Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/323830343a343237383a3a2f33322d313238203d3e20323637353032.roa
File:                     323830343a343237383a3a2f33322d313238203d3e20323637353032.roa (raw, json)
Hash identifier:          1FR/+F+ZMRtVf7m71NxHoArf80fjmjI6UDkT9kqK7VI=
Subject key identifier:   FE:0D:C8:0D:1A:B7:59:19:46:17:7D:F2:43:E2:14:AD:23:F0:2C:58
Certificate issuer:       /CN=84515A1EE549DECBCFF34DBB8783DF637AFB108E
Certificate serial:       58C874FEAC775D501DD9E942DD925620758BD738
Authority key identifier: 84:51:5A:1E:E5:49:DE:CB:CF:F3:4D:BB:87:83:DF:63:7A:FB:10:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84515A1EE549DECBCFF34DBB8783DF637AFB108E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/323830343a343237383a3a2f33322d313238203d3e20323637353032.roa
Signing time:             Wed 22 Apr 2026 13:23:15 +0000
ROA not before:           Wed 22 Apr 2026 13:18:15 +0000
ROA not after:            Wed 21 Apr 2027 13:23:15 +0000
asID:                     267502
IP address blocks:        2804:4278::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/84515A1EE549DECBCFF34DBB8783DF637AFB108E.crl
                          rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/84515A1EE549DECBCFF34DBB8783DF637AFB108E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84515A1EE549DECBCFF34DBB8783DF637AFB108E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c8:74:fe:ac:77:5d:50:1d:d9:e9:42:dd:92:56:20:75:8b:d7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84515A1EE549DECBCFF34DBB8783DF637AFB108E
        Validity
            Not Before: Apr 22 13:18:15 2026 GMT
            Not After : Apr 21 13:23:15 2027 GMT
        Subject: CN=FE0DC80D1AB7591946177DF243E214AD23F02C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:f7:4a:d1:50:8c:16:2b:a1:f5:8c:37:ce:
                    e3:0a:b8:74:c8:9a:67:c3:ce:dd:19:0e:55:d1:0e:
                    9f:c6:2a:a1:cb:ad:f0:d4:dc:2d:0b:4a:bb:cf:8b:
                    16:66:43:2a:24:73:aa:2f:67:41:c0:e9:e6:27:24:
                    c7:09:0a:6d:4f:c3:81:49:41:2b:4b:e0:2c:38:51:
                    7f:69:93:d0:f0:52:ef:7e:da:27:a4:32:0d:c3:91:
                    db:73:1b:b3:5a:a1:71:37:9d:9b:5d:ad:e7:e3:f8:
                    17:a8:b5:32:d9:75:df:fb:12:82:a6:12:0b:82:5c:
                    17:32:70:6d:1e:d1:b0:07:6b:e3:f0:ad:46:7a:29:
                    66:93:df:c1:b4:73:6b:7f:91:21:48:e7:0c:7e:e5:
                    78:17:48:0c:b3:0f:56:c3:d0:94:06:bb:b2:91:1c:
                    bb:36:cb:02:a6:10:0b:ce:4d:55:f2:c4:16:7b:14:
                    04:65:50:98:f8:3c:ae:7a:06:51:d3:b9:6e:c9:bc:
                    5c:46:ee:c9:00:bf:67:cc:f4:03:0b:ff:77:3e:db:
                    e8:68:34:31:d9:90:a5:3e:42:ef:e6:0a:8d:b1:68:
                    23:0f:46:6e:06:8b:e7:0d:f8:0c:6d:84:e9:7e:60:
                    e2:e5:81:5c:6b:7a:72:74:03:cf:2b:c0:1a:3a:ba:
                    af:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0D:C8:0D:1A:B7:59:19:46:17:7D:F2:43:E2:14:AD:23:F0:2C:58
            X509v3 Authority Key Identifier:
