Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/323830343a336637633a3a2f33322d3335203d3e20323635383936.roa
File:                     323830343a336637633a3a2f33322d3335203d3e20323635383936.roa (raw, json)
Hash identifier:          Pic2jDCmQx07E4fiLxBRocdYtYmYalFFH2Gpm7pW+dg=
Subject key identifier:   79:39:C1:0E:BF:3F:80:AD:2C:B5:08:E0:E0:71:36:7A:A9:1B:31:30
Certificate issuer:       /CN=0A618E37CE6F28AC4596559A61DA36BB980E6B3E
Certificate serial:       171AA27AC4ED1D8F53AA181022CBBC4410F7A7C7
Authority key identifier: 0A:61:8E:37:CE:6F:28:AC:45:96:55:9A:61:DA:36:BB:98:0E:6B:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A618E37CE6F28AC4596559A61DA36BB980E6B3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/323830343a336637633a3a2f33322d3335203d3e20323635383936.roa
Signing time:             Wed 01 Apr 2026 23:41:05 +0000
ROA not before:           Wed 01 Apr 2026 23:36:05 +0000
ROA not after:            Wed 31 Mar 2027 23:41:05 +0000
asID:                     265896
IP address blocks:        2804:3f7c::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/0A618E37CE6F28AC4596559A61DA36BB980E6B3E.crl
                          rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/0A618E37CE6F28AC4596559A61DA36BB980E6B3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A618E37CE6F28AC4596559A61DA36BB980E6B3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 01:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1a:a2:7a:c4:ed:1d:8f:53:aa:18:10:22:cb:bc:44:10:f7:a7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A618E37CE6F28AC4596559A61DA36BB980E6B3E
        Validity
            Not Before: Apr  1 23:36:05 2026 GMT
            Not After : Mar 31 23:41:05 2027 GMT
        Subject: CN=7939C10EBF3F80AD2CB508E0E071367AA91B3130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8b:ea:65:f3:c0:32:6b:9e:b7:5a:9a:ba:d8:
                    2f:0d:04:70:7d:8b:cc:6f:05:df:20:cf:2f:7b:36:
                    d4:12:5f:a3:1e:48:20:55:c8:18:db:2d:0e:c9:fc:
                    55:91:6f:f9:76:db:80:d2:7e:e9:d3:3d:df:fc:c7:
                    8e:16:b6:6d:09:52:6c:6f:a4:e7:0d:ad:2c:6f:e8:
                    b9:53:dd:1f:e9:c5:3b:23:3c:5d:b9:7a:b4:aa:8d:
                    31:17:7d:89:53:0e:f1:2e:78:b5:8c:1a:ff:c8:40:
                    5c:44:6d:60:2b:45:0d:14:01:ae:ec:a0:1b:f1:bc:
                    52:c7:2f:7d:63:60:8b:59:c2:d1:2a:db:fe:e3:e5:
                    dd:17:b7:fd:c3:88:09:19:df:2d:e3:95:d3:bd:0a:
                    f7:3c:ec:cf:72:53:d1:23:5d:93:1b:f7:4f:f8:ee:
                    0c:83:14:64:07:60:8c:a9:7b:35:80:ac:2d:99:a8:
                    cd:f1:e6:41:f8:3f:c5:c9:1b:1d:c5:a0:cf:77:21:
                    11:de:3a:2d:4c:31:2b:7d:13:6b:51:f8:01:00:e8:
                    f2:c1:c9:78:cf:3a:65:8e:99:9c:4e:b2:cc:cd:6f:
                    de:38:8f:8d:82:e7:cb:98:61:2e:9c:ab:e4:49:32:
                    c2:1e:40:63:bd:b6:5a:78:5d:5b:be:a8:7a:50:bb:
                    61:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:39:C1:0E:BF:3F:80:AD:2C:B5:08:E0:E0:71:36:7A:A9:1B:31:30
            X509v3 Authority Key Identifier:
                keyid:0A:61:8E:37:CE:6F:28:AC:45:96:55:9A:61:DA:36:BB:98:0E:6B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/0A618E37CE6F28AC4596559A61DA36BB980E6B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A618E37CE6F28AC4596559A61DA36BB980E6B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/323830343a336637633a3a2f33322d3335203d3e20323635383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:c1:25:86:59:af:39:56:92:5f:d8:4b:c0:85:61:dd:c4:18:
         e1:ed:c8:31:bf:e9:68:47:0e:cb:71:76:9c:86:c9:47:84:9d:
         8f:1a:4d:8a:df:4c:ff:3e:a3:19:92:81:9e:09:59:3b:89:36:
         e2:5d:05:b3:cd:e6:96:ae:76:38:e3:02:23:c6:84:64:31:06:
         ed:1c:26:86:4f:bf:2f:02:4b:a4:c3:7f:b1:39:13:89:dc:b0:
         24:9a:34:df:2b:7d:6f:be:97:f8:99:9b:da:74:be:28:de:f5:
         2a:ea:a4:5c:96:d0:56:62:e6:b6:f9:5a:bf:03:76:21:6e:c6:
         db:cb:c8:79:ce:5f:62:f9:bf:a6:59:36:0f:be:65:aa:e6:33:
         9a:67:95:c6:26:f9:a2:f2:fe:57:b5:79:3c:4a:46:8b:e5:4f:
         fd:fe:86:25:1b:dc:6a:79:46:03:33:ca:4c:c1:21:54:10:ec:
         5c:45:ec:77:a6:f0:82:3d:58:1a:33:7a:03:1e:4a:71:91:12:
         2b:2e:12:3d:83:85:b6:8c:6a:82:e4:e2:f7:d1:66:2a:48:b3:
         18:f5:47:55:1c:3f:8d:a1:ea:76:aa:4a:fd:e3:57:9f:da:dc:
         42:5c:10:ce:de:54:af:9e:5d:f3:e8:22:17:36:ab:7a:6c:6a:
         af:b9:f1:4a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFxqiesTtHY9TqhgQIsu8RBD3p8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE2MThFMzdDRTZGMjhBQzQ1OTY1NTlBNjFEQTM2QkI5
ODBFNkIzRTAeFw0yNjA0MDEyMzM2MDVaFw0yNzAzMzEyMzQxMDVaMDMxMTAvBgNV
BAMTKDc5MzlDMTBFQkYzRjgwQUQyQ0I1MDhFMEUwNzEzNjdBQTkxQjMxMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCti+pl88Aya563Wpq62C8NBHB9
i8xvBd8gzy97NtQSX6MeSCBVyBjbLQ7J/FWRb/l224DSfunTPd/8x44Wtm0JUmxv
pOcNrSxv6LlT3R/pxTsjPF25erSqjTEXfYlTDvEueLWMGv/IQFxEbWArRQ0UAa7s
oBvxvFLHL31jYItZwtEq2/7j5d0Xt/3DiAkZ3y3jldO9Cvc87M9yU9EjXZMb90/4
7gyDFGQHYIypezWArC2ZqM3x5kH4P8XJGx3FoM93IRHeOi1MMSt9E2tR+AEA6PLB
yXjPOmWOmZxOsszNb944j42C58uYYS6cq+RJMsIeQGO9tlp4XVu+qHpQu2HnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUeTnBDr8/gK0stQjg4HE2eqkbMTAwHwYDVR0j
BBgwFoAUCmGON85vKKxFllWaYdo2u5gOaz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnR2dnNjanYxak1VTHNRWUNhcjNLVzVDcXJVcjNCZ3Zidkx5Zmg1WlY5
ckYvMC8wQTYxOEUzN0NFNkYyOEFDNDU5NjU1OUE2MURBMzZCQjk4MEU2QjNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBNjE4RTM3Q0U2RjI4QUM0
NTk2NTU5QTYxREEzNkJCOTgwRTZCM0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z0dnZzY2p2MWpNVUxzUVlDYXIzS1c1Q3FyVXIzQmd2YnZMeWZoNVpWOXJGLzAv
MzIzODMwMzQzYTMzNjYzNzYzM2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNjM1
MzgzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ/fDANBgkqhkiG9w0BAQsFAAOCAQEAHcElhlmv
OVaSX9hLwIVh3cQY4e3IMb/paEcOy3F2nIbJR4SdjxpNit9M/z6jGZKBnglZO4k2
4l0Fs83mlq52OOMCI8aEZDEG7Rwmhk+/LwJLpMN/sTkTidywJJo03yt9b76X+Jmb
2nS+KN71KuqkXJbQVmLmtvlavwN2IW7G28vIec5fYvm/plk2D75lquYzmmeVxib5
ovL+V7V5PEpGi+VP/f6GJRvcanlGAzPKTMEhVBDsXEXsd6bwgj1YGjN6Ax5KcZES
Ky4SPYOFtoxqguTi99FmKkizGPVHVRw/jaHqdqpK/eNXn9rcQlwQzt5Ur55d8+gi
Fzaremxqr7nxSg==
-----END CERTIFICATE-----
Generated at Wed Apr 8 13:45:43 2026 by rpki-client