Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343930303a3a2f34302d3430203d3e20323730373634.roa
File:                     323830343a373131303a343930303a3a2f34302d3430203d3e20323730373634.roa (raw, json)
Hash identifier:          RhghMc++exHkMk3M570ZG9CPdiDY5l6pOWYttx55pvg=
Subject key identifier:   D7:51:23:79:73:E5:71:E4:D2:49:F4:14:D4:F3:12:17:35:83:19:AC
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       39D4797235D38E14C344D90D5ED98D9D821DAC7E
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343930303a3a2f34302d3430203d3e20323730373634.roa
Signing time:             Sat 04 Apr 2026 00:02:21 +0000
ROA not before:           Fri 03 Apr 2026 23:57:21 +0000
ROA not after:            Sat 03 Apr 2027 00:02:21 +0000
asID:                     270764
IP address blocks:        2804:7110:4900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d4:79:72:35:d3:8e:14:c3:44:d9:0d:5e:d9:8d:9d:82:1d:ac:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: Apr  3 23:57:21 2026 GMT
            Not After : Apr  3 00:02:21 2027 GMT
        Subject: CN=D751237973E571E4D249F414D4F31217358319AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:9c:7a:65:23:e4:61:4b:e5:27:70:7f:9e:
                    42:99:0e:67:fa:c7:b4:82:8e:bc:a1:fc:a6:0c:ee:
                    ac:08:a0:6c:73:5f:b4:7b:e9:79:06:d1:28:67:ad:
                    d5:fc:c0:2d:f2:34:6b:ee:97:c9:5a:be:8e:c5:03:
                    4d:f3:d0:94:42:b5:49:e7:65:4f:87:c7:fc:77:d7:
                    27:4b:a4:29:1c:69:ac:db:56:49:88:cc:d4:43:57:
                    bf:4d:0d:27:f2:b2:ac:9e:fa:27:bd:6c:7e:74:46:
                    08:99:9d:6f:e0:72:13:5b:95:a9:5d:b4:73:5c:e6:
                    95:21:9a:20:85:12:f7:c0:ba:34:29:b4:0b:9f:50:
                    e6:1f:61:f7:41:e6:fd:f4:36:1e:ea:3e:c3:7a:9b:
                    a4:ac:66:6f:e6:9f:75:b1:1a:0d:e9:df:86:41:21:
                    90:cc:73:e8:2f:37:5e:17:89:3f:27:a4:61:03:5a:
                    81:c5:7a:9e:94:70:6c:69:11:52:4b:cb:c5:a1:86:
                    96:55:52:af:09:c7:40:63:28:c1:db:68:f0:a6:51:
                    69:61:3b:04:c3:a1:8d:de:6d:77:85:f6:87:e8:ff:
                    0c:cd:3d:88:df:66:b5:82:bc:29:e6:4b:34:f8:47:
                    c0:2e:5f:64:38:cc:a0:bb:42:8c:ea:ac:b4:5d:8d:
                    45:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:51:23:79:73:E5:71:E4:D2:49:F4:14:D4:F3:12:17:35:83:19:AC
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343930303a3a2f34302d3430203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:4900::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:05:cb:1a:ba:d3:d3:5a:9c:ed:43:3a:62:02:ff:52:54:67:
