Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/323830343a313731303a3a2f33322d3438203d3e20313938393439.roa
File:                     323830343a313731303a3a2f33322d3438203d3e20313938393439.roa (raw, json)
Hash identifier:          hPgBl5Z7hozd4cVQ+2/0DFbHiAHAbljMZEtjJzY7PO8=
Subject key identifier:   4B:E6:78:E5:80:FB:7D:8B:BB:0A:BB:EA:86:B6:5D:00:09:20:B0:A2
Certificate issuer:       /CN=934537D2006918539D4E641680E85DFE7A92F54E
Certificate serial:       5816A07A5B95C9A6F275BAA8480F112D70250BAE
Authority key identifier: 93:45:37:D2:00:69:18:53:9D:4E:64:16:80:E8:5D:FE:7A:92:F5:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/934537D2006918539D4E641680E85DFE7A92F54E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/323830343a313731303a3a2f33322d3438203d3e20313938393439.roa
Signing time:             Tue 31 Mar 2026 10:48:28 +0000
ROA not before:           Tue 31 Mar 2026 10:43:28 +0000
ROA not after:            Tue 30 Mar 2027 10:48:28 +0000
asID:                     198949
IP address blocks:        2804:1710::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/934537D2006918539D4E641680E85DFE7A92F54E.crl
                          rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/934537D2006918539D4E641680E85DFE7A92F54E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/934537D2006918539D4E641680E85DFE7A92F54E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:16:a0:7a:5b:95:c9:a6:f2:75:ba:a8:48:0f:11:2d:70:25:0b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934537D2006918539D4E641680E85DFE7A92F54E
        Validity
            Not Before: Mar 31 10:43:28 2026 GMT
            Not After : Mar 30 10:48:28 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7b:ce:08:e8:87:0d:33:2a:04:00:38:71:5c:
                    78:f4:ea:13:84:bb:b3:8a:71:3f:d5:0f:e9:ec:57:
                    9f:80:cc:4c:3a:96:ee:06:8b:02:b1:e7:f8:db:de:
                    f1:1e:20:99:70:2a:04:71:f0:e0:7e:18:9a:3c:95:
                    49:fb:4d:39:fb:14:be:37:d5:e2:05:ae:2d:b1:1e:
                    88:2b:94:07:e8:0b:d9:8a:79:40:00:7e:5a:e8:20:
                    42:f2:9c:be:7f:5f:c1:93:1e:7a:2b:bb:49:7e:df:
                    a9:12:41:40:a8:b0:08:08:36:41:db:8c:8b:d5:03:
                    fb:a3:49:b5:75:45:bb:2f:aa:ef:85:f1:a7:a0:22:
                    fe:81:c9:98:3c:e5:de:14:9e:ab:a2:98:d1:0a:04:
                    fc:71:21:aa:0a:4c:a5:c4:50:85:50:7a:56:7f:98:
                    16:ac:9a:4c:82:b4:e5:30:d8:78:cd:8a:e4:46:7b:
                    56:b1:be:5e:37:31:e9:83:98:a8:2e:62:a4:ec:ec:
                    fb:c9:3f:12:45:1d:f1:38:9d:d0:1f:16:3b:31:3a:
                    37:9c:3e:b5:b5:eb:90:5d:9b:13:16:49:fb:69:b0:
                    50:0a:98:ee:84:46:dd:b3:4f:8d:f6:bf:77:db:88:
                    04:c0:4d:4a:d9:93:95:b6:21:f9:aa:70:ac:94:cb:
                    af:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E6:78:E5:80:FB:7D:8B:BB:0A:BB:EA:86:B6:5D:00:09:20:B0:A2
            X509v3 Authority Key Identifier:
                keyid:93:45:37:D2:00:69:18:53:9D:4E:64:16:80:E8:5D:FE:7A:92:F5:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/934537D2006918539D4E641680E85DFE7A92F54E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/934537D2006918539D4E641680E85DFE7A92F54E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk81SpaKLBCosWYmkR5ABxMXc2kJSMowP9S6UgQ81h7q/1/323830343a313731303a3a2f33322d3438203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1710::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:be:7c:46:ef:51:41:47:a8:fb:56:95:95:d9:a0:37:34:13:
         88:0d:41:60:7f:28:17:d8:5f:17:4f:c2:3d:33:6d:5d:15:5c:
         83:ac:bd:be:1f:69:78:94:7e:a0:84:87:a0:ae:03:7c:53:73:
         b1:e8:8b:fb:dc:da:c6:12:90:56:5e:66:1e:64:a4:fb:76:e6:
         d4:45:04:30:aa:82:42:fe:d6:57:58:2a:da:33:1a:f2:37:33:
         4c:81:0c:e0:55:ba:b4:cd:2b:5f:60:25:ff:d0:4f:e5:c1:46:
         b4:20:32:75:05:93:a3:44:7f:13:1c:bb:9e:79:d1:3d:40:46:
         90:88:95:eb:f8:04:48:ba:d2:83:42:83:a6:48:c2:fe:5a:d7:
         c5:86:e9:ec:70:6d:d9:45:16:61:ab:51:f3:e0:9f:72:c6:47:
         08:45:99:d2:2e:73:36:80:80:77:f8:9b:9b:f4:2a:01:82:42:
         9a:49:3e:28:bf:cb:cc:ee:14:90:05:b9:e4:c9:d1:09:d0:f0:
         eb:db:92:da:61:e6:2f:05:9c:2e:c5:4f:7f:6d:65:a2:cf:e7:
         a5:65:b5:ca:fc:81:db:cd:04:5c:7d:01:9c:39:6b:42:13:cd:
         13:ef:87:5d:02:3d:f5:8b:dd:44:00:10:c6:6d:8c:0a:d9:54:
         14:54:4e:bb
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUWBageluVyabydbqoSA8RLXAlC64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM0NTM3RDIwMDY5MTg1MzlENEU2NDE2ODBFODVERkU3
QTkyRjU0RTAeFw0yNjAzMzExMDQzMjhaFw0yNzAzMzAxMDQ4MjhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQ3QkNFMDhFODg3MEQzMzJB
MDQwMDM4NzE1Qzc4RjRFQTEzODRCQkIzOEE3MTNGRDUwRkU5RUM1NzlGODBDQzRD
M0E5NkVFMDY4QjAyQjFFN0Y4REJERUYxMUUyMDk5NzAyQTA0NzFGMEUwN0UxODlB
M0M5NTQ5RkI0RDM5RkIxNEJFMzdENUUyMDVBRTJEQjExRTg4MkI5NDA3RTgwQkQ5
OEE3OTQwMDA3RTVBRTgyMDQyRjI5Q0JFN0Y1RkMxOTMxRTdBMkJCQjQ5N0VERkE5
MTI0MTQwQThCMDA4MDgzNjQxREI4QzhCRDUwM0ZCQTM0OUI1NzU0NUJCMkZBQUVG
ODVGMUE3QTAyMkZFODFDOTk4M0NFNURFMTQ5RUFCQTI5OEQxMEEwNEZDNzEyMUFB
MEE0Q0E1QzQ1MDg1NTA3QTU2N0Y5ODE2QUM5QTRDODJCNEU1MzBEODc4Q0Q4QUU0
NDY3QjU2QjFCRTVFMzczMUU5ODM5OEE4MkU2MkE0RUNFQ0ZCQzkzRjEyNDUxREYx
Mzg5REQwMUYxNjNCMzEzQTM3OUMzRUI1QjVFQjkwNUQ5QjEzMTY0OUZCNjlCMDUw
MEE5OEVFODQ0NkREQjM0RjhERjZCRjc3REI4ODA0QzA0RDRBRDk5Mzk1QjYyMUY5
QUE3MEFDOTRDQkFGQUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxHvOCOiHDTMqBAA4cVx49OoThLuzinE/1Q/p7FefgMxMOpbuBosC
sef4297xHiCZcCoEcfDgfhiaPJVJ+005+xS+N9XiBa4tsR6IK5QH6AvZinlAAH5a
6CBC8py+f1/Bkx56K7tJft+pEkFAqLAICDZB24yL1QP7o0m1dUW7L6rvhfGnoCL+
gcmYPOXeFJ6ropjRCgT8cSGqCkylxFCFUHpWf5gWrJpMgrTlMNh4zYrkRntWsb5e
NzHpg5ioLmKk7Oz7yT8SRR3xOJ3QHxY7MTo3nD61teuQXZsTFkn7abBQCpjuhEbd
s0+N9r9324gEwE1K2ZOVtiH5qnCslMuvrQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FEvmeOWA+32Luwq76oa2XQAJILCiMB8GA1UdIwQYMBaAFJNFN9IAaRhTnU5kFoDo
Xf56kvVOMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RrODFTcGFLTEJDb3NX
WW1rUjVBQnhNWGMya0pTTW93UDlTNlVnUTgxaDdxLzEvOTM0NTM3RDIwMDY5MTg1
MzlENEU2NDE2ODBFODVERkU3QTkyRjU0RS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS85MzQ1MzdEMjAwNjkxODUzOUQ0RTY0MTY4MEU4NURGRTdBOTJG
NTRFLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EazgxU3BhS0xCQ29zV1lta1I1
QUJ4TVhjMmtKU01vd1A5UzZVZ1E4MWg3cS8xLzMyMzgzMDM0M2EzMTM3MzEzMDNh
M2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzkzODM5MzQzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
FxAwDQYJKoZIhvcNAQELBQADggEBAMO+fEbvUUFHqPtWlZXZoDc0E4gNQWB/KBfY
XxdPwj0zbV0VXIOsvb4faXiUfqCEh6CuA3xTc7Hoi/vc2sYSkFZeZh5kpPt25tRF
BDCqgkL+1ldYKtozGvI3M0yBDOBVurTNK19gJf/QT+XBRrQgMnUFk6NEfxMcu555
0T1ARpCIlev4BEi60oNCg6ZIwv5a18WG6exwbdlFFmGrUfPgn3LGRwhFmdIuczaA
gHf4m5v0KgGCQppJPii/y8zuFJAFueTJ0QnQ8Ovbktph5i8FnC7FT39tZaLP56Vl
tcr8gdvNBFx9AZw5a0ITzRPvh10CPfWL3UQAEMZtjArZVBRUTrs=
-----END CERTIFICATE-----
Generated at Wed Apr 8 20:41:20 2026 by rpki-client