Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33332d3333203d3e20323733383136.roa
File:                     323830343a386362343a3a2f33332d3333203d3e20323733383136.roa (raw, json)
Hash identifier:          fE5fSlhZYENmpqAclRKIWPDIh/iDU/c/LsF0l1CFm3c=
Subject key identifier:   F3:FE:51:5C:1F:AD:6F:97:92:0D:67:21:AD:49:68:66:58:81:F5:8C
Certificate issuer:       /CN=54A36B0DF034AA7AA83520582C85CDA7DEF38153
Certificate serial:       71DA513C107FB651CC5F871F1C453D776E940BD1
Authority key identifier: 54:A3:6B:0D:F0:34:AA:7A:A8:35:20:58:2C:85:CD:A7:DE:F3:81:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54A36B0DF034AA7AA83520582C85CDA7DEF38153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33332d3333203d3e20323733383136.roa
Signing time:             Tue 27 Jan 2026 14:20:55 +0000
ROA not before:           Tue 27 Jan 2026 14:15:55 +0000
ROA not after:            Tue 26 Jan 2027 14:20:55 +0000
asID:                     273816
IP address blocks:        2804:8cb4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/54A36B0DF034AA7AA83520582C85CDA7DEF38153.crl
                          rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/54A36B0DF034AA7AA83520582C85CDA7DEF38153.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54A36B0DF034AA7AA83520582C85CDA7DEF38153.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:da:51:3c:10:7f:b6:51:cc:5f:87:1f:1c:45:3d:77:6e:94:0b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A36B0DF034AA7AA83520582C85CDA7DEF38153
        Validity
            Not Before: Jan 27 14:15:55 2026 GMT
            Not After : Jan 26 14:20:55 2027 GMT
        Subject: CN=F3FE515C1FAD6F97920D6721AD4968665881F58C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:57:55:76:a5:a9:f1:7b:35:ea:87:6f:14:0f:
                    1e:fc:68:aa:aa:64:61:a9:19:06:41:54:00:02:37:
                    79:bf:fb:25:a4:69:99:54:ea:f5:6f:7d:8e:51:95:
                    f7:5e:a3:a7:f4:b6:1b:82:ff:91:7f:18:90:c0:81:
                    99:ad:ff:32:6b:79:19:50:ff:52:46:73:f4:a4:6d:
                    43:85:ce:99:cd:1c:a1:d5:c6:5c:70:2f:90:7c:f8:
                    9e:50:cd:68:c8:24:1d:09:dc:18:28:32:7c:8c:71:
                    d1:9b:e1:31:1e:26:d6:0d:40:42:bc:34:71:58:31:
                    3a:2c:90:91:03:7b:f6:bc:08:fc:82:93:f2:8c:32:
                    e2:e1:ea:6f:16:e7:b3:27:40:f7:75:22:35:59:63:
                    1c:01:11:31:bc:c6:db:30:fe:8a:67:06:9b:44:67:
                    8a:66:6f:5e:a7:ba:dc:54:f8:fa:91:10:87:ec:d2:
                    c3:7b:fd:7c:f1:1b:0a:7a:36:fd:04:18:38:1d:8b:
                    7b:0d:9a:29:7d:e8:f1:cc:e2:54:2d:c7:08:c1:2a:
                    d8:a7:5d:37:02:f3:f1:1f:b6:9e:18:1b:a9:ce:61:
                    22:c5:4e:7f:e3:b5:e4:9f:3a:56:98:bd:0d:82:c4:
                    ef:68:7e:ee:5f:25:5a:2f:01:e7:0d:9a:3e:70:d4:
                    65:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FE:51:5C:1F:AD:6F:97:92:0D:67:21:AD:49:68:66:58:81:F5:8C
            X509v3 Authority Key Identifier:
                keyid:54:A3:6B:0D:F0:34:AA:7A:A8:35:20:58:2C:85:CD:A7:DE:F3:81:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/54A36B0DF034AA7AA83520582C85CDA7DEF38153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54A36B0DF034AA7AA83520582C85CDA7DEF38153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33332d3333203d3e20323733383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cb4::/33

    Signature Algorithm: sha256WithRSAEncryption
         bf:f9:09:65:a9:26:27:ef:b3:a8:3d:6b:09:8c:4c:4a:68:dd:
         33:ea:5f:41:06:63:67:4a:5a:95:40:19:39:c1:dd:d8:8b:0e:
         62:71:98:f1:e1:ce:01:15:a3:92:4f:c5:e3:1b:b1:ab:6e:5b:
         0a:74:e2:bf:53:d2:0b:70:23:0f:6f:c9:29:bb:42:d7:db:e0:
         f3:7b:82:5b:a9:50:67:97:15:18:2c:12:a0:e0:ee:85:ba:a4:
         80:22:e8:b1:f4:22:3f:18:07:37:b6:3d:fe:f3:eb:82:20:1c:
         09:51:12:72:ba:04:23:ab:2d:d1:8a:64:e6:76:f3:58:7f:3b:
         69:d5:2b:07:bd:77:f7:ce:5a:62:6e:dc:f6:89:0c:0a:a3:3f:
         90:04:33:73:68:dc:a1:14:80:ee:d9:f7:7e:21:ac:11:02:79:
         78:73:ce:6f:45:c7:27:a7:3e:b0:b4:e6:43:1d:07:62:b7:34:
         9d:db:50:c4:a1:2b:ef:91:40:14:a5:40:b4:a6:5e:1d:24:db:
         a8:f0:18:65:44:ad:f5:fd:9f:7c:c4:0e:50:62:1b:54:c7:9d:
         42:b7:65:79:f1:12:8a:e8:d3:5f:69:42:fc:fa:f8:50:92:e5:
         3a:c3:ab:a7:3d:44:8b:f3:45:39:63:17:d8:0b:a6:49:92:90:
         ae:1e:d8:ae
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcdpRPBB/tlHMX4cfHEU9d26UC9EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRBMzZCMERGMDM0QUE3QUE4MzUyMDU4MkM4NUNEQTdE
RUYzODE1MzAeFw0yNjAxMjcxNDE1NTVaFw0yNzAxMjYxNDIwNTVaMDMxMTAvBgNV
BAMTKEYzRkU1MTVDMUZBRDZGOTc5MjBENjcyMUFENDk2ODY2NTg4MUY1OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3V1V2panxezXqh28UDx78aKqq
ZGGpGQZBVAACN3m/+yWkaZlU6vVvfY5Rlfdeo6f0thuC/5F/GJDAgZmt/zJreRlQ
/1JGc/SkbUOFzpnNHKHVxlxwL5B8+J5QzWjIJB0J3BgoMnyMcdGb4TEeJtYNQEK8
NHFYMToskJEDe/a8CPyCk/KMMuLh6m8W57MnQPd1IjVZYxwBETG8xtsw/opnBptE
Z4pmb16nutxU+PqREIfs0sN7/XzxGwp6Nv0EGDgdi3sNmil96PHM4lQtxwjBKtin
XTcC8/Eftp4YG6nOYSLFTn/jteSfOlaYvQ2CxO9ofu5fJVovAecNmj5w1GXPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8/5RXB+tb5eSDWchrUloZliB9YwwHwYDVR0j
BBgwFoAUVKNrDfA0qnqoNSBYLIXNp97zgVMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFdlWVEyZ0hFczNwRkg4YmVtc010cXU3djc2TGdXWUZYd05RR3o3U0FN
V3UvMC81NEEzNkIwREYwMzRBQTdBQTgzