Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a313936633a3a2f33322d3438203d3e203631373934.roa
File:                     323830343a313936633a3a2f33322d3438203d3e203631373934.roa (raw, json)
Hash identifier:          f+8Qk5z9G5tpg2Mv0gcB+EWw2sUnHbuF1LBRr8sd4EA=
Subject key identifier:   B6:9B:09:2D:7C:C0:45:A4:63:17:D1:34:CD:FF:26:24:71:DB:D9:82
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       6C6B5506DED74070894E3AF4375DF005B53BA8F1
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a313936633a3a2f33322d3438203d3e203631373934.roa
Signing time:             Wed 01 Apr 2026 19:08:43 +0000
ROA not before:           Wed 01 Apr 2026 19:03:43 +0000
ROA not after:            Wed 31 Mar 2027 19:08:43 +0000
asID:                     61794
IP address blocks:        2804:196c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 15:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6b:55:06:de:d7:40:70:89:4e:3a:f4:37:5d:f0:05:b5:3b:a8:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Apr  1 19:03:43 2026 GMT
            Not After : Mar 31 19:08:43 2027 GMT
        Subject: CN=B69B092D7CC045A46317D134CDFF262471DBD982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:9f:d8:9f:ce:96:3d:20:f4:32:08:26:da:
                    7d:09:a7:79:4e:bd:ca:2a:7f:5b:73:75:5e:ff:3b:
                    be:2d:cd:ff:9d:c3:ad:e4:7b:d1:c4:7e:ed:a5:9b:
                    f6:bb:de:85:e6:84:30:d4:e9:db:dd:87:d7:39:30:
                    71:75:6b:21:e5:15:62:1a:89:91:6f:3b:af:7b:5f:
                    61:99:01:88:9b:28:15:b7:4b:17:09:b0:e0:b9:6d:
                    a4:77:25:83:db:c0:73:37:e7:ac:13:38:24:c3:80:
                    53:99:6b:bd:66:f8:0d:75:57:84:25:1c:6e:5e:4e:
                    88:4c:10:c6:6c:17:fe:1d:0a:74:a2:54:73:3f:b6:
                    c5:8c:b9:ee:54:ad:d5:3e:26:eb:5a:98:8e:a7:49:
                    91:cd:1a:66:1c:8b:7c:d8:8e:a7:e9:f1:df:b7:ad:
                    a5:43:6d:7e:24:76:e7:6e:71:f2:40:a8:e3:ed:fc:
                    dc:1f:c4:b6:74:03:13:b3:49:7c:e0:4e:fb:ac:8f:
                    da:b1:c5:f6:bc:7e:5d:76:62:75:1e:06:c3:bd:bc:
                    78:80:58:b9:e6:98:49:70:70:c6:72:0f:9e:86:cb:
                    5a:b4:5f:2e:f0:f1:0f:cd:e1:b4:85:ab:ea:34:08:
                    19:af:ec:ed:c3:29:1c:73:4a:8f:30:ce:bd:9f:96:
                    97:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9B:09:2D:7C:C0:45:A4:63:17:D1:34:CD:FF:26:24:71:DB:D9:82
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a313936633a3a2f33322d3438203d3e203631373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:196c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:10:33:fe:56:37:b1:cd:f5:fd:39:3d:a3:da:08:39:6e:09:
         fe:db:8b:b1:57:12:55:05:95:fe:45:e8:d8:49:7e:94:30:4a:
         37:91:e0:ec:67:8f:e7:d6:c2:bc:ab:a3:88:a1:e0:29:32:f2:
         34:38:05:b3:ab:90:9b:ce:5c:1a:27:bc:f9:2a:ef:95:0a:ab:
         c0:f2:af:52:fe:a6:97:2c:72:39:2c:11:08:1d:e0:ec:4a:ee:
         53:e8:b8:ae:b8:22:db:24:76:42:53:1b:5c:ac:77:1f:3f:55:
         f9:08:e3:64:3a:51:e6:8d:46:c9:fd:a5:81:5e:94:d1:2f:29:
         bc:cd:76:75:1b:c1:47:b0:c5:58:41:47:dd:f3:9f:5b:4e:5b:
         4e:f9:40:a1:de:b6:6c:6d:c3:92:c4:d5:1d:a3:4c:0c:73:05:
         4a:5d:78:fd:41:3a:79:09:5b:5e:08:d7:4d:72:c7:19:8f:52:
         93:ff:99:a0:06:d7:eb:3c:31:5c:a0:d0:6a:ae:62:2e:ed:0d:
         f4:52:64:ea:2e:de:9a:e5:a4:22:5f:79:5b:9d:f8:59:b3:c1:
         da:6d:5d:c3:74:ad:58:a8:b0:75:5b:1b:23:78:ea:85:b9:a0:
         1f:3e:2e:58:b3:40:ba:43:b6:13:c5:94:db:97:8d:6c:fa:fd:
         16:54:fc:5e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUbGtVBt7XQHCJTjr0N13wBbU7qPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY1RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5
MDkzODQ1ODAeFw0yNjA0MDExOTAzNDNaFw0yNzAzMzExOTA4NDNaMDMxMTAvBgNV
BAMTKEI2OUIwOTJEN0NDMDQ1QTQ2MzE3RDEzNENERkYyNjI0NzFEQkQ5ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuR5/Yn86WPSD0Mggm2n0Jp3lO
vcoqf1tzdV7/O74tzf+dw63ke9HEfu2lm/a73oXmhDDU6dvdh9c5MHF1ayHlFWIa
iZFvO697X2GZAYibKBW3SxcJsOC5baR3JYPbwHM356wTOCTDgFOZa71m+A11V4Ql
HG5eTohMEMZsF/4dCnSiVHM/tsWMue5UrdU+JutamI6nSZHNGmYci3zYjqfp8d+3
raVDbX4kduducfJAqOPt/NwfxLZ0AxOzSXzgTvusj9qxxfa8fl12YnUeBsO9vHiA
WLnmmElwcMZyD56Gy1q0Xy7w8Q/N4bSFq+o0CBmv7O3DKRxzSo8wzr2flpc5AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUtpsJLXzARaRjF9E0zf8mJHHb2YIwHwYDVR0j
BBgwFoAU/10XEYbH+SqoLlajhIudE5CThFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZhQk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0
SDQvMC9GRjVEMTcxMTg2QzdGOTJBQTgyRTU2QTM4NDhCOUQxMzkwOTM4NDU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNUQxNzExODZDN0Y5MkFB
ODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWYUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAv
MzIzODMwMzQzYTMxMzkzNjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM3
MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGWwwDQYJKoZIhvcNAQELBQADggEBAB4QM/5WN7HN
9f05PaPaCDluCf7bi7FXElUFlf5F6NhJfpQwSjeR4Oxnj+fWwryro4ih4Cky8jQ4
BbOrkJvOXBonvPkq75UKq8Dyr1L+ppcscjksEQgd4OxK7lPouK64ItskdkJTG1ys
dx8/VfkI42Q6UeaNRsn9pYFelNEvKbzNdnUbwUewxVhBR93zn1tOW075QKHetmxt
w5LE1R2jTAxzBUpdeP1BOnkJW14I101yxxmPUpP/maAG1+s8MVyg0GquYi7tDfRS
ZOou3prlpCJfeVud+FmzwdptXcN0rViosHVbGyN46oW5oB8+LlizQLpDthPFlNuX
jWz6/RZU/F4=
-----END CERTIFICATE-----
Generated at Wed Apr 8 20:44:43 2026 by rpki-client