Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a3a2f33322d3332203d3e20323734363732.roa
File:                     323830343a393165303a3a2f33322d3332203d3e20323734363732.roa (raw, json)
Hash identifier:          smd+BhncNahhBRpKZb5NXeC3ofR5xTUiXct3wapJ50A=
Subject key identifier:   EA:27:A9:D5:23:4A:C2:89:32:CA:93:04:40:78:4A:3F:26:E1:CE:F7
Certificate issuer:       /CN=C0763F448FA9C6BEB9230A4C24B9113ABF62E476
Certificate serial:       54EE4EE5C911C56283173C68BC93B36AEF9C1ED3
Authority key identifier: C0:76:3F:44:8F:A9:C6:BE:B9:23:0A:4C:24:B9:11:3A:BF:62:E4:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a3a2f33322d3332203d3e20323734363732.roa
Signing time:             Thu 23 Apr 2026 17:27:13 +0000
ROA not before:           Thu 23 Apr 2026 17:22:13 +0000
ROA not after:            Thu 22 Apr 2027 17:27:13 +0000
asID:                     274672
IP address blocks:        2804:91e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ee:4e:e5:c9:11:c5:62:83:17:3c:68:bc:93:b3:6a:ef:9c:1e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0763F448FA9C6BEB9230A4C24B9113ABF62E476
        Validity
            Not Before: Apr 23 17:22:13 2026 GMT
            Not After : Apr 22 17:27:13 2027 GMT
        Subject: CN=EA27A9D5234AC28932CA930440784A3F26E1CEF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9d:be:b7:a3:37:44:b7:1c:fb:f7:34:03:3f:
                    d5:6d:30:b2:78:87:58:87:97:34:46:97:a8:20:42:
                    c9:1d:13:b6:25:02:5a:8a:e4:53:dd:ff:9c:f2:a2:
                    d0:6d:ba:16:99:2c:35:28:5b:fd:96:89:10:2e:e3:
                    0a:e2:28:49:ca:a3:b5:fa:ea:ef:45:af:f6:de:98:
                    84:e0:21:0b:aa:97:5f:fa:57:ac:50:e1:08:39:d0:
                    d8:a5:7d:ba:51:25:d5:76:4e:ef:6b:52:2d:ec:d9:
                    e4:11:04:1d:d0:ec:42:f3:6a:19:cc:28:fa:4c:2f:
                    fc:a4:16:db:42:a2:57:00:45:07:3e:87:e1:1c:96:
                    93:63:b5:b7:29:25:f5:01:82:d6:69:82:b6:4b:cb:
                    5a:98:89:36:55:b2:85:0e:a2:79:e1:50:c6:7e:d4:
                    ba:bf:eb:f3:91:0a:57:75:13:71:2a:b5:b7:69:1b:
                    ff:29:5a:ca:ad:62:fd:e2:0a:2a:25:3b:ae:15:f3:
                    3b:45:8e:90:14:6c:ce:60:20:8c:89:43:ac:67:fe:
                    44:c9:55:2e:ed:f9:f1:33:ec:fc:bb:3f:63:85:1b:
                    25:51:51:df:2c:e3:64:93:bf:e2:7a:52:03:75:70:
                    b3:95:ae:16:26:d6:0a:60:cf:b4:31:9b:0b:a9:a5:
                    b2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:27:A9:D5:23:4A:C2:89:32:CA:93:04:40:78:4A:3F:26:E1:CE:F7
            X509v3 Authority Key Identifier:
                keyid:C0:76:3F:44:8F:A9:C6:BE:B9:23:0A:4C:24:B9:11:3A:BF:62:E4:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0763F448FA9C6BEB9230A4C24B9113ABF62E476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a3a2f33322d3332203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:c9:44:ab:14:50:95:c9:f6:5f:53:39:bd:de:23:98:39:0b:
         ea:ba:25:5b:e0:cb:6e:d8:28:57:70:ec:7a:b8:47:69:3f:a6:
         c5:61:24:96:3a:55:67:50:cb:fe:00:88:c6:79:51:86:4c:0b:
         9d:f6:9a:fb:1e:2c:98:c0:fd:c0:20:87:75:ea:4c:74:17:a5:
         de:b1:cb:7b:9b:ab:1d:74:e5:96:18:71:e8:9e:00:b7:74:bf:
         07:aa:4c:34:8e:c9:92:c4:e8:e3:1f:ea:51:7a:70:6b:85:3b:
         e2:08:3a:48:4b:3d:2d:1e:d5:4a:85:55:0e:6a:9e:3d:a7:f9:
         66:2b:61:c1:00:a7:b5:08:ce:05:bb:87:40:de:e1:a9:c3:5b:
         69:5c:95:34:db:d2:f2:03:c1:34:55:8b:b4:b3:5a:5d:a5:6b:
         44:e8:96:a2:c8:41:d3:55:b8:82:c9:64:f1:c2:61:86:c1:cf:
         2e:8d:47:67:37:6c:df:1d:c7:5c:ac:e7:8d:25:6a:a0:a4:cf:
         ee:20:e7:90:c5:1e:1c:b5:4a:ad:66:14:ab:3a:ec:0f:81:2a:
         96:56:d7:40:be:28:b0:a6:22:aa:58:79:24:75:71:58:87:26:
         c8:1e:d0:52:6f:1a:b5:6d:95:fe:ab:3d:2e:c7:0f:e9:ee:cb:
         a7:bb:77:36
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVO5O5ckRxWKDFzxovJOzau+cHtMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzA3NjNGNDQ4RkE5QzZCRUI5MjMwQTRDMjRCOTExM0FC
RjYyRTQ3NjAeFw0yNjA0MjMxNzIyMTNaFw0yNzA0MjIxNzI3MTNaMDMxMTAvBgNV
BAMTKEVBMjdBOUQ1MjM0QUMyODkzMkNBOTMwNDQwNzg0QTNGMjZFMUNFRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNnb63ozdEtxz79zQDP9VtMLJ4
h1iHlzRGl6ggQskdE7YlAlqK5FPd/5zyotBtuhaZLDUoW/2WiRAu4wriKEnKo7X6
6u9Fr/bemITgIQuql1/6V6xQ4Qg50NilfbpRJdV2Tu9rUi3s2eQRBB3Q7ELzahnM
KPpML/ykFttColcARQc+h+EclpNjtbcpJfUBgtZpgrZLy1qYiTZVsoUOonnhUMZ+
1Lq/6/ORCld1E3EqtbdpG/8pWsqtYv3iCiolO64V8ztFjpAUbM5gIIyJQ6xn/kTJ
VS7t+fEz7Py7P2OFGyVRUd8s42STv+J6UgN1cLOVrhYm1gpgz7QxmwuppbLFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6iep1SNKwokyypMEQHhKPybhzvcwHwYDVR0j
BBgwFoAUwHY/RI+pxr65IwpMJLkROr9i5HYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnhpWGc5bWNmMnpCZ0hRdGpyaUViTGVld2FpdUhoMlV3NjVyNFNkVXBh
QjcvMC9DMDc2M0Y0NDhGQTlDNkJFQjkyMzBBNEMyNEI5MTEzQUJGNjJFNDc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwNzYzRjQ0OEZBOUM2QkVC
OTIzMEE0QzI0QjkxMTNBQkY2MkU0NzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z4aVhnOW1jZjJ6QmdIUXRqcmlFYkxlZXdhaXVIaDJVdzY1cjRTZFVwYUI3LzAv
MzIzODMwMzQzYTM5MzE2NTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzM0
MzYzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASR4DANBgkqhkiG9w0BAQsFAAOCAQEAOMlEqxRQ
lcn2X1M5vd4jmDkL6rolW+DLbtgoV3DserhHaT+mxWEkljpVZ1DL/gCIxnlRhkwL
nfaa+x4smMD9wCCHdepMdBel3rHLe5urHXTllhhx6J4At3S/B6pMNI7JksTo4x/q
UXpwa4U74gg6SEs9LR7VSoVVDmqePaf5ZithwQCntQjOBbuHQN7hqcNbaVyVNNvS
8gPBNFWLtLNaXaVrROiWoshB01W4gslk8cJhhsHPLo1HZzds3x3HXKznjSVqoKTP
7iDnkMUeHLVKrWYUqzrsD4EqllbXQL4osKYiqlh5JHVxWIcmyB7QUm8atW2V/qs9
LscP6e7Lp7t3Ng==
-----END CERTIFICATE-----
Generated at Wed May 13 16:21:11 2026 by rpki-client