Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/323830343a3136633a3a2f33322d3438203d3e203238333039.roa
File:                     323830343a3136633a3a2f33322d3438203d3e203238333039.roa (raw, json)
Hash identifier:          4pZLamU0EKV+vazX9RQKWFn7HOpmP5CwNGs9DP9UYJk=
Subject key identifier:   FB:E2:9D:AA:F9:84:33:13:88:56:F1:F0:91:B5:D3:93:DD:B4:07:41
Certificate issuer:       /CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123
Certificate serial:       1F0731D55FB2D023E50DB0A96807ABF939E4F5E9
Authority key identifier: 69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/323830343a3136633a3a2f33322d3438203d3e203238333039.roa
Signing time:             Thu 05 Mar 2026 14:05:16 +0000
ROA not before:           Thu 05 Mar 2026 14:00:16 +0000
ROA not after:            Thu 04 Mar 2027 14:05:16 +0000
asID:                     28309
IP address blocks:        2804:16c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl
                          rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:07:31:d5:5f:b2:d0:23:e5:0d:b0:a9:68:07:ab:f9:39:e4:f5:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123
        Validity
            Not Before: Mar  5 14:00:16 2026 GMT
            Not After : Mar  4 14:05:16 2027 GMT
        Subject: CN=FBE29DAAF98433138856F1F091B5D393DDB40741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:f4:fb:79:57:93:4c:25:50:a7:fc:6d:9d:
                    47:4f:c6:ad:de:57:e0:d2:d9:da:95:0a:60:37:84:
                    bd:84:e6:bd:34:bd:be:e6:90:75:f5:cf:a0:44:12:
                    46:ed:4c:6f:79:31:ee:31:0f:59:0f:74:0c:2b:fe:
                    b1:ab:99:2a:48:55:49:43:35:ed:6c:8b:07:aa:05:
                    e9:a3:ff:55:75:01:d3:62:a0:7a:ff:b9:73:32:a2:
                    86:81:7f:aa:a2:14:b9:ef:30:7b:a1:b8:bb:c2:16:
                    9f:33:2d:20:c6:ce:f0:d1:4f:01:00:6a:35:c0:66:
                    26:3f:91:6a:ee:b7:29:76:62:6c:f1:c1:7f:1d:de:
                    67:6b:31:5e:95:ff:67:07:bd:da:64:19:64:2e:1b:
                    61:0f:3a:d2:a1:41:45:b2:19:30:d1:06:73:e4:a2:
                    94:2b:9c:7e:8d:cc:96:e0:18:e5:12:a9:17:a2:6d:
                    27:36:77:5d:0e:2e:2d:a5:6f:04:e3:fd:b3:1c:85:
                    44:65:1e:4b:b0:a4:c0:e4:78:8d:7d:52:b5:15:56:
                    9e:75:59:7d:9f:a4:99:e5:ad:6e:71:fe:a3:99:89:
                    bc:8e:ff:87:c5:db:e2:78:47:35:1c:a4:55:0f:f2:
                    0c:bf:e1:f0:68:7a:24:5e:71:ea:fc:ac:db:d8:05:
                    16:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E2:9D:AA:F9:84:33:13:88:56:F1:F0:91:B5:D3:93:DD:B4:07:41
            X509v3 Authority Key Identifier:
                keyid:69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/323830343a3136633a3a2f33322d3438203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:9c:aa:12:ca:c7:f5:6b:3e:1f:49:99:18:9c:3d:fa:00:4e:
         00:24:86:ae:d1:f1:1d:b3:9c:a9:ef:dc:9a:85:74:52:25:bf:
         24:6f:18:84:ad:90:9e:40:70:33:0b:6a:ed:9a:07:ba:df:ec:
         6d:8b:0a:c1:80:e0:08:4e:f4:6e:91:fe:c5:2d:30:e0:4b:68:
         ff:df:e3:c6:ab:41:39:cb:76:21:41:10:29:c0:3a:7b:e5:50:
         5b:60:f1:d7:77:17:d7:24:7f:f9:88:3e:e4:0f:68:3a:13:fc:
         75:29:cf:a4:96:2d:8c:d3:59:39:26:11:ae:1a:1d:cd:c1:71:
         bb:c0:98:c6:aa:91:6e:bf:03:19:1e:07:44:61:a6:3a:dd:0a:
         45:a4:b8:dc:9b:3c:10:2e:cb:81:b5:31:eb:7d:7f:46:90:5f:
         ce:69:f2:ff:be:11:31:ae:f5:45:a6:85:18:a6:a3:1a:52:01:
         f8:75:63:e8:ad:26:3b:26:b9:75:fd:00:6f:0e:f0:6d:27:7d:
         b5:a3:94:f0:be:6f:1a:60:d4:13:e7:9d:68:df:f4:bc:fe:25:
         99:db:37:5e:82:dd:12:dc:ee:d8:01:8a:74:d1:89:ec:a8:a1:
         10:0b:b1:a0:9d:8e:12:37:fc:42:3d:76:cf:84:79:0a:6f:d6:
         23:e5:f3:af
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUHwcx1V+y0CPlDbCpaAer+Tnk9ekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlERTVBRDFBNUIxRjk3ODg0RDE5REMzRTlFRkRBM0Y5
NjU0QzEyMzAeFw0yNjAzMDUxNDAwMTZaFw0yNzAzMDQxNDA1MTZaMDMxMTAvBgNV
BAMTKEZCRTI5REFBRjk4NDMzMTM4ODU2RjFGMDkxQjVEMzkzRERCNDA3NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUz/T7eVeTTCVQp/xtnUdPxq3e
V+DS2dqVCmA3hL2E5r00vb7mkHX1z6BEEkbtTG95Me4xD1kPdAwr/rGrmSpIVUlD
Ne1siweqBemj/1V1AdNioHr/uXMyooaBf6qiFLnvMHuhuLvCFp8zLSDGzvDRTwEA
ajXAZiY/kWrutyl2YmzxwX8d3mdrMV6V/2cHvdpkGWQuG2EPOtKhQUWyGTDRBnPk
opQrnH6NzJbgGOUSqReibSc2d10OLi2lbwTj/bMchURlHkuwpMDkeI19UrUVVp51
WX2fpJnlrW5x/qOZibyO/4fF2+J4RzUcpFUP8gy/4fBoeiRecer8rNvYBRZbAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU++KdqvmEMxOIVvHwkbXTk920B0EwHwYDVR0j
BBgwFoAUad5a0aWx+XiE0Z3D6e/aP5ZUwSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDczRGFnOW95ckd3Vzl5RThDcnUxS0J0b2VlZmFoSmF0Yml5eDR4SDh3
Q28vMC82OURFNUFEMUE1QjFGOTc4ODREMTlEQzNFOUVGREEzRjk2NTRDMTIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5REU1QUQxQTVCMUY5Nzg4
NEQxOURDM0U5RUZEQTNGOTY1NEMxMjMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g3M0RhZzlveXJHd1c5eUU4Q3J1MUtCdG9lZWZhaEphdGJpeXg0eEg4d0NvLzAv
MzIzODMwMzQzYTMxMzY2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzMzMw
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAFsMA0GCSqGSIb3DQEBCwUAA4IBAQA8nKoSysf1az4f
SZkYnD36AE4AJIau0fEds5yp79yahXRSJb8kbxiErZCeQHAzC2rtmge63+xtiwrB
gOAITvRukf7FLTDgS2j/3+PGq0E5y3YhQRApwDp75VBbYPHXdxfXJH/5iD7kD2g6
E/x1Kc+kli2M01k5JhGuGh3NwXG7wJjGqpFuvwMZHgdEYaY63QpFpLjcmzwQLsuB
tTHrfX9GkF/OafL/vhExrvVFpoUYpqMaUgH4dWPorSY7Jrl1/QBvDvBtJ321o5Tw
vm8aYNQT551o3/S8/iWZ2zdegt0S3O7YAYp00YnsqKEQC7GgnY4SN/xCPXbPhHkK
b9Yj5fOv
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:58:34 2026 by rpki-client