Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a373130303a3a2f34302d3430203d3e20323730373634.roa
File:                     323830343a373131303a373130303a3a2f34302d3430203d3e20323730373634.roa (raw, json)
Hash identifier:          POzjvghn3Vmnnbwr+9/1YAH/dzTVxutNhT105tnzydo=
Subject key identifier:   BC:B8:64:21:0C:C6:CD:10:9D:B5:9F:26:66:9A:15:71:5C:B8:31:08
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       78113B05AC64D64D0B5DAEDD446222C101695940
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a373130303a3a2f34302d3430203d3e20323730373634.roa
Signing time:             Sat 04 Apr 2026 00:02:20 +0000
ROA not before:           Fri 03 Apr 2026 23:57:20 +0000
ROA not after:            Sat 03 Apr 2027 00:02:20 +0000
asID:                     270764
IP address blocks:        2804:7110:7100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:11:3b:05:ac:64:d6:4d:0b:5d:ae:dd:44:62:22:c1:01:69:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: Apr  3 23:57:20 2026 GMT
            Not After : Apr  3 00:02:20 2027 GMT
        Subject: CN=BCB864210CC6CD109DB59F26669A15715CB83108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:fa:27:60:a5:07:4b:c8:ca:18:9b:47:d5:
                    fc:66:86:4d:8e:61:9f:73:91:47:b4:f1:3d:72:87:
                    be:e0:93:d6:61:9d:fb:fc:62:60:14:6e:0a:c2:ba:
                    23:dc:15:3e:19:37:49:25:21:72:68:94:57:ba:8b:
                    7e:39:08:65:cf:9e:0d:77:96:b3:0f:a6:70:97:5b:
                    10:79:49:1b:a6:41:be:53:4c:84:9c:1f:44:a9:a5:
                    fb:1b:13:33:c6:d0:d6:73:1d:98:ce:83:c0:79:1c:
                    c1:29:6f:0b:16:12:f5:85:ba:08:f6:4c:a0:7d:4f:
                    5e:71:b0:10:7e:f5:c9:89:f7:b5:50:09:bc:a6:e7:
                    c3:d2:e4:35:15:98:60:2e:d1:e6:33:ab:18:10:ac:
                    72:8a:83:b8:d2:9a:39:d0:16:1c:d0:e5:14:9f:11:
                    c7:30:29:09:21:e6:a5:d0:7c:bf:85:44:c3:f4:43:
                    54:f0:66:1f:11:d0:1a:8c:c5:00:fe:7a:e4:1b:00:
                    c4:5e:1d:d2:a5:b1:ac:e0:4f:b8:03:1b:5a:a6:b1:
                    c1:87:84:66:16:52:bc:45:d1:b0:80:af:c2:c8:a6:
                    f8:61:58:c8:1f:49:be:0b:d4:aa:58:42:7d:23:07:
                    03:26:60:d0:c8:fa:f8:c1:3e:96:b9:aa:1d:33:04:
                    4b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B8:64:21:0C:C6:CD:10:9D:B5:9F:26:66:9A:15:71:5C:B8:31:08
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a373130303a3a2f34302d3430203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:7100::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:c5:da:f5:57:79:aa:1e:b0:7d:0e:1e:20:82:bd:85:66:c3:
