Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/323830343a393538633a3a2f33322d3332203d3e20323734353239.roa
File:                     323830343a393538633a3a2f33322d3332203d3e20323734353239.roa (raw, json)
Hash identifier:          T0Tsl5Sj+FYbWSy/5HZBM4iA6O38TTEUMlLqqZl/91E=
Subject key identifier:   D3:91:F7:7F:EB:F9:5A:56:E1:17:1F:BB:11:70:5B:44:54:A8:DC:B3
Certificate issuer:       /CN=3341988D6B27C003A09002BC75B27E71BFE15380
Certificate serial:       79C3680BE11BD1532C70A33FE2C4B0A5E5D4FCAA
Authority key identifier: 33:41:98:8D:6B:27:C0:03:A0:90:02:BC:75:B2:7E:71:BF:E1:53:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3341988D6B27C003A09002BC75B27E71BFE15380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/323830343a393538633a3a2f33322d3332203d3e20323734353239.roa
Signing time:             Mon 20 Apr 2026 17:54:58 +0000
ROA not before:           Mon 20 Apr 2026 17:49:58 +0000
ROA not after:            Mon 19 Apr 2027 17:54:58 +0000
asID:                     274529
IP address blocks:        2804:958c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/3341988D6B27C003A09002BC75B27E71BFE15380.crl
                          rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/3341988D6B27C003A09002BC75B27E71BFE15380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3341988D6B27C003A09002BC75B27E71BFE15380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 May 2026 23:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c3:68:0b:e1:1b:d1:53:2c:70:a3:3f:e2:c4:b0:a5:e5:d4:fc:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3341988D6B27C003A09002BC75B27E71BFE15380
        Validity
            Not Before: Apr 20 17:49:58 2026 GMT
            Not After : Apr 19 17:54:58 2027 GMT
        Subject: CN=D391F77FEBF95A56E1171FBB11705B4454A8DCB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:56:7b:97:15:02:30:13:a5:e7:e5:28:05:
                    d0:4d:0b:a9:a4:44:e8:49:3c:ea:28:61:dd:5d:f2:
                    23:33:c8:d7:a8:26:cd:7b:cc:70:e7:d2:9f:ca:77:
                    7a:50:19:db:8e:c6:a0:0d:36:3b:a9:4b:a3:19:2f:
                    56:cc:60:8c:af:ee:d0:2a:80:14:79:6a:ae:51:ed:
                    55:f6:eb:92:ec:a7:16:2d:cf:7b:1c:61:02:27:2f:
                    94:41:2a:0a:6e:6e:bc:3c:d4:03:1a:93:25:d9:9d:
                    00:26:8b:d3:92:85:da:93:ea:09:26:7c:1e:de:7e:
                    e0:44:a3:af:9f:fc:95:f8:d5:75:eb:bd:a4:6d:1a:
                    88:31:4b:d1:30:0f:cd:ef:c9:bb:d6:54:c6:d4:5c:
                    52:71:a3:14:48:ec:a0:15:45:f1:3b:92:15:df:f5:
                    53:85:1f:53:f8:c2:b9:30:07:48:eb:ae:97:ed:ee:
                    d0:09:5d:8c:62:61:f0:87:05:a7:5a:27:89:16:86:
                    37:b5:91:9c:f8:5c:51:0e:64:76:12:29:6e:41:84:
                    48:be:4e:30:6c:ce:f5:fb:33:f7:c7:20:d6:de:2c:
                    0a:6a:dc:b9:fa:45:63:1f:26:1c:ad:c6:cd:48:48:
                    d1:54:ec:c8:16:4f:a2:5c:98:57:15:ea:61:a4:bb:
                    fb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:91:F7:7F:EB:F9:5A:56:E1:17:1F:BB:11:70:5B:44:54:A8:DC:B3
            X509v3 Authority Key Identifier:
