Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/323830343a3363303a383030313a3a2f34382d3438203d3e203238363035.roa
File:                     323830343a3363303a383030313a3a2f34382d3438203d3e203238363035.roa (raw, json)
Hash identifier:          jfRyoxFuBijbQaNe19SLQR7zy2UNSqpaOMsz41ngfeU=
Subject key identifier:   EE:47:45:DB:55:4B:B6:6E:8F:DF:BA:D2:B1:92:E3:CA:45:E7:CB:FC
Certificate issuer:       /CN=53D94339029316790411C8AF7BC622996BF230A8
Certificate serial:       6D69E1A82057DA1E4DE8045579F3727739B3A4A7
Authority key identifier: 53:D9:43:39:02:93:16:79:04:11:C8:AF:7B:C6:22:99:6B:F2:30:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53D94339029316790411C8AF7BC622996BF230A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/323830343a3363303a383030313a3a2f34382d3438203d3e203238363035.roa
Signing time:             Mon 06 Apr 2026 12:49:32 +0000
ROA not before:           Mon 06 Apr 2026 12:44:32 +0000
ROA not after:            Mon 05 Apr 2027 12:49:32 +0000
asID:                     28605
IP address blocks:        2804:3c0:8001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/53D94339029316790411C8AF7BC622996BF230A8.crl
                          rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/53D94339029316790411C8AF7BC622996BF230A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53D94339029316790411C8AF7BC622996BF230A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 03:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:69:e1:a8:20:57:da:1e:4d:e8:04:55:79:f3:72:77:39:b3:a4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53D94339029316790411C8AF7BC622996BF230A8
        Validity
            Not Before: Apr  6 12:44:32 2026 GMT
            Not After : Apr  5 12:49:32 2027 GMT
        Subject: CN=EE4745DB554BB66E8FDFBAD2B192E3CA45E7CBFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:1c:9b:a5:15:23:d9:91:cc:b9:f8:4d:7d:
                    00:9d:b2:e9:83:d9:a9:f4:0e:94:26:92:5b:96:d2:
                    c3:e6:32:b7:57:fc:83:f8:a9:7c:b7:8f:62:9f:ec:
                    dd:12:bf:82:f8:14:e3:4e:ee:56:1b:b3:5c:06:ec:
                    4d:af:4b:df:d9:21:40:75:70:ec:30:a4:69:08:5b:
                    66:6f:bf:27:2c:46:ce:8f:af:3b:7a:d9:dd:11:43:
                    ea:7b:36:d2:e3:78:e3:86:1d:45:7b:6e:14:eb:32:
                    aa:68:76:2e:32:21:7a:d6:a7:7f:0f:f6:17:fe:7b:
                    71:49:26:43:f0:65:8d:9a:15:59:7e:82:03:2c:53:
                    bd:72:50:18:47:74:f1:58:bc:26:11:7f:7d:15:89:
                    e0:bf:18:2c:96:14:29:5f:e4:cd:eb:66:72:4b:d5:
                    e1:0a:c4:37:a7:49:ca:d5:46:58:78:53:93:a9:a7:
                    07:21:d3:be:80:b5:37:86:7b:67:0b:df:59:52:8a:
                    36:e3:20:81:b6:af:f9:49:bc:e8:81:0d:27:3b:53:
                    64:a8:fb:3e:ed:ef:8c:84:2d:4c:4d:89:38:ea:85:
                    3f:34:0f:8a:0f:62:1a:f6:2c:21:8d:08:16:16:4f:
                    cf:e5:7e:70:d9:a6:ad:25:5b:1e:d8:c4:b7:77:34:
                    d6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:47:45:DB:55:4B:B6:6E:8F:DF:BA:D2:B1:92:E3:CA:45:E7:CB:FC
            X509v3 Authority Key Identifier:
                keyid:53:D9:43:39:02:93:16:79:04:11:C8:AF:7B:C6:22:99:6B:F2:30:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/53D94339029316790411C8AF7BC622996BF230A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53D94339029316790411C8AF7BC622996BF230A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/323830343a3363303a383030313a3a2f34382d3438203d3e203238363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c0:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:c1:76:6c:be:d1:98:b0:e3:95:de:9b:00:23:20:eb:9d:69:
         b7:a8:38:f8:75:e2:b9:5f:a8:93:76:85:52:74:c8:1c:17:c2:
         8b:9e:aa:1f:e3:b9:8e:ce:f2:c3:ab:bc:6b:d3:61:08:e7:93:
         f1:5c:c2:d7:bc:93:96:50:60:ba:2f:43:2d:cb:a1:cc:41:6f:
         c0:f4:cd:99:22:e8:b7:c0:2b:86:1f:72:61:c3:9f:23:d2:29:
         b1:f0:5b:ae:85:3b:c9:ee:af:d7:c5:30:e5:45:26:3a:cf:9f:
         89:e2:f2:07:ef:d4:c3:6e:09:df:da:ea:32:05:0d:28:8b:83:
         81:40:ff:4d:60:b0:eb:3c:7a:01:ed:45:4e:dc:03:7d:28:95:
         2a:ff:d0:ac:b6:2a:f4:ff:16:5f:d6:34:37:e9:3f:83:37:e6:
         24:69:4a:45:eb:b3:8d:5a:9d:0b:38:81:c8:33:4a:e3:79:fb:
         1c:10:db:95:49:10:d6:a1:fa:df:3f:b4:ee:d7:ab:5d:ed:1b:
         89:b0:07:89:8d:2a:0b:04:bc:ed:37:c5:eb:ca:09:e7:68:22:
         3b:41:e0:71:6f:53:ab:fe:f3:9f:df:ed:be:10:3e:67:8c:63:
         d8:5a:85:f9:b0:e0:62:cd:dc:a7:63:46:8c:ba:ba:60:00:0f:
         7a:fc:46:a3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUbWnhqCBX2h5N6ARVefNydzmzpKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNEOTQzMzkwMjkzMTY3OTA0MTFDOEFGN0JDNjIyOTk2
QkYyMzBBODAeFw0yNjA0MDYxMjQ0MzJaFw0yNzA0MDUxMjQ5MzJaMDMxMTAvBgNV
BAMTKEVFNDc0NURCNTU0QkI2NkU4RkRGQkFEMkIxOTJFM0NBNDVFN0NCRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiBxybpRUj2ZHMufhNfQCdsumD
2an0DpQmkluW0sPmMrdX/IP4qXy3j2Kf7N0Sv4L4FONO7lYbs1wG7E2vS9/ZIUB1
cOwwpGkIW2ZvvycsRs6Przt62d0RQ+p7NtLjeOOGHUV7bhTrMqpodi4yIXrWp38P
9hf+e3FJJkPwZY2aFVl+ggMsU71yUBhHdPFYvCYRf30VieC/GCyWFClf5M3rZnJL
1eEKxDenScrVRlh4U5Oppwch076AtTeGe2cL31lSijbjIIG2r/lJvOiBDSc7U2So
+z7t74yELUxNiTjqhT80D4oPYhr2LCGNCBYWT8/lfnDZpq0lWx7YxLd3NNYTAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQU7kdF21VLtm6P37rSsZLjykXny/wwHwYDVR0j
BBgwFoAUU9lDOQKTFnkEEcive8YimWvyMKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFo5OHdVNWk1Y005N0hoaTZVb2JQbWNiZE1IZVhlM0VXeUF2NFAxbVpI
eVMvMC81M0Q5NDMzOTAyOTMxNjc5MDQxMUM4QUY3QkM2MjI5OTZCRjIzMEE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzRDk0MzM5MDI5MzE2Nzkw
NDExQzhBRjdCQzYyMjk5NkJGMjMwQTguY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaOTh3VTVpNWNNOTdIaGk2VW9iUG1jYmRNSGVYZTNFV3lBdjRQMW1aSHlTLzAv
MzIzODMwMzQzYTMzNjMzMDNhMzgzMDMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM4MzYzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQDwIABMA0GCSqGSIb3DQEBCwUAA4IB
AQBxwXZsvtGYsOOV3psAIyDrnWm3qDj4deK5X6iTdoVSdMgcF8KLnqof47mOzvLD
q7xr02EI55PxXMLXvJOWUGC6L0Mty6HMQW/A9M2ZIui3wCuGH3Jhw58j0imx8Fuu
hTvJ7q/XxTDlRSY6z5+J4vIH79TDbgnf2uoyBQ0oi4OBQP9NYLDrPHoB7UVO3AN9
KJUq/9Cstir0/xZf1jQ36T+DN+YkaUpF67ONWp0LOIHIM0rjefscENuVSRDWofrf
P7Tu16td7RuJsAeJjSoLBLztN8XrygnnaCI7QeBxb1Or/vOf3+2+ED5njGPYWoX5
sOBizdynY0aMurpgAA96/Eaj
-----END CERTIFICATE-----
Generated at Wed Apr 8 09:15:42 2026 by rpki-client