Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/323830343a3162383a3a2f33322d313238203d3e20323632373634.roa
File:                     323830343a3162383a3a2f33322d313238203d3e20323632373634.roa (raw, json)
Hash identifier:          GZCnjP+GoVilL0lQ65Cp5FD7Y1VzAbORhyux/0ttbvs=
Subject key identifier:   39:15:9B:67:0B:37:05:6A:00:A1:C4:D3:E8:80:83:FE:AC:E4:A9:3E
Certificate issuer:       /CN=725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5
Certificate serial:       0CF0EA4700D5DFA033DD11B7AB5410A3BD040587
Authority key identifier: 72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/323830343a3162383a3a2f33322d313238203d3e20323632373634.roa
Signing time:             Wed 01 Apr 2026 14:58:47 +0000
ROA not before:           Wed 01 Apr 2026 14:53:47 +0000
ROA not after:            Wed 31 Mar 2027 14:58:47 +0000
asID:                     262764
IP address blocks:        2804:1b8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl
                          rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 09:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f0:ea:47:00:d5:df:a0:33:dd:11:b7:ab:54:10:a3:bd:04:05:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5
        Validity
            Not Before: Apr  1 14:53:47 2026 GMT
            Not After : Mar 31 14:58:47 2027 GMT
        Subject: CN=39159B670B37056A00A1C4D3E88083FEACE4A93E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:73:40:e8:c9:70:51:0f:63:10:2e:82:0a:
                    bb:c4:37:e1:98:aa:2b:cd:12:c9:c0:f4:f5:bc:0e:
                    60:d0:79:55:1c:59:71:84:ce:fd:ea:90:ef:8e:20:
                    f0:9f:08:f8:77:40:99:de:3b:ff:4c:18:dc:8f:df:
                    93:00:59:0a:1f:9c:31:e5:2a:99:06:1b:f8:e1:83:
                    9f:91:2d:e4:e1:80:a0:f4:e6:4f:a9:65:5b:4f:9e:
                    79:5c:20:ad:63:bd:d8:ba:0e:f6:41:68:c4:3a:9d:
                    8f:a1:fe:e2:08:b7:37:70:a0:f6:4f:77:64:42:fb:
                    29:32:8c:3d:7c:4a:a6:dd:e2:98:e2:24:4f:00:20:
                    4e:5b:78:b0:5d:6e:46:10:7e:8e:b8:f2:36:3b:20:
                    4b:4d:92:55:f9:0e:f4:7a:9b:43:8d:4d:d3:ff:39:
                    9e:15:1f:bb:9c:ff:9b:24:88:27:b4:e4:7f:71:76:
                    eb:ea:b5:51:0a:a4:02:a9:09:6b:1c:32:6b:43:91:
                    db:6f:d2:78:7b:86:78:ed:aa:c6:02:40:0f:c3:62:
                    2d:f3:f5:39:fc:c7:cd:fb:b7:ae:85:b4:11:9c:ec:
                    82:dd:3e:d8:88:24:65:35:dd:e1:c9:e9:9f:49:c2:
                    dd:95:2b:03:00:5e:ed:e8:6d:55:05:05:0c:78:b2:
                    7e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:15:9B:67:0B:37:05:6A:00:A1:C4:D3:E8:80:83:FE:AC:E4:A9:3E
            X509v3 Authority Key Identifier:
