Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/323830343a366564383a3130303a3a2f34302d3430203d3e20323730363232.roa
File:                     323830343a366564383a3130303a3a2f34302d3430203d3e20323730363232.roa (raw, json)
Hash identifier:          fL35lLIJqdSlnvV5yi6iNGXtH8hEnxFtjwmuyKkeQAo=
Subject key identifier:   AD:F8:F9:15:41:93:F8:4E:82:12:69:7E:31:7A:9F:49:91:1F:BC:B1
Certificate issuer:       /CN=859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D
Certificate serial:       784B24E05D778C081D945AA66C278BABA3471F4F
Authority key identifier: 85:9D:67:46:CD:7A:AE:BE:ED:E8:FD:74:F7:99:81:0A:9D:BF:A0:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/323830343a366564383a3130303a3a2f34302d3430203d3e20323730363232.roa
Signing time:             Wed 18 Mar 2026 13:30:29 +0000
ROA not before:           Wed 18 Mar 2026 13:25:29 +0000
ROA not after:            Wed 17 Mar 2027 13:30:29 +0000
asID:                     270622
IP address blocks:        2804:6ed8:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.crl
                          rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4b:24:e0:5d:77:8c:08:1d:94:5a:a6:6c:27:8b:ab:a3:47:1f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D
        Validity
            Not Before: Mar 18 13:25:29 2026 GMT
            Not After : Mar 17 13:30:29 2027 GMT
        Subject: CN=ADF8F9154193F84E8212697E317A9F49911FBCB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:e3:d3:7d:94:a9:26:35:39:0e:40:26:25:
                    d7:cd:0c:34:e6:80:25:66:dc:34:ce:d0:f2:21:76:
                    37:b4:f0:26:62:35:8c:48:fd:33:49:5f:3e:a9:c6:
                    29:a9:17:09:96:bb:f4:54:53:1f:d5:1e:a4:c3:85:
                    dd:2e:65:11:1e:f7:a1:07:d0:db:f2:c4:98:64:bd:
                    17:3e:ce:e3:05:0d:24:d5:d4:28:4c:78:5a:d7:27:
                    e5:ed:bd:da:a0:5c:0e:07:83:cd:90:ea:1d:f3:cd:
                    cb:83:f3:c7:c8:b3:5c:2e:86:5b:87:f7:53:be:c0:
                    de:6c:31:06:17:31:53:44:ee:a9:53:d0:85:73:b3:
                    be:fc:3f:06:fc:fa:af:32:b0:88:47:6e:5b:55:7d:
                    47:40:e8:22:b3:f7:7c:d5:7f:10:4b:51:b5:d3:ff:
                    9c:3d:90:3d:85:40:58:b4:ed:06:11:95:14:b3:c9:
                    e5:5f:84:a1:f5:93:65:d0:19:56:38:0a:42:67:2a:
                    42:f2:ad:b1:f9:a1:27:9b:1c:02:06:8c:e8:50:11:
                    e7:44:9d:99:9f:94:20:0c:61:b6:51:07:07:9c:98:
                    3b:f9:70:a7:87:6b:04:29:20:e7:2b:74:a2:e3:f7:
                    8f:88:69:4f:96:1d:ae:4b:b5:3d:ee:28:ad:45:23:
                    19:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F8:F9:15:41:93:F8:4E:82:12:69:7E:31:7A:9F:49:91:1F:BC:B1
            X509v3 Authority Key Identifier:
                keyid:85:9D:67:46:CD:7A:AE:BE:ED:E8:FD:74:F7:99:81:0A:9D:BF:A0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/859D6746CD7AAEBEEDE8FD74F799810A9DBFA08D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/323830343a366564383a3130303a3a2f34302d3430203d3e20323730363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ed8:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:0b:43:9b:ee:5d:81:0f:00:5d:dd:ed:89:4d:62:7d:36:76:
         81:1a:35:f1:67:8c:91:31:30:ef:62:9c:98:1d:93:e1:a8:74:
         75:7a:6e:50:3e:66:47:53:67:3a:85:0e:7c:64:4e:2d:96:97:
         20:44:8d:c7:68:70:b6:f5:9c:7d:a8:97:67:d1:cb:51:23:85:
         33:cc:b1:d2:e4:0b:59:7f:73:b2:e7:33:6a:a1:bf:c2:25:5a:
         2f:94:df:a8:33:a5:31:c3:52:62:fa:cf:a4:fc:3a:79:67:e8:
         61:1c:5f:05:f2:b4:d9:05:92:5f:a0:74:59:5d:16:ac:10:dd:
         ae:60:b3:93:dc:69:95:be:d2:91:37:4b:14:d5:92:7f:ae:c3:
         84:3a:40:35:50:b0:7d:e1:db:9a:da:3f:d8:21:14:44:fc:ce:
         ba:52:1a:83:17:f5:9f:a1:c0:92:62:f4:84:ba:1f:21:50:fc:
         2c:28:92:e9:a6:bd:c7:16:3a:1d:79:df:bd:03:b1:29:a8:b1:
         3c:68:39:86:a3:09:d8:e3:3f:ce:26:5a:bf:ae:a5:f0:85:e6:
         44:a7:1f:8d:ad:da:1c:77:52:fc:96:e5:d3:95:fa:fc:39:2e:
         40:87:64:ad:05:56:22:2e:ad:b2:7d:02:8a:e6:29:d1:1d:e6:
         d7:b2:a4:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeEsk4F13jAgdlFqmbCeLq6NHH08wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU5RDY3NDZDRDdBQUVCRUVERThGRDc0Rjc5OTgxMEE5
REJGQTA4RDAeFw0yNjAzMTgxMzI1MjlaFw0yNzAzMTcxMzMwMjlaMDMxMTAvBgNV
BAMTKEFERjhGOTE1NDE5M0Y4NEU4MjEyNjk3RTMxN0E5RjQ5OTExRkJDQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDErOPTfZSpJjU5DkAmJdfNDDTm
gCVm3DTO0PIhdje08CZiNYxI/TNJXz6pximpFwmWu/RUUx/VHqTDhd0uZREe96EH
0NvyxJhkvRc+zuMFDSTV1ChMeFrXJ+XtvdqgXA4Hg82Q6h3zzcuD88fIs1wuhluH
91O+wN5sMQYXMVNE7qlT0IVzs778Pwb8+q8ysIhHbltVfUdA6CKz93zVfxBLUbXT
/5w9kD2FQFi07QYRlRSzyeVfhKH1k2XQGVY4CkJnKkLyrbH5oSebHAIGjOhQEedE
nZmflCAMYbZRBwecmDv5cKeHawQpIOcrdKLj94+IaU+WHa5LtT3uKK1FIxnzAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUrfj5FUGT+E6CEml+MXqfSZEfvLEwHwYDVR0j
BBgwFoAUhZ1nRs16rr7t6P1095mBCp2/oI0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNpdzZEYnlpMjN0dTNqaXdTUUFLVVlCc1NSSmZ2TkZUWlA2RUVRZk5B
OUMvMC84NTlENjc0NkNEN0FBRUJFRURFOEZENzRGNzk5ODEwQTlEQkZBMDhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1OUQ2NzQ2Q0Q3QUFFQkVF
REU4RkQ3NEY3OTk4MTBBOURCRkEwOEQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTaXc2RGJ5aTIzdHUzaml3U1FBS1VZQnNTUkpmdk5GVFpQNkVFUWZOQTlDLzAv
MzIzODMwMzQzYTM2NjU2NDM4M2EzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM3MzAzNjMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBG7YATANBgkqhkiG9w0BAQsFAAOC
AQEAUAtDm+5dgQ8AXd3tiU1ifTZ2gRo18WeMkTEw72KcmB2T4ah0dXpuUD5mR1Nn
OoUOfGROLZaXIESNx2hwtvWcfaiXZ9HLUSOFM8yx0uQLWX9zsuczaqG/wiVaL5Tf
qDOlMcNSYvrPpPw6eWfoYRxfBfK02QWSX6B0WV0WrBDdrmCzk9xplb7SkTdLFNWS
f67DhDpANVCwfeHbmto/2CEURPzOulIagxf1n6HAkmL0hLofIVD8LCiS6aa9xxY6
HXnfvQOxKaixPGg5hqMJ2OM/ziZav66l8IXmRKcfja3aHHdS/Jbl05X6/DkuQIdk
rQVWIi6tsn0CiuYp0R3m17KkHg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:09 2026 by rpki-client