Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/323830343a6433303a3a2f33322d3438203d3e203532363130.roa
File:                     323830343a6433303a3a2f33322d3438203d3e203532363130.roa (raw, json)
Hash identifier:          TDLBo76jFNpuodJNtAWKMwVUAftYbrnSV9aa6G9fsjA=
Subject key identifier:   06:1C:11:AB:2E:9A:50:15:3F:9B:85:BF:4A:33:18:39:35:29:0F:2C
Certificate issuer:       /CN=5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551
Certificate serial:       271DEE332908E398C5AA75B4AFDFBB55169F7143
Authority key identifier: 5D:1A:69:4A:D3:A6:B6:DB:C8:AF:D1:A4:17:EE:3B:F5:C6:AC:85:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/323830343a6433303a3a2f33322d3438203d3e203532363130.roa
Signing time:             Mon 30 Mar 2026 17:11:31 +0000
ROA not before:           Mon 30 Mar 2026 17:06:31 +0000
ROA not after:            Mon 29 Mar 2027 17:11:31 +0000
asID:                     52610
IP address blocks:        2804:d30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.crl
                          rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 13:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1d:ee:33:29:08:e3:98:c5:aa:75:b4:af:df:bb:55:16:9f:71:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551
        Validity
            Not Before: Mar 30 17:06:31 2026 GMT
            Not After : Mar 29 17:11:31 2027 GMT
        Subject: CN=061C11AB2E9A50153F9B85BF4A33183935290F2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:12:27:bd:0b:8d:99:1b:ee:15:4e:9d:e8:b8:
                    ae:bd:0c:eb:f9:75:8b:68:a6:a0:34:18:62:ba:1a:
                    f3:c7:07:2a:6d:1f:5e:46:47:2f:6a:5b:25:7e:6a:
                    a3:72:d9:26:06:90:37:8b:08:d5:81:87:2d:54:60:
                    bf:2d:bc:4b:ee:dd:86:d0:14:b9:73:1a:02:8c:39:
                    1f:35:bf:96:d7:aa:4a:5e:5b:ec:ab:9b:41:ff:d6:
                    b2:f4:18:40:e2:6b:10:2b:b7:e8:fe:74:b4:19:b0:
                    d5:a3:31:1b:e3:6c:11:32:e1:cc:87:4d:c2:ca:b0:
                    4e:8c:6c:ae:fd:14:52:0d:f2:8b:95:7e:86:e5:d8:
                    68:1a:b2:33:d8:55:8b:4b:21:b5:36:54:e8:23:89:
                    78:00:be:bf:16:a8:8a:0c:a9:df:68:45:a7:b4:c3:
                    9d:d5:06:7e:f5:2e:eb:e6:be:44:78:dc:51:29:f6:
                    89:fd:e4:3b:e7:c0:d2:0e:44:05:83:31:70:de:a3:
                    dc:e7:7d:a1:22:29:61:7b:a1:04:bd:c1:cd:ce:df:
                    0c:83:34:14:6b:e5:3c:4c:04:fb:09:43:99:90:19:
                    fb:0e:6a:0a:52:08:22:49:3e:f7:41:57:53:f8:e1:
                    81:4d:43:5d:6d:9e:f5:b2:62:02:34:da:0c:c0:1c:
                    b6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1C:11:AB:2E:9A:50:15:3F:9B:85:BF:4A:33:18:39:35:29:0F:2C
            X509v3 Authority Key Identifier:
                keyid:5D:1A:69:4A:D3:A6:B6:DB:C8:AF:D1:A4:17:EE:3B:F5:C6:AC:85:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/323830343a6433303a3a2f33322d3438203d3e203532363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d30::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:1d:36:40:58:67:81:c5:9f:a4:16:ab:c5:38:8e:34:5b:8c:
         0b:56:26:d3:9a:fd:98:95:2d:92:e4:5e:be:ad:a2:30:22:64:
         1e:30:4f:2b:00:7c:76:81:fe:6e:2b:01:88:99:e0:13:de:3a:
         80:49:ee:34:b9:01:e3:0b:c2:e4:65:40:62:ba:70:95:f1:7d:
         31:31:81:bf:28:90:ef:73:80:76:ee:80:eb:41:bd:45:3f:b8:
         36:f4:45:d3:59:46:46:a9:61:db:c5:93:41:cf:a1:97:8f:60:
         09:1c:15:8c:c3:59:9b:23:a6:5f:8f:b6:03:a9:74:32:bf:c1:
         6a:97:56:38:8c:30:88:cd:d9:10:c0:bc:7d:d8:a8:fc:35:68:
         79:5e:a1:48:61:97:e4:5e:e1:24:ce:3d:11:63:c8:36:bc:cc:
         1e:35:b0:e0:b4:50:88:1f:35:29:12:7d:ef:6d:fb:a7:91:d7:
         8f:17:8f:cc:85:46:6a:cc:0f:cf:bb:91:42:5e:4e:c6:d1:40:
         c3:6b:f0:ae:b0:ef:b6:35:56:31:1d:00:64:53:13:f5:58:69:
         a4:5c:fb:5a:63:7e:40:52:40:4b:70:5e:90:dc:3d:78:41:13:
         ed:f6:06:0d:30:5f:80:e9:d6:1f:7d:fc:40:d2:17:84:b9:db:
         d3:e4:3d:0d
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUJx3uMykI45jFqnW0r9+7VRafcUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxQTY5NEFEM0E2QjZEQkM4QUZEMUE0MTdFRTNCRjVD
NkFDODU1MTAeFw0yNjAzMzAxNzA2MzFaFw0yNzAzMjkxNzExMzFaMDMxMTAvBgNV
BAMTKDA2MUMxMUFCMkU5QTUwMTUzRjlCODVCRjRBMzMxODM5MzUyOTBGMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFEie9C42ZG+4VTp3ouK69DOv5
dYtopqA0GGK6GvPHByptH15GRy9qWyV+aqNy2SYGkDeLCNWBhy1UYL8tvEvu3YbQ
FLlzGgKMOR81v5bXqkpeW+yrm0H/1rL0GEDiaxArt+j+dLQZsNWjMRvjbBEy4cyH
TcLKsE6MbK79FFIN8ouVfobl2GgasjPYVYtLIbU2VOgjiXgAvr8WqIoMqd9oRae0
w53VBn71LuvmvkR43FEp9on95DvnwNIORAWDMXDeo9znfaEiKWF7oQS9wc3O3wyD
NBRr5TxMBPsJQ5mQGfsOagpSCCJJPvdBV1P44YFNQ11tnvWyYgI02gzAHLYrAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUBhwRqy6aUBU/m4W/SjMYOTUpDywwHwYDVR0j
BBgwFoAUXRppStOmttvIr9GkF+479cashVEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzNiekFQNm14YmM1S2lObTNCdlZTREpxUTJYRGNicllBTms3V2Zwbm9r
UUMvMC81RDFBNjk0QUQzQTZCNkRCQzhBRkQxQTQxN0VFM0JGNUM2QUM4NTUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEMUE2OTRBRDNBNkI2REJD
OEFGRDFBNDE3RUUzQkY1QzZBQzg1NTEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMzYnpBUDZteGJjNUtpTm0zQnZWU0RKcVEyWERjYnJZQU5rN1dmcG5va1FDLzAv
MzIzODMwMzQzYTY0MzMzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNjMx
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBA0wMA0GCSqGSIb3DQEBCwUAA4IBAQAeHTZAWGeBxZ+k
FqvFOI40W4wLVibTmv2YlS2S5F6+raIwImQeME8rAHx2gf5uKwGImeAT3jqASe40
uQHjC8LkZUBiunCV8X0xMYG/KJDvc4B27oDrQb1FP7g29EXTWUZGqWHbxZNBz6GX
j2AJHBWMw1mbI6Zfj7YDqXQyv8Fql1Y4jDCIzdkQwLx92Kj8NWh5XqFIYZfkXuEk
zj0RY8g2vMweNbDgtFCIHzUpEn3vbfunkdePF4/MhUZqzA/Pu5FCXk7G0UDDa/Cu
sO+2NVYxHQBkUxP1WGmkXPtaY35AUkBLcF6Q3D14QRPt9gYNMF+A6dYfffxA0heE
udvT5D0N
-----END CERTIFICATE-----
Generated at Thu Apr 9 16:41:18 2026 by rpki-client