Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/323830343a346637303a633030303a3a2f33342d3334203d3e20323638333237.roa
File:                     323830343a346637303a633030303a3a2f33342d3334203d3e20323638333237.roa (raw, json)
Hash identifier:          gWUVMAMGu4AGe0pVXd1+5eN6CckTZt8pmv2nFi33cds=
Subject key identifier:   8A:55:36:33:28:95:54:C0:E6:5F:B9:27:62:66:6A:E4:FF:4A:AB:04
Certificate issuer:       /CN=4557D07B3F9FE20A850E1553C2D0E090F1E55D48
Certificate serial:       0AA608DD0AA866D75A20BC5E58CC6199314AF4DF
Authority key identifier: 45:57:D0:7B:3F:9F:E2:0A:85:0E:15:53:C2:D0:E0:90:F1:E5:5D:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/323830343a346637303a633030303a3a2f33342d3334203d3e20323638333237.roa
Signing time:             Sat 18 Apr 2026 16:34:01 +0000
ROA not before:           Sat 18 Apr 2026 16:29:01 +0000
ROA not after:            Sat 17 Apr 2027 16:34:01 +0000
asID:                     268327
IP address blocks:        2804:4f70:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.crl
                          rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a6:08:dd:0a:a8:66:d7:5a:20:bc:5e:58:cc:61:99:31:4a:f4:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4557D07B3F9FE20A850E1553C2D0E090F1E55D48
        Validity
            Not Before: Apr 18 16:29:01 2026 GMT
            Not After : Apr 17 16:34:01 2027 GMT
        Subject: CN=8A553633289554C0E65FB92762666AE4FF4AAB04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7d:1c:34:82:b5:e1:8a:33:40:c5:d3:6c:db:
                    60:15:64:e9:63:56:bc:7a:47:6d:bb:e4:85:d6:bd:
                    1a:06:29:09:c3:7a:00:35:13:07:d9:83:fd:6e:33:
                    d2:03:df:92:be:6a:a3:02:9d:16:41:84:2a:5c:c3:
                    e6:c8:64:8c:28:4b:36:ae:ce:bd:69:b6:90:38:51:
                    c3:bd:eb:d8:cc:46:47:05:4a:47:0e:bc:fc:bc:f5:
                    42:a4:0d:8e:a4:7b:b2:a6:aa:f1:64:cd:57:2f:76:
                    bb:e9:cc:20:76:cc:ef:00:a5:7b:ed:8d:4d:a2:77:
                    de:93:fe:88:a1:d4:38:00:9d:2b:d1:87:81:dd:af:
                    e2:4a:0d:ad:00:d1:bb:65:7b:c1:55:7b:f4:14:86:
                    28:6f:36:14:af:5c:1e:69:7f:d1:9f:b5:01:e8:29:
                    e6:41:48:35:83:1c:e6:bc:83:8a:56:e4:a2:7f:b6:
                    e6:6a:74:41:ca:6f:a4:8d:82:0c:95:59:7e:92:55:
                    9b:d8:39:36:16:aa:da:ed:69:d1:9a:e9:0f:d2:06:
                    73:15:dc:a4:fc:91:26:ce:6f:3d:67:e4:f5:51:7b:
                    4c:ae:e2:ec:0e:c8:ec:4a:1f:f4:00:65:07:d5:86:
                    a8:fb:86:73:61:73:3a:0e:05:27:65:7a:9f:09:5e:
                    ba:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:55:36:33:28:95:54:C0:E6:5F:B9:27:62:66:6A:E4:FF:4A:AB:04
            X509v3 Authority Key Identifier:
                keyid:45:57:D0:7B:3F:9F:E2:0A:85:0E:15:53:C2:D0:E0:90:F1:E5:5D:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4557D07B3F9FE20A850E1553C2D0E090F1E55D48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fvaYirFdgpW5PNBeffE4r2u6QiJiuAPKgpD8DnnpFSm/0/323830343a346637303a633030303a3a2f33342d3334203d3e20323638333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f70:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9b:b0:cd:f9:3f:d0:b1:7b:d4:b1:57:a8:ea:46:3d:12:18:4a:
         8d:0a:32:5e:b7:11:9e:75:62:5a:52:ba:af:e2:00:c8:48:72:
         b7:1e:92:06:80:f3:2c:34:6f:63:28:bc:c9:44:17:e1:f1:04:
         88:48:5d:ae:d4:b0:72:4a:c1:7d:a5:76:24:7b:0a:6e:99:36:
         20:45:53:bc:44:55:39:fe:e7:3e:f6:59:48:cc:48:0a:7f:a8:
         87:86:51:d3:f5:b4:24:46:c4:f8:a3:72:04:ff:c0:0d:07:87:
         7c:35:76:99:6f:c6:b9:04:01:8e:2c:95:73:ea:76:67:1d:ea:
         d9:92:06:8e:31:5f:3e:c6:6f:4a:41:2f:1d:e8:91:a7:df:62:
         7d:a0:30:6f:01:c2:2e:ed:e2:a2:c8:06:e6:98:86:47:eb:9c:
         c5:23:54:8e:c6:12:8a:d5:10:85:70:a7:db:00:00:4c:3b:85:
         97:74:b2:fb:91:76:80:85:d0:18:25:9d:23:b3:41:a2:3e:60:
         03:60:68:4e:67:80:b7:70:54:78:04:b5:89:42:26:d1:90:1e:
         a6:2e:29:c1:33:20:79:2f:00:bd:91:9d:cc:f7:c2:dc:ee:6e:
         bc:05:54:b8:af:07:54:8f:2f:66:18:5a:2c:83:fb:9a:eb:00:
         3b:8b:38:4f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUCqYI3QqoZtdaILxeWMxhmTFK9N8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU1N0QwN0IzRjlGRTIwQTg1MEUxNTUzQzJEMEUwOTBG
MUU1NUQ0ODAeFw0yNjA0MTgxNjI5MDFaFw0yNzA0MTcxNjM0MDFaMDMxMTAvBgNV
BAMTKDhBNTUzNjMzMjg5NTU0QzBFNjVGQjkyNzYyNjY2QUU0RkY0QUFCMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOfRw0grXhijNAxdNs22AVZOlj
Vrx6R2275IXWvRoGKQnDegA1EwfZg/1uM9ID35K+aqMCnRZBhCpcw+bIZIwoSzau
zr1ptpA4UcO969jMRkcFSkcOvPy89UKkDY6ke7KmqvFkzVcvdrvpzCB2zO8ApXvt
jU2id96T/oih1DgAnSvRh4Hdr+JKDa0A0btle8FVe/QUhihvNhSvXB5pf9GftQHo
KeZBSDWDHOa8g4pW5KJ/tuZqdEHKb6SNggyVWX6SVZvYOTYWqtrtadGa6Q/SBnMV
3KT8kSbObz1n5PVRe0yu4uwOyOxKH/QAZQfVhqj7hnNhczoOBSdlep8JXrqrAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUilU2MyiVVMDmX7knYmZq5P9KqwQwHwYDVR0j
BBgwFoAURVfQez+f4gqFDhVTwtDgkPHlXUgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9mdmFZaXJGZGdwVzVQTkJlZmZFNHIydTZRaUppdUFQS2dwRDhEbm5wRlNt
LzAvNDU1N0QwN0IzRjlGRTIwQTg1MEUxNTUzQzJEMEUwOTBGMUU1NUQ0OC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80NTU3RDA3QjNGOUZFMjBBODUw
RTE1NTNDMkQwRTA5MEYxRTU1RDQ4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9m
dmFZaXJGZGdwVzVQTkJlZmZFNHIydTZRaUppdUFQS2dwRDhEbm5wRlNtLzAvMzIz
ODMwMzQzYTM0NjYzNzMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2Uy
MDMyMzYzODMzMzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigET3DAMA0GCSqGSIb3DQEBCwUAA4IB
AQCbsM35P9Cxe9SxV6jqRj0SGEqNCjJetxGedWJaUrqv4gDISHK3HpIGgPMsNG9j
KLzJRBfh8QSISF2u1LBySsF9pXYkewpumTYgRVO8RFU5/uc+9llIzEgKf6iHhlHT
9bQkRsT4o3IE/8ANB4d8NXaZb8a5BAGOLJVz6nZnHerZkgaOMV8+xm9KQS8d6JGn
32J9oDBvAcIu7eKiyAbmmIZH65zFI1SOxhKK1RCFcKfbAABMO4WXdLL7kXaAhdAY
JZ0js0GiPmADYGhOZ4C3cFR4BLWJQibRkB6mLinBMyB5LwC9kZ3M98Lc7m68BVS4
rwdUjy9mGFosg/ua6wA7izhP
-----END CERTIFICATE-----
Generated at Wed May 13 16:31:04 2026 by rpki-client