Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313039313a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a313039313a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          QD62T+1Bs0xb7TzQD+cxEAmqhd7rcDOizvvcTbGAPOA=
Subject key identifier:   0D:4D:39:CC:9B:74:AE:B8:E9:57:FF:26:F1:A4:66:97:16:B3:C6:D0
Certificate issuer:       /CN=A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE
Certificate serial:       FE3540A58D3948940CF8C59464EBDAB3804DB3
Authority key identifier: A4:E5:5E:18:A5:18:ED:BF:14:B0:96:3D:7B:F0:9E:3D:FF:66:69:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313039313a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Tue 28 Apr 2026 20:47:25 +0000
ROA not before:           Tue 28 Apr 2026 20:42:25 +0000
ROA not after:            Tue 27 Apr 2027 20:47:25 +0000
asID:                     269566
IP address blocks:        2804:6688:1091::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 16:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fe:35:40:a5:8d:39:48:94:0c:f8:c5:94:64:eb:da:b3:80:4d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE
        Validity
            Not Before: Apr 28 20:42:25 2026 GMT
            Not After : Apr 27 20:47:25 2027 GMT
        Subject: CN=0D4D39CC9B74AEB8E957FF26F1A4669716B3C6D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e5:d9:6d:5c:6d:f4:10:d8:ce:48:78:92:02:
                    a2:20:01:01:2e:8b:91:28:a9:5f:5f:4a:6f:91:dc:
                    1f:2c:f9:32:ec:24:de:86:98:3d:4c:6b:98:d3:1e:
                    9c:2a:f5:5e:4d:46:6e:f6:e3:80:8b:4b:75:3c:06:
                    9b:3e:7e:90:87:ac:f3:c8:ed:e7:76:9f:4c:b8:d3:
                    1c:b0:c3:38:fc:7f:3b:cf:ab:48:6a:b1:76:d5:cd:
                    cc:de:33:52:b1:6f:6f:f7:b2:05:58:b9:c5:3d:97:
                    4f:af:c5:70:2c:4d:e6:d6:1d:ec:43:93:36:72:ae:
                    ed:0c:ac:65:c3:c6:d8:d7:a6:c5:34:ed:1d:9b:ca:
                    62:64:98:05:eb:33:23:b1:3a:36:6b:c6:df:dd:4a:
                    19:ae:50:d7:aa:16:7c:58:eb:49:74:40:e5:29:ef:
                    b7:0e:f3:83:ad:a4:66:c9:96:c7:2c:bc:5a:46:5c:
                    2a:fd:b3:da:81:b8:b4:0d:37:29:a3:07:07:88:09:
                    bd:99:76:b9:0b:16:49:61:57:3a:bc:66:73:18:34:
                    6f:ec:14:2d:86:83:50:33:2d:13:6a:e5:71:ba:78:
                    87:d4:c7:0e:6a:d6:f7:21:56:6f:7b:83:4a:db:fc:
                    41:da:5c:0b:79:7f:63:2e:22:b2:48:7e:90:bb:34:
                    35:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4D:39:CC:9B:74:AE:B8:E9:57:FF:26:F1:A4:66:97:16:B3:C6:D0
            X509v3 Authority Key Identifier:
                keyid:A4:E5:5E:18:A5:18:ED:BF:14:B0:96:3D:7B:F0:9E:3D:FF:66:69:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E55E18A518EDBF14B0963D7BF09E3DFF6669DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313039313a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:1091::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:80:10:c3:11:62:47:d7:8c:07:d6:e7:fd:80:49:f8:bf:d0:
         ed:2c:7e:43:d2:24:97:5d:5e:98:26:f7:cd:0a:aa:a2:bf:c5:
         51:fe:5b:7c:ef:e8:0a:85:51:30:69:79:da:31:d8:a2:20:9b:
         d9:3a:0c:72:da:3d:c6:21:ce:2d:48:a7:63:24:b1:24:f1:f4:
         81:5e:21:e0:48:31:89:70:47:ad:21:ac:3a:73:ed:cb:cd:6b:
         dc:71:1e:04:66:9e:a7:8b:f7:08:7a:0f:2c:a1:66:7f:96:fb:
         0e:da:35:a8:53:73:ca:ab:62:21:ac:7f:e5:d8:e9:02:60:b2:
         38:73:38:83:67:60:82:8c:75:fc:0b:c7:e2:0a:12:4f:3f:30:
         a7:1f:d7:f9:36:c5:b8:05:23:59:89:11:cf:04:90:ea:b9:2d:
         65:a3:a6:ae:ce:27:17:f8:9c:58:9d:d1:89:17:e8:b0:cc:fe:
         17:55:37:06:7e:1e:af:8f:4f:e0:7a:cf:80:1b:2c:9c:a8:f7:
         49:ef:45:b9:5d:2f:cd:f9:c1:ce:bc:36:9d:c3:43:91:46:fc:
         a1:b4:d1:df:fd:37:37:86:63:bc:23:47:53:f4:91:08:32:4f:
         85:6c:d6:5e:31:a6:c5:f2:52:93:c0:b6:5f:6b:e0:f0:20:b4:
         48:2c:29:8d
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUAP41QKWNOUiUDPjFlGTr2rOATbMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRFNTVFMThBNTE4RURCRjE0QjA5NjNEN0JGMDlFM0RG
RjY2NjlERTAeFw0yNjA0MjgyMDQyMjVaFw0yNzA0MjcyMDQ3MjVaMDMxMTAvBgNV
BAMTKDBENEQzOUNDOUI3NEFFQjhFOTU3RkYyNkYxQTQ2Njk3MTZCM0M2RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt5dltXG30ENjOSHiSAqIgAQEu
i5EoqV9fSm+R3B8s+TLsJN6GmD1Ma5jTHpwq9V5NRm7244CLS3U8Bps+fpCHrPPI
7ed2n0y40xywwzj8fzvPq0hqsXbVzczeM1Kxb2/3sgVYucU9l0+vxXAsTebWHexD
kzZyru0MrGXDxtjXpsU07R2bymJkmAXrMyOxOjZrxt/dShmuUNeqFnxY60l0QOUp
77cO84OtpGbJlscsvFpGXCr9s9qBuLQNNymjBweICb2ZdrkLFklhVzq8ZnMYNG/s
FC2Gg1AzLRNq5XG6eIfUxw5q1vchVm97g0rb/EHaXAt5f2MuIrJIfpC7NDWVAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUDU05zJt0rrjpV/8m8aRmlxazxtAwHwYDVR0j
BBgwFoAUpOVeGKUY7b8UsJY9e/CePf9mad4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWZWN0cxb2tUMXZRdEZiTVFwZ2F0REM5cHRod0FNVWQ4SFVydnVFb3ZF
NEsvMC9BNEU1NUUxOEE1MThFREJGMTRCMDk2M0Q3QkYwOUUzREZGNjY2OURFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0RTU1RTE4QTUxOEVEQkYx
NEIwOTYzRDdCRjA5RTNERkY2NjY5REUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VmVjdHMW9rVDF2UXRGYk1RcGdhdERDOXB0aHdBTVVkOEhVcnZ1RW92RTRLLzAv
MzIzODMwMzQzYTM2MzYzODM4M2EzMTMwMzkzMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzOTM1MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEZogQkTANBgkqhkiG9w0BAQsF
AAOCAQEAx4AQwxFiR9eMB9bn/YBJ+L/Q7Sx+Q9Ikl11emCb3zQqqor/FUf5bfO/o
CoVRMGl52jHYoiCb2ToMcto9xiHOLUinYySxJPH0gV4h4EgxiXBHrSGsOnPty81r
3HEeBGaep4v3CHoPLKFmf5b7Dto1qFNzyqtiIax/5djpAmCyOHM4g2dggox1/AvH
4goSTz8wpx/X+TbFuAUjWYkRzwSQ6rktZaOmrs4nF/icWJ3RiRfosMz+F1U3Bn4e
r49P4HrPgBssnKj3Se9FuV0vzfnBzrw2ncNDkUb8obTR3/03N4ZjvCNHU/SRCDJP
hWzWXjGmxfJSk8C2X2vg8CC0SCwpjQ==
-----END CERTIFICATE-----
Generated at Wed May 13 19:35:34 2026 by rpki-client