Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a633030303a3a2f33342d3334203d3e20323639343636.roa
File:                     323830343a363531303a633030303a3a2f33342d3334203d3e20323639343636.roa (raw, json)
Hash identifier:          hAP14EdG6D62xtEMdUu+nY5/gsZgUywfZZWqwXDFsY8=
Subject key identifier:   08:D0:BC:4B:CD:3D:22:12:70:C5:5A:FF:0F:83:C2:A8:F4:AC:93:72
Certificate issuer:       /CN=D75ABD4B44D8B16CC34566E12A7B68762DCDFA50
Certificate serial:       0FD8C96D9694CA1F6948F8091A6F1C539198E7C0
Authority key identifier: D7:5A:BD:4B:44:D8:B1:6C:C3:45:66:E1:2A:7B:68:76:2D:CD:FA:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a633030303a3a2f33342d3334203d3e20323639343636.roa
Signing time:             Wed 13 May 2026 18:30:52 +0000
ROA not before:           Wed 13 May 2026 18:25:52 +0000
ROA not after:            Wed 12 May 2027 18:30:52 +0000
asID:                     269466
IP address blocks:        2804:6510:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.crl
                          rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 09:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d8:c9:6d:96:94:ca:1f:69:48:f8:09:1a:6f:1c:53:91:98:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D75ABD4B44D8B16CC34566E12A7B68762DCDFA50
        Validity
            Not Before: May 13 18:25:52 2026 GMT
            Not After : May 12 18:30:52 2027 GMT
        Subject: CN=08D0BC4BCD3D221270C55AFF0F83C2A8F4AC9372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:28:56:0b:a6:6d:c6:0c:ea:6f:1e:20:b2:
                    17:c7:88:13:83:9a:db:a6:03:a8:04:fe:77:0d:ed:
                    76:b3:35:ae:0a:81:ca:99:0a:a3:c6:cf:5e:fa:41:
                    4b:78:a6:65:8f:99:58:80:29:ce:e1:47:3a:2b:f8:
                    3a:1f:71:29:71:ac:cf:a8:c6:e8:2f:72:24:c4:cd:
                    e5:27:34:19:db:03:77:14:b9:84:2e:25:66:39:e6:
                    50:2e:bd:75:ca:18:38:4d:07:b8:7f:42:de:f8:37:
                    da:78:a5:92:21:1c:ae:8a:25:c9:6c:b7:96:0d:40:
                    ff:4b:93:44:f5:7a:b2:f8:c3:fb:ba:21:4a:83:90:
                    8a:e7:7d:fc:9c:c5:59:55:e3:a9:c2:82:e1:76:30:
                    54:7e:55:43:ab:20:80:53:a9:c6:56:4d:ed:40:f9:
                    d1:06:3e:5f:6f:6c:cc:5a:f9:39:15:7f:d7:8b:a8:
                    67:48:dd:7c:e3:e5:90:4c:ee:82:90:aa:3d:67:b1:
                    34:72:ae:90:b9:f7:65:22:5b:1b:70:7e:cf:ed:2f:
                    cf:69:49:f0:e8:a7:94:e9:6c:3b:fe:15:ce:9f:ca:
                    28:fc:cc:37:bc:c8:38:03:71:94:67:43:27:fc:fb:
                    0e:f9:97:83:70:2b:ba:86:f2:85:93:46:d8:4a:14:
                    3c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D0:BC:4B:CD:3D:22:12:70:C5:5A:FF:0F:83:C2:A8:F4:AC:93:72
            X509v3 Authority Key Identifier:
                keyid:D7:5A:BD:4B:44:D8:B1:6C:C3:45:66:E1:2A:7B:68:76:2D:CD:FA:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D75ABD4B44D8B16CC34566E12A7B68762DCDFA50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a633030303a3a2f33342d3334203d3e20323639343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6510:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ae:66:72:dd:df:a8:92:9d:dc:81:51:07:e5:53:37:64:59:87:
         5e:d7:30:bf:0c:0e:37:00:25:32:a6:6e:32:66:5f:31:17:cf:
         9b:64:9e:e5:4d:8f:96:ec:ab:16:29:6e:29:56:a7:9f:a5:da:
         a9:9a:55:ac:45:95:dd:02:42:38:75:c7:8e:b9:0d:75:5b:93:
         b8:67:da:56:36:55:e0:e6:60:ce:87:4b:93:34:f5:c1:a8:ef:
         8d:0c:0e:d1:0e:bc:16:be:e9:25:42:31:b4:08:bf:d7:a0:ef:
         cb:f1:11:21:e6:c9:32:3d:fb:5d:e4:33:a1:48:5a:b9:bc:3a:
         0e:c6:eb:62:77:b6:76:9d:3e:c0:b3:e7:cc:a7:50:c7:be:e4:
         11:8d:b5:04:a2:24:83:fa:6b:63:bf:ff:00:38:75:ef:30:8e:
         58:ef:8f:3d:88:78:32:3d:29:c7:85:61:e4:16:de:34:c5:f0:
         06:a0:78:97:e2:0d:b7:b8:07:5e:f8:f1:00:7c:42:3f:13:8b:
         5d:b3:c2:be:d4:6a:f8:80:45:05:9d:f4:1f:f5:17:f8:1d:99:
         94:2c:e9:5e:48:c6:89:ea:95:eb:7d:43:8e:c2:53:1d:db:f9:
         a9:a5:27:ba:8e:7f:86:69:28:d7:46:7e:2f:10:76:aa:36:a3:
         77:01:44:21
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUD9jJbZaUyh9pSPgJGm8cU5GY58AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc1QUJENEI0NEQ4QjE2Q0MzNDU2NkUxMkE3QjY4NzYy
RENERkE1MDAeFw0yNjA1MTMxODI1NTJaFw0yNzA1MTIxODMwNTJaMDMxMTAvBgNV
BAMTKDA4RDBCQzRCQ0QzRDIyMTI3MEM1NUFGRjBGODNDMkE4RjRBQzkzNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4ihWC6Ztxgzqbx4gshfHiBOD
mtumA6gE/ncN7XazNa4KgcqZCqPGz176QUt4pmWPmViAKc7hRzor+DofcSlxrM+o
xugvciTEzeUnNBnbA3cUuYQuJWY55lAuvXXKGDhNB7h/Qt74N9p4pZIhHK6KJcls
t5YNQP9Lk0T1erL4w/u6IUqDkIrnffycxVlV46nCguF2MFR+VUOrIIBTqcZWTe1A
+dEGPl9vbMxa+TkVf9eLqGdI3Xzj5ZBM7oKQqj1nsTRyrpC592UiWxtwfs/tL89p
SfDop5TpbDv+Fc6fyij8zDe8yDgDcZRnQyf8+w75l4NwK7qG8oWTRthKFDx7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUCNC8S809IhJwxVr/D4PCqPSsk3IwHwYDVR0j
BBgwFoAU11q9S0TYsWzDRWbhKntodi3N+lAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVJWVVhuYnZyYnlnbVRMWDcxMXloRVlzM0JrTUEyeWNzbjM0cjN5NmJV
N20vMC9ENzVBQkQ0QjQ0RDhCMTZDQzM0NTY2RTEyQTdCNjg3NjJEQ0RGQTUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3NUFCRDRCNDREOEIxNkND
MzQ1NjZFMTJBN0I2ODc2MkRDREZBNTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVSVlVYbmJ2cmJ5Z21UTFg3MTF5aEVZczNCa01BMnljc24zNHIzeTZiVTdtLzAv
MzIzODMwMzQzYTM2MzUzMTMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM0MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZRDAMA0GCSqGSIb3DQEBCwUA
A4IBAQCuZnLd36iSndyBUQflUzdkWYde1zC/DA43ACUypm4yZl8xF8+bZJ7lTY+W
7KsWKW4pVqefpdqpmlWsRZXdAkI4dceOuQ11W5O4Z9pWNlXg5mDOh0uTNPXBqO+N
DA7RDrwWvuklQjG0CL/XoO/L8REh5skyPftd5DOhSFq5vDoOxutid7Z2nT7As+fM
p1DHvuQRjbUEoiSD+mtjv/8AOHXvMI5Y7489iHgyPSnHhWHkFt40xfAGoHiX4g23
uAde+PEAfEI/E4tds8K+1Gr4gEUFnfQf9Rf4HZmULOleSMaJ6pXrfUOOwlMd2/mp
pSe6jn+GaSjXRn4vEHaqNqN3AUQh
-----END CERTIFICATE-----
Generated at Sun May 24 14:06:38 2026 by rpki-client