Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d3634203d3e20323639353236.roa
File:                     323830343a363566633a3a2f33322d3634203d3e20323639353236.roa (raw, json)
Hash identifier:          L6PH9DwRutsdeXTdWgTZgF06n0QNMO2mAv84GPQUsG8=
Subject key identifier:   D5:17:03:F4:19:E7:AC:34:B6:47:81:8E:FE:91:FD:40:05:6C:C8:26
Certificate issuer:       /CN=992B3C07770D8B3613B80C9A82155291F2D9E544
Certificate serial:       28FA4B0C4EA5FEDEE6CA2749BD8A9EA516B02657
Authority key identifier: 99:2B:3C:07:77:0D:8B:36:13:B8:0C:9A:82:15:52:91:F2:D9:E5:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/992B3C07770D8B3613B80C9A82155291F2D9E544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d3634203d3e20323639353236.roa
Signing time:             Thu 23 Apr 2026 17:53:48 +0000
ROA not before:           Thu 23 Apr 2026 17:48:48 +0000
ROA not after:            Thu 22 Apr 2027 17:53:48 +0000
asID:                     269526
IP address blocks:        2804:65fc::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/992B3C07770D8B3613B80C9A82155291F2D9E544.crl
                          rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/992B3C07770D8B3613B80C9A82155291F2D9E544.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/992B3C07770D8B3613B80C9A82155291F2D9E544.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 02:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fa:4b:0c:4e:a5:fe:de:e6:ca:27:49:bd:8a:9e:a5:16:b0:26:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992B3C07770D8B3613B80C9A82155291F2D9E544
        Validity
            Not Before: Apr 23 17:48:48 2026 GMT
            Not After : Apr 22 17:53:48 2027 GMT
        Subject: CN=D51703F419E7AC34B647818EFE91FD40056CC826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:78:6b:fe:e5:97:93:98:c9:dd:02:c0:af:
                    5d:87:6d:d2:49:5c:67:e9:50:4e:97:1e:69:7f:bf:
                    b0:85:52:77:e3:7a:f0:f9:92:5a:25:fa:3d:42:24:
                    32:19:76:7a:e9:e3:8f:5b:86:ef:ea:25:dd:77:b0:
                    33:2e:fc:9c:f9:09:a6:f7:11:e5:03:4b:f3:07:4f:
                    ff:dd:9a:ee:a9:a3:c4:3e:8d:ab:ce:ee:31:67:c0:
                    60:ce:61:4d:78:b7:7f:bf:ba:28:91:f2:ed:48:28:
                    0a:a2:3b:cc:af:3c:20:c1:ef:09:72:be:fa:1b:90:
                    b2:55:c7:99:64:f1:64:a2:96:89:67:f2:3b:61:a9:
                    eb:82:95:9a:5a:36:7c:5c:35:3f:ff:a3:5c:44:9c:
                    aa:58:a8:ba:9b:97:76:13:3b:34:e4:60:48:9c:ea:
                    86:22:2f:d1:e0:a8:27:4e:a4:14:0a:f2:dd:b7:8d:
                    54:fd:80:78:05:e6:0e:e4:20:7c:da:a8:2a:61:72:
                    14:f4:16:0e:d1:9d:48:88:fc:f7:b8:4a:16:41:e4:
                    80:d5:eb:3b:69:3f:f5:5f:2f:00:aa:ec:67:4b:0d:
                    fb:e1:e3:e3:af:bc:1f:20:be:55:5e:85:27:56:1e:
                    76:86:c5:8f:ca:ce:2c:84:43:30:25:9f:3a:01:d0:
                    31:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:17:03:F4:19:E7:AC:34:B6:47:81:8E:FE:91:FD:40:05:6C:C8:26
            X509v3 Authority Key Identifier:
                keyid:99:2B:3C:07:77:0D:8B:36:13:B8:0C:9A:82:15:52:91:F2:D9:E5:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/992B3C07770D8B3613B80C9A82155291F2D9E544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/992B3C07770D8B3613B80C9A82155291F2D9E544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d3634203d3e20323639353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:58:ed:1c:a7:eb:e4:8c:00:fb:43:f2:65:b0:7a:2f:36:d6:
         cc:6e:f8:49:22:16:3a:bd:6e:89:91:98:a5:06:c7:0b:67:34:
         84:2f:de:19:a3:86:a5:7f:63:4b:3c:4f:11:50:a3:d1:29:5a:
         d1:a2:ca:09:3a:b8:81:df:79:33:e1:f0:78:10:d1:4d:34:8a:
         e8:df:9f:50:38:82:b5:82:17:03:fa:4c:f8:d6:2f:f1:57:b8:
         fb:9f:b2:e6:15:68:18:54:ba:1c:80:41:80:b0:27:d8:19:07:
         6d:e4:f8:8a:30:2b:3e:5d:c9:3f:e7:3a:13:50:20:0a:ae:25:
         0f:8a:ab:aa:83:f5:0e:12:de:dd:19:c3:71:db:14:56:69:9e:
         a9:f1:10:a0:73:0f:56:ca:b8:50:a0:28:2a:0b:a0:22:df:43:
         22:6e:66:e0:ef:b0:cf:16:f1:80:8a:3d:e5:61:67:ef:5f:17:
         49:ce:71:7b:c7:31:29:3d:53:98:24:a7:30:00:5f:9f:6a:63:
         46:5c:36:1f:31:e4:a9:89:a3:f5:7a:b7:3c:87:21:94:90:2c:
         b7:72:f5:8c:16:f9:f2:c4:c0:1a:87:a9:66:15:e4:82:64:44:
         aa:89:d9:ef:bb:4a:c7:cc:00:31:c0:48:74:24:ea:50:a9:e3:
         23:2d:5c:f4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKPpLDE6l/t7myidJvYqepRawJlcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkyQjNDMDc3NzBEOEIzNjEzQjgwQzlBODIxNTUyOTFG
MkQ5RTU0NDAeFw0yNjA0MjMxNzQ4NDhaFw0yNzA0MjIxNzUzNDhaMDMxMTAvBgNV
BAMTKEQ1MTcwM0Y0MTlFN0FDMzRCNjQ3ODE4RUZFOTFGRDQwMDU2Q0M4MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvXhr/uWXk5jJ3QLAr12HbdJJ
XGfpUE6XHml/v7CFUnfjevD5klol+j1CJDIZdnrp449bhu/qJd13sDMu/Jz5Cab3
EeUDS/MHT//dmu6po8Q+javO7jFnwGDOYU14t3+/uiiR8u1IKAqiO8yvPCDB7wly
vvobkLJVx5lk8WSiloln8jthqeuClZpaNnxcNT//o1xEnKpYqLqbl3YTOzTkYEic
6oYiL9HgqCdOpBQK8t23jVT9gHgF5g7kIHzaqCphchT0Fg7RnUiI/Pe4ShZB5IDV
6ztpP/VfLwCq7GdLDfvh4+OvvB8gvlVehSdWHnaGxY/KziyEQzAlnzoB0DHpAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1RcD9BnnrDS2R4GO/pH9QAVsyCYwHwYDVR0j
BBgwFoAUmSs8B3cNizYTuAyaghVSkfLZ5UQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0x4cDh1d25GYU5na1F5VXlYcE1DdzZxV0p0cjFaaVFyZUtHb2ZKZVZ4
cGcvMC85OTJCM0MwNzc3MEQ4QjM2MTNCODBDOUE4MjE1NTI5MUYyRDlFNTQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5MkIzQzA3NzcwRDhCMzYx
M0I4MEM5QTgyMTU1MjkxRjJEOUU1NDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NMeHA4dXduRmFOZ2tReVV5WHBNQ3c2cVdKdHIxWmlRcmVLR29mSmVWeHBnLzAv
MzIzODMwMzQzYTM2MzU2NjYzM2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzIzNjM5
MzUzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARl/DANBgkqhkiG9w0BAQsFAAOCAQEAIFjtHKfr
5IwA+0PyZbB6LzbWzG74SSIWOr1uiZGYpQbHC2c0hC/eGaOGpX9jSzxPEVCj0Sla
0aLKCTq4gd95M+HweBDRTTSK6N+fUDiCtYIXA/pM+NYv8Ve4+5+y5hVoGFS6HIBB
gLAn2BkHbeT4ijArPl3JP+c6E1AgCq4lD4qrqoP1DhLe3RnDcdsUVmmeqfEQoHMP
Vsq4UKAoKgugIt9DIm5m4O+wzxbxgIo95WFn718XSc5xe8cxKT1TmCSnMABfn2pj
Rlw2HzHkqYmj9Xq3PIchlJAst3L1jBb58sTAGoepZhXkgmREqonZ77tKx8wAMcBI
dCTqUKnjIy1c9A==
-----END CERTIFICATE-----
Generated at Wed May 13 17:36:16 2026 by rpki-client