Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/323830343a376132343a3a2f33322d313238203d3e20323731333530.roa
File:                     323830343a376132343a3a2f33322d313238203d3e20323731333530.roa (raw, json)
Hash identifier:          9Lzz7wzshCzP8fsTZZg4dvkUsPdeZQFfARfi27oJcPw=
Subject key identifier:   27:18:31:53:15:96:49:6B:BC:44:BF:AA:15:71:31:FE:2F:22:EB:E8
Certificate issuer:       /CN=1EAAF74F2C5D3E909BD7F1094840B5B89B5BB3F5
Certificate serial:       2104DF2DA41F5E12632CE60B3E3A689C1176DC99
Authority key identifier: 1E:AA:F7:4F:2C:5D:3E:90:9B:D7:F1:09:48:40:B5:B8:9B:5B:B3:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EAAF74F2C5D3E909BD7F1094840B5B89B5BB3F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/323830343a376132343a3a2f33322d313238203d3e20323731333530.roa
Signing time:             Wed 18 Mar 2026 17:26:11 +0000
ROA not before:           Wed 18 Mar 2026 17:21:11 +0000
ROA not after:            Wed 17 Mar 2027 17:26:11 +0000
asID:                     271350
IP address blocks:        2804:7a24::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/1EAAF74F2C5D3E909BD7F1094840B5B89B5BB3F5.crl
                          rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/1EAAF74F2C5D3E909BD7F1094840B5B89B5BB3F5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EAAF74F2C5D3E909BD7F1094840B5B89B5BB3F5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:04:df:2d:a4:1f:5e:12:63:2c:e6:0b:3e:3a:68:9c:11:76:dc:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EAAF74F2C5D3E909BD7F1094840B5B89B5BB3F5
        Validity
            Not Before: Mar 18 17:21:11 2026 GMT
            Not After : Mar 17 17:26:11 2027 GMT
        Subject: CN=271831531596496BBC44BFAA157131FE2F22EBE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:a2:36:9d:d0:78:ef:25:72:d3:1f:d0:cf:
                    79:22:99:a9:39:4b:03:8b:f4:05:ce:f7:4e:ca:65:
                    8f:34:66:cf:d6:33:26:9e:ce:e6:62:29:6e:af:ab:
                    00:eb:c7:d5:56:a9:c8:41:cb:82:9e:ab:27:45:04:
                    19:87:40:4f:d0:50:ee:58:88:43:c3:df:c5:14:54:
                    0b:62:b0:b0:8a:a8:e2:a7:46:a8:ff:77:06:e4:13:
                    b8:89:f7:18:47:3f:fb:cb:53:b8:a0:34:69:67:9e:
                    93:71:6c:8e:bd:83:9d:73:a2:98:ae:00:1d:ab:2e:
                    22:a0:d9:37:7f:14:c5:a5:13:24:67:e6:36:ab:63:
                    5d:20:4d:64:31:6c:5c:a1:9d:94:e6:26:48:4e:53:
                    09:94:b8:7f:7a:ad:6f:76:e2:e0:cd:2c:53:6a:4e:
                    53:ba:2e:f7:96:60:ee:3a:ba:32:b7:af:6e:a0:a9:
                    1e:82:df:e0:2d:12:af:07:40:a1:29:d3:00:78:56:
                    43:d6:fa:ec:88:9d:8a:60:bd:c6:0b:94:14:50:4d:
                    d4:79:31:d2:90:22:03:10:32:3e:2f:5c:35:bb:6c:
                    8b:e0:f9:b2:f6:4a:ea:6c:14:17:61:0f:15:d7:62:
                    17:66:61:0b:bc:20:8b:3b:75:1e:1d:12:11:78:1a:
                    96:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:18:31:53:15:96:49:6B:BC:44:BF:AA:15:71:31:FE:2F:22:EB:E8
            X509v3 Authority Key Identifier:
