Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/323830343a3435633a3a2f33322d3438203d3e203238363532.roa
File:                     323830343a3435633a3a2f33322d3438203d3e203238363532.roa (raw, json)
Hash identifier:          Xn28fOceRfCDtWR0z2QE7yHd2OeaHTIMqtKeQtkZdOI=
Subject key identifier:   E4:6B:81:07:AF:20:E5:0E:2B:CE:9B:25:A1:CE:39:55:EB:1F:DB:15
Certificate issuer:       /CN=5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8
Certificate serial:       72811A748D508A61E17BE8F18BD87E3E7CD26841
Authority key identifier: 5E:AE:5D:EC:C4:E9:FF:C4:35:7A:90:7E:44:64:0E:D4:04:C2:CF:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/323830343a3435633a3a2f33322d3438203d3e203238363532.roa
Signing time:             Tue 17 Mar 2026 17:50:27 +0000
ROA not before:           Tue 17 Mar 2026 17:45:27 +0000
ROA not after:            Tue 16 Mar 2027 17:50:27 +0000
asID:                     28652
IP address blocks:        2804:45c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.crl
                          rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 21:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:81:1a:74:8d:50:8a:61:e1:7b:e8:f1:8b:d8:7e:3e:7c:d2:68:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8
        Validity
            Not Before: Mar 17 17:45:27 2026 GMT
            Not After : Mar 16 17:50:27 2027 GMT
        Subject: CN=E46B8107AF20E50E2BCE9B25A1CE3955EB1FDB15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:85:d2:92:b1:d1:d8:68:22:1e:4e:cf:31:
                    49:9b:e8:c6:e4:21:fc:b0:78:45:7e:9d:42:65:91:
                    ba:9c:33:1e:ce:8f:7f:fa:eb:8b:c6:7b:4a:2c:27:
                    76:07:10:90:71:c2:c3:98:ef:83:19:24:75:72:15:
                    d6:2b:11:1a:71:fd:bf:90:49:89:1a:71:27:50:0d:
                    8a:c0:c8:7f:e7:14:f9:fe:46:ac:0f:82:dd:bb:ef:
                    32:6c:29:94:88:bb:3b:e1:cb:94:1d:16:7f:fe:1c:
                    0c:8c:87:9a:37:e1:38:a7:6a:7d:77:5e:a0:1c:dd:
                    85:89:5c:dd:3d:64:96:4b:cf:f3:50:5f:1b:7a:6e:
                    6b:15:30:bd:51:04:90:ff:f1:3f:34:2a:51:e5:a2:
                    d6:bc:5e:49:27:1f:a1:f6:18:35:cb:fc:f3:c9:2f:
                    7d:8c:56:ff:26:39:7b:5b:95:a2:3c:75:df:ed:9d:
                    6a:45:2c:93:72:ab:5d:c0:46:d9:84:d1:83:50:7f:
                    5b:fb:2c:d3:96:ad:fc:37:61:10:c9:da:34:ea:33:
                    88:65:94:01:9b:77:3e:ae:79:33:46:90:d0:27:3a:
                    bd:f6:c2:3b:15:2b:41:93:3d:51:22:ed:3e:2d:69:
                    a6:f9:c3:09:4e:b2:cd:4e:a6:40:6a:56:e0:73:83:
                    a9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6B:81:07:AF:20:E5:0E:2B:CE:9B:25:A1:CE:39:55:EB:1F:DB:15
            X509v3 Authority Key Identifier:
