Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/323830343a343362383a633030303a3a2f33342d3334203d3e20323637353836.roa
File:                     323830343a343362383a633030303a3a2f33342d3334203d3e20323637353836.roa (raw, json)
Hash identifier:          dvX3ehnltoSLm1Nz5pBW7EtTXCJHjya5asiRSJOh6iA=
Subject key identifier:   FA:17:3E:EB:55:C0:34:74:D4:29:0E:32:C2:80:05:78:9D:AA:2E:51
Certificate issuer:       /CN=1E240D6445B519D0AD6DBAB1529023E200344D71
Certificate serial:       5A1C4EB6D68F15A9D45A8B7F963EBD012ABF9C8B
Authority key identifier: 1E:24:0D:64:45:B5:19:D0:AD:6D:BA:B1:52:90:23:E2:00:34:4D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E240D6445B519D0AD6DBAB1529023E200344D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/323830343a343362383a633030303a3a2f33342d3334203d3e20323637353836.roa
Signing time:             Wed 25 Mar 2026 21:25:12 +0000
ROA not before:           Wed 25 Mar 2026 21:20:12 +0000
ROA not after:            Wed 24 Mar 2027 21:25:12 +0000
asID:                     267586
IP address blocks:        2804:43b8:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/1E240D6445B519D0AD6DBAB1529023E200344D71.crl
                          rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/1E240D6445B519D0AD6DBAB1529023E200344D71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E240D6445B519D0AD6DBAB1529023E200344D71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1c:4e:b6:d6:8f:15:a9:d4:5a:8b:7f:96:3e:bd:01:2a:bf:9c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E240D6445B519D0AD6DBAB1529023E200344D71
        Validity
            Not Before: Mar 25 21:20:12 2026 GMT
            Not After : Mar 24 21:25:12 2027 GMT
        Subject: CN=FA173EEB55C03474D4290E32C28005789DAA2E51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:86:b3:05:d9:e5:97:a4:14:a2:19:6d:be:
                    a9:0f:27:2a:a4:b0:bf:a5:4e:c1:32:d1:e3:a0:27:
                    0a:58:60:0c:2e:b6:f4:ec:e8:7b:4e:ef:46:b8:3f:
                    5c:c6:de:2d:79:c2:93:7c:6b:f8:b5:22:ac:b1:84:
                    5f:fc:87:d6:a7:a4:84:b9:79:5d:50:ce:08:96:6a:
                    b1:4b:2d:f0:5f:33:c1:55:c7:d2:8d:83:e9:e1:9a:
                    d9:b6:51:83:b7:c0:5b:07:80:25:88:57:36:a7:d9:
                    eb:13:08:f5:1c:ed:19:2d:15:9e:d4:5d:c9:00:7d:
                    03:10:07:bd:37:be:37:b5:bb:cc:38:94:02:4d:2d:
                    3e:d2:54:ec:5f:0d:32:ac:16:5b:8c:6b:5a:3b:b1:
                    2d:31:e7:c7:c8:0d:e0:81:89:84:68:ea:43:70:e8:
                    75:96:b5:7f:7b:93:95:91:5e:59:de:84:05:c3:62:
                    58:f6:aa:bb:88:40:d4:44:36:e1:c5:41:e4:9a:d9:
                    fe:99:d9:91:51:d7:93:13:93:b8:a4:74:4e:af:2a:
                    9b:9a:aa:8c:23:b4:63:e5:37:a1:f0:b2:bd:04:f0:
                    46:d7:f3:6e:1d:55:b3:c0:e2:c2:e7:e9:88:24:6d:
                    27:fb:02:2a:4f:7a:f8:49:d5:34:d2:14:df:69:da:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:17:3E:EB:55:C0:34:74:D4:29:0E:32:C2:80:05:78:9D:AA:2E:51
            X509v3 Authority Key Identifier:
                keyid:1E:24:0D:64:45:B5:19:D0:AD:6D:BA:B1:52:90:23:E2:00:34:4D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/1E240D6445B519D0AD6DBAB1529023E200344D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E240D6445B519D0AD6DBAB1529023E200344D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/323830343a343362383a633030303a3a2f33342d3334203d3e20323637353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43b8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a6:c4:0a:a6:3b:22:78:b3:7b:87:e2:a8:d4:46:a9:7d:ff:76:
         05:6c:1e:5a:bd:a2:76:b2:12:78:0f:7e:ba:3e:32:42:05:a4:
         6d:75:b3:bb:2f:c0:50:b2:5a:2a:ee:8d:a9:e5:05:7b:0b:ef:
         e4:88:e9:d0:c0:fc:6f:a2:e9:3b:d3:42:6b:87:36:e8:c3:0f:
         36:9f:15:d0:82:0a:7c:f2:89:b9:23:fe:b1:d5:ff:03:96:03:
         56:fa:b1:21:24:cd:e2:8b:ca:5e:db:5f:08:86:a6:32:03:97:
         b1:79:9c:5c:79:bd:6e:b0:b8:b4:04:85:96:9c:1f:9e:30:93:
         b9:1e:1d:c9:76:80:7a:f4:42:41:66:ff:0f:d3:bc:21:55:18:
         81:99:c9:4c:cd:2e:e9:15:51:b8:0b:6d:8d:c7:8e:4e:16:03:
         e5:1c:1a:a8:c3:04:60:27:a5:09:bc:86:cb:14:18:bc:d9:08:
         24:9c:f1:e2:25:5c:bb:33:50:18:e5:85:11:29:b2:d7:0c:e9:
         86:94:73:56:51:e4:b3:db:bb:39:58:a4:62:62:40:0a:ab:1c:
         d9:50:00:69:2d:a2:84:7a:26:d8:92:e2:07:57:1c:67:a6:1d:
         82:d4:bb:df:48:c7:ce:0e:85:bc:89:e9:08:33:f7:c3:62:6f:
         e6:84:cf:50
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUWhxOttaPFanUWot/lj69ASq/nIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUyNDBENjQ0NUI1MTlEMEFENkRCQUIxNTI5MDIzRTIw
MDM0NEQ3MTAeFw0yNjAzMjUyMTIwMTJaFw0yNzAzMjQyMTI1MTJaMDMxMTAvBgNV
BAMTKEZBMTczRUVCNTVDMDM0NzRENDI5MEUzMkMyODAwNTc4OURBQTJFNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ToazBdnll6QUohltvqkPJyqk
sL+lTsEy0eOgJwpYYAwutvTs6HtO70a4P1zG3i15wpN8a/i1IqyxhF/8h9anpIS5
eV1QzgiWarFLLfBfM8FVx9KNg+nhmtm2UYO3wFsHgCWIVzan2esTCPUc7RktFZ7U
XckAfQMQB703vje1u8w4lAJNLT7SVOxfDTKsFluMa1o7sS0x58fIDeCBiYRo6kNw
6HWWtX97k5WRXlnehAXDYlj2qruIQNRENuHFQeSa2f6Z2ZFR15MTk7ikdE6vKpua
qowjtGPlN6Hwsr0E8EbX824dVbPA4sLn6YgkbSf7AipPevhJ1TTSFN9p2ojLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU+hc+61XANHTUKQ4ywoAFeJ2qLlEwHwYDVR0j
BBgwFoAUHiQNZEW1GdCtbbqxUpAj4gA0TXEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFVGTm9YSjdQRVJ1QUtidjl1YndyN1N3d1dDTFFtdjR4ZllYSEVRTW4z
RnIvMC8xRTI0MEQ2NDQ1QjUxOUQwQUQ2REJBQjE1MjkwMjNFMjAwMzQ0RDcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFMjQwRDY0NDVCNTE5RDBB
RDZEQkFCMTUyOTAyM0UyMDAzNDRENzEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhVRk5vWEo3UEVSdUFLYnY5dWJ3cjdTd3dXQ0xRbXY0eGZZWEhFUU1uM0ZyLzAv
MzIzODMwMzQzYTM0MzM2MjM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM1MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQ7jAMA0GCSqGSIb3DQEBCwUA
A4IBAQCmxAqmOyJ4s3uH4qjURql9/3YFbB5avaJ2shJ4D366PjJCBaRtdbO7L8BQ
sloq7o2p5QV7C+/kiOnQwPxvouk700Jrhzboww82nxXQggp88om5I/6x1f8DlgNW
+rEhJM3ii8pe218IhqYyA5exeZxceb1usLi0BIWWnB+eMJO5Hh3JdoB69EJBZv8P
07whVRiBmclMzS7pFVG4C22Nx45OFgPlHBqowwRgJ6UJvIbLFBi82QgknPHiJVy7
M1AY5YURKbLXDOmGlHNWUeSz27s5WKRiYkAKqxzZUABpLaKEeibYkuIHVxxnph2C
1LvfSMfODoW8iekIM/fDYm/mhM9Q
-----END CERTIFICATE-----
Generated at Thu Apr 9 16:47:17 2026 by rpki-client