Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a3a2f33332d3333203d3e20323637363638.roa
File:                     323830343a343530383a3a2f33332d3333203d3e20323637363638.roa (raw, json)
Hash identifier:          x7F9W07oDIHK6NY1Hq64LISEhcxXeplXIylmQS7Qcp0=
Subject key identifier:   02:08:C1:0C:05:61:FA:4C:71:18:85:D6:2A:B9:97:72:77:F5:A0:05
Certificate issuer:       /CN=5F4A2C3E1A428B876DEF7FD3D7F193580770871F
Certificate serial:       0F5D453EA45659BC3A2060D6DDA7D43DB6E0533A
Authority key identifier: 5F:4A:2C:3E:1A:42:8B:87:6D:EF:7F:D3:D7:F1:93:58:07:70:87:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a3a2f33332d3333203d3e20323637363638.roa
Signing time:             Fri 20 Mar 2026 13:33:03 +0000
ROA not before:           Fri 20 Mar 2026 13:28:03 +0000
ROA not after:            Fri 19 Mar 2027 13:33:03 +0000
asID:                     267668
IP address blocks:        2804:4508::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5d:45:3e:a4:56:59:bc:3a:20:60:d6:dd:a7:d4:3d:b6:e0:53:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F4A2C3E1A428B876DEF7FD3D7F193580770871F
        Validity
            Not Before: Mar 20 13:28:03 2026 GMT
            Not After : Mar 19 13:33:03 2027 GMT
        Subject: CN=0208C10C0561FA4C711885D62AB9977277F5A005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:c9:4a:b7:f7:00:e8:df:a6:f4:4a:39:87:
                    0d:af:51:64:81:e0:85:aa:4c:2b:21:fd:1a:3d:b8:
                    a1:42:20:ae:f4:50:a9:df:18:e7:9b:3c:be:ad:b7:
                    74:79:7e:f1:12:c3:a1:49:c2:5c:4b:35:b0:35:1c:
                    8c:71:bf:cd:6c:06:b7:ca:85:96:dc:d6:f7:b6:04:
                    0d:73:58:48:b6:6d:87:30:5e:e5:d6:f4:8a:72:07:
                    fe:5b:d7:54:4c:c4:27:1e:ab:04:6b:d3:ea:2d:6a:
                    11:65:5c:29:9a:a8:a5:9e:c6:ce:c6:38:7f:7c:cb:
                    e1:b9:4f:e1:dc:01:fa:53:ba:d2:0b:a6:03:ed:e6:
                    b3:2f:32:0b:ee:1f:03:72:64:73:06:ce:02:d8:7f:
                    be:47:a2:f3:c6:cc:7b:20:ac:bf:8d:3a:3e:22:d7:
                    c2:a7:0d:02:61:d8:30:f1:a8:3c:ad:d2:51:65:e7:
                    11:7a:44:9a:e5:b5:3e:b4:b8:e7:5e:6b:4d:90:d2:
                    c2:fc:3c:18:f4:59:d2:e8:65:94:c1:11:46:1c:94:
                    9b:12:f2:a6:f2:30:74:c8:f2:91:4e:ef:f9:68:ca:
                    ee:1f:46:59:18:6a:56:36:14:76:c3:08:ad:7b:23:
                    21:0e:60:34:94:c8:f9:84:88:fb:56:d7:87:23:77:
                    d0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:08:C1:0C:05:61:FA:4C:71:18:85:D6:2A:B9:97:72:77:F5:A0:05
            X509v3 Authority Key Identifier:
                keyid:5F:4A:2C:3E:1A:42:8B:87:6D:EF:7F:D3:D7:F1:93:58:07:70:87:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a3a2f33332d3333203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508::/33