                keyid:84:51:5A:1E:E5:49:DE:CB:CF:F3:4D:BB:87:83:DF:63:7A:FB:10:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/84515A1EE549DECBCFF34DBB8783DF637AFB108E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84515A1EE549DECBCFF34DBB8783DF637AFB108E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/323830343a343237383a3a2f33322d313238203d3e20323637353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4278::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:b5:72:ab:30:b2:08:fe:0b:26:90:0f:77:f0:0f:a7:80:91:
         30:d6:49:86:a3:6d:7c:2f:00:68:18:02:a7:47:ce:cf:80:73:
         f2:ab:9a:b1:8e:b5:9f:ad:be:5b:d8:5c:1f:97:12:a1:74:3e:
         32:3e:ef:72:a2:5b:3f:d5:fe:3d:f7:f2:e4:3b:ac:84:21:b3:
         19:a2:a0:2a:0a:dc:2a:19:93:fa:54:7b:2f:cf:3d:18:d2:9f:
         72:2a:5a:bd:87:47:8d:50:c4:2e:09:0e:09:32:f5:d2:7a:d2:
         86:b9:f6:20:5e:e0:6a:e5:6e:17:b3:91:4d:5b:c1:21:1b:d0:
         88:aa:33:2f:c5:cc:2c:3d:07:02:3a:c9:df:9e:69:b7:ae:d8:
         fd:68:92:35:43:59:81:c5:e3:da:12:47:a8:04:08:24:2d:60:
         f7:ac:2e:55:e6:29:56:f3:df:bd:94:7d:8c:d0:e1:c0:53:65:
         ce:75:66:54:34:5c:3c:ad:a8:5b:77:bd:5f:04:4c:9d:3a:b6:
         a2:cf:3c:2d:07:2f:3e:c9:b9:d2:0b:8f:0f:e8:d1:ac:ad:fc:
         e1:b0:04:2a:ce:33:be:e3:36:6f:7f:0e:d0:60:33:95:b8:c3:
         a6:6a:5f:0d:3c:d4:a1:8e:22:9c:8b:e0:36:d5:63:e5:d3:cb:
         15:bd:4a:0f
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUWMh0/qx3XVAd2elC3ZJWIHWL1zgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ1MTVBMUVFNTQ5REVDQkNGRjM0REJCODc4M0RGNjM3
QUZCMTA4RTAeFw0yNjA0MjIxMzE4MTVaFw0yNzA0MjExMzIzMTVaMDMxMTAvBgNV
BAMTKEZFMERDODBEMUFCNzU5MTk0NjE3N0RGMjQzRTIxNEFEMjNGMDJDNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3j/dK0VCMFiuh9Yw3zuMKuHTI
mmfDzt0ZDlXRDp/GKqHLrfDU3C0LSrvPixZmQyokc6ovZ0HA6eYnJMcJCm1Pw4FJ
QStL4Cw4UX9pk9DwUu9+2iekMg3DkdtzG7NaoXE3nZtdrefj+BeotTLZdd/7EoKm
EguCXBcycG0e0bAHa+PwrUZ6KWaT38G0c2t/kSFI5wx+5XgXSAyzD1bD0JQGu7KR
HLs2ywKmEAvOTVXyxBZ7FARlUJj4PK56BlHTuW7JvFxG7skAv2fM9AML/3c+2+ho
NDHZkKU+Qu/mCo2xaCMPRm4Gi+cN+AxthOl+YOLlgVxrenJ0A88rwBo6uq8nAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU/g3IDRq3WRlGF33yQ+IUrSPwLFgwHwYDVR0j
BBgwFoAUhFFaHuVJ3svP8027h4PfY3r7EI4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzd4YVl4ckN4bWN3Ulhoc2FqZ0pETVB0bXJ3VGRmRFJtZDdMQUh5bWRN
R3QvMC84NDUxNUExRUU1NDlERUNCQ0ZGMzREQkI4NzgzREY2MzdBRkIxMDhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0NTE1QTFFRTU0OURFQ0JD
RkYzNERCQjg3ODNERjYzN0FGQjEwOEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3eGFZeHJDeG1jd1JYaHNhamdKRE1QdG1yd1RkZkRSbWQ3TEFIeW1kTUd0LzAv
MzIzODMwMzQzYTM0MzIzNzM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczNTMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEJ4MA0GCSqGSIb3DQEBCwUAA4IBAQAntXKr
MLII/gsmkA938A+ngJEw1kmGo218LwBoGAKnR87PgHPyq5qxjrWfrb5b2FwflxKh
dD4yPu9yols/1f499/LkO6yEIbMZoqAqCtwqGZP6VHsvzz0Y0p9yKlq9h0eNUMQu
CQ4JMvXSetKGufYgXuBq5W4Xs5FNW8EhG9CIqjMvxcwsPQcCOsnfnmm3rtj9aJI1
Q1mBxePaEkeoBAgkLWD3rC5V5ilW89+9lH2M0OHAU2XOdWZUNFw8rahbd71fBEyd
OraizzwtBy8+ybnSC48P6NGsrfzhsAQqzjO+4zZvfw7QYDOVuMOmal8NPNShjiKc
i+A21WPl08sVvUoP
-----END CERTIFICATE-----
Generated at Wed May 13 14:41:09 2026 by rpki-client