Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/323830343a313934303a383030303a3a2f33332d3333203d3e203631373832.roa
File:                     323830343a313934303a383030303a3a2f33332d3333203d3e203631373832.roa (raw, json)
Hash identifier:          85vpEP8fDYcdcjBDaVE1svr+tA1I9DGdc3VBqJU35Dw=
Subject key identifier:   AE:1A:69:F4:CD:67:3B:D9:29:6D:BC:65:8C:80:41:71:58:72:E7:10
Certificate issuer:       /CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
Certificate serial:       4264C727176E786852BC5E0AA1DD6A0F4405EB9C
Authority key identifier: 79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/323830343a313934303a383030303a3a2f33332d3333203d3e203631373832.roa
Signing time:             Wed 18 Mar 2026 23:39:55 +0000
ROA not before:           Wed 18 Mar 2026 23:34:55 +0000
ROA not after:            Wed 17 Mar 2027 23:39:55 +0000
asID:                     61782
IP address blocks:        2804:1940:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:64:c7:27:17:6e:78:68:52:bc:5e:0a:a1:dd:6a:0f:44:05:eb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
        Validity
            Not Before: Mar 18 23:34:55 2026 GMT
            Not After : Mar 17 23:39:55 2027 GMT
        Subject: CN=AE1A69F4CD673BD9296DBC658C8041715872E710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:7b:cd:8b:97:68:d1:9b:39:81:cc:73:92:
                    ff:0a:b2:ce:12:97:86:6e:72:ec:aa:79:85:4d:47:
                    0e:42:f3:fa:f1:56:88:34:95:03:bf:38:1e:b8:f2:
                    c3:8e:b4:de:eb:c5:30:fd:b0:db:13:49:74:e4:05:
                    af:f6:8f:69:50:a8:34:46:f7:46:ec:68:f6:45:3d:
                    a9:94:59:2c:35:43:bd:c8:a4:0d:00:c3:4f:01:a6:
                    ef:e8:aa:e1:0d:b8:ba:12:46:b5:a8:4b:cd:06:c4:
                    07:0e:c6:1a:2e:94:d4:05:63:df:f3:73:d8:38:e7:
                    95:23:c2:84:15:89:51:97:f2:21:95:15:34:a7:cd:
                    ba:6f:e3:77:a4:59:7b:5d:8e:bd:39:93:f2:f2:8c:
                    8e:c7:0c:ab:10:76:5b:9c:47:a1:42:0f:95:8e:76:
                    d9:c5:aa:0c:62:c5:bc:29:c4:3d:a1:ac:1d:d3:fb:
                    0e:5d:20:16:ff:fd:73:5f:a4:d4:a2:f4:6d:8e:63:
                    5a:df:ad:68:23:29:b4:02:a2:08:ca:7a:71:11:86:
                    39:4c:23:e4:5a:6f:f7:d7:20:4d:da:ab:3b:6d:7d:
                    a9:f8:62:9b:a5:44:fa:35:98:67:d5:a7:e3:1e:9d:
                    a6:ea:50:e3:86:bd:a9:f9:56:c7:85:e5:e1:74:31:
                    3c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1A:69:F4:CD:67:3B:D9:29:6D:BC:65:8C:80:41:71:58:72:E7:10
            X509v3 Authority Key Identifier:
                keyid:79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/323830343a313934303a383030303a3a2f33332d3333203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1940:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ab:db:a4:c4:70:e9:b8:a8:b1:c3:54:0c:c3:64:31:0b:41:74:
         70:17:d0:c4:45:a4:45:c3:29:ed:02:cd:06:76:2c:35:c3:65:
         9e:9e:6b:ab:3f:aa:a6:e3:75:95:42:8b:c6:7e:f2:f7:91:e0:
         9d:d8:4d:5a:c5:bc:29:19:d1:fa:84:6f:6b:dc:0b:cb:08:fb:
         69:cb:f9:4b:12:ba:ca:da:f3:2a:f4:02:63:04:1a:06:88:c1:
         28:e2:45:4c:88:d8:37:b0:2c:f6:33:ca:5e:6e:fa:b1:ec:42:
         0a:90:e0:9d:67:94:d2:95:52:62:04:9a:de:05:d4:84:7c:cb:
         12:cc:e9:67:2a:ec:a5:8b:36:b1:3a:0b:15:14:f8:37:bc:c3:
         ee:8a:75:6f:a9:24:6e:46:e9:bd:30:52:92:f8:f6:1a:89:f6:
         ad:b4:92:7b:09:f4:6a:b7:22:ec:e9:b0:09:a3:9d:29:ca:ae:
         aa:68:f1:e1:f7:31:aa:d1:7d:ce:e5:54:79:ed:22:3a:e5:8e:
         62:e0:64:da:69:51:b9:80:f5:d6:f3:04:1b:48:26:6d:98:d2:
         8f:ed:26:a0:1d:56:1d:25:f5:c8:4c:a6:f1:10:e6:64:62:ba:
         72:c3:ba:cc:a1:2d:15:00:70:26:7c:9e:d9:a1:f2:63:03:f1:
         f0:f5:d5:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUQmTHJxdueGhSvF4Kod1qD0QF65wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlFN0YwRDExMUZBQjVBNDM3NkREOUM3Q0ZFN0ZEQjY5
MkU1QzhCMzAeFw0yNjAzMTgyMzM0NTVaFw0yNzAzMTcyMzM5NTVaMDMxMTAvBgNV
BAMTKEFFMUE2OUY0Q0Q2NzNCRDkyOTZEQkM2NThDODA0MTcxNTg3MkU3MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVr3vNi5do0Zs5gcxzkv8Kss4S
l4ZucuyqeYVNRw5C8/rxVog0lQO/OB648sOOtN7rxTD9sNsTSXTkBa/2j2lQqDRG
90bsaPZFPamUWSw1Q73IpA0Aw08Bpu/oquENuLoSRrWoS80GxAcOxhoulNQFY9/z
c9g455UjwoQViVGX8iGVFTSnzbpv43ekWXtdjr05k/LyjI7HDKsQdlucR6FCD5WO
dtnFqgxixbwpxD2hrB3T+w5dIBb//XNfpNSi9G2OY1rfrWgjKbQCogjKenERhjlM
I+Rab/fXIE3aqzttfan4YpulRPo1mGfVp+MenabqUOOGvan5VseF5eF0MTwhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUrhpp9M1nO9kpbbxljIBBcVhy5xAwHwYDVR0j
BBgwFoAUeefw0RH6taQ3bdnHz+f9tpLlyLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2dXTWE5QzYzcHhLbTFUN04xTW5TenU5am42ZTVadkw5cXVqVExxVEtu
TFYvMC83OUU3RjBEMTExRkFCNUE0Mzc2REQ5QzdDRkU3RkRCNjkyRTVDOEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5RTdGMEQxMTFGQUI1QTQz
NzZERDlDN0NGRTdGREI2OTJFNUM4QjMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dnV01hOUM2M3B4S20xVDdOMU1uU3p1OWpuNmU1WnZMOXF1alRMcVRLbkxWLzAv
MzIzODMwMzQzYTMxMzkzNDMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDM2MzEzNzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgcoBBlAgDANBgkqhkiG9w0BAQsFAAOC
AQEAq9ukxHDpuKixw1QMw2QxC0F0cBfQxEWkRcMp7QLNBnYsNcNlnp5rqz+qpuN1
lUKLxn7y95HgndhNWsW8KRnR+oRva9wLywj7acv5SxK6ytrzKvQCYwQaBojBKOJF
TIjYN7As9jPKXm76sexCCpDgnWeU0pVSYgSa3gXUhHzLEszpZyrspYs2sToLFRT4
N7zD7op1b6kkbkbpvTBSkvj2Gon2rbSSewn0arci7OmwCaOdKcquqmjx4fcxqtF9
zuVUee0iOuWOYuBk2mlRuYD11vMEG0gmbZjSj+0moB1WHSX1yEym8RDmZGK6csO6
zKEtFQBwJnye2aHyYwPx8PXVRA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:29:04 2026 by rpki-client