Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a3a2f33322d3332203d3e20323638383739.roa
File:                     323830343a356266343a3a2f33322d3332203d3e20323638383739.roa (raw, json)
Hash identifier:          DX4a3QeHpvusyAv3p4gVFkKzBPKXG65o+cqdt/m4Wz8=
Subject key identifier:   95:35:98:81:74:CD:F8:7B:65:0F:94:88:AB:77:7E:87:05:3B:99:97
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       1ED20A27934B7C931F4DD6587987CECEF36E99F3
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a3a2f33322d3332203d3e20323638383739.roa
Signing time:             Wed 11 Mar 2026 14:29:43 +0000
ROA not before:           Wed 11 Mar 2026 14:24:43 +0000
ROA not after:            Wed 10 Mar 2027 14:29:43 +0000
asID:                     268879
IP address blocks:        2804:5bf4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:31:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d2:0a:27:93:4b:7c:93:1f:4d:d6:58:79:87:ce:ce:f3:6e:99:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Mar 11 14:24:43 2026 GMT
            Not After : Mar 10 14:29:43 2027 GMT
        Subject: CN=9535988174CDF87B650F9488AB777E87053B9997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:6d:c8:fc:e2:5f:41:9e:72:bd:8e:f2:95:
                    6f:9d:0f:3d:25:46:f0:46:14:42:0f:10:da:f8:b6:
                    79:92:97:6e:e1:ea:2b:ed:a3:5a:48:82:0e:64:0f:
                    e1:0c:03:e9:52:6b:f0:d6:fd:9a:8a:bd:0c:ca:1d:
                    81:58:89:59:89:fa:e3:06:4a:7d:9b:51:d4:0c:46:
                    98:09:23:bc:cd:e7:3f:48:9a:4d:4f:10:fd:1d:65:
                    25:d1:40:fc:1b:6e:58:04:bc:89:63:15:89:cc:94:
                    4a:0a:6d:f6:ca:78:b1:7d:f8:02:31:ff:d3:7e:0f:
                    05:51:4d:a9:07:dc:b6:c0:74:9f:92:87:53:08:67:
                    5b:9a:29:cc:40:b2:5b:34:f0:57:11:5c:75:16:f0:
                    24:c4:96:0e:d2:ff:47:40:d3:6e:03:81:61:ee:36:
                    cc:91:6e:e2:d3:4f:3d:af:de:67:3f:ca:ef:1f:06:
                    1d:a7:32:88:1f:a3:ae:b8:7d:40:1e:c9:65:47:28:
                    52:80:38:5b:3b:e2:af:31:4a:93:2d:e9:3f:46:5d:
                    03:dc:b9:95:7a:6d:bf:59:57:51:17:af:cd:9e:aa:
                    c8:7d:e2:d1:73:0c:8c:c3:a6:9d:0f:93:c5:aa:cb:
                    6c:7f:1a:25:9c:e1:ac:e3:5e:6e:bd:0f:42:64:18:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:35:98:81:74:CD:F8:7B:65:0F:94:88:AB:77:7E:87:05:3B:99:97
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a3a2f33322d3332203d3e20323638383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf4::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:5b:51:a6:c6:f4:f3:74:31:40:5c:20:f6:05:a5:56:52:9b:
         5f:20:4f:db:d1:b1:07:c3:ed:0a:c1:f5:be:08:52:1c:7c:3f:
         eb:a2:b2:e2:a9:6b:25:b4:d3:87:11:6e:d6:6a:30:7e:6f:ab:
         17:0e:c4:f3:44:ab:11:07:91:f0:88:d3:b5:30:ab:89:bd:ce:
         cb:0f:b6:77:76:e3:b3:4c:4b:80:2e:b1:dd:38:f9:c9:82:9b:
         e9:22:ed:f9:c3:63:75:16:49:ed:24:d0:dc:8d:23:04:da:2c:
         a4:61:37:7a:64:d4:a0:a0:be:5a:56:91:6f:b9:11:3b:e1:8a:
         da:70:71:57:5d:88:57:ec:d4:4b:ad:05:35:67:ef:da:d6:5e:
         e8:8f:a4:73:c4:5f:8f:bc:b5:8d:e4:a3:35:91:86:15:15:87:
         ef:86:f4:ef:8b:49:07:64:79:c7:d0:0b:ae:d8:0c:09:52:06:
         da:f0:41:63:6d:02:34:8d:61:b1:43:9d:3f:a5:11:89:b6:13:
         9a:63:50:89:5c:91:34:74:84:35:63:b9:2f:65:8b:a9:e6:23:
         ec:24:f7:ef:35:5f:ca:6e:63:7a:ed:7d:74:d9:40:db:35:37:
         45:50:41:ed:ca:27:ab:10:f5:5f:dd:d1:37:28:33:31:54:0f:
         26:7c:76:33
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHtIKJ5NLfJMfTdZYeYfOzvNumfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDNDcyMUU2Njc1OTNBNDNEQTc4MzJGNTg4RTZCNkI4
RjU3MzExQzAeFw0yNjAzMTExNDI0NDNaFw0yNzAzMTAxNDI5NDNaMDMxMTAvBgNV
BAMTKDk1MzU5ODgxNzRDREY4N0I2NTBGOTQ4OEFCNzc3RTg3MDUzQjk5OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrkG3I/OJfQZ5yvY7ylW+dDz0l
RvBGFEIPENr4tnmSl27h6ivto1pIgg5kD+EMA+lSa/DW/ZqKvQzKHYFYiVmJ+uMG
Sn2bUdQMRpgJI7zN5z9Imk1PEP0dZSXRQPwbblgEvIljFYnMlEoKbfbKeLF9+AIx
/9N+DwVRTakH3LbAdJ+Sh1MIZ1uaKcxAsls08FcRXHUW8CTElg7S/0dA024DgWHu
NsyRbuLTTz2v3mc/yu8fBh2nMogfo664fUAeyWVHKFKAOFs74q8xSpMt6T9GXQPc
uZV6bb9ZV1EXr82eqsh94tFzDIzDpp0Pk8Wqy2x/GiWc4azjXm69D0JkGJTlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUlTWYgXTN+HtlD5SIq3d+hwU7mZcwHwYDVR0j
BBgwFoAUKMRyHmZ1k6Q9p4MvWI5ra49XMRwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFRlNU5LRnZmUDk2TEt6OG1IdWFHa0ZlZVRmREMxeUJVeGtyb3VmTnNU
cEMvMS8yOEM0NzIxRTY2NzU5M0E0M0RBNzgzMkY1ODhFNkI2QjhGNTczMTFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4QzQ3MjFFNjY3NTkzQTQz
REE3ODMyRjU4OEU2QjZCOEY1NzMxMUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RUZTVOS0Z2ZlA5NkxLejhtSHVhR2tGZWVUZkRDMXlCVXhrcm91Zk5zVHBDLzEv
MzIzODMwMzQzYTM1NjI2NjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzgzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARb9DANBgkqhkiG9w0BAQsFAAOCAQEAmVtRpsb0
83QxQFwg9gWlVlKbXyBP29GxB8PtCsH1vghSHHw/66Ky4qlrJbTThxFu1mowfm+r
Fw7E80SrEQeR8IjTtTCrib3Oyw+2d3bjs0xLgC6x3Tj5yYKb6SLt+cNjdRZJ7STQ
3I0jBNospGE3emTUoKC+WlaRb7kRO+GK2nBxV12IV+zUS60FNWfv2tZe6I+kc8Rf
j7y1jeSjNZGGFRWH74b074tJB2R5x9ALrtgMCVIG2vBBY20CNI1hsUOdP6URibYT
mmNQiVyRNHSENWO5L2WLqeYj7CT37zVfym5jeu19dNlA2zU3RVBB7conqxD1X93R
NygzMVQPJnx2Mw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:50:55 2026 by rpki-client