Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/323830343a393365633a3a2f33322d313238203d3e20323734383039.roa
File:                     323830343a393365633a3a2f33322d313238203d3e20323734383039.roa (raw, json)
Hash identifier:          YhpJz8sonIu/hzKMiB2EPpkfdbYwzSA+RMx+5kCoTmQ=
Subject key identifier:   AB:92:3E:41:1D:0A:7C:69:53:0C:66:50:21:7D:01:32:39:17:57:B2
Certificate issuer:       /CN=4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3
Certificate serial:       051B558771EE6C9A67D25198CD670D5587D627DC
Authority key identifier: 49:53:FC:F2:CB:79:20:2B:7A:3B:F5:A2:89:C5:6E:D2:6E:C0:BA:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/323830343a393365633a3a2f33322d313238203d3e20323734383039.roa
Signing time:             Wed 11 Mar 2026 18:11:58 +0000
ROA not before:           Wed 11 Mar 2026 18:06:58 +0000
ROA not after:            Wed 10 Mar 2027 18:11:58 +0000
asID:                     274809
IP address blocks:        2804:93ec::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.crl
                          rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1b:55:87:71:ee:6c:9a:67:d2:51:98:cd:67:0d:55:87:d6:27:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3
        Validity
            Not Before: Mar 11 18:06:58 2026 GMT
            Not After : Mar 10 18:11:58 2027 GMT
        Subject: CN=AB923E411D0A7C69530C6650217D0132391757B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:50:ca:0d:c5:6a:f4:1a:d9:3c:0a:8d:61:
                    73:05:da:3b:cb:98:16:3c:44:4a:11:97:11:5d:93:
                    87:f7:6d:26:6b:64:eb:c1:40:ae:23:02:c8:89:68:
                    a3:1b:1f:44:0e:fd:78:5a:b9:b1:08:f9:34:68:a1:
                    7a:6a:f9:03:b2:27:6b:c2:d9:d8:3a:de:e0:17:8d:
                    27:b2:0e:c4:4b:aa:36:51:fa:a6:a4:f3:c3:7b:ae:
                    0a:40:4a:93:6a:d9:75:94:41:df:6a:46:ea:6b:1c:
                    5b:6b:3d:a1:1a:ff:eb:fc:45:9b:26:7e:f1:ab:e4:
                    a3:b5:d7:8b:09:1c:7c:ef:8c:c8:56:a7:43:dc:84:
                    f7:36:1f:00:0f:28:8c:0a:ec:fd:c6:a3:80:12:f4:
                    c2:43:c1:bb:81:74:0d:9e:be:b4:16:13:8a:5f:0e:
                    46:e0:12:2a:da:c3:af:37:8f:ac:fe:a1:19:45:df:
                    3a:1d:05:e2:6c:c4:cb:e9:0a:3d:9b:b5:06:99:38:
                    5c:c1:af:85:aa:80:3b:0d:b1:63:88:c7:bb:d2:98:
                    d2:f7:71:de:79:19:bd:9f:8d:13:2d:e5:b7:d6:bb:
                    9c:12:77:e9:35:4e:69:06:f2:f3:dd:16:6d:80:69:
                    8d:3b:f6:72:85:27:e2:41:39:6d:cf:1a:3e:fe:c8:
                    e9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:92:3E:41:1D:0A:7C:69:53:0C:66:50:21:7D:01:32:39:17:57:B2
            X509v3 Authority Key Identifier:
                keyid:49:53:FC:F2:CB:79:20:2B:7A:3B:F5:A2:89:C5:6E:D2:6E:C0:BA:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/323830343a393365633a3a2f33322d313238203d3e20323734383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:93ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         e3:16:38:2f:48:39:4c:f7:d2:12:95:c3:9d:d8:8a:0c:93:bc:
         53:41:ee:ed:d3:69:f9:ba:df:19:87:8c:e0:4e:67:41:88:99:
         e7:f0:2c:68:6d:12:14:13:50:0f:2d:de:6a:a3:85:b4:4f:7a:
         f4:84:28:cc:d8:ee:ae:7e:fb:d4:7b:3e:36:ac:07:cf:5f:84:
         bc:76:53:26:54:4e:c7:e8:19:59:9d:b9:9a:4b:10:c8:72:b4:
         d9:81:e3:a2:e0:9e:fd:3f:17:10:5e:c5:32:f5:95:93:9e:75:
         20:08:80:d2:85:60:f8:94:79:da:e2:75:e0:26:48:16:52:bf:
         0a:58:0d:e8:a4:60:b9:4b:39:5e:10:7e:01:a2:29:af:b7:10:
         ea:5e:b3:79:73:84:13:4f:b5:16:b2:f9:20:e9:8f:5b:59:33:
         bc:1f:95:31:fb:c2:16:ba:e8:c9:c7:1a:c9:91:6f:69:b5:ee:
         85:f1:2c:e0:0e:e2:37:be:59:34:cd:fd:14:d4:e2:c4:0e:c8:
         7d:8f:f5:5b:1b:42:91:73:10:9a:c0:0e:76:6f:86:5f:b1:1d:
         3e:88:b9:1f:3e:5b:85:56:83:97:a3:61:4e:06:74:19:68:65:
         c9:f1:66:b1:35:80:68:f2:48:ee:6c:82:41:81:cc:3a:3b:89:
         03:80:36:8a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUBRtVh3HubJpn0lGYzWcNVYfWJ9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDk1M0ZDRjJDQjc5MjAyQjdBM0JGNUEyODlDNTZFRDI2
RUMwQkFBMzAeFw0yNjAzMTExODA2NThaFw0yNzAzMTAxODExNThaMDMxMTAvBgNV
BAMTKEFCOTIzRTQxMUQwQTdDNjk1MzBDNjY1MDIxN0QwMTMyMzkxNzU3QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk41DKDcVq9BrZPAqNYXMF2jvL
mBY8REoRlxFdk4f3bSZrZOvBQK4jAsiJaKMbH0QO/XhaubEI+TRooXpq+QOyJ2vC
2dg63uAXjSeyDsRLqjZR+qak88N7rgpASpNq2XWUQd9qRuprHFtrPaEa/+v8RZsm
fvGr5KO114sJHHzvjMhWp0PchPc2HwAPKIwK7P3Go4AS9MJDwbuBdA2evrQWE4pf
DkbgEiraw683j6z+oRlF3zodBeJsxMvpCj2btQaZOFzBr4WqgDsNsWOIx7vSmNL3
cd55Gb2fjRMt5bfWu5wSd+k1TmkG8vPdFm2AaY079nKFJ+JBOW3PGj7+yOmLAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUq5I+QR0KfGlTDGZQIX0BMjkXV7IwHwYDVR0j
BBgwFoAUSVP88st5ICt6O/WiicVu0m7AuqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3JqQ1pjMUIxU3I4NEN0SnZRaXVGNWhTR3BQVldGeDVyY3J6Z045bnhT
QVEvMC80OTUzRkNGMkNCNzkyMDJCN0EzQkY1QTI4OUM1NkVEMjZFQzBCQUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5NTNGQ0YyQ0I3OTIwMkI3
QTNCRjVBMjg5QzU2RUQyNkVDMEJBQTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dyakNaYzFCMVNyODRDdEp2UWl1RjVoU0dwUFZXRng1cmNyemdOOW54U0FRLzAv
MzIzODMwMzQzYTM5MzM2NTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzQzODMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBJPsMA0GCSqGSIb3DQEBCwUAA4IBAQDjFjgv
SDlM99ISlcOd2IoMk7xTQe7t02n5ut8Zh4zgTmdBiJnn8CxobRIUE1APLd5qo4W0
T3r0hCjM2O6ufvvUez42rAfPX4S8dlMmVE7H6BlZnbmaSxDIcrTZgeOi4J79PxcQ
XsUy9ZWTnnUgCIDShWD4lHna4nXgJkgWUr8KWA3opGC5SzleEH4BoimvtxDqXrN5
c4QTT7UWsvkg6Y9bWTO8H5Ux+8IWuujJxxrJkW9pte6F8SzgDuI3vlk0zf0U1OLE
Dsh9j/VbG0KRcxCawA52b4ZfsR0+iLkfPluFVoOXo2FOBnQZaGXJ8WaxNYBo8kju
bIJBgcw6O4kDgDaK
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:57:32 2026 by rpki-client