Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/323830343a313861343a3a2f33322d3438203d3e203631393435.roa
File:                     323830343a313861343a3a2f33322d3438203d3e203631393435.roa (raw, json)
Hash identifier:          zG9p2gmYO/fEqc2msRtR+vBTBr/dsVxHBxbXwsjpWdw=
Subject key identifier:   00:15:FC:F9:E0:33:DC:61:B9:26:24:90:F7:ED:3F:B5:92:E0:FF:9C
Certificate issuer:       /CN=0CA1F86A709765A7CD152F713BB3F55F2EE1B556
Certificate serial:       6FE8BE9E2C81F3065BF4E47EE28D6778D3DEB6A3
Authority key identifier: 0C:A1:F8:6A:70:97:65:A7:CD:15:2F:71:3B:B3:F5:5F:2E:E1:B5:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/323830343a313861343a3a2f33322d3438203d3e203631393435.roa
Signing time:             Mon 06 Apr 2026 19:27:50 +0000
ROA not before:           Mon 06 Apr 2026 19:22:50 +0000
ROA not after:            Mon 05 Apr 2027 19:27:50 +0000
asID:                     61945
IP address blocks:        2804:18a4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.crl
                          rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 03:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e8:be:9e:2c:81:f3:06:5b:f4:e4:7e:e2:8d:67:78:d3:de:b6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CA1F86A709765A7CD152F713BB3F55F2EE1B556
        Validity
            Not Before: Apr  6 19:22:50 2026 GMT
            Not After : Apr  5 19:27:50 2027 GMT
        Subject: CN=0015FCF9E033DC61B9262490F7ED3FB592E0FF9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:dd:f8:24:e0:55:7d:91:3c:38:0e:ad:64:
                    36:6d:8d:08:13:10:35:4f:be:6e:f1:e0:90:51:e1:
                    47:a8:22:84:2e:09:88:29:48:a8:50:c0:29:23:c7:
                    58:a0:39:5c:af:c0:e9:7d:70:0f:2b:e1:a0:24:b5:
                    e9:82:52:25:b2:18:84:a0:59:9f:b6:64:da:eb:bd:
                    c8:99:0a:27:b1:fd:f8:9c:98:f5:db:c9:35:29:37:
                    a6:77:fc:c2:82:c9:98:13:99:71:12:b5:47:20:9c:
                    b3:c0:41:39:ef:5e:7d:6e:38:55:bc:6f:ac:28:6f:
                    5e:6b:f1:0f:6c:61:bf:f9:23:be:b2:e8:8a:2b:ed:
                    d9:c4:cb:45:dc:8d:2a:a5:c8:8e:ed:41:db:e2:bf:
                    ea:db:45:c9:91:85:3b:3a:6d:27:66:f5:52:6c:5e:
                    25:8a:cb:5f:09:46:03:69:01:04:b2:19:c1:c1:e4:
                    b8:c4:4f:6d:f2:20:76:83:71:39:30:b1:5d:ff:fd:
                    9a:22:c0:16:75:7d:e4:be:19:19:ba:d2:3b:24:47:
                    5b:5b:d2:33:9c:9d:75:ea:19:93:ac:0f:f4:3a:98:
                    78:c9:fc:4d:0b:e1:ec:5c:a3:bc:1c:11:99:44:e9:
                    52:35:50:2a:ea:90:f4:32:9a:a2:dc:97:21:b2:aa:
                    72:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:15:FC:F9:E0:33:DC:61:B9:26:24:90:F7:ED:3F:B5:92:E0:FF:9C
            X509v3 Authority Key Identifier:
                keyid:0C:A1:F8:6A:70:97:65:A7:CD:15:2F:71:3B:B3:F5:5F:2E:E1:B5:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/323830343a313861343a3a2f33322d3438203d3e203631393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:90:0b:79:ad:b6:63:4e:87:e7:54:f3:07:2b:32:fe:d3:17:
         ae:fc:bc:dc:50:c8:8d:b5:94:8e:97:43:e7:b1:df:4e:41:68:
         9e:19:96:77:6c:9b:2b:b2:97:b9:28:ba:81:c9:08:fb:11:05:
         8b:f2:a1:1a:e6:b6:0d:73:96:40:3d:35:d1:bc:a5:67:3e:e5:
         bb:2f:4b:a4:79:49:47:b6:fd:86:6b:ff:9c:eb:b9:df:57:81:
         f2:f3:1f:53:68:f8:18:77:90:21:a4:13:de:37:0c:0c:5e:d9:
         2a:89:f7:6c:25:75:db:92:10:56:47:0e:61:60:b9:eb:43:d6:
         fd:08:f8:12:eb:17:02:92:d6:50:64:60:02:8e:a2:ca:7e:76:
         ff:19:f2:26:2e:2a:7d:2e:bd:4d:91:0a:d3:a2:00:7c:f1:62:
         f6:02:8c:08:0f:33:84:bc:76:d5:57:e7:df:53:01:21:3b:63:
         29:0a:38:de:d0:63:3f:68:7e:15:b0:8e:18:19:e2:13:63:11:
         96:84:54:a0:7f:52:2c:95:a4:6d:c2:d2:31:3d:ac:2f:7f:16:
         00:53:7b:ca:1d:ab:87:43:93:52:78:08:8e:2b:66:d7:8c:66:
         30:7f:7b:f2:a4:27:1c:68:ac:98:42:e7:97:33:e1:78:43:d9:
         5d:fc:71:35
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUb+i+niyB8wZb9OR+4o1neNPetqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENBMUY4NkE3MDk3NjVBN0NEMTUyRjcxM0JCM0Y1NUYy
RUUxQjU1NjAeFw0yNjA0MDYxOTIyNTBaFw0yNzA0MDUxOTI3NTBaMDMxMTAvBgNV
BAMTKDAwMTVGQ0Y5RTAzM0RDNjFCOTI2MjQ5MEY3RUQzRkI1OTJFMEZGOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrpt34JOBVfZE8OA6tZDZtjQgT
EDVPvm7x4JBR4UeoIoQuCYgpSKhQwCkjx1igOVyvwOl9cA8r4aAktemCUiWyGISg
WZ+2ZNrrvciZCiex/ficmPXbyTUpN6Z3/MKCyZgTmXEStUcgnLPAQTnvXn1uOFW8
b6wob15r8Q9sYb/5I76y6Ior7dnEy0XcjSqlyI7tQdviv+rbRcmRhTs6bSdm9VJs
XiWKy18JRgNpAQSyGcHB5LjET23yIHaDcTkwsV3//ZoiwBZ1feS+GRm60jskR1tb
0jOcnXXqGZOsD/Q6mHjJ/E0L4exco7wcEZlE6VI1UCrqkPQymqLclyGyqnKFAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUABX8+eAz3GG5JiSQ9+0/tZLg/5wwHwYDVR0j
BBgwFoAUDKH4anCXZafNFS9xO7P1Xy7htVYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlBaS2JDblJ1cjRvdHZ2Mmtuek5weFdKcm5xTGczMnpZZjhOSEx6RHc2
cFQvMC8wQ0ExRjg2QTcwOTc2NUE3Q0QxNTJGNzEzQkIzRjU1RjJFRTFCNTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDQTFGODZBNzA5NzY1QTdD
RDE1MkY3MTNCQjNGNTVGMkVFMUI1NTYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJQWktiQ25SdXI0b3R2djJrbnpOcHhXSnJucUxnMzJ6WWY4TkhMekR3NnBULzAv
MzIzODMwMzQzYTMxMzg2MTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM5
MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGKQwDQYJKoZIhvcNAQELBQADggEBAJqQC3mttmNO
h+dU8wcrMv7TF678vNxQyI21lI6XQ+ex305BaJ4Zlndsmyuyl7kouoHJCPsRBYvy
oRrmtg1zlkA9NdG8pWc+5bsvS6R5SUe2/YZr/5zrud9XgfLzH1No+Bh3kCGkE943
DAxe2SqJ92wldduSEFZHDmFguetD1v0I+BLrFwKS1lBkYAKOosp+dv8Z8iYuKn0u
vU2RCtOiAHzxYvYCjAgPM4S8dtVX599TASE7YykKON7QYz9ofhWwjhgZ4hNjEZaE
VKB/UiyVpG3C0jE9rC9/FgBTe8odq4dDk1J4CI4rZteMZjB/e/KkJxxorJhC55cz
4XhD2V38cTU=
-----END CERTIFICATE-----
Generated at Thu Apr 9 14:11:27 2026 by rpki-client