Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a343030303a3a2f33352d313238203d3e20323637333936.roa
File:                     323830343a346364383a343030303a3a2f33352d313238203d3e20323637333936.roa (raw, json)
Hash identifier:          qtL0NyLk7D9XIuozZIJSqEvpIi+RvsqhIUbLm0UR++Q=
Subject key identifier:   A0:5D:C1:20:B3:F2:2D:A6:BB:63:96:02:0C:9D:24:40:F6:96:AA:65
Certificate issuer:       /CN=D11065C38ED3D7D0573D15A86D4828AE1D980631
Certificate serial:       778C3FFAED1B573B8AB738256D210644FD7F586C
Authority key identifier: D1:10:65:C3:8E:D3:D7:D0:57:3D:15:A8:6D:48:28:AE:1D:98:06:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11065C38ED3D7D0573D15A86D4828AE1D980631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a343030303a3a2f33352d313238203d3e20323637333936.roa
Signing time:             Fri 20 Mar 2026 14:44:26 +0000
ROA not before:           Fri 20 Mar 2026 14:39:26 +0000
ROA not after:            Fri 19 Mar 2027 14:44:26 +0000
asID:                     267396
IP address blocks:        2804:4cd8:4000::/35 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/D11065C38ED3D7D0573D15A86D4828AE1D980631.crl
                          rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/D11065C38ED3D7D0573D15A86D4828AE1D980631.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11065C38ED3D7D0573D15A86D4828AE1D980631.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8c:3f:fa:ed:1b:57:3b:8a:b7:38:25:6d:21:06:44:fd:7f:58:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11065C38ED3D7D0573D15A86D4828AE1D980631
        Validity
            Not Before: Mar 20 14:39:26 2026 GMT
            Not After : Mar 19 14:44:26 2027 GMT
        Subject: CN=A05DC120B3F22DA6BB6396020C9D2440F696AA65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:07:aa:6f:b9:b4:5c:f8:ba:f8:74:bd:16:9a:
                    b4:46:fc:50:75:fe:11:13:a9:1b:1f:d4:28:fc:6c:
                    1e:74:f3:58:0f:a3:09:0d:80:b1:86:90:de:e6:c5:
                    2e:e0:46:06:b7:1f:30:84:9e:f7:1a:6a:3d:9a:c1:
                    f3:b2:38:a0:81:9b:40:5d:81:6e:56:99:d6:a2:22:
                    b8:d9:57:5f:53:66:a2:34:fc:d1:6c:24:dc:dc:f0:
                    55:cf:3e:a0:8e:cf:d4:8d:50:e2:1d:8a:54:13:76:
                    0a:fc:3f:26:a2:fb:a6:44:cf:a0:f4:3c:e2:4f:7d:
                    5a:06:ea:73:e6:02:f8:60:78:7b:3c:21:32:58:2e:
                    72:b1:b0:96:1e:c8:bd:00:41:5d:a6:65:d1:27:a3:
                    1f:80:d1:c6:2a:81:39:d1:9d:57:96:bf:a8:4d:fe:
                    d0:3b:ea:ef:50:7e:03:34:9a:1e:07:5c:bf:b7:42:
                    4c:9a:83:ca:22:20:1a:d9:04:25:19:d8:37:14:0b:
                    50:eb:41:29:0f:89:6c:e1:25:e8:70:43:a9:5e:d2:
                    ca:d8:33:39:9c:62:c9:05:34:9f:4f:f8:6a:6a:fa:
                    c0:37:f0:ef:2e:f3:b6:88:41:1e:3b:f0:4a:5d:8b:
                    5d:22:60:f6:d1:28:c0:36:43:67:0b:77:de:dd:96:
                    71:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5D:C1:20:B3:F2:2D:A6:BB:63:96:02:0C:9D:24:40:F6:96:AA:65
            X509v3 Authority Key Identifier:
                keyid:D1:10:65:C3:8E:D3:D7:D0:57:3D:15:A8:6D:48:28:AE:1D:98:06:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/D11065C38ED3D7D0573D15A86D4828AE1D980631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11065C38ED3D7D0573D15A86D4828AE1D980631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a343030303a3a2f33352d313238203d3e20323637333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd8:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         ce:de:30:51:0e:b8:53:25:56:61:87:8a:97:e0:b2:43:59:e4:
         88:61:01:79:c8:d4:6a:a2:c0:97:e1:67:a7:d8:5b:a4:3b:30:
         38:fb:81:f4:53:99:0a:b0:39:d0:66:f4:33:0f:bc:01:e8:9d:
         55:1f:89:a8:b4:28:28:c7:4e:b8:6b:4f:30:d3:53:ec:89:06:
         6b:9b:89:cb:2d:de:b6:ce:ba:bd:73:07:7c:0b:1a:3b:19:2e:
         10:07:19:b6:c1:1e:03:3a:78:61:9e:6e:f5:25:2a:71:70:df:
         d1:47:34:88:bf:49:47:30:a6:93:ad:04:b5:f9:fe:cd:28:c6:
         17:b9:c6:23:db:94:63:66:22:18:45:cc:6e:63:ca:c1:0f:9e:
         d3:e9:6f:3b:1f:5f:ea:b4:db:a5:2b:e4:be:64:70:a8:c8:ef:
         0a:ca:fd:10:c8:fb:f6:73:5b:28:a6:6e:bc:21:fe:5c:76:45:
         bc:65:f7:0c:91:38:00:1e:21:dd:c6:26:43:6a:07:3f:e5:de:
         e0:59:eb:d7:34:a4:71:9e:7e:50:56:87:68:9f:24:21:10:52:
         6f:ce:1f:06:a4:4c:bc:9a:7c:a8:34:da:93:7a:46:e9:dc:e7:
         f9:26:9b:3f:b7:12:bc:d8:2e:3a:4c:27:69:52:e6:46:3c:fd:
         a4:47:04:da
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIUd4w/+u0bVzuKtzglbSEGRP1/WGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDExMDY1QzM4RUQzRDdEMDU3M0QxNUE4NkQ0ODI4QUUx
RDk4MDYzMTAeFw0yNjAzMjAxNDM5MjZaFw0yNzAzMTkxNDQ0MjZaMDMxMTAvBgNV
BAMTKEEwNURDMTIwQjNGMjJEQTZCQjYzOTYwMjBDOUQyNDQwRjY5NkFBNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNB6pvubRc+Lr4dL0WmrRG/FB1
/hETqRsf1Cj8bB5081gPowkNgLGGkN7mxS7gRga3HzCEnvcaaj2awfOyOKCBm0Bd
gW5WmdaiIrjZV19TZqI0/NFsJNzc8FXPPqCOz9SNUOIdilQTdgr8Pyai+6ZEz6D0
POJPfVoG6nPmAvhgeHs8ITJYLnKxsJYeyL0AQV2mZdEnox+A0cYqgTnRnVeWv6hN
/tA76u9QfgM0mh4HXL+3Qkyag8oiIBrZBCUZ2DcUC1DrQSkPiWzhJehwQ6le0srY
MzmcYskFNJ9P+Gpq+sA38O8u87aIQR478Epdi10iYPbRKMA2Q2cLd97dlnFFAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQUoF3BILPyLaa7Y5YCDJ0kQPaWqmUwHwYDVR0j
BBgwFoAU0RBlw47T19BXPRWobUgorh2YBjEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdqTVMyMnA0SEJueEtxQUJQcXAzOTZ2Y3BzdkxuMXhndkRoUkF3a0xV
M1MvMC9EMTEwNjVDMzhFRDNEN0QwNTczRDE1QTg2RDQ4MjhBRTFEOTgwNjMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMTA2NUMzOEVEM0Q3RDA1
NzNEMTVBODZENDgyOEFFMUQ5ODA2MzEuY2VyMIG4BggrBgEFBQcBCwSBqzCBqDCB
pQYIKwYBBQUHMAuGgZhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHak1TMjJwNEhCbnhLcUFCUHFwMzk2dmNwc3ZMbjF4Z3ZEaFJBd2tMVTNTLzAv
MzIzODMwMzQzYTM0NjM2NDM4M2EzNDMwMzAzMDNhM2EyZjMzMzUyZDMxMzIzODIw
M2QzZTIwMzIzNjM3MzMzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKARM2EAwDQYJKoZIhvcNAQEL
BQADggEBAM7eMFEOuFMlVmGHipfgskNZ5IhhAXnI1GqiwJfhZ6fYW6Q7MDj7gfRT
mQqwOdBm9DMPvAHonVUfiai0KCjHTrhrTzDTU+yJBmubicst3rbOur1zB3wLGjsZ
LhAHGbbBHgM6eGGebvUlKnFw39FHNIi/SUcwppOtBLX5/s0oxhe5xiPblGNmIhhF
zG5jysEPntPpbzsfX+q026Ur5L5kcKjI7wrK/RDI+/ZzWyimbrwh/lx2Rbxl9wyR
OAAeId3GJkNqBz/l3uBZ69c0pHGeflBWh2ifJCEQUm/OHwakTLyafKg02pN6Runc
5/kmmz+3ErzYLjpMJ2lS5kY8/aRHBNo=
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:20:38 2026 by rpki-client