Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/323830343a326130343a3a2f33322d313238203d3e20323634303531.roa
File:                     323830343a326130343a3a2f33322d313238203d3e20323634303531.roa (raw, json)
Hash identifier:          pe1PY/GzWwEEyKMJk5S80VZkSc+gaeA+OqIxSBSUb1E=
Subject key identifier:   45:74:79:D4:08:9B:0E:CA:44:63:D3:85:1D:29:1E:C2:98:F8:9C:61
Certificate issuer:       /CN=F17D17C337D4266F27A0E1D71DE1A364CE50F399
Certificate serial:       10A2987BD0E01B122758A4FD749AACDE9101B33A
Authority key identifier: F1:7D:17:C3:37:D4:26:6F:27:A0:E1:D7:1D:E1:A3:64:CE:50:F3:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F17D17C337D4266F27A0E1D71DE1A364CE50F399.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/323830343a326130343a3a2f33322d313238203d3e20323634303531.roa
Signing time:             Thu 23 Apr 2026 19:10:51 +0000
ROA not before:           Thu 23 Apr 2026 19:05:51 +0000
ROA not after:            Thu 22 Apr 2027 19:10:51 +0000
asID:                     264051
IP address blocks:        2804:2a04::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/F17D17C337D4266F27A0E1D71DE1A364CE50F399.crl
                          rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/F17D17C337D4266F27A0E1D71DE1A364CE50F399.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F17D17C337D4266F27A0E1D71DE1A364CE50F399.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a2:98:7b:d0:e0:1b:12:27:58:a4:fd:74:9a:ac:de:91:01:b3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F17D17C337D4266F27A0E1D71DE1A364CE50F399
        Validity
            Not Before: Apr 23 19:05:51 2026 GMT
            Not After : Apr 22 19:10:51 2027 GMT
        Subject: CN=457479D4089B0ECA4463D3851D291EC298F89C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4e:9f:07:8f:78:21:84:46:f5:9b:ef:82:f5:
                    04:bb:78:ec:a0:48:13:ba:e6:69:eb:51:c2:16:e4:
                    7f:d7:70:32:65:6e:1d:2f:e7:dd:67:81:45:74:f9:
                    f8:dd:c8:60:0d:3e:7c:d3:69:04:f0:0e:fc:c7:a5:
                    7b:ce:af:6a:4b:30:14:83:3f:40:44:9e:9e:af:8f:
                    9c:93:97:59:2d:12:89:8e:d1:a0:92:28:73:9f:01:
                    9b:a2:7d:66:2d:b8:4e:b6:ca:16:f5:ba:22:5e:5c:
                    13:11:be:47:cb:e9:1e:df:d9:24:c2:3b:bb:82:e1:
                    a1:25:60:d8:e0:a1:f6:d9:d8:8d:b0:0f:5c:de:e4:
                    6e:68:8d:c0:0d:f0:7e:10:98:9c:9f:58:a1:87:90:
                    49:13:99:ea:a3:1c:23:83:98:90:ba:de:35:bd:3c:
                    6c:d6:69:28:ad:99:c1:c1:34:e4:23:be:e9:79:37:
                    6a:58:a9:f3:8b:58:bd:d6:91:47:a9:3f:8e:e5:25:
                    fe:f8:aa:22:e5:74:94:df:ed:61:e4:eb:17:92:48:
                    e9:5d:5a:9d:29:95:58:73:21:b9:74:3b:ab:d6:ed:
                    56:61:71:be:b7:d5:31:96:e5:49:d4:6a:60:f6:72:
                    ea:04:0a:59:e8:5e:7a:45:4b:cc:e2:1e:a5:b6:82:
                    9e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:74:79:D4:08:9B:0E:CA:44:63:D3:85:1D:29:1E:C2:98:F8:9C:61
            X509v3 Authority Key Identifier:
                keyid:F1:7D:17:C3:37:D4:26:6F:27:A0:E1:D7:1D:E1:A3:64:CE:50:F3:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/F17D17C337D4266F27A0E1D71DE1A364CE50F399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F17D17C337D4266F27A0E1D71DE1A364CE50F399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/323830343a326130343a3a2f33322d313238203d3e20323634303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a04::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:37:87:4d:78:56:80:f4:63:03:d1:a2:34:02:7b:b9:50:2c:
         94:17:63:58:d5:49:48:91:d1:01:1e:fc:b4:f0:ac:e8:47:47:
         93:01:0f:6d:18:b0:18:9c:00:68:c4:4e:ba:2d:17:d8:6b:a6:
         33:9e:70:d1:2b:07:d0:ac:15:b4:f6:8e:22:f5:7a:9b:5e:00:
         88:1e:be:aa:7a:f2:fa:1c:1e:82:9e:85:8d:c7:35:0f:0e:4b:
         e4:83:30:dc:22:fa:b5:26:02:9c:b0:bd:0f:70:f1:e3:e0:bb:
         50:3e:2e:a2:87:69:ad:03:ed:df:11:d6:70:ee:b1:a5:61:0f:
         f6:90:b5:d6:11:cd:11:eb:2e:3e:40:eb:30:75:23:3e:ce:bf:
         f4:1b:5a:36:23:5b:aa:7e:86:60:29:36:21:5b:c3:af:9d:d0:
         0a:9b:28:1a:db:ba:4d:c9:ea:2b:a6:dc:80:48:0d:41:5b:7a:
         b7:6f:fc:b5:8b:a2:f4:8c:31:4f:d6:56:89:a3:ef:2c:b9:81:
         56:4c:3c:0e:a8:51:aa:8c:11:27:10:d6:05:95:fb:ac:20:24:
         d0:97:02:e6:7a:ce:f6:e1:bc:5f:b4:ef:21:d9:82:3d:01:0d:
         8c:2c:17:33:24:af:7b:a4:c6:ba:5f:d5:33:d1:9d:13:a3:fe:
         f4:88:c2:29
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUEKKYe9DgGxInWKT9dJqs3pEBszowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE3RDE3QzMzN0Q0MjY2RjI3QTBFMUQ3MURFMUEzNjRD
RTUwRjM5OTAeFw0yNjA0MjMxOTA1NTFaFw0yNzA0MjIxOTEwNTFaMDMxMTAvBgNV
BAMTKDQ1NzQ3OUQ0MDg5QjBFQ0E0NDYzRDM4NTFEMjkxRUMyOThGODlDNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNTp8Hj3ghhEb1m++C9QS7eOyg
SBO65mnrUcIW5H/XcDJlbh0v591ngUV0+fjdyGANPnzTaQTwDvzHpXvOr2pLMBSD
P0BEnp6vj5yTl1ktEomO0aCSKHOfAZuifWYtuE62yhb1uiJeXBMRvkfL6R7f2STC
O7uC4aElYNjgofbZ2I2wD1ze5G5ojcAN8H4QmJyfWKGHkEkTmeqjHCODmJC63jW9
PGzWaSitmcHBNOQjvul5N2pYqfOLWL3WkUepP47lJf74qiLldJTf7WHk6xeSSOld
Wp0plVhzIbl0O6vW7VZhcb631TGW5UnUamD2cuoEClnoXnpFS8ziHqW2gp5VAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQURXR51AibDspEY9OFHSkewpj4nGEwHwYDVR0j
BBgwFoAU8X0XwzfUJm8noOHXHeGjZM5Q85kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHh5VUtKSFhBWTNKQ3gyVEZ3V0VhR05uZFdCbTNkZUZidWZuQmlQcmE4
VHEvMC9GMTdEMTdDMzM3RDQyNjZGMjdBMEUxRDcxREUxQTM2NENFNTBGMzk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxN0QxN0MzMzdENDI2NkYy
N0EwRTFENzFERTFBMzY0Q0U1MEYzOTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h4eVVLSkhYQVkzSkN4MlRGd1dFYUdObmRXQm0zZGVGYnVmbkJpUHJhOFRxLzAv
MzIzODMwMzQzYTMyNjEzMDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzMDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCoEMA0GCSqGSIb3DQEBCwUAA4IBAQCFN4dN
eFaA9GMD0aI0Anu5UCyUF2NY1UlIkdEBHvy08KzoR0eTAQ9tGLAYnABoxE66LRfY
a6YznnDRKwfQrBW09o4i9XqbXgCIHr6qevL6HB6CnoWNxzUPDkvkgzDcIvq1JgKc
sL0PcPHj4LtQPi6ih2mtA+3fEdZw7rGlYQ/2kLXWEc0R6y4+QOswdSM+zr/0G1o2
I1uqfoZgKTYhW8OvndAKmyga27pNyeorptyASA1BW3q3b/y1i6L0jDFP1laJo+8s
uYFWTDwOqFGqjBEnENYFlfusICTQlwLmes724bxftO8h2YI9AQ2MLBczJK97pMa6
X9Uz0Z0To/70iMIp
-----END CERTIFICATE-----
Generated at Wed May 13 19:41:42 2026 by rpki-client