Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/4/323830343a373139303a3a2f33322d313238203d3e20323730373937.roa
File:                     323830343a373139303a3a2f33322d313238203d3e20323730373937.roa (raw, json)
Hash identifier:          kGDUGxOBDn1HOwDcSlqW8o/sk3fp9mhXIysIRFaExxY=
Subject key identifier:   59:EE:6F:61:42:31:72:84:D9:E6:AB:C3:D3:99:A3:80:79:D3:EB:E2
Certificate issuer:       /CN=1C5A94248515529F06DE20A017F7CC42EFEAD24F
Certificate serial:       4AE99B0CF041612CC2B7E0DCB73E8AFCF9EFA9E6
Authority key identifier: 1C:5A:94:24:85:15:52:9F:06:DE:20:A0:17:F7:CC:42:EF:EA:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C5A94248515529F06DE20A017F7CC42EFEAD24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/4/323830343a373139303a3a2f33322d313238203d3e20323730373937.roa
Signing time:             Wed 04 Mar 2026 13:49:23 +0000
ROA not before:           Wed 04 Mar 2026 13:44:23 +0000
ROA not after:            Wed 03 Mar 2027 13:49:23 +0000
asID:                     270797
IP address blocks:        2804:7190::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/4/1C5A94248515529F06DE20A017F7CC42EFEAD24F.crl
                          rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/4/1C5A94248515529F06DE20A017F7CC42EFEAD24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C5A94248515529F06DE20A017F7CC42EFEAD24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 01:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e9:9b:0c:f0:41:61:2c:c2:b7:e0:dc:b7:3e:8a:fc:f9:ef:a9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5A94248515529F06DE20A017F7CC42EFEAD24F
        Validity
            Not Before: Mar  4 13:44:23 2026 GMT
            Not After : Mar  3 13:49:23 2027 GMT
        Subject: CN=59EE6F6142317284D9E6ABC3D399A38079D3EBE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:84:aa:52:40:4c:0a:39:95:24:92:23:78:
                    33:bb:52:59:eb:d5:4f:61:b0:1a:d9:69:71:3b:13:
                    84:10:07:d4:3e:52:a8:26:a9:59:29:0e:e2:a5:8c:
                    bd:86:ba:23:a1:f4:9e:08:fd:c2:fb:e7:0c:a4:d7:
                    e1:ea:ed:d2:21:fd:31:66:07:58:63:2f:1a:c5:c8:
                    56:08:dd:25:95:58:14:5a:ab:fa:64:09:c1:7b:00:
                    37:7f:22:18:89:8a:28:63:03:c4:60:3a:e6:43:6d:
                    96:bb:15:07:8b:30:cd:5f:b5:2b:f8:01:fd:a1:26:
                    bb:9b:d9:5d:3b:60:c7:d6:4c:70:2a:18:5f:55:e0:
                    83:9f:d7:20:f2:03:4c:df:c7:e1:5c:5c:7a:65:36:
                    1a:f0:01:9e:93:82:95:ed:21:5b:97:2a:47:f8:fb:
                    4b:52:2f:11:db:2c:db:33:7e:cf:8c:ab:d5:64:16:
                    65:ab:3e:8d:75:37:92:64:e2:53:f4:0a:b8:45:a0:
                    57:7b:e5:a8:a0:5f:c5:db:9d:41:ca:35:e3:71:dc:
                    76:10:97:0e:6f:d1:3e:3f:46:cc:1b:2b:22:8a:43:
                    ba:75:30:c4:5f:63:cf:b0:b0:43:18:90:0b:9d:f1:
                    78:4b:b0:db:52:0b:5c:9f:65:37:7a:d5:76:9d:96:
                    9d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EE:6F:61:42:31:72:84:D9:E6:AB:C3:D3:99:A3:80:79:D3:EB:E2
            X509v3 Authority Key Identifier:
                keyid:1C:5A:94:24:85:15:52:9F:06:DE:20:A0:17:F7:CC:42:EF:EA:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/4/1C5A94248515529F06DE20A017F7CC42EFEAD24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C5A94248515529F06DE20A017F7CC42EFEAD24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/4/323830343a373139303a3a2f33322d313238203d3e20323730373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7190::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:c9:8b:75:73:0f:30:07:40:56:b8:f9:13:55:94:2b:2c:cf:
         6e:ae:14:d0:5a:4c:fc:70:37:a3:d7:10:79:68:44:b3:94:f7:
         a6:66:75:d6:04:23:18:2a:0e:4d:54:6e:5a:d4:b4:8c:6a:b7:
         e6:43:59:14:16:fc:82:3e:59:2d:f1:16:44:1b:e9:87:2c:fa:
         53:9c:a3:08:ba:47:48:58:8f:ae:dd:5f:67:0a:60:92:8f:e0:
         75:9e:99:38:10:8a:ef:a2:3b:05:dd:49:48:86:24:76:7a:38:
         af:d2:d5:b6:74:91:c3:e3:e8:be:82:87:73:7b:4d:e3:01:cf:
         72:62:96:82:76:bf:2f:67:da:69:1f:f7:fc:87:bc:84:af:6b:
         d8:f4:58:33:dd:f8:94:de:90:62:b8:18:5b:17:70:a2:d9:54:
         86:ba:09:cc:7d:0b:50:64:2d:67:99:2c:95:aa:c1:d4:8b:a9:
         16:71:16:4c:88:fa:e0:73:22:26:7e:be:77:27:50:bc:67:60:
         32:bb:1b:2d:75:4d:be:9e:84:b2:52:8c:7a:40:54:cb:3e:14:
         f0:eb:5a:26:60:6e:88:5e:d5:40:6c:43:1c:51:01:0b:ee:6c:
         29:9f:08:b7:40:1d:5a:4c:12:0d:c1:66:57:69:a9:b1:53:5e:
         16:e4:0c:d4
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUSumbDPBBYSzCt+Dctz6K/PnvqeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1QTk0MjQ4NTE1NTI5RjA2REUyMEEwMTdGN0NDNDJF
RkVBRDI0RjAeFw0yNjAzMDQxMzQ0MjNaFw0yNzAzMDMxMzQ5MjNaMDMxMTAvBgNV
BAMTKDU5RUU2RjYxNDIzMTcyODREOUU2QUJDM0QzOTlBMzgwNzlEM0VCRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCoSqUkBMCjmVJJIjeDO7Ulnr
1U9hsBrZaXE7E4QQB9Q+UqgmqVkpDuKljL2GuiOh9J4I/cL75wyk1+Hq7dIh/TFm
B1hjLxrFyFYI3SWVWBRaq/pkCcF7ADd/IhiJiihjA8RgOuZDbZa7FQeLMM1ftSv4
Af2hJrub2V07YMfWTHAqGF9V4IOf1yDyA0zfx+FcXHplNhrwAZ6TgpXtIVuXKkf4
+0tSLxHbLNszfs+Mq9VkFmWrPo11N5Jk4lP0CrhFoFd75aigX8XbnUHKNeNx3HYQ
lw5v0T4/RswbKyKKQ7p1MMRfY8+wsEMYkAud8XhLsNtSC1yfZTd61Xadlp0rAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUWe5vYUIxcoTZ5qvD05mjgHnT6+IwHwYDVR0j
BBgwFoAUHFqUJIUVUp8G3iCgF/fMQu/q0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXZ4bk5NdUZtWEFvR3k1NGl6RGJSWG83NWdYd2gzUThvZG13MXY5VVVC
N0YvNC8xQzVBOTQyNDg1MTU1MjlGMDZERTIwQTAxN0Y3Q0M0MkVGRUFEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDNUE5NDI0ODUxNTUyOUYw
NkRFMjBBMDE3RjdDQzQyRUZFQUQyNEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V2eG5OTXVGbVhBb0d5NTRpekRiUlhvNzVnWHdoM1E4b2RtdzF2OVVVQjdGLzQv
MzIzODMwMzQzYTM3MzEzOTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzNzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHGQMA0GCSqGSIb3DQEBCwUAA4IBAQC/yYt1
cw8wB0BWuPkTVZQrLM9urhTQWkz8cDej1xB5aESzlPemZnXWBCMYKg5NVG5a1LSM
arfmQ1kUFvyCPlkt8RZEG+mHLPpTnKMIukdIWI+u3V9nCmCSj+B1npk4EIrvojsF
3UlIhiR2ejiv0tW2dJHD4+i+godze03jAc9yYpaCdr8vZ9ppH/f8h7yEr2vY9Fgz
3fiU3pBiuBhbF3Ci2VSGugnMfQtQZC1nmSyVqsHUi6kWcRZMiPrgcyImfr53J1C8
Z2AyuxstdU2+noSyUox6QFTLPhTw61omYG6IXtVAbEMcUQEL7mwpnwi3QB1aTBIN
wWZXaamxU14W5AzU
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:59:16 2026 by rpki-client