Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a336162633a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a336162633a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          0XSzuyNMQ8ogazdwriusFlSqse98/RKorspCwJdrbSw=
Subject key identifier:   C3:07:35:89:65:14:BF:86:3C:35:E5:AA:6E:88:39:EB:2C:FD:10:EB
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       13F0DAE42C05E27EF8674CA4341022B36F4E0FE8
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a336162633a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 28 Apr 2026 19:36:43 +0000
ROA not before:           Tue 28 Apr 2026 19:31:43 +0000
ROA not after:            Tue 27 Apr 2027 19:36:43 +0000
asID:                     264485
IP address blocks:        2804:2050:3abc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f0:da:e4:2c:05:e2:7e:f8:67:4c:a4:34:10:22:b3:6f:4e:0f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: Apr 28 19:31:43 2026 GMT
            Not After : Apr 27 19:36:43 2027 GMT
        Subject: CN=C30735896514BF863C35E5AA6E8839EB2CFD10EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:e3:2b:78:9a:8a:d0:e5:46:16:99:62:d6:
                    eb:1c:99:f8:45:6f:b7:77:ce:1c:e7:c9:9f:f3:b6:
                    c7:af:b4:65:64:6b:fe:b6:fa:e8:bb:19:fa:47:6d:
                    06:55:7e:5f:08:9a:b6:cb:42:b7:96:c0:25:94:83:
                    41:cb:73:73:72:dc:2e:12:cc:53:32:f5:39:62:e5:
                    8e:fb:4a:b0:c6:04:a0:70:e8:ae:88:24:bc:aa:9d:
                    1a:aa:54:ba:89:cf:d3:e2:28:f7:90:d5:cb:49:78:
                    da:e3:cb:77:f4:d9:cf:73:46:6f:cd:a9:dd:76:8a:
                    4b:1d:66:15:df:07:89:4c:bc:4e:35:0c:b7:69:c5:
                    6b:c2:c7:ef:b9:d0:7a:1e:f1:df:38:84:50:86:5a:
                    69:cf:db:7a:65:2f:b8:3c:a8:07:04:f6:b6:61:ae:
                    5e:7f:2b:50:f8:8a:73:59:53:ab:03:3f:99:8a:bc:
                    f7:fe:0b:55:99:be:0c:4e:bf:0d:d5:4b:aa:6a:70:
                    3b:7d:03:50:f0:f6:93:25:47:25:8e:f0:46:44:a1:
                    b8:aa:ac:2e:0e:59:73:5e:1b:f5:19:f3:5a:40:3f:
                    0a:09:21:a3:17:7d:8a:b8:3a:3b:7a:43:77:4a:03:
                    c8:99:44:f4:3f:dd:c8:c7:2a:e1:70:4b:52:63:89:
                    ae:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:07:35:89:65:14:BF:86:3C:35:E5:AA:6E:88:39:EB:2C:FD:10:EB
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a336162633a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:3abc::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:c9:10:b2:8d:b2:f7:9c:c7:a8:ac:8f:bd:7d:dd:b6:5b:75:
         f7:d4:17:99:aa:81:e1:ca:de:d0:85:b0:f4:dd:27:f4:f6:c6:
         80:9c:2e:77:4a:37:05:1b:99:73:81:62:ae:d7:0d:6f:1f:e2:
         b5:d9:12:30:23:15:e9:65:62:fd:70:7c:e1:09:1b:f2:93:24:
         7b:98:f5:83:85:e4:9f:f7:81:30:62:2a:5c:c8:6b:c7:77:10:
         e7:fe:70:e4:c4:21:84:1a:24:3e:d6:15:93:ae:bd:d5:e9:d6:
         df:b2:e0:26:e9:46:f6:ec:42:86:a7:26:5e:12:2d:82:a7:fb:
         fb:76:20:7c:79:99:2d:0a:c8:16:4b:90:49:fe:81:4e:23:c5:
         56:10:69:38:fc:45:89:d6:42:44:8d:54:72:ff:a1:75:f7:3b:
         47:cf:44:e9:12:e9:b1:b0:96:95:f2:81:07:7b:83:fa:ad:57:
         f2:c9:1c:71:86:99:53:cc:d3:9b:96:45:d5:13:61:db:ae:e1:
         33:e4:c4:02:1e:66:44:17:6d:17:9c:d9:49:14:f9:db:48:4d:
         48:9f:67:7b:73:7a:b7:ea:7a:06:f6:cd:c8:50:05:1f:83:8d:
         99:5e:36:6c:34:42:9a:24:6d:cc:fe:af:c8:57:24:ea:02:55:
         61:ad:d3:9e
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUE/Da5CwF4n74Z0ykNBAis29OD+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwNDlBMjU4OTIxQkJCM0FGM0JCQjEwNDQzNEFDREIw
RUQ4REYzQTAeFw0yNjA0MjgxOTMxNDNaFw0yNzA0MjcxOTM2NDNaMDMxMTAvBgNV
BAMTKEMzMDczNTg5NjUxNEJGODYzQzM1RTVBQTZFODgzOUVCMkNGRDEwRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4BeMreJqK0OVGFpli1uscmfhF
b7d3zhznyZ/ztsevtGVka/62+ui7GfpHbQZVfl8ImrbLQreWwCWUg0HLc3Ny3C4S
zFMy9Tli5Y77SrDGBKBw6K6IJLyqnRqqVLqJz9PiKPeQ1ctJeNrjy3f02c9zRm/N
qd12iksdZhXfB4lMvE41DLdpxWvCx++50Hoe8d84hFCGWmnP23plL7g8qAcE9rZh
rl5/K1D4inNZU6sDP5mKvPf+C1WZvgxOvw3VS6pqcDt9A1Dw9pMlRyWO8EZEobiq
rC4OWXNeG/UZ81pAPwoJIaMXfYq4Ojt6Q3dKA8iZRPQ/3cjHKuFwS1Jjia7tAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUwwc1iWUUv4Y8NeWqbog56yz9EOswHwYDVR0j
BBgwFoAUEwSaJYkhu7OvO7sQRDSs2w7Y3zowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG5qQmdOZHN1WGVlYkhNbmUzZWJmbVhhdG9tRnQ0aGhyNjE3cG8xeFZF
SjYvMC8xMzA0OUEyNTg5MjFCQkIzQUYzQkJCMTA0NDM0QUNEQjBFRDhERjNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzMDQ5QTI1ODkyMUJCQjNB
RjNCQkIxMDQ0MzRBQ0RCMEVEOERGM0EuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RuakJnTmRzdVhlZWJITW5lM2ViZm1YYXRvbUZ0NGhocjYxN3BvMXhWRUo2LzAv
MzIzODMwMzQzYTMyMzAzNTMwM2EzMzYxNjI2MzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEIFA6vDANBgkqhkiG9w0BAQsF
AAOCAQEAjMkQso2y95zHqKyPvX3dtlt199QXmaqB4cre0IWw9N0n9PbGgJwud0o3
BRuZc4FirtcNbx/itdkSMCMV6WVi/XB84Qkb8pMke5j1g4Xkn/eBMGIqXMhrx3cQ
5/5w5MQhhBokPtYVk6691enW37LgJulG9uxChqcmXhItgqf7+3YgfHmZLQrIFkuQ
Sf6BTiPFVhBpOPxFidZCRI1Ucv+hdfc7R89E6RLpsbCWlfKBB3uD+q1X8skccYaZ
U8zTm5ZF1RNh267hM+TEAh5mRBdtF5zZSRT520hNSJ9ne3N6t+p6BvbNyFAFH4ON
mV42bDRCmiRtzP6vyFck6gJVYa3Tng==
-----END CERTIFICATE-----
Generated at Wed May 13 20:59:50 2026 by rpki-client