         8d:59:d2:eb:93:e7:27:d4:74:46:a1:0d:ca:51:d4:9f:64:90:
         78:db:99:9c:8c:5b:75:19:0a:43:84:5d:a6:71:fe:01:95:ab:
         e2:95:09:3b:5f:ef:fd:d5:86:70:f8:5f:60:39:a2:eb:84:44:
         9a:8a:d8:8f:11:a5:67:0b:48:99:28:e7:ec:da:81:00:f4:ec:
         b6:08:45:aa:19:88:0b:33:66:83:55:47:fd:03:46:20:f2:e3:
         9d:e3:c0:ca:10:b4:91:5b:29:fa:79:23:a3:4b:ff:61:4b:b0:
         68:09:8c:5f:d7:24:5d:4e:5a:3f:e8:ef:98:5e:bd:60:0d:2f:
         98:8d:11:83:b5:ac:25:0b:6f:2f:6b:81:7b:1a:70:7d:47:8c:
         b8:1a:68:ab:40:c0:cf:6b:79:09:6e:ee:b9:48:d4:08:5e:80:
         e5:0e:c8:fc:a7:23:4d:2f:42:3f:f3:0f:21:fa:9f:7c:cf:33:
         40:22:d4:37:ff:e1:d5:fc:f7:8a:a1:86:b2:a2:8d:1a:54:f1:
         9d:eb:46:b8:fd:e7:06:1e:2f:4d:83:55:a2:0b:39:49:a3:b5:
         5d:51:4f:f6:78:99:1f:96:99:11:55:56:1a:5b:4f:7f:95:b7:
         74:46:b3:8d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOdR5cjXTjhTDRNkNXtmNnYIdrH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc3MjY3QkI1QjM5RTQwNzM4MkE3QkJGMDAxQkVFMDAy
NzhCRTM4MDAeFw0yNjA0MDMyMzU3MjFaFw0yNzA0MDMwMDAyMjFaMDMxMTAvBgNV
BAMTKEQ3NTEyMzc5NzNFNTcxRTREMjQ5RjQxNEQ0RjMxMjE3MzU4MzE5QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt9px6ZSPkYUvlJ3B/nkKZDmf6
x7SCjryh/KYM7qwIoGxzX7R76XkG0ShnrdX8wC3yNGvul8lavo7FA03z0JRCtUnn
ZU+Hx/x31ydLpCkcaazbVkmIzNRDV79NDSfysqye+ie9bH50RgiZnW/gchNblald
tHNc5pUhmiCFEvfAujQptAufUOYfYfdB5v30Nh7qPsN6m6SsZm/mn3WxGg3p34ZB
IZDMc+gvN14XiT8npGEDWoHFep6UcGxpEVJLy8WhhpZVUq8Jx0BjKMHbaPCmUWlh
OwTDoY3ebXeF9ofo/wzNPYjfZrWCvCnmSzT4R8AuX2Q4zKC7QozqrLRdjUVtAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU11EjeXPlceTSSfQU1PMSFzWDGawwHwYDVR0j
BBgwFoAUZ3Jnu1s55Ac4Knu/ABvuACeL44AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjMzM3hYTW1tMW85Nmo5anQ0ZUhja0tyU0FTRlJVREh5S1gyRFQ5eTli
amkvMC82NzcyNjdCQjVCMzlFNDA3MzgyQTdCQkYwMDFCRUUwMDI3OEJFMzgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3NzI2N0JCNUIzOUU0MDcz
ODJBN0JCRjAwMUJFRTAwMjc4QkUzODAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0IzMzN4WE1tbTFvOTZqOWp0NGVIY2tLclNBU0ZSVURIeUtYMkRUOXk5YmppLzAv
MzIzODMwMzQzYTM3MzEzMTMwM2EzNDM5MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMDM3MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEcRBJMA0GCSqGSIb3DQEBCwUA
A4IBAQCSBcsautPTWpztQzpiAv9SVGeNWdLrk+cn1HRGoQ3KUdSfZJB425mcjFt1
GQpDhF2mcf4BlavilQk7X+/91YZw+F9gOaLrhESaitiPEaVnC0iZKOfs2oEA9Oy2
CEWqGYgLM2aDVUf9A0Yg8uOd48DKELSRWyn6eSOjS/9hS7BoCYxf1yRdTlo/6O+Y
Xr1gDS+YjRGDtawlC28va4F7GnB9R4y4GmirQMDPa3kJbu65SNQIXoDlDsj8pyNN
L0I/8w8h+p98zzNAItQ3/+HV/PeKoYayoo0aVPGd60a4/ecGHi9Ng1WiCzlJo7Vd
UU/2eJkflpkRVVYaW09/lbd0RrON
-----END CERTIFICATE-----
Generated at Wed Apr 8 12:23:50 2026 by rpki-client