                keyid:33:41:98:8D:6B:27:C0:03:A0:90:02:BC:75:B2:7E:71:BF:E1:53:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/3341988D6B27C003A09002BC75B27E71BFE15380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3341988D6B27C003A09002BC75B27E71BFE15380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/323830343a393538633a3a2f33322d3332203d3e20323734353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:958c::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:db:f9:6a:f1:12:6e:7a:c5:fa:f2:fe:11:44:eb:87:de:c2:
         c9:68:57:3d:f5:56:fb:48:e1:ba:91:07:71:be:2e:f6:47:5e:
         75:b0:85:24:24:9d:40:80:00:53:21:56:bf:74:a0:24:be:bc:
         83:bd:a6:d9:89:7b:01:4c:f7:3c:93:7e:4e:59:9b:c1:b0:b6:
         fd:88:b6:3b:e9:02:c3:f3:da:ef:7b:f2:f9:16:da:69:2e:a2:
         6b:12:9e:5a:db:db:68:64:50:e4:8d:02:c1:54:76:89:80:11:
         77:ca:e0:4d:f2:1d:18:b8:f2:1f:ec:7d:9a:e0:49:9c:cd:a3:
         6f:37:53:ba:84:ce:77:64:28:82:88:fb:4e:ba:1b:fd:33:bf:
         b1:e1:b3:cd:18:32:e7:c1:05:a7:74:13:c3:47:88:86:82:d2:
         f8:18:9e:89:fb:fe:d3:a2:03:ca:ce:81:c0:33:93:4e:dd:0a:
         88:b9:2e:e1:e5:04:54:34:54:1a:d3:42:d7:01:e4:6c:68:e6:
         7f:f6:ce:69:e0:7d:23:24:ce:86:e5:88:ad:dd:ec:97:c9:a8:
         2d:ba:c8:7a:08:01:78:c0:34:ea:cc:33:e5:a2:8a:15:d7:38:
         de:65:c6:fd:54:04:f5:0a:e2:48:16:3c:cd:e6:d0:c2:e8:9f:
         c9:a5:09:5d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUecNoC+Eb0VMscKM/4sSwpeXU/KowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM0MTk4OEQ2QjI3QzAwM0EwOTAwMkJDNzVCMjdFNzFC
RkUxNTM4MDAeFw0yNjA0MjAxNzQ5NThaFw0yNzA0MTkxNzU0NThaMDMxMTAvBgNV
BAMTKEQzOTFGNzdGRUJGOTVBNTZFMTE3MUZCQjExNzA1QjQ0NTRBOERDQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm3lZ7lxUCMBOl5+UoBdBNC6mk
ROhJPOooYd1d8iMzyNeoJs17zHDn0p/Kd3pQGduOxqANNjupS6MZL1bMYIyv7tAq
gBR5aq5R7VX265LspxYtz3scYQInL5RBKgpubrw81AMakyXZnQAmi9OShdqT6gkm
fB7efuBEo6+f/JX41XXrvaRtGogxS9EwD83vybvWVMbUXFJxoxRI7KAVRfE7khXf
9VOFH1P4wrkwB0jrrpft7tAJXYxiYfCHBadaJ4kWhje1kZz4XFEOZHYSKW5BhEi+
TjBszvX7M/fHINbeLApq3Ln6RWMfJhytxs1ISNFU7MgWT6JcmFcV6mGku/vhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU05H3f+v5WlbhFx+7EXBbRFSo3LMwHwYDVR0j
BBgwFoAUM0GYjWsnwAOgkAK8dbJ+cb/hU4AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby92b2dHR3RhdGZxcnJ2NnE1bUFSUjNnSDJtSEtmclI1WTNyUllvMU02UG0z
LzAvMzM0MTk4OEQ2QjI3QzAwM0EwOTAwMkJDNzVCMjdFNzFCRkUxNTM4MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zMzQxOTg4RDZCMjdDMDAzQTA5
MDAyQkM3NUIyN0U3MUJGRTE1MzgwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby92
b2dHR3RhdGZxcnJ2NnE1bUFSUjNnSDJtSEtmclI1WTNyUllvMU02UG0zLzAvMzIz
ODMwMzQzYTM5MzUzODYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzM0MzUz
MjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKASVjDANBgkqhkiG9w0BAQsFAAOCAQEAN9v5avESbnrF
+vL+EUTrh97CyWhXPfVW+0jhupEHcb4u9kdedbCFJCSdQIAAUyFWv3SgJL68g72m
2Yl7AUz3PJN+TlmbwbC2/Yi2O+kCw/Pa73vy+RbaaS6iaxKeWtvbaGRQ5I0CwVR2
iYARd8rgTfIdGLjyH+x9muBJnM2jbzdTuoTOd2Qogoj7Trob/TO/seGzzRgy58EF
p3QTw0eIhoLS+Bieifv+06IDys6BwDOTTt0KiLku4eUEVDRUGtNC1wHkbGjmf/bO
aeB9IyTOhuWIrd3sl8moLbrIeggBeMA06swz5aKKFdc43mXG/VQE9QriSBY8zebQ
wuifyaUJXQ==
-----END CERTIFICATE-----
Generated at Wed May 13 16:43:51 2026 by rpki-client