZGNDI5MDcyM0RBNDVCQjdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczNDM5NUNBRDc0Rjk0REZF
MkNFM0FFNkY0MjkwNzIzREE0NUJCN0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JtVHM3UmJ4Nk5tNUpvc2ZXSlp6dVl1dXFIb2c0dEdHekdidkphMVp1eDhYLzAv
MzIzODMwMzQzYTMzMzM2MjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzNDMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDO0MA0GCSqGSIb3DQEBCwUAA4IBAQCbEXu4
I5aBsMmxoXMRzONr3wl/JBeja5tjzpIFeINQSHGWSpkWBx0vU1f4RsiHlRoeh3qV
z1Qd+Kcl3pshCqtYgpXkqp8F6fvT1EEf1S2LAYh2yJiOlsmBr+RCm6+kCarOpUy+
dw9jsQug1aB1QEhbTYKgF6FvdMgrQopREX99smWELtGCOHTxOSxYr2raByZnQzip
MsMacazg//YFMyuiwY0ixFaC6fZdhPwRMWbA0JQVaQPgIThrOUuawJjjeLi3zTRZ
zzjNguV0+QNIF6iMcobWlCzEeT8pslYmNFEXjmX9MsEPDmuSTIfWpWPWYbQ2WLy4
sqifeESZk89o1zHd
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:21:03 2026 by rpki-client