                keyid:5E:AE:5D:EC:C4:E9:FF:C4:35:7A:90:7E:44:64:0E:D4:04:C2:CF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/323830343a3435633a3a2f33322d3438203d3e203238363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:4d:e6:5e:25:dd:3a:ce:75:6d:b4:ba:c2:07:d3:51:d6:5e:
         25:f5:e4:b5:19:b4:09:0d:64:e2:da:f8:4e:75:dc:bf:a2:c0:
         d6:49:a0:4d:bf:fa:ff:5d:a1:d1:dd:a1:c5:1f:0a:b7:fd:13:
         a7:ef:4d:ed:2b:10:82:b9:d6:a7:85:54:a8:e4:0e:62:13:fd:
         f1:3f:eb:2b:4d:bc:cc:aa:08:ed:76:60:5f:a5:9b:31:71:70:
         5f:28:68:8f:76:cc:99:ee:8f:a8:25:03:aa:13:27:e1:65:1d:
         c0:58:db:e2:9d:7c:27:d5:28:a2:25:34:26:11:67:ee:62:02:
         58:ff:76:28:72:c1:55:ae:9a:a3:01:38:59:a8:54:2b:47:65:
         47:8c:f8:66:45:6b:bf:ec:66:cb:eb:4b:de:56:34:fb:a2:b8:
         5c:ed:2f:2d:b8:f2:d0:17:4c:a3:4b:8a:30:4b:71:b9:af:76:
         5a:86:6e:68:0e:ee:2f:6e:47:9c:44:c0:dc:dd:23:4d:26:46:
         43:aa:fa:13:3f:63:f4:9e:63:4b:bc:f9:8a:97:dd:90:5d:d0:
         07:bf:c7:82:1c:b3:88:f6:8d:c8:6d:27:ec:ea:cd:8a:a1:59:
         d8:d6:d3:f0:9f:8a:a8:42:5c:4e:df:82:bc:d6:44:19:8e:d7:
         3b:36:22:b1
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUcoEadI1QimHhe+jxi9h+PnzSaEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVBRTVERUNDNEU5RkZDNDM1N0E5MDdFNDQ2NDBFRDQw
NEMyQ0ZFODAeFw0yNjAzMTcxNzQ1MjdaFw0yNzAzMTYxNzUwMjdaMDMxMTAvBgNV
BAMTKEU0NkI4MTA3QUYyMEU1MEUyQkNFOUIyNUExQ0UzOTU1RUIxRkRCMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2soXSkrHR2GgiHk7PMUmb6Mbk
IfyweEV+nUJlkbqcMx7Oj3/664vGe0osJ3YHEJBxwsOY74MZJHVyFdYrERpx/b+Q
SYkacSdQDYrAyH/nFPn+RqwPgt277zJsKZSIuzvhy5QdFn/+HAyMh5o34Tinan13
XqAc3YWJXN09ZJZLz/NQXxt6bmsVML1RBJD/8T80KlHlota8XkknH6H2GDXL/PPJ
L32MVv8mOXtblaI8dd/tnWpFLJNyq13ARtmE0YNQf1v7LNOWrfw3YRDJ2jTqM4hl
lAGbdz6ueTNGkNAnOr32wjsVK0GTPVEi7T4taab5wwlOss1OpkBqVuBzg6nTAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU5GuBB68g5Q4rzpsloc45Vesf2xUwHwYDVR0j
BBgwFoAUXq5d7MTp/8Q1epB+RGQO1ATCz+gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDkxZXBxWVhlaGN6dHpBc0dvQ3B3WGZQcm1yQlBlbVQ0QXZQemhIRktG
UngvMC81RUFFNURFQ0M0RTlGRkM0MzU3QTkwN0U0NDY0MEVENDA0QzJDRkU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFQUU1REVDQzRFOUZGQzQz
NTdBOTA3RTQ0NjQwRUQ0MDRDMkNGRTguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q5MWVwcVlYZWhjenR6QXNHb0Nwd1hmUHJtckJQZW1UNEF2UHpoSEZLRlJ4LzAv
MzIzODMwMzQzYTM0MzU2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzNjM1
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBARcMA0GCSqGSIb3DQEBCwUAA4IBAQCkTeZeJd06znVt
tLrCB9NR1l4l9eS1GbQJDWTi2vhOddy/osDWSaBNv/r/XaHR3aHFHwq3/ROn703t
KxCCudanhVSo5A5iE/3xP+srTbzMqgjtdmBfpZsxcXBfKGiPdsyZ7o+oJQOqEyfh
ZR3AWNvinXwn1SiiJTQmEWfuYgJY/3YocsFVrpqjAThZqFQrR2VHjPhmRWu/7GbL
60veVjT7orhc7S8tuPLQF0yjS4owS3G5r3Zahm5oDu4vbkecRMDc3SNNJkZDqvoT
P2P0nmNLvPmKl92QXdAHv8eCHLOI9o3IbSfs6s2KoVnY1tPwn4qoQlxO34K81kQZ
jtc7NiKx
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:15:28 2026 by rpki-client