         89:74:5d:73:d6:c8:db:a2:15:61:91:78:08:9d:61:27:54:5a:
         e7:3d:cf:80:23:5f:cd:20:19:8b:b8:de:77:53:3b:3b:a7:1a:
         b4:f3:4d:e2:7c:48:dc:07:a2:6e:ca:32:33:ba:cb:ce:35:65:
         1b:83:6b:24:dd:e0:53:c5:e8:57:9f:76:11:ea:e9:28:82:a5:
         1e:be:b1:33:d0:bd:4f:18:ac:d6:25:5b:0d:ea:d3:ba:4a:81:
         fb:07:fa:33:10:ef:90:40:db:1c:3f:6e:1e:90:ef:8a:e9:a9:
         ff:df:1a:d3:58:4a:5a:4f:30:89:34:ca:41:ea:21:65:cb:8d:
         bc:a5:a5:b5:3f:2b:62:91:9c:3c:ce:fb:ce:a3:05:23:65:06:
         e6:cc:c5:c6:8a:2b:9a:29:88:0d:82:7a:ce:59:26:ac:66:10:
         c5:fb:38:7f:18:8b:6f:60:da:a9:30:5c:33:08:dc:ab:5a:e4:
         09:25:63:9d:61:5d:6c:19:d3:2a:41:5c:73:84:d7:69:c3:71:
         83:fb:41:d0:80:ef:cd:3b:47:72:20:12:07:48:ab:4a:79:88:
         39:33:f6:05:2f:38:c9:bb:bd:f3:2e:99:ce:96:1b:b1:3c:3f:
         35:7f:91:82
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUeBE7Baxk1k0LXa7dRGIiwQFpWUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc3MjY3QkI1QjM5RTQwNzM4MkE3QkJGMDAxQkVFMDAy
NzhCRTM4MDAeFw0yNjA0MDMyMzU3MjBaFw0yNzA0MDMwMDAyMjBaMDMxMTAvBgNV
BAMTKEJDQjg2NDIxMENDNkNEMTA5REI1OUYyNjY2OUExNTcxNUNCODMxMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+PonYKUHS8jKGJtH1fxmhk2O
YZ9zkUe08T1yh77gk9Zhnfv8YmAUbgrCuiPcFT4ZN0klIXJolFe6i345CGXPng13
lrMPpnCXWxB5SRumQb5TTIScH0SppfsbEzPG0NZzHZjOg8B5HMEpbwsWEvWFugj2
TKB9T15xsBB+9cmJ97VQCbym58PS5DUVmGAu0eYzqxgQrHKKg7jSmjnQFhzQ5RSf
EccwKQkh5qXQfL+FRMP0Q1TwZh8R0BqMxQD+euQbAMReHdKlsazgT7gDG1qmscGH
hGYWUrxF0bCAr8LIpvhhWMgfSb4L1KpYQn0jBwMmYNDI+vjBPpa5qh0zBEv3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUvLhkIQzGzRCdtZ8mZpoVcVy4MQgwHwYDVR0j
BBgwFoAUZ3Jnu1s55Ac4Knu/ABvuACeL44AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjMzM3hYTW1tMW85Nmo5anQ0ZUhja0tyU0FTRlJVREh5S1gyRFQ5eTli
amkvMC82NzcyNjdCQjVCMzlFNDA3MzgyQTdCQkYwMDFCRUUwMDI3OEJFMzgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3NzI2N0JCNUIzOUU0MDcz
ODJBN0JCRjAwMUJFRTAwMjc4QkUzODAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0IzMzN4WE1tbTFvOTZqOWp0NGVIY2tLclNBU0ZSVURIeUtYMkRUOXk5YmppLzAv
MzIzODMwMzQzYTM3MzEzMTMwM2EzNzMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMDM3MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEcRBxMA0GCSqGSIb3DQEBCwUA
A4IBAQA2xdr1V3mqHrB9Dh4ggr2FZsOJdF1z1sjbohVhkXgInWEnVFrnPc+AI1/N
IBmLuN53Uzs7pxq0803ifEjcB6JuyjIzusvONWUbg2sk3eBTxehXn3YR6ukogqUe
vrEz0L1PGKzWJVsN6tO6SoH7B/ozEO+QQNscP24ekO+K6an/3xrTWEpaTzCJNMpB
6iFly428paW1PytikZw8zvvOowUjZQbmzMXGiiuaKYgNgnrOWSasZhDF+zh/GItv
YNqpMFwzCNyrWuQJJWOdYV1sGdMqQVxzhNdpw3GD+0HQgO/NO0dyIBIHSKtKeYg5
M/YFLzjJu73zLpnOlhuxPD81f5GC
-----END CERTIFICATE-----
Generated at Wed Apr 8 12:24:05 2026 by rpki-client