Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/323830343a333537633a3a2f33322d313238203d3e20323636323839.roa
File:                     323830343a333537633a3a2f33322d313238203d3e20323636323839.roa (raw, json)
Hash identifier:          /dqf7ZM/K7ViSc/f3cQWa28CIRpYIbbvi5ldhcT0hCw=
Subject key identifier:   7A:4A:0C:D5:71:0C:4E:0B:26:FC:BB:91:0F:E4:6D:62:64:EF:C2:3F
Certificate issuer:       /CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Certificate serial:       085316EE48388325507D598863872AF43704C3AC
Authority key identifier: 50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/323830343a333537633a3a2f33322d313238203d3e20323636323839.roa
Signing time:             Sat 16 May 2026 02:11:05 +0000
ROA not before:           Sat 16 May 2026 02:06:05 +0000
ROA not after:            Sat 15 May 2027 02:11:05 +0000
asID:                     266289
IP address blocks:        2804:357c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl
                          rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 08:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:53:16:ee:48:38:83:25:50:7d:59:88:63:87:2a:f4:37:04:c3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
        Validity
            Not Before: May 16 02:06:05 2026 GMT
            Not After : May 15 02:11:05 2027 GMT
        Subject: CN=7A4A0CD5710C4E0B26FCBB910FE46D6264EFC23F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:2e:d3:02:2f:6f:6d:d0:05:22:8a:66:65:
                    1b:77:fb:38:5f:44:85:f3:dc:24:2a:8a:ca:31:75:
                    2d:10:fb:8f:c0:a7:aa:91:c8:d9:fa:e9:ee:60:aa:
                    dc:86:68:09:24:47:45:74:9e:75:59:27:a1:c4:c7:
                    31:4a:05:2f:5d:55:91:81:17:8f:c8:0c:51:b7:7a:
                    d2:99:e9:cf:93:26:e1:fd:7b:80:7b:f4:45:cc:7c:
                    d1:5f:5e:eb:ae:0f:c4:e3:3d:a1:0e:bf:db:99:87:
                    1b:8b:8b:ac:af:d1:f4:de:e8:a6:3e:31:c6:85:78:
                    27:a6:03:00:bb:58:4f:11:cd:de:13:d9:46:ec:a3:
                    39:9d:5c:29:fe:ee:52:ad:bb:5d:1b:25:29:73:d1:
                    fe:e2:f2:47:f4:9c:60:63:05:09:ad:9a:0c:ec:51:
                    f8:b1:a9:34:18:0d:23:6a:3c:1a:93:c4:f9:1f:11:
                    5a:bb:5e:b1:9b:d0:7d:61:26:60:f4:8a:ba:5a:3b:
                    24:90:8d:84:e5:cf:91:05:e4:38:d1:a7:16:ee:21:
                    a9:c7:37:ba:ae:97:7f:b9:77:fb:05:f5:15:e5:58:
                    b4:60:6b:25:11:e8:3d:d1:18:a0:e2:a8:aa:ea:52:
                    0f:b0:fe:c7:92:a4:4a:74:f1:5a:81:80:68:95:e0:
                    6e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4A:0C:D5:71:0C:4E:0B:26:FC:BB:91:0F:E4:6D:62:64:EF:C2:3F
            X509v3 Authority Key Identifier:
