Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/0/323830343a343430633a3a2f33322d3338203d3e20323637363138.roa
File:                     323830343a343430633a3a2f33322d3338203d3e20323637363138.roa (raw, json)
Hash identifier:          T/64wNNVOPb54alRYZbvRlPpOKoPXyQZY/r3kW0MH0s=
Subject key identifier:   0B:47:FC:38:A4:62:56:CE:A1:BC:F1:2B:0A:1F:45:5D:33:B3:24:FD
Certificate issuer:       /CN=6D96C282C35B12901D999723E12BD1E5FDD51D7C
Certificate serial:       3A0E94A13F317AD9E003F2DC674570E710F52CC1
Authority key identifier: 6D:96:C2:82:C3:5B:12:90:1D:99:97:23:E1:2B:D1:E5:FD:D5:1D:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D96C282C35B12901D999723E12BD1E5FDD51D7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/0/323830343a343430633a3a2f33322d3338203d3e20323637363138.roa
Signing time:             Wed 25 Mar 2026 15:19:36 +0000
ROA not before:           Wed 25 Mar 2026 15:14:36 +0000
ROA not after:            Wed 24 Mar 2027 15:19:36 +0000
asID:                     267618
IP address blocks:        2804:440c::/32 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/0/6D96C282C35B12901D999723E12BD1E5FDD51D7C.crl
                          rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/0/6D96C282C35B12901D999723E12BD1E5FDD51D7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D96C282C35B12901D999723E12BD1E5FDD51D7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 10:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0e:94:a1:3f:31:7a:d9:e0:03:f2:dc:67:45:70:e7:10:f5:2c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D96C282C35B12901D999723E12BD1E5FDD51D7C
        Validity
            Not Before: Mar 25 15:14:36 2026 GMT
            Not After : Mar 24 15:19:36 2027 GMT
        Subject: CN=0B47FC38A46256CEA1BCF12B0A1F455D33B324FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f8:bb:94:d0:14:45:c5:cf:11:90:00:4e:f7:
                    bc:7c:95:5b:fc:49:ba:60:5b:33:36:13:a6:de:98:
                    06:ad:7d:cb:9a:c9:8f:43:5e:aa:df:97:c7:39:19:
                    56:bf:8e:e0:45:d4:42:70:90:df:af:8a:b5:5a:23:
                    2e:75:97:3c:d9:86:c4:ab:a8:f6:cc:a0:95:38:87:
                    79:46:65:47:fc:f6:5b:83:7c:65:6c:5f:0c:0b:68:
                    1b:33:a0:96:31:65:3d:13:05:8f:83:6a:df:f6:1b:
                    8e:d0:d0:f4:14:fe:a5:aa:bd:d5:0c:92:c3:47:d9:
                    ae:0c:e2:b6:d5:63:ce:8d:0d:94:5a:8a:f3:b3:45:
                    ea:b0:c1:3e:b4:2d:e7:b7:f8:76:c1:d6:20:e1:50:
                    bf:9b:4d:7a:6e:6c:b0:11:6d:41:34:eb:1c:23:14:
                    a2:29:f1:e4:0c:fe:27:2c:1d:e6:64:2d:21:e5:c3:
                    fc:84:03:31:f7:b1:bf:da:20:f6:69:ca:3b:2f:86:
                    e8:37:9b:76:d9:67:49:41:c1:ce:f8:aa:96:61:ff:
                    eb:a4:3d:0a:1f:0e:a6:b9:e1:64:0b:c4:08:cc:78:
                    bc:40:7b:8e:06:af:a6:7a:c7:3f:ea:83:ac:4c:60:
                    43:3a:d6:2d:4e:d7:b2:68:8b:a6:7d:5c:70:a7:1d:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:47:FC:38:A4:62:56:CE:A1:BC:F1:2B:0A:1F:45:5D:33:B3:24:FD
            X509v3 Authority Key Identifier:
                keyid:6D:96:C2:82:C3:5B:12:90:1D:99:97:23:E1:2B:D1:E5:FD:D5:1D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/0/6D96C282C35B12901D999723E12BD1E5FDD51D7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D96C282C35B12901D999723E12BD1E5FDD51D7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CqKSuwDwt7BqT29xmY8suJy4zp1mBUFz5iPcCpoddGBU/0/323830343a343430633a3a2f33322d3338203d3e20323637363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:440c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:30:64:84:0a:50:c2:4a:84:26:1b:68:ca:70:87:6f:88:3e:
         b8:a1:0d:24:81:8e:c8:09:62:5b:5d:f6:41:7d:1d:e3:ba:da:
         9b:cf:89:3f:b5:31:9e:d6:a5:a0:80:fb:cb:72:51:cc:5f:2e:
         fa:3e:d4:e9:f5:28:04:ad:58:98:c0:ff:63:bd:bc:5a:cb:3b:
         9b:9a:6c:39:57:8a:3d:c8:df:e5:fb:cf:ee:44:85:cd:40:a2:
         b2:6c:48:05:2f:45:73:5f:2e:19:8e:69:ac:1f:0d:d4:84:93:
         59:a2:00:14:03:91:65:21:77:2e:74:fb:b6:56:25:30:0e:16:
         64:34:e8:9b:53:ac:c5:d4:ba:7a:eb:ff:d4:cd:8e:57:af:76:
         cc:12:d9:a0:90:c2:b9:1c:fb:ba:2e:4a:aa:24:06:ba:43:88:
         a8:85:66:8e:5f:0d:91:89:ce:ee:f5:c4:78:07:f2:50:c8:1a:
         44:d1:cf:95:d7:76:79:07:e0:44:95:d3:de:75:09:3d:fa:5c:
         60:7a:24:11:31:64:a6:8c:1b:34:ee:89:c3:00:61:8e:2f:76:
         7f:ec:3b:81:d8:7c:12:13:04:d1:a5:83:20:7e:8b:c2:2c:91:
         e5:d1:20:68:93:42:c1:14:fa:2a:e4:38:bc:ac:b1:c1:2c:5f:
         73:9a:bc:e1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOg6UoT8xetngA/LcZ0Vw5xD1LMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ5NkMyODJDMzVCMTI5MDFEOTk5NzIzRTEyQkQxRTVG
REQ1MUQ3QzAeFw0yNjAzMjUxNTE0MzZaFw0yNzAzMjQxNTE5MzZaMDMxMTAvBgNV
BAMTKDBCNDdGQzM4QTQ2MjU2Q0VBMUJDRjEyQjBBMUY0NTVEMzNCMzI0RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE+LuU0BRFxc8RkABO97x8lVv8
SbpgWzM2E6bemAatfcuayY9DXqrfl8c5GVa/juBF1EJwkN+virVaIy51lzzZhsSr
qPbMoJU4h3lGZUf89luDfGVsXwwLaBszoJYxZT0TBY+Dat/2G47Q0PQU/qWqvdUM
ksNH2a4M4rbVY86NDZRaivOzReqwwT60Lee3+HbB1iDhUL+bTXpubLARbUE06xwj
FKIp8eQM/icsHeZkLSHlw/yEAzH3sb/aIPZpyjsvhug3m3bZZ0lBwc74qpZh/+uk
PQofDqa54WQLxAjMeLxAe44Gr6Z6xz/qg6xMYEM61i1O17Joi6Z9XHCnHcbpAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUC0f8OKRiVs6hvPErCh9FXTOzJP0wHwYDVR0j
BBgwFoAUbZbCgsNbEpAdmZcj4SvR5f3VHXwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3FLU3V3RHd0N0JxVDI5eG1ZOHN1Snk0enAxbUJVRno1aVBjQ3BvZGRH
QlUvMC82RDk2QzI4MkMzNUIxMjkwMUQ5OTk3MjNFMTJCRDFFNUZERDUxRDdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZEOTZDMjgyQzM1QjEyOTAx
RDk5OTcyM0UxMkJEMUU1RkRENTFEN0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NxS1N1d0R3dDdCcVQyOXhtWThzdUp5NHpwMW1CVUZ6NWlQY0Nwb2RkR0JVLzAv
MzIzODMwMzQzYTM0MzQzMDYzM2EzYTJmMzMzMjJkMzMzODIwM2QzZTIwMzIzNjM3
MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAREDDANBgkqhkiG9w0BAQsFAAOCAQEAHDBkhApQ
wkqEJhtoynCHb4g+uKENJIGOyAliW132QX0d47ram8+JP7UxntaloID7y3JRzF8u
+j7U6fUoBK1YmMD/Y728Wss7m5psOVeKPcjf5fvP7kSFzUCismxIBS9Fc18uGY5p
rB8N1ISTWaIAFAORZSF3LnT7tlYlMA4WZDTom1OsxdS6euv/1M2OV692zBLZoJDC
uRz7ui5KqiQGukOIqIVmjl8NkYnO7vXEeAfyUMgaRNHPldd2eQfgRJXT3nUJPfpc
YHokETFkpowbNO6JwwBhji92f+w7gdh8EhME0aWDIH6LwiyR5dEgaJNCwRT6KuQ4
vKyxwSxfc5q84Q==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:19:40 2026 by rpki-client