Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a323030303a3a2f34302d3430203d3e20323731363132.roa
File:                     323830343a376534303a323030303a3a2f34302d3430203d3e20323731363132.roa (raw, json)
Hash identifier:          h9P82zCmspa1v5XKg8go+ktIpfIIPH+TtaFFRXxeV8k=
Subject key identifier:   E6:02:B2:87:60:22:28:1E:B3:CB:D1:15:87:94:BB:EE:7D:B5:F0:FF
Certificate issuer:       /CN=D449E37DE5FDE1C414F169BA00C9AC63D56EEF83
Certificate serial:       28F4C75244E9FFBDD102584D0C5724CF90BC06E0
Authority key identifier: D4:49:E3:7D:E5:FD:E1:C4:14:F1:69:BA:00:C9:AC:63:D5:6E:EF:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a323030303a3a2f34302d3430203d3e20323731363132.roa
Signing time:             Wed 27 May 2026 17:08:07 +0000
ROA not before:           Wed 27 May 2026 17:03:07 +0000
ROA not after:            Wed 26 May 2027 17:08:07 +0000
asID:                     271612
IP address blocks:        2804:7e40:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 16:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f4:c7:52:44:e9:ff:bd:d1:02:58:4d:0c:57:24:cf:90:bc:06:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D449E37DE5FDE1C414F169BA00C9AC63D56EEF83
        Validity
            Not Before: May 27 17:03:07 2026 GMT
            Not After : May 26 17:08:07 2027 GMT
        Subject: CN=E602B2876022281EB3CBD1158794BBEE7DB5F0FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:52:38:4c:cd:92:3b:5a:ce:df:b7:cc:0e:13:
                    60:f1:56:99:4d:24:fa:c7:e7:d2:88:e2:d2:ee:f3:
                    74:e6:45:38:62:b5:0b:d4:38:05:e2:8b:a1:83:d3:
                    4f:90:61:cf:8e:c4:f4:1a:0b:f3:cd:6e:d3:04:7f:
                    7b:43:c0:a8:3b:e8:fb:4f:cb:d8:3b:98:94:df:a2:
                    33:94:d5:f2:f8:48:19:29:06:d3:27:7b:5c:3a:fe:
                    0c:31:33:27:a6:84:d8:e7:e5:f9:aa:97:57:b3:38:
                    0c:96:15:da:c9:e5:d9:ca:f8:ee:4a:83:a5:30:73:
                    ee:02:b3:ad:cc:77:4e:80:6b:29:f6:7b:16:03:07:
                    e8:74:b1:e6:90:88:8c:e7:b9:13:0c:29:fa:34:99:
                    c7:a5:70:51:5a:44:58:0a:07:dc:50:91:ac:49:49:
                    71:13:89:5b:84:a6:f3:61:81:cf:da:37:12:85:c0:
                    a7:f6:6a:4b:63:32:e6:85:42:4c:8e:82:bc:b9:4d:
                    bd:17:17:c5:a5:73:aa:b7:1a:f0:30:d2:15:94:6a:
                    b2:fb:ab:21:f9:aa:96:5d:c7:ce:54:6e:45:99:d8:
                    2c:ba:ad:09:1e:3d:dd:ce:7d:c7:18:bc:0d:75:71:
                    a4:14:b4:f0:ee:92:3d:31:e6:0a:88:40:5f:ee:08:
                    eb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:02:B2:87:60:22:28:1E:B3:CB:D1:15:87:94:BB:EE:7D:B5:F0:FF
            X509v3 Authority Key Identifier:
                keyid:D4:49:E3:7D:E5:FD:E1:C4:14:F1:69:BA:00:C9:AC:63:D5:6E:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a323030303a3a2f34302d3430203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c7:5e:9a:34:66:73:89:08:fd:0f:90:a0:31:b5:2a:e3:ad:3f:
         a4:2f:80:45:0c:12:57:cd:7a:93:72:91:56:97:e0:50:a0:ca:
         7d:c6:d8:b7:1a:5a:ca:46:29:34:a4:b8:f0:c2:6a:02:77:dd:
         7f:f7:12:b0:c5:45:10:3c:26:b6:6e:02:26:a4:af:86:3d:d5:
         42:2d:0d:86:5a:b8:47:25:6b:d2:20:d1:85:fa:b3:e2:02:63:
         cc:c1:4d:24:8b:04:3c:70:87:c3:76:10:7a:ba:9f:93:8e:7c:
         4e:8b:d2:53:28:02:03:ee:68:92:60:2e:bc:cb:df:71:b7:0f:
         1b:4e:2c:d9:94:89:0a:12:d4:d8:15:e2:6c:93:02:e6:c8:ae:
         92:01:ce:aa:be:27:e3:b1:cc:89:ee:33:a3:de:4c:df:71:bd:
         c9:5e:45:a9:a0:34:a0:5f:c0:e3:80:e5:83:de:0b:ba:9e:41:
         15:82:82:66:05:ca:f3:c0:e7:20:43:e9:13:01:d9:b5:32:c7:
         af:a6:3c:0d:aa:45:88:b2:1c:9b:80:51:3d:24:1c:49:98:3a:
         93:86:16:61:9d:8b:8c:3a:97:0b:a0:bd:9d:45:7f:8c:6a:d7:
         b3:51:36:64:41:1b:05:e6:e9:83:42:52:12:7f:6f:67:f6:47:
         1d:9e:cf:d3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKPTHUkTp/73RAlhNDFckz5C8BuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ0OUUzN0RFNUZERTFDNDE0RjE2OUJBMDBDOUFDNjNE
NTZFRUY4MzAeFw0yNjA1MjcxNzAzMDdaFw0yNzA1MjYxNzA4MDdaMDMxMTAvBgNV
BAMTKEU2MDJCMjg3NjAyMjI4MUVCM0NCRDExNTg3OTRCQkVFN0RCNUYwRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOUjhMzZI7Ws7ft8wOE2DxVplN
JPrH59KI4tLu83TmRThitQvUOAXii6GD00+QYc+OxPQaC/PNbtMEf3tDwKg76PtP
y9g7mJTfojOU1fL4SBkpBtMne1w6/gwxMyemhNjn5fmql1ezOAyWFdrJ5dnK+O5K
g6Uwc+4Cs63Md06Aayn2exYDB+h0seaQiIznuRMMKfo0mcelcFFaRFgKB9xQkaxJ
SXETiVuEpvNhgc/aNxKFwKf2aktjMuaFQkyOgry5Tb0XF8Wlc6q3GvAw0hWUarL7
qyH5qpZdx85UbkWZ2Cy6rQkePd3OfccYvA11caQUtPDukj0x5gqIQF/uCOtXAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU5gKyh2AiKB6zy9EVh5S77n218P8wHwYDVR0j
BBgwFoAU1EnjfeX94cQU8Wm6AMmsY9Vu74MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMno1OEZldVpiOVV0R3dTNVJaQnBiY1BoMm9hcE14ZW5UVmRiTGNoOUxM
bjUvMC9ENDQ5RTM3REU1RkRFMUM0MTRGMTY5QkEwMEM5QUM2M0Q1NkVFRjgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NDlFMzdERTVGREUxQzQx
NEYxNjlCQTAwQzlBQzYzRDU2RUVGODMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ6NThGZXVaYjlVdEd3UzVSWkJwYmNQaDJvYXBNeGVuVFZkYkxjaDlMTG41LzAv
MzIzODMwMzQzYTM3NjUzNDMwM2EzMjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMTM2MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEfkAgMA0GCSqGSIb3DQEBCwUA
A4IBAQDHXpo0ZnOJCP0PkKAxtSrjrT+kL4BFDBJXzXqTcpFWl+BQoMp9xti3GlrK
Rik0pLjwwmoCd91/9xKwxUUQPCa2bgImpK+GPdVCLQ2GWrhHJWvSINGF+rPiAmPM
wU0kiwQ8cIfDdhB6up+TjnxOi9JTKAID7miSYC68y99xtw8bTizZlIkKEtTYFeJs
kwLmyK6SAc6qvifjscyJ7jOj3kzfcb3JXkWpoDSgX8DjgOWD3gu6nkEVgoJmBcrz
wOcgQ+kTAdm1MsevpjwNqkWIshybgFE9JBxJmDqThhZhnYuMOpcLoL2dRX+Matez
UTZkQRsF5umDQlISf29n9kcdns/T
-----END CERTIFICATE-----
Generated at Sat Jun 13 01:08:53 2026 by rpki-client