Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/323830343a363739343a343030303a3a2f33342d3334203d3e20323639363337.roa
File:                     323830343a363739343a343030303a3a2f33342d3334203d3e20323639363337.roa (raw, json)
Hash identifier:          rNoTa4W5lAw69oy2fym14mjre1aIDvjfRCxyGM1F3Ls=
Subject key identifier:   63:8C:98:2A:93:FF:80:2D:FD:B3:BC:13:BB:C1:1C:3A:5A:F2:C9:8B
Certificate issuer:       /CN=DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94
Certificate serial:       1D3EC29F382F57A393ED92D32EED7D78CE87968F
Authority key identifier: DF:17:A2:02:0C:B3:F8:AD:2F:AA:9F:0D:B4:E0:1C:B3:77:0C:0F:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/323830343a363739343a343030303a3a2f33342d3334203d3e20323639363337.roa
Signing time:             Sun 10 May 2026 23:43:09 +0000
ROA not before:           Sun 10 May 2026 23:38:09 +0000
ROA not after:            Sun 09 May 2027 23:43:09 +0000
asID:                     269637
IP address blocks:        2804:6794:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.crl
                          rsync://rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3e:c2:9f:38:2f:57:a3:93:ed:92:d3:2e:ed:7d:78:ce:87:96:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94
        Validity
            Not Before: May 10 23:38:09 2026 GMT
            Not After : May  9 23:43:09 2027 GMT
        Subject: CN=638C982A93FF802DFDB3BC13BBC11C3A5AF2C98B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:3c:e1:67:48:4a:35:3e:ac:a6:4b:be:4c:
                    64:4c:68:8d:9b:07:d2:7d:f9:6c:34:eb:17:2a:8e:
                    79:d6:c5:2c:19:0b:c0:a3:c0:62:de:4c:cb:28:08:
                    60:d0:29:dd:1b:2f:a9:49:e7:bd:f4:61:ea:cb:f2:
                    68:3f:42:d4:3f:f7:ac:92:b1:d0:3c:46:27:d7:51:
                    2f:e5:d7:97:c2:94:b3:6a:df:1b:42:b0:9c:90:9d:
                    fc:59:d5:b0:8d:fa:12:ab:d6:a0:db:76:03:09:2b:
                    4c:b3:29:36:14:6f:18:be:9e:be:db:5b:9a:25:13:
                    49:a9:2a:29:43:e4:af:f4:e2:32:43:3b:6f:8c:86:
                    d4:b2:bb:08:d0:f0:ea:f2:b8:6a:58:34:f8:13:70:
                    68:ca:06:73:ce:c0:1f:f7:7f:8b:c0:c3:3d:74:06:
                    77:85:15:04:f9:e0:e3:e6:ce:ce:77:c1:ca:a8:5d:
                    51:ec:46:88:0f:39:ca:15:8a:ba:7f:8c:5a:54:76:
                    83:56:f3:be:8c:e3:b1:e8:a3:83:d9:52:f8:b6:26:
                    0b:19:71:19:2f:81:ec:41:fd:db:9e:d3:91:f2:95:
                    74:f8:ed:12:f7:b8:04:9d:e8:c0:42:11:5e:f9:06:
                    a0:fa:4c:44:e7:a3:16:94:2f:8b:73:14:07:93:91:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8C:98:2A:93:FF:80:2D:FD:B3:BC:13:BB:C1:1C:3A:5A:F2:C9:8B
            X509v3 Authority Key Identifier:
                keyid:DF:17:A2:02:0C:B3:F8:AD:2F:AA:9F:0D:B4:E0:1C:B3:77:0C:0F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF17A2020CB3F8AD2FAA9F0DB4E01CB3770C0F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu31ZEFgvteyFZAdykGbpgCMzLK2Z541EZyotBTzEsWH/0/323830343a363739343a343030303a3a2f33342d3334203d3e20323639363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6794:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         13:76:b5:f0:20:69:61:5e:49:a9:1a:e1:da:91:3f:4d:7b:4e:
         bb:13:30:9b:36:d9:25:f6:56:d4:ee:2b:24:2a:6d:c9:84:82:
         8f:1f:e0:08:0b:4f:60:2c:73:b9:c9:db:65:a0:15:1a:bc:39:
         a3:d3:ad:52:08:ed:4f:3b:94:3f:f4:1c:93:d8:0e:93:0d:5d:
         3b:91:20:a7:9a:30:3e:42:94:a2:89:6c:49:8b:26:1f:26:cc:
         fb:eb:7a:df:8d:4d:4b:df:35:b2:56:cf:30:6a:7c:81:96:29:
         57:cf:d6:56:5f:f8:d3:46:01:ba:a8:44:20:01:0b:50:73:1d:
         50:e9:0c:fc:fb:0e:28:d6:58:18:82:d6:c1:8d:b4:e6:81:15:
         c1:d2:57:b6:7d:84:97:d6:d8:eb:4e:33:19:c4:29:12:fd:5b:
         51:3f:9e:e9:b5:3b:8a:0c:30:0f:73:5c:6c:92:2f:a4:a6:f7:
         62:88:50:34:a3:ce:73:d6:3c:d5:51:76:b1:98:c7:2b:dd:86:
         32:8c:1f:82:cb:a7:5b:f7:79:da:cb:f6:c0:88:04:37:be:24:
         4d:6d:06:2c:4f:11:01:de:f6:ea:b2:5a:dd:e4:89:70:d0:15:
         ba:71:93:68:79:50:db:01:27:7b:5f:a6:c1:81:41:0f:04:8e:
         b0:da:df:60
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHT7CnzgvV6OT7ZLTLu19eM6Hlo8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREYxN0EyMDIwQ0IzRjhBRDJGQUE5RjBEQjRFMDFDQjM3
NzBDMEY5NDAeFw0yNjA1MTAyMzM4MDlaFw0yNzA1MDkyMzQzMDlaMDMxMTAvBgNV
BAMTKDYzOEM5ODJBOTNGRjgwMkRGREIzQkMxM0JCQzExQzNBNUFGMkM5OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0jjzhZ0hKNT6spku+TGRMaI2b
B9J9+Ww06xcqjnnWxSwZC8CjwGLeTMsoCGDQKd0bL6lJ5730YerL8mg/QtQ/96yS
sdA8RifXUS/l15fClLNq3xtCsJyQnfxZ1bCN+hKr1qDbdgMJK0yzKTYUbxi+nr7b
W5olE0mpKilD5K/04jJDO2+MhtSyuwjQ8OryuGpYNPgTcGjKBnPOwB/3f4vAwz10
BneFFQT54OPmzs53wcqoXVHsRogPOcoVirp/jFpUdoNW876M47Hoo4PZUvi2JgsZ
cRkvgexB/due05HylXT47RL3uASd6MBCEV75BqD6TETnoxaUL4tzFAeTkXAlAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUY4yYKpP/gC39s7wTu8EcOlryyYswHwYDVR0j
BBgwFoAU3xeiAgyz+K0vqp8NtOAcs3cMD5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHUzMVpFRmd2dGV5RlpBZHlrR2JwZ0NNekxLMlo1NDFFWnlvdEJUekVz
V0gvMC9ERjE3QTIwMjBDQjNGOEFEMkZBQTlGMERCNEUwMUNCMzc3MEMwRjk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGMTdBMjAyMENCM0Y4QUQy
RkFBOUYwREI0RTAxQ0IzNzcwQzBGOTQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1MzFaRUZndnRleUZaQWR5a0dicGdDTXpMSzJaNTQxRVp5b3RCVHpFc1dILzAv
MzIzODMwMzQzYTM2MzczOTM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM2MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZ5RAMA0GCSqGSIb3DQEBCwUA
A4IBAQATdrXwIGlhXkmpGuHakT9Ne067EzCbNtkl9lbU7iskKm3JhIKPH+AIC09g
LHO5ydtloBUavDmj061SCO1PO5Q/9ByT2A6TDV07kSCnmjA+QpSiiWxJiyYfJsz7
63rfjU1L3zWyVs8wanyBlilXz9ZWX/jTRgG6qEQgAQtQcx1Q6Qz8+w4o1lgYgtbB
jbTmgRXB0le2fYSX1tjrTjMZxCkS/VtRP57ptTuKDDAPc1xski+kpvdiiFA0o85z
1jzVUXaxmMcr3YYyjB+Cy6db93nay/bAiAQ3viRNbQYsTxEB3vbqslrd5Ilw0BW6
cZNoeVDbASd7X6bBgUEPBI6w2t9g
-----END CERTIFICATE-----
Generated at Wed May 13 17:05:36 2026 by rpki-client