Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a373630303a3a2f34302d3430203d3e20323734333834.roa
File:                     323830343a376264303a373630303a3a2f34302d3430203d3e20323734333834.roa (raw, json)
Hash identifier:          Z+Q6d8eVdSxhQcEtMULnkOa1UUOqdTUSJ6tqBn/LUhs=
Subject key identifier:   08:BD:D3:27:F5:9D:66:E1:B4:61:8D:37:06:D7:D1:25:4B:E1:FD:FC
Certificate issuer:       /CN=2B701A0900880E50F13E6749C2889988811EC8C1
Certificate serial:       4B6A117FF930C91EF8674252516329D4776E685C
Authority key identifier: 2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a373630303a3a2f34302d3430203d3e20323734333834.roa
Signing time:             Mon 20 Apr 2026 12:52:32 +0000
ROA not before:           Mon 20 Apr 2026 12:47:32 +0000
ROA not after:            Mon 19 Apr 2027 12:52:32 +0000
asID:                     274384
IP address blocks:        2804:7bd0:7600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl
                          rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6a:11:7f:f9:30:c9:1e:f8:67:42:52:51:63:29:d4:77:6e:68:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B701A0900880E50F13E6749C2889988811EC8C1
        Validity
            Not Before: Apr 20 12:47:32 2026 GMT
            Not After : Apr 19 12:52:32 2027 GMT
        Subject: CN=08BDD327F59D66E1B4618D3706D7D1254BE1FDFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a8:0d:14:84:05:fc:e6:2b:5a:83:7d:2e:3c:
                    46:01:4c:4c:75:f5:bf:b4:c9:40:1c:dd:22:dc:5a:
                    99:a9:37:ea:e1:75:3f:4d:bd:a1:02:23:d3:10:84:
                    2e:12:f2:ef:70:44:56:25:b8:e5:f8:52:1c:73:31:
                    9a:63:a6:6e:36:f9:3f:80:c4:60:58:a9:33:63:a2:
                    8c:cc:f7:0d:a7:d4:da:45:e9:6e:94:d6:fe:93:23:
                    bc:5c:ad:cd:10:f3:aa:47:f6:3e:2c:9b:2a:1d:b7:
                    5f:e1:f0:c4:8c:6f:fa:8e:a3:2c:21:be:52:ff:59:
                    6f:26:db:e0:21:4a:64:8b:91:f9:07:85:78:f1:52:
                    1d:a8:d5:e9:68:c4:af:55:d8:41:3c:83:2b:5f:73:
                    1c:45:8f:eb:2f:85:b3:37:83:7f:05:62:8a:27:76:
                    24:b1:dc:97:2d:5c:22:60:e5:c7:0d:76:1e:73:e8:
                    ed:d4:e6:93:54:de:46:24:94:42:fd:10:75:22:66:
                    6b:c3:7f:43:1c:36:c8:23:a5:75:2a:b7:f0:2a:75:
                    1d:b6:d9:71:62:c8:07:23:1f:3b:50:d9:87:9f:20:
                    a1:f0:02:fe:da:de:2a:06:01:92:1d:d8:6d:e2:05:
                    ce:0c:b3:ee:49:5f:58:94:04:23:4d:7d:e3:63:45:
                    eb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BD:D3:27:F5:9D:66:E1:B4:61:8D:37:06:D7:D1:25:4B:E1:FD:FC
            X509v3 Authority Key Identifier:
                keyid:2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a373630303a3a2f34302d3430203d3e20323734333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bd0:7600::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:f4:a0:81:b8:84:f7:58:6c:b4:04:36:2c:0c:87:dc:08:4c:
         ef:01:82:fc:af:2a:f8:77:4d:21:81:da:7a:f0:61:d6:23:f2:
         dd:08:d3:88:83:b9:37:44:5a:52:e4:ba:3c:e6:0f:76:21:f9:
         07:bc:4a:81:fb:8d:f3:25:ca:84:10:55:cb:62:35:0b:95:c1:
         9c:8b:53:95:a7:a6:72:9a:91:24:42:bc:d1:6a:e2:96:e4:a4:
         6e:79:b7:61:7e:02:81:64:5d:6c:52:57:4e:8f:97:a4:51:a8:
         68:d3:fc:2e:4f:1d:9b:9a:c5:83:dc:77:fe:6f:c7:e4:7c:14:
         bd:0e:eb:d1:e8:66:95:fa:7c:fa:d0:0e:57:39:a0:aa:1d:b5:
         5e:fd:61:38:0e:b2:1c:e7:d6:c2:6c:b9:88:b6:40:56:a0:80:
         6b:d6:20:02:75:6e:06:00:bf:c9:f3:10:1c:4b:20:5a:d0:2e:
         9d:80:7a:c6:dd:90:43:4d:bd:f6:21:27:f3:36:c5:00:a3:03:
         38:2f:94:4b:7f:e4:6f:f5:72:cd:4a:da:d9:93:f3:37:eb:a8:
         b7:d6:f6:6c:9e:88:3a:10:b4:14:8e:39:f0:cf:fc:40:46:0d:
         26:c5:17:61:4b:91:6d:55:79:11:67:0b:f1:31:91:84:c6:e8:
         c6:05:7a:34
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUS2oRf/kwyR74Z0JSUWMp1HduaFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI3MDFBMDkwMDg4MEU1MEYxM0U2NzQ5QzI4ODk5ODg4
MTFFQzhDMTAeFw0yNjA0MjAxMjQ3MzJaFw0yNzA0MTkxMjUyMzJaMDMxMTAvBgNV
BAMTKDA4QkREMzI3RjU5RDY2RTFCNDYxOEQzNzA2RDdEMTI1NEJFMUZERkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvqA0UhAX85itag30uPEYBTEx1
9b+0yUAc3SLcWpmpN+rhdT9NvaECI9MQhC4S8u9wRFYluOX4UhxzMZpjpm42+T+A
xGBYqTNjoozM9w2n1NpF6W6U1v6TI7xcrc0Q86pH9j4smyodt1/h8MSMb/qOoywh
vlL/WW8m2+AhSmSLkfkHhXjxUh2o1eloxK9V2EE8gytfcxxFj+svhbM3g38FYoon
diSx3JctXCJg5ccNdh5z6O3U5pNU3kYklEL9EHUiZmvDf0McNsgjpXUqt/AqdR22
2XFiyAcjHztQ2YefIKHwAv7a3ioGAZId2G3iBc4Ms+5JX1iUBCNNfeNjRevfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUCL3TJ/WdZuG0YY03BtfRJUvh/fwwHwYDVR0j
BBgwFoAUK3AaCQCIDlDxPmdJwoiZiIEeyMEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkQ5Sjk0S1Y5WEEzZ1J4WGt6ZER1aldFQm9uWTJaTmRmeTF3d2FWVEta
OEsvMS8yQjcwMUEwOTAwODgwRTUwRjEzRTY3NDlDMjg4OTk4ODgxMUVDOEMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNzAxQTA5MDA4ODBFNTBG
MTNFNjc0OUMyODg5OTg4ODExRUM4QzEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZEOUo5NEtWOVhBM2dSeFhremREdWpXRUJvblkyWk5kZnkxd3dhVlRLWjhLLzEv
MzIzODMwMzQzYTM3NjI2NDMwM2EzNzM2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczNDMzMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEe9B2MA0GCSqGSIb3DQEBCwUA
A4IBAQCc9KCBuIT3WGy0BDYsDIfcCEzvAYL8ryr4d00hgdp68GHWI/LdCNOIg7k3
RFpS5Lo85g92IfkHvEqB+43zJcqEEFXLYjULlcGci1OVp6ZympEkQrzRauKW5KRu
ebdhfgKBZF1sUldOj5ekUaho0/wuTx2bmsWD3Hf+b8fkfBS9DuvR6GaV+nz60A5X
OaCqHbVe/WE4DrIc59bCbLmItkBWoIBr1iACdW4GAL/J8xAcSyBa0C6dgHrG3ZBD
Tb32ISfzNsUAowM4L5RLf+Rv9XLNStrZk/M366i31vZsnog6ELQUjjnwz/xARg0m
xRdhS5FtVXkRZwvxMZGExujGBXo0
-----END CERTIFICATE-----
Generated at Wed May 13 22:08:28 2026 by rpki-client