    Signature Algorithm: sha256WithRSAEncryption
         0b:9f:46:6c:e7:cf:db:09:ad:a3:9f:7f:29:ef:50:9b:99:77:
         44:a5:22:3b:02:46:e0:bf:70:1a:32:6d:43:96:f8:c8:c1:69:
         91:10:27:b6:3c:c5:56:22:3a:4a:1b:8c:26:a4:ef:0e:00:29:
         aa:fe:b8:ed:3d:00:8b:3d:b2:b2:90:71:7c:68:2d:c1:33:b9:
         08:76:91:3e:38:fd:d6:e0:01:e8:41:96:a0:e7:c2:a4:f2:5b:
         89:03:0a:75:f7:01:db:c1:3c:2e:5b:e2:b3:a4:ac:88:51:99:
         fa:fa:1a:60:23:16:d6:9d:30:a3:8c:67:67:a1:56:80:ab:58:
         5c:03:d4:2a:2f:aa:30:a2:d9:fa:06:46:53:13:7d:c4:5f:98:
         eb:10:d9:78:52:86:dd:46:f0:72:9b:2b:f5:d6:eb:81:b5:f9:
         32:64:f2:cf:46:7c:3e:99:e0:de:26:83:7a:32:bb:ee:28:32:
         27:5b:f5:6e:52:f6:0b:57:fb:60:f5:3a:de:ba:4d:ff:1e:34:
         cb:3e:2d:8c:52:5a:db:9d:ba:f7:1a:7b:9a:1c:73:5c:2a:26:
         b2:d8:b8:48:c1:87:cd:69:48:f5:28:34:0e:9e:0a:4c:c6:ec:
         93:97:ee:85:ad:92:06:f4:c0:fc:fc:30:29:7c:b9:b1:ee:d4:
         2b:7c:2e:93
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUD11FPqRWWbw6IGDW3afUPbbgUzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUY0QTJDM0UxQTQyOEI4NzZERUY3RkQzRDdGMTkzNTgw
NzcwODcxRjAeFw0yNjAzMjAxMzI4MDNaFw0yNzAzMTkxMzMzMDNaMDMxMTAvBgNV
BAMTKDAyMDhDMTBDMDU2MUZBNEM3MTE4ODVENjJBQjk5NzcyNzdGNUEwMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPhslKt/cA6N+m9Eo5hw2vUWSB
4IWqTCsh/Ro9uKFCIK70UKnfGOebPL6tt3R5fvESw6FJwlxLNbA1HIxxv81sBrfK
hZbc1ve2BA1zWEi2bYcwXuXW9IpyB/5b11RMxCceqwRr0+otahFlXCmaqKWexs7G
OH98y+G5T+HcAfpTutILpgPt5rMvMgvuHwNyZHMGzgLYf75HovPGzHsgrL+NOj4i
18KnDQJh2DDxqDyt0lFl5xF6RJrltT60uOdea02Q0sL8PBj0WdLoZZTBEUYclJsS
8qbyMHTI8pFO7/loyu4fRlkYalY2FHbDCK17IyEOYDSUyPmEiPtW14cjd9C/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAgjBDAVh+kxxGIXWKrmXcnf1oAUwHwYDVR0j
BBgwFoAUX0osPhpCi4dt73/T1/GTWAdwhx8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVVicEZZS1RRc21WcG45b3dqcUN2TnlxQ3NCM1hkNzJOVzVnWkd5aWt5
TGEvMC81RjRBMkMzRTFBNDI4Qjg3NkRFRjdGRDNEN0YxOTM1ODA3NzA4NzFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGNEEyQzNFMUE0MjhCODc2
REVGN0ZEM0Q3RjE5MzU4MDc3MDg3MUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VVYnBGWUtUUXNtVnBuOW93anFDdk55cUNzQjNYZDcyTlc1Z1pHeWlreUxhLzAv
MzIzODMwMzQzYTM0MzUzMDM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM3
MzYzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARFCAAwDQYJKoZIhvcNAQELBQADggEBAAufRmzn
z9sJraOffynvUJuZd0SlIjsCRuC/cBoybUOW+MjBaZEQJ7Y8xVYiOkobjCak7w4A
Kar+uO09AIs9srKQcXxoLcEzuQh2kT44/dbgAehBlqDnwqTyW4kDCnX3AdvBPC5b
4rOkrIhRmfr6GmAjFtadMKOMZ2ehVoCrWFwD1CovqjCi2foGRlMTfcRfmOsQ2XhS
ht1G8HKbK/XW64G1+TJk8s9GfD6Z4N4mg3oyu+4oMidb9W5S9gtX+2D1Ot66Tf8e
NMs+LYxSWtuduvcae5occ1wqJrLYuEjBh81pSPUoNA6eCkzG7JOX7oWtkgb0wPz8
MCl8ubHu1Ct8LpM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:12 2026 by rpki-client