Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a666666663a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a37343a666666663a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          OANuZ1Q+JRXnH836uc/vd6wc3o+1Su6p5YORazgk/ww=
Subject key identifier:   A9:3C:30:09:80:C7:DF:C8:4E:F8:2C:4F:75:6B:BF:59:D8:2D:01:5F
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       14686042B8045721BB63F284A9701972D6E31FF9
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a666666663a3a2f34382d3438203d3e203532343638.roa
Signing time:             Wed 01 Apr 2026 20:00:04 +0000
ROA not before:           Wed 01 Apr 2026 19:55:04 +0000
ROA not after:            Wed 31 Mar 2027 20:00:04 +0000
asID:                     52468
IP address blocks:        2804:74:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 12:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:68:60:42:b8:04:57:21:bb:63:f2:84:a9:70:19:72:d6:e3:1f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr  1 19:55:04 2026 GMT
            Not After : Mar 31 20:00:04 2027 GMT
        Subject: CN=3082010A0282010100B18573C488D6B2B4C8922B039635DC59996D34AC57B58C50A0C90B1E25A3E13C9A35585B474B5989184E0A6B2D456BAE4651778073663F5E937729A42C6C3A1990AFBE836C0D1A248B562650E751EB7B1AC1A283243CEB58610B93C57BCB4C4A18D449D84F2BF2B284BDDE3B10E6CB1FF2CCDD3D2101491600BE53EE73189EC25DC6F5239AEBBEF99C0B43CFCAEDEEA48E50F4FEA52496090A76EA59A51844FC116D7F5B40167A17B4044D6D49F933D135414193E5512E90ADFED0493F6996965E48FD76E22FE551E4DB1AD5054743013DF840E4B1846074765C270C46BDF137341500A33A9B8AB1D43DAA76101403C5C8D877A67CE1ACC26C92A9DB49A5CA1D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:73:c4:88:d6:b2:b4:c8:92:2b:03:96:35:
                    dc:59:99:6d:34:ac:57:b5:8c:50:a0:c9:0b:1e:25:
                    a3:e1:3c:9a:35:58:5b:47:4b:59:89:18:4e:0a:6b:
                    2d:45:6b:ae:46:51:77:80:73:66:3f:5e:93:77:29:
                    a4:2c:6c:3a:19:90:af:be:83:6c:0d:1a:24:8b:56:
                    26:50:e7:51:eb:7b:1a:c1:a2:83:24:3c:eb:58:61:
                    0b:93:c5:7b:cb:4c:4a:18:d4:49:d8:4f:2b:f2:b2:
                    84:bd:de:3b:10:e6:cb:1f:f2:cc:dd:3d:21:01:49:
                    16:00:be:53:ee:73:18:9e:c2:5d:c6:f5:23:9a:eb:
                    be:f9:9c:0b:43:cf:ca:ed:ee:a4:8e:50:f4:fe:a5:
                    24:96:09:0a:76:ea:59:a5:18:44:fc:11:6d:7f:5b:
                    40:16:7a:17:b4:04:4d:6d:49:f9:33:d1:35:41:41:
                    93:e5:51:2e:90:ad:fe:d0:49:3f:69:96:96:5e:48:
                    fd:76:e2:2f:e5:51:e4:db:1a:d5:05:47:43:01:3d:
                    f8:40:e4:b1:84:60:74:76:5c:27:0c:46:bd:f1:37:
                    34:15:00:a3:3a:9b:8a:b1:d4:3d:aa:76:10:14:03:
                    c5:c8:d8:77:a6:7c:e1:ac:c2:6c:92:a9:db:49:a5:
                    ca:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3C:30:09:80:C7:DF:C8:4E:F8:2C:4F:75:6B:BF:59:D8:2D:01:5F
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a666666663a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:f7:07:84:3e:8e:69:84:8e:93:62:bb:ba:c7:e7:0d:64:08:
         74:98:dc:36:a7:e0:5f:03:33:4b:51:db:6a:fc:4e:3a:f2:56:
         3c:c6:9d:d7:cf:a9:cc:29:fe:f0:51:a3:4f:8b:20:14:c2:b0:
         bd:b2:4d:d0:7c:8c:f0:83:30:8e:da:6d:47:ee:47:9c:47:8a:
         0d:3c:ec:27:45:9a:db:88:c5:68:21:1b:38:24:9a:7c:b1:65:
         7b:4d:68:be:35:03:a5:33:83:5e:04:97:ed:10:fb:d2:6f:ee:
         31:b9:a4:52:17:d3:58:66:9a:f6:2d:5a:81:10:da:fa:92:05:
         e1:2b:da:a7:66:c5:01:c9:1e:09:28:99:77:c3:10:77:77:94:
         7e:89:b8:b9:e8:3f:21:9e:ae:ab:f6:78:53:31:fa:e7:33:00:
         3b:2b:0e:97:9e:aa:a8:59:ea:d0:b5:f3:b4:0f:38:01:47:a8:
         91:42:57:36:84:e4:57:1e:1c:8d:c5:98:f0:de:c4:f9:f5:5d:
         c6:b4:72:80:9d:58:d0:b4:23:62:6c:78:d5:bb:98:42:60:e0:
         09:27:e4:ee:92:11:32:5b:4f:d8:34:17:82:d4:3f:a1:a1:73:
         d0:27:57:04:ae:05:20:a1:7b:82:ba:e8:ea:f9:fd:b9:12:10:
         44:76:cb:42
-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIUFGhgQrgEVyG7Y/KEqXAZctbjH/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGNjJENTVEQzc1ODg3NUI0OUFEQ0EwRkNEMTE1ODA3
QjJGMUREMTAeFw0yNjA0MDExOTU1MDRaFw0yNzAzMzEyMDAwMDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjE4NTczQzQ4OEQ2QjJCNEM4
OTIyQjAzOTYzNURDNTk5OTZEMzRBQzU3QjU4QzUwQTBDOTBCMUUyNUEzRTEzQzlB
MzU1ODVCNDc0QjU5ODkxODRFMEE2QjJENDU2QkFFNDY1MTc3ODA3MzY2M0Y1RTkz
NzcyOUE0MkM2QzNBMTk5MEFGQkU4MzZDMEQxQTI0OEI1NjI2NTBFNzUxRUI3QjFB
QzFBMjgzMjQzQ0VCNTg2MTBCOTNDNTdCQ0I0QzRBMThENDQ5RDg0RjJCRjJCMjg0
QkRERTNCMTBFNkNCMUZGMkNDREQzRDIxMDE0OTE2MDBCRTUzRUU3MzE4OUVDMjVE
QzZGNTIzOUFFQkJFRjk5QzBCNDNDRkNBRURFRUE0OEU1MEY0RkVBNTI0OTYwOTBB
NzZFQTU5QTUxODQ0RkMxMTZEN0Y1QjQwMTY3QTE3QjQwNDRENkQ0OUY5MzNEMTM1
NDE0MTkzRTU1MTJFOTBBREZFRDA0OTNGNjk5Njk2NUU0OEZENzZFMjJGRTU1MUU0
REIxQUQ1MDU0NzQzMDEzREY4NDBFNEIxODQ2MDc0NzY1QzI3MEM0NkJERjEzNzM0
MTUwMEEzM0E5QjhBQjFENDNEQUE3NjEwMTQwM0M1QzhEODc3QTY3Q0UxQUNDMjZD
OTJBOURCNDlBNUNBMUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsYVzxIjWsrTIkisDljXcWZltNKxXtYxQoMkLHiWj4TyaNVhbR0tZ
iRhOCmstRWuuRlF3gHNmP16TdymkLGw6GZCvvoNsDRoki1YmUOdR63sawaKDJDzr
WGELk8V7y0xKGNRJ2E8r8rKEvd47EObLH/LM3T0hAUkWAL5T7nMYnsJdxvUjmuu+
+ZwLQ8/K7e6kjlD0/qUklgkKdupZpRhE/BFtf1tAFnoXtARNbUn5M9E1QUGT5VEu
kK3+0Ek/aZaWXkj9duIv5VHk2xrVBUdDAT34QOSxhGB0dlwnDEa98Tc0FQCjOpuK
sdQ9qnYQFAPFyNh3pnzhrMJskqnbSaXKHQIDAQABo4ICVjCCAlIwHQYDVR0OBBYE
FKk8MAmAx9/ITvgsT3Vrv1nYLQFfMB8GA1UdIwQYMBaAFLf2LVXcdYh1tJrcoPzR
FYB7Lx3RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRCeDg4RlhlOG41Ujc0
OXBXZ3JrQVMzZGV5cjVtZHl5ZnhCTmlXejV5dnZNLzEvQjdGNjJENTVEQzc1ODg3
NUI0OUFEQ0EwRkNEMTE1ODA3QjJGMUREMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CN0Y2MkQ1NURDNzU4ODc1QjQ5QURDQTBGQ0QxMTU4MDdCMkYx
REQxLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80Qng4OEZYZThuNVI3NDlwV2dy
a0FTM2RleXI1bWR5eWZ4Qk5pV3o1eXZ2TS8xLzMyMzgzMDM0M2EzNzM0M2E2NjY2
NjY2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzIzNDM2Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAoBAB0//8wDQYJKoZIhvcNAQELBQADggEBAJT3B4Q+jmmEjpNiu7rH5w1kCHSY
3Dan4F8DM0tR22r8TjryVjzGndfPqcwp/vBRo0+LIBTCsL2yTdB8jPCDMI7abUfu
R5xHig087CdFmtuIxWghGzgkmnyxZXtNaL41A6Uzg14El+0Q+9Jv7jG5pFIX01hm
mvYtWoEQ2vqSBeEr2qdmxQHJHgkomXfDEHd3lH6JuLnoPyGerqv2eFMx+uczADsr
DpeeqqhZ6tC187QPOAFHqJFCVzaE5FceHI3FmPDexPn1Xca0coCdWNC0I2JseNW7
mEJg4Akn5O6SETJbT9g0F4LUP6Ghc9AnVwSuBSChe4K66Or5/bkSEER2y0I=
-----END CERTIFICATE-----
Generated at Wed Apr 8 16:41:31 2026 by rpki-client