Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/323830343a333866343a383030303a3a2f33342d3334203d3e20323636353134.roa
File:                     323830343a333866343a383030303a3a2f33342d3334203d3e20323636353134.roa (raw, json)
Hash identifier:          lLTbsQvA7/mOfqBa581FSIrzxTbxO5sTjmhUOrwrlhA=
Subject key identifier:   16:66:59:D5:B1:17:75:16:76:DA:8E:69:CA:08:AD:D1:CD:F6:83:B6
Certificate issuer:       /CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Certificate serial:       0B4BBD734D8AA722C3C923C504D6CDD5BFE12115
Authority key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/323830343a333866343a383030303a3a2f33342d3334203d3e20323636353134.roa
Signing time:             Fri 27 Mar 2026 23:30:08 +0000
ROA not before:           Fri 27 Mar 2026 23:25:08 +0000
ROA not after:            Fri 26 Mar 2027 23:30:08 +0000
asID:                     266514
IP address blocks:        2804:38f4:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 08:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4b:bd:73:4d:8a:a7:22:c3:c9:23:c5:04:d6:cd:d5:bf:e1:21:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
        Validity
            Not Before: Mar 27 23:25:08 2026 GMT
            Not After : Mar 26 23:30:08 2027 GMT
        Subject: CN=166659D5B117751676DA8E69CA08ADD1CDF683B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:36:2c:66:2c:5d:ea:dc:cc:ac:37:5d:df:e7:
                    fa:c3:b7:60:75:c5:ee:6d:91:4f:bc:b5:40:fd:a5:
                    03:9d:23:b6:99:d0:6b:fb:2b:7d:44:57:0f:a5:b4:
                    66:cc:7b:4c:79:01:22:e0:5c:3d:e4:c2:d6:f0:39:
                    ff:13:b7:0a:4f:5c:cc:54:c1:bf:00:bc:51:3e:d6:
                    b1:43:db:65:10:ec:df:f0:c9:58:11:3a:ff:d4:da:
                    0a:a8:04:3b:e1:96:37:1c:4f:20:b2:32:1d:3a:ff:
                    3b:77:1d:21:1b:56:bf:15:a1:4b:5e:5b:4f:2b:72:
                    3d:a8:88:7c:3b:13:38:ac:4b:89:04:54:01:84:79:
                    3f:2a:b9:48:d6:3d:d1:13:33:a4:18:1c:8c:4e:bc:
                    8c:22:b8:71:3b:11:00:1d:95:b5:01:02:f9:d6:9d:
                    3b:b6:27:d5:b3:3c:73:13:02:3f:bc:ba:d9:21:3a:
                    58:3a:d7:0c:9d:c0:8b:a5:b9:dc:99:60:38:0a:33:
                    77:be:58:51:5e:c0:16:17:16:b1:7f:df:35:38:55:
                    c9:1a:be:71:79:d6:11:e7:cd:13:c0:36:3f:52:fa:
                    f6:49:10:da:4e:08:8e:e5:6b:7f:59:d4:af:8f:11:
                    cb:ea:64:b8:e6:7d:30:ab:57:e0:e3:93:d7:68:98:
                    aa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:66:59:D5:B1:17:75:16:76:DA:8E:69:CA:08:AD:D1:CD:F6:83:B6
            X509v3 Authority Key Identifier:
                keyid:1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/323830343a333866343a383030303a3a2f33342d3334203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38f4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         14:88:8a:b3:6b:05:5b:93:45:74:99:08:07:ea:3c:0e:a2:24:
         a1:2e:98:e2:83:0e:3a:d8:51:df:82:8e:0c:48:88:c8:c1:db:
         45:ab:96:4f:9d:8f:3c:db:08:32:10:bf:60:81:b3:45:8b:d2:
         62:ea:98:79:38:d4:43:f6:08:c3:c3:ac:86:72:1c:b9:62:24:
         a3:9c:dd:78:13:49:d6:0d:2d:50:37:16:2a:e1:68:f4:cf:1f:
         97:f7:70:42:7a:e2:57:7b:49:18:67:57:aa:a9:2e:64:db:cc:
         e4:c1:c0:45:b9:fd:5a:47:1f:9d:26:fa:1b:ec:55:8d:c5:f8:
         6c:4c:56:10:39:9f:4e:a7:bb:1b:7e:dc:88:0a:e7:bd:22:a9:
         01:cd:31:ce:e6:ed:7a:73:39:8f:da:04:42:82:26:ee:19:95:
         5a:4c:4e:11:08:9a:32:8f:44:e3:c5:2f:04:11:26:67:7a:cf:
         81:7e:fe:65:69:a8:61:d0:d6:fe:60:ce:ac:49:f5:10:82:e6:
         87:1d:1a:94:60:d7:2b:aa:34:08:b8:bf:35:c3:df:da:18:85:
         77:7d:88:5a:60:97:dc:fb:68:7b:ff:ed:18:64:2f:b1:65:3e:
         82:55:10:44:6c:06:e1:5f:6a:97:55:cc:49:07:d3:c6:8b:40:
         90:07:54:d8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUC0u9c02KpyLDySPFBNbN1b/hIRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQwQzg4NUZFMzc4RkY5MEQzOUVBMjg3NUU5RjZFNTEz
RkRDRUFDQTAeFw0yNjAzMjcyMzI1MDhaFw0yNzAzMjYyMzMwMDhaMDMxMTAvBgNV
BAMTKDE2NjY1OUQ1QjExNzc1MTY3NkRBOEU2OUNBMDhBREQxQ0RGNjgzQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnNixmLF3q3MysN13f5/rDt2B1
xe5tkU+8tUD9pQOdI7aZ0Gv7K31EVw+ltGbMe0x5ASLgXD3kwtbwOf8TtwpPXMxU
wb8AvFE+1rFD22UQ7N/wyVgROv/U2gqoBDvhljccTyCyMh06/zt3HSEbVr8VoUte
W08rcj2oiHw7EzisS4kEVAGEeT8quUjWPdETM6QYHIxOvIwiuHE7EQAdlbUBAvnW
nTu2J9WzPHMTAj+8utkhOlg61wydwIuludyZYDgKM3e+WFFewBYXFrF/3zU4Vcka
vnF51hHnzRPANj9S+vZJENpOCI7la39Z1K+PEcvqZLjmfTCrV+Djk9domKrvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUFmZZ1bEXdRZ22o5pygit0c32g7YwHwYDVR0j
BBgwFoAUHQyIX+N4/5DTnqKHXp9uUT/c6sowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnlObVk2cW5pM0ZtTTVyU2htWDl3UWhSVlozTENXQjNNZHQ1ejJSQ05t
OEIvMS8xRDBDODg1RkUzNzhGRjkwRDM5RUEyODc1RTlGNkU1MTNGRENFQUNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFEMEM4ODVGRTM3OEZGOTBE
MzlFQTI4NzVFOUY2RTUxM0ZEQ0VBQ0EuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J5Tm1ZNnFuaTNGbU01clNobVg5d1FoUlZaM0xDV0IzTWR0NXoyUkNObThCLzEv
MzIzODMwMzQzYTMzMzg2NjM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjM1MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEOPSAMA0GCSqGSIb3DQEBCwUA
A4IBAQAUiIqzawVbk0V0mQgH6jwOoiShLpjigw462FHfgo4MSIjIwdtFq5ZPnY88
2wgyEL9ggbNFi9Ji6ph5ONRD9gjDw6yGchy5YiSjnN14E0nWDS1QNxYq4Wj0zx+X
93BCeuJXe0kYZ1eqqS5k28zkwcBFuf1aRx+dJvob7FWNxfhsTFYQOZ9Op7sbftyI
Cue9IqkBzTHO5u16czmP2gRCgibuGZVaTE4RCJoyj0TjxS8EESZnes+Bfv5laahh
0Nb+YM6sSfUQguaHHRqUYNcrqjQIuL81w9/aGIV3fYhaYJfc+2h7/+0YZC+xZT6C
VRBEbAbhX2qXVcxJB9PGi0CQB1TY
-----END CERTIFICATE-----
Generated at Wed Apr 8 11:00:11 2026 by rpki-client