Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31363a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31363a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          9Pat68qpL9r+li0ZeCScdFduw8bhMB58dWBvMNjGuPs=
Subject key identifier:   2F:D6:26:40:EF:77:97:A1:77:10:6D:15:DF:4B:5F:25:D8:84:31:B0
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       3BEB2B328A8D1011527D02842E096131A3472075
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31363a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 01 Apr 2026 19:28:30 +0000
ROA not before:           Wed 01 Apr 2026 19:23:30 +0000
ROA not after:            Wed 31 Mar 2027 19:28:30 +0000
asID:                     52580
IP address blocks:        2804:cf8:16::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:eb:2b:32:8a:8d:10:11:52:7d:02:84:2e:09:61:31:a3:47:20:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr  1 19:23:30 2026 GMT
            Not After : Mar 31 19:28:30 2027 GMT
        Subject: CN=2FD62640EF7797A177106D15DF4B5F25D88431B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:42:42:c9:d7:0e:a2:15:80:51:e8:2a:cf:78:
                    48:97:74:41:03:c0:f5:a9:46:cc:e0:6b:58:b1:81:
                    90:96:7f:19:78:8d:8b:76:dc:8d:b6:cd:4e:28:71:
                    d1:bc:97:23:c5:c5:19:9d:29:b4:a5:2c:ef:8e:96:
                    05:f4:2e:b6:98:b8:ab:95:d8:b9:ea:a0:4d:6f:d8:
                    2b:56:4a:ca:16:74:5e:b4:00:04:d5:81:27:9a:72:
                    cb:04:41:14:06:53:53:8a:b0:0a:f9:ca:8b:2f:54:
                    05:b2:46:fc:b2:17:1a:93:e7:69:f9:d9:bf:64:7d:
                    25:56:21:99:e3:e9:4c:84:f5:de:f9:3c:39:9c:1e:
                    9a:f9:dd:9b:e1:52:11:e2:14:56:cf:da:80:eb:d5:
                    07:de:a6:a8:ed:f9:81:ad:26:dc:6e:0e:17:94:d4:
                    b8:97:f2:25:b8:68:52:98:b9:c3:e3:f1:5e:61:ff:
                    8b:1c:eb:e2:4e:57:49:cb:de:10:c5:dc:1a:9f:14:
                    07:a3:4a:53:99:b2:ff:3e:79:15:ef:a8:9d:7b:4b:
                    0b:90:5a:0a:55:85:22:63:af:02:d2:a5:46:83:f6:
                    38:f7:2b:e9:b6:36:85:4a:7a:59:cb:9c:ec:b0:9b:
                    c5:67:9e:f6:1b:23:00:b1:f7:51:05:28:1a:56:f7:
                    74:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D6:26:40:EF:77:97:A1:77:10:6D:15:DF:4B:5F:25:D8:84:31:B0
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31363a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:8d:be:5b:9e:5b:b9:f7:51:cd:d9:7b:6d:f7:58:8a:d1:e1:
         eb:13:3f:53:4d:30:74:4e:f6:12:b8:e6:16:82:c3:46:7c:f4:
         a4:43:2f:af:23:3c:1a:ac:b3:1c:6a:4e:30:50:7a:31:2f:53:
         4f:6b:48:37:35:7e:0a:be:20:1f:b8:f4:b1:65:18:a6:74:07:
         6c:e5:f6:48:2a:b5:8c:51:6c:40:92:27:be:a2:ed:14:c4:10:
         e5:25:65:db:d4:d5:cc:82:a6:5c:fa:d2:37:d7:ec:c5:bc:c7:
         0f:bf:f2:f8:c9:5a:65:f0:1e:52:8a:ea:21:24:1e:0d:d3:12:
         5f:7d:53:3b:96:c7:03:e7:9e:97:a0:42:d5:26:f0:6e:08:70:
         65:98:cd:95:3b:5b:79:bd:d9:a0:3b:4e:89:ef:e5:e5:e0:f9:
         11:0e:71:41:b2:54:78:38:ab:64:bf:a2:71:7c:9a:4c:5b:12:
         53:bc:30:56:d7:8f:b3:ec:0a:c4:bf:44:eb:35:3d:3b:b4:ba:
         a0:56:6e:72:f6:de:43:9a:1a:86:4c:3e:da:9d:55:07:25:e8:
         37:2c:9b:3c:19:1e:a9:7e:4b:98:b8:0c:2a:22:d0:fa:ab:17:
         39:13:8b:68:c9:a2:2c:29:5f:8b:d8:ed:42:ad:83:27:d3:fd:
         4e:1b:d8:f9
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUO+srMoqNEBFSfQKELglhMaNHIHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEzMTM2QURFRUJCNTQxMTFFMkMwOUYyQzdERkJCMzk1
MUVCQ0ZEMDAeFw0yNjA0MDExOTIzMzBaFw0yNzAzMzExOTI4MzBaMDMxMTAvBgNV
BAMTKDJGRDYyNjQwRUY3Nzk3QTE3NzEwNkQxNURGNEI1RjI1RDg4NDMxQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfQkLJ1w6iFYBR6CrPeEiXdEED
wPWpRszga1ixgZCWfxl4jYt23I22zU4ocdG8lyPFxRmdKbSlLO+OlgX0LraYuKuV
2LnqoE1v2CtWSsoWdF60AATVgSeacssEQRQGU1OKsAr5yosvVAWyRvyyFxqT52n5
2b9kfSVWIZnj6UyE9d75PDmcHpr53ZvhUhHiFFbP2oDr1Qfepqjt+YGtJtxuDheU
1LiX8iW4aFKYucPj8V5h/4sc6+JOV0nL3hDF3BqfFAejSlOZsv8+eRXvqJ17SwuQ
WgpVhSJjrwLSpUaD9jj3K+m2NoVKelnLnOywm8VnnvYbIwCx91EFKBpW93SfAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUL9YmQO93l6F3EG0V30tfJdiEMbAwHwYDVR0j
BBgwFoAUwTE2re67VBEeLAnyx9+7OVHrz9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9DMTMxMzZBREVFQkI1NDExMUUyQzA5RjJDN0RGQkIzOTUxRUJDRkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMzEzNkFERUVCQjU0MTEx
RTJDMDlGMkM3REZCQjM5NTFFQkNGRDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzIzODMwMzQzYTYzNjYzODNhMzEzNjNhM2EyZjM0MzgyZDMxMzIzODIwM2QzZTIw
MzUzMjM1MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEDPgAFjANBgkqhkiG9w0BAQsFAAOCAQEA
d42+W55bufdRzdl7bfdYitHh6xM/U00wdE72ErjmFoLDRnz0pEMvryM8GqyzHGpO
MFB6MS9TT2tINzV+Cr4gH7j0sWUYpnQHbOX2SCq1jFFsQJInvqLtFMQQ5SVl29TV
zIKmXPrSN9fsxbzHD7/y+MlaZfAeUorqISQeDdMSX31TO5bHA+eel6BC1Sbwbghw
ZZjNlTtbeb3ZoDtOie/l5eD5EQ5xQbJUeDirZL+icXyaTFsSU7wwVtePs+wKxL9E
6zU9O7S6oFZucvbeQ5oahkw+2p1VByXoNyybPBkeqX5LmLgMKiLQ+qsXOROLaMmi
LClfi9jtQq2DJ9P9ThvY+Q==
-----END CERTIFICATE-----
Generated at Wed Apr 8 16:01:52 2026 by rpki-client