                keyid:72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/323830343a3162383a3a2f33322d313238203d3e20323632373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:45:a4:b3:a3:db:53:32:bb:ee:ac:d3:6d:02:a8:92:78:83:
         d8:3c:2d:67:00:66:22:04:ff:35:8d:c5:d7:22:67:58:5d:a2:
         38:94:2e:27:ca:34:31:0e:fc:d2:e0:05:1f:e5:6a:76:db:3c:
         99:8d:56:99:64:d4:b0:2d:6a:c6:1d:c2:97:8d:df:f9:6f:49:
         d0:58:8b:e0:81:b2:cf:cd:18:17:20:ef:42:df:2a:5e:77:cc:
         2b:d8:d4:01:0a:f7:8f:ef:90:9c:b0:40:a5:64:ac:2c:34:b2:
         72:32:ea:12:da:af:07:d0:63:6c:fd:7e:61:1e:75:3b:b4:b2:
         e6:d6:53:b7:d9:1f:9b:12:a2:83:34:b2:a6:bd:80:c7:d9:e6:
         f4:b0:5f:04:5e:7e:82:44:12:22:87:89:e7:ca:74:6e:11:74:
         4d:4e:cf:d7:03:95:38:57:19:ca:97:fc:37:fd:9c:72:87:7e:
         f7:ac:e6:96:44:19:63:76:a6:03:b7:3d:3b:69:4d:74:0b:e5:
         a8:48:57:41:04:94:cb:4f:4b:82:01:47:3a:78:fe:2a:a0:ed:
         b3:f7:63:8a:e8:f4:ed:a6:2d:e6:c0:e0:fa:42:2c:8b:26:24:
         27:24:cb:35:38:f9:9c:72:4d:5b:a8:8b:05:bb:22:79:cd:74:
         70:6b:80:64
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDPDqRwDV36Az3RG3q1QQo70EBYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI1Q0ZCMzQ0RDNCQzhENEQxMjhBNkRFOEE1MjdEOUQx
RTNDNzBBNTAeFw0yNjA0MDExNDUzNDdaFw0yNzAzMzExNDU4NDdaMDMxMTAvBgNV
BAMTKDM5MTU5QjY3MEIzNzA1NkEwMEExQzREM0U4ODA4M0ZFQUNFNEE5M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2XNA6MlwUQ9jEC6CCrvEN+GY
qivNEsnA9PW8DmDQeVUcWXGEzv3qkO+OIPCfCPh3QJneO/9MGNyP35MAWQofnDHl
KpkGG/jhg5+RLeThgKD05k+pZVtPnnlcIK1jvdi6DvZBaMQ6nY+h/uIItzdwoPZP
d2RC+ykyjD18Sqbd4pjiJE8AIE5beLBdbkYQfo648jY7IEtNklX5DvR6m0ONTdP/
OZ4VH7uc/5skiCe05H9xduvqtVEKpAKpCWscMmtDkdtv0nh7hnjtqsYCQA/DYi3z
9Tn8x837t66FtBGc7ILdPtiIJGU13eHJ6Z9Jwt2VKwMAXu3obVUFBQx4sn7DAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUORWbZws3BWoAocTT6ICD/qzkqT4wHwYDVR0j
BBgwFoAUclz7NE07yNTRKKbeilJ9nR48cKUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVBSTWVmM1htazFoR2syZlk3S2hBMlJyUTc2cmdpakp4dWRualp4WkZ4
WEMvMC83MjVDRkIzNDREM0JDOEQ0RDEyOEE2REU4QTUyN0Q5RDFFM0M3MEE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyNUNGQjM0NEQzQkM4RDRE
MTI4QTZERThBNTI3RDlEMUUzQzcwQTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlQUk1lZjNYbWsxaEdrMmZZN0toQTJSclE3NnJnaWpKeHVkbmpaeFpGeFhDLzAv
MzIzODMwMzQzYTMxNjIzODNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjMy
MzczNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQBuDANBgkqhkiG9w0BAQsFAAOCAQEAWEWks6Pb
UzK77qzTbQKokniD2DwtZwBmIgT/NY3F1yJnWF2iOJQuJ8o0MQ780uAFH+Vqdts8
mY1WmWTUsC1qxh3Cl43f+W9J0FiL4IGyz80YFyDvQt8qXnfMK9jUAQr3j++QnLBA
pWSsLDSycjLqEtqvB9BjbP1+YR51O7Sy5tZTt9kfmxKigzSypr2Ax9nm9LBfBF5+
gkQSIoeJ58p0bhF0TU7P1wOVOFcZypf8N/2ccod+96zmlkQZY3amA7c9O2lNdAvl
qEhXQQSUy09LggFHOnj+KqDts/djiuj07aYt5sDg+kIsiyYkJyTLNTj5nHJNW6iL
Bbsiec10cGuAZA==
-----END CERTIFICATE-----
Generated at Thu Apr 9 16:47:55 2026 by rpki-client