                keyid:1E:AA:F7:4F:2C:5D:3E:90:9B:D7:F1:09:48:40:B5:B8:9B:5B:B3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/1EAAF74F2C5D3E909BD7F1094840B5B89B5BB3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EAAF74F2C5D3E909BD7F1094840B5B89B5BB3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/323830343a376132343a3a2f33322d313238203d3e20323731333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a24::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:61:d6:99:fa:98:27:08:63:a1:cd:8f:e0:d9:57:69:34:22:
         7c:3c:b8:e8:63:4d:0d:28:9c:d8:bf:0d:ca:b7:55:5b:48:33:
         80:9f:22:a7:00:e6:13:16:0f:13:48:01:2e:88:7b:be:ea:e0:
         06:9d:eb:fd:79:1c:99:29:25:df:a7:27:07:6c:f5:7d:8f:6c:
         ff:18:79:cc:2a:74:22:e2:fe:fa:2e:c5:89:50:70:f4:05:4f:
         84:dc:3f:28:42:2f:d4:90:eb:17:9a:0d:d5:3b:a2:e9:d8:60:
         fc:ef:e7:ee:52:a6:05:a7:a0:3d:5e:b3:8a:61:9a:08:d6:7a:
         c7:5c:b4:2e:f8:2c:f1:fc:96:48:2c:f5:f6:14:d3:7d:cc:1a:
         f7:bc:df:3a:a5:ca:ed:da:bd:c8:c8:ab:ee:50:98:1e:dc:f6:
         d1:89:25:9d:53:fb:25:3b:ae:78:7d:0c:d9:0c:d8:d2:30:22:
         2a:4e:c9:db:06:c4:bb:23:bc:8c:3c:c7:7a:55:4a:c9:df:06:
         a3:5c:66:60:d8:7f:30:06:1f:6b:f3:cb:ae:26:56:fd:4c:66:
         15:72:ed:80:dc:ec:c2:9f:a4:40:8d:4a:a7:c8:1f:d0:21:7d:
         04:87:cc:14:22:e1:44:48:20:98:c0:ac:cd:0f:16:f1:49:6d:
         3b:3d:e7:3e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUIQTfLaQfXhJjLOYLPjponBF23JkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVBQUY3NEYyQzVEM0U5MDlCRDdGMTA5NDg0MEI1Qjg5
QjVCQjNGNTAeFw0yNjAzMTgxNzIxMTFaFw0yNzAzMTcxNzI2MTFaMDMxMTAvBgNV
BAMTKDI3MTgzMTUzMTU5NjQ5NkJCQzQ0QkZBQTE1NzEzMUZFMkYyMkVCRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtNqI2ndB47yVy0x/Qz3kimak5
SwOL9AXO907KZY80Zs/WMyaezuZiKW6vqwDrx9VWqchBy4KeqydFBBmHQE/QUO5Y
iEPD38UUVAtisLCKqOKnRqj/dwbkE7iJ9xhHP/vLU7igNGlnnpNxbI69g51zopiu
AB2rLiKg2Td/FMWlEyRn5jarY10gTWQxbFyhnZTmJkhOUwmUuH96rW924uDNLFNq
TlO6LveWYO46ujK3r26gqR6C3+AtEq8HQKEp0wB4VkPW+uyInYpgvcYLlBRQTdR5
MdKQIgMQMj4vXDW7bIvg+bL2SupsFBdhDxXXYhdmYQu8IIs7dR4dEhF4GpYNAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUJxgxUxWWSWu8RL+qFXEx/i8i6+gwHwYDVR0j
BBgwFoAUHqr3TyxdPpCb1/EJSEC1uJtbs/UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHMxazZIMm42Q3lOWlF2QVZRWEpHamU1VWFKSHQxOVhCZFJWM1BEa003
ZW0vMC8xRUFBRjc0RjJDNUQzRTkwOUJEN0YxMDk0ODQwQjVCODlCNUJCM0Y1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFQUFGNzRGMkM1RDNFOTA5
QkQ3RjEwOTQ4NDBCNUI4OUI1QkIzRjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzMWs2SDJuNkN5TlpRdkFWUVhKR2plNVVhSkh0MTlYQmRSVjNQRGtNN2VtLzAv
MzIzODMwMzQzYTM3NjEzMjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzMzM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHokMA0GCSqGSIb3DQEBCwUAA4IBAQBTYdaZ
+pgnCGOhzY/g2VdpNCJ8PLjoY00NKJzYvw3Kt1VbSDOAnyKnAOYTFg8TSAEuiHu+
6uAGnev9eRyZKSXfpycHbPV9j2z/GHnMKnQi4v76LsWJUHD0BU+E3D8oQi/UkOsX
mg3VO6Lp2GD87+fuUqYFp6A9XrOKYZoI1nrHXLQu+Czx/JZILPX2FNN9zBr3vN86
pcrt2r3IyKvuUJge3PbRiSWdU/slO654fQzZDNjSMCIqTsnbBsS7I7yMPMd6VUrJ
3wajXGZg2H8wBh9r88uuJlb9TGYVcu2A3OzCn6RAjUqnyB/QIX0Eh8wUIuFESCCY
wKzNDxbxSW07Pec+
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:28:03 2026 by rpki-client