                keyid:50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/323830343a333537633a3a2f33322d313238203d3e20323636323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:357c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:7b:18:41:2b:b5:79:9c:61:b7:35:75:8f:16:a7:24:36:3f:
         41:8d:c1:8f:c4:02:2e:d6:10:ba:e5:1d:2f:a1:1f:32:2e:21:
         56:57:b3:fa:40:00:20:40:fe:c2:47:a3:0e:10:05:02:fc:a0:
         92:f7:aa:06:04:60:28:97:a2:63:80:1e:ac:c0:b8:6e:79:6c:
         a7:a7:71:35:32:11:4f:40:9e:63:0e:f8:ea:b0:39:7d:a9:19:
         53:9d:91:0e:83:a1:1d:49:a5:0c:32:f0:72:62:bc:20:ca:59:
         01:b7:5a:5a:72:44:ef:8d:6d:19:04:c5:6a:88:77:63:62:fc:
         79:fc:86:0a:1d:a2:86:e3:d7:4b:8f:56:58:7c:24:29:b6:72:
         55:36:15:98:5d:77:4c:42:f0:cb:3c:c2:d8:9c:f8:69:4f:f6:
         0a:1f:72:ea:e2:f5:46:b7:de:b2:c5:a8:b5:6d:66:cd:13:be:
         ad:29:dd:60:8b:56:d2:e8:06:82:71:4b:ef:d3:12:38:02:e4:
         da:4c:49:4e:2d:49:3a:9f:43:1a:da:4f:5f:59:50:f1:81:d8:
         ce:bc:07:b6:8a:ac:b7:dc:fd:79:b6:8b:bb:17:be:f5:61:49:
         66:f9:c2:09:77:b9:3a:ce:87:99:46:d6:12:ab:44:31:c6:e7:
         bd:a4:ed:1c
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUCFMW7kg4gyVQfVmIY4cq9DcEw6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA2ODk1MjkwM0Y1RjE3QzIxRkE1QjJFQzFCRTQ3MkRG
MzA2MDcyQzAeFw0yNjA1MTYwMjA2MDVaFw0yNzA1MTUwMjExMDVaMDMxMTAvBgNV
BAMTKDdBNEEwQ0Q1NzEwQzRFMEIyNkZDQkI5MTBGRTQ2RDYyNjRFRkMyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvmS7TAi9vbdAFIopmZRt3+zhf
RIXz3CQqisoxdS0Q+4/Ap6qRyNn66e5gqtyGaAkkR0V0nnVZJ6HExzFKBS9dVZGB
F4/IDFG3etKZ6c+TJuH9e4B79EXMfNFfXuuuD8TjPaEOv9uZhxuLi6yv0fTe6KY+
McaFeCemAwC7WE8Rzd4T2UbsozmdXCn+7lKtu10bJSlz0f7i8kf0nGBjBQmtmgzs
UfixqTQYDSNqPBqTxPkfEVq7XrGb0H1hJmD0irpaOySQjYTlz5EF5DjRpxbuIanH
N7qul3+5d/sF9RXlWLRgayUR6D3RGKDiqKrqUg+w/seSpEp08VqBgGiV4G45AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUekoM1XEMTgsm/LuRD+RtYmTvwj8wHwYDVR0j
BBgwFoAUUGiVKQP18Xwh+lsuwb5HLfMGBywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2o1bzY5S1lHa3dmWFBvcDR3SE5CUzVpdFVMQ3hSUFl0aXpyWktEdWh1
SFcvMC81MDY4OTUyOTAzRjVGMTdDMjFGQTVCMkVDMUJFNDcyREYzMDYwNzJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwNjg5NTI5MDNGNUYxN0My
MUZBNUIyRUMxQkU0NzJERjMwNjA3MkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NqNW82OUtZR2t3ZlhQb3A0d0hOQlM1aXRVTEN4UlBZdGl6clpLRHVodUhXLzAv
MzIzODMwMzQzYTMzMzUzNzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzMjM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDV8MA0GCSqGSIb3DQEBCwUAA4IBAQCbexhB
K7V5nGG3NXWPFqckNj9BjcGPxAIu1hC65R0voR8yLiFWV7P6QAAgQP7CR6MOEAUC
/KCS96oGBGAol6JjgB6swLhueWynp3E1MhFPQJ5jDvjqsDl9qRlTnZEOg6EdSaUM
MvByYrwgylkBt1packTvjW0ZBMVqiHdjYvx5/IYKHaKG49dLj1ZYfCQptnJVNhWY
XXdMQvDLPMLYnPhpT/YKH3Lq4vVGt96yxai1bWbNE76tKd1gi1bS6AaCcUvv0xI4
AuTaTElOLUk6n0Ma2k9fWVDxgdjOvAe2iqy33P15tou7F771YUlm+cIJd7k6zoeZ
RtYSq0Qxxue9pO0c
-----END CERTIFICATE-----
Generated at Sun May 24 16:37:29 2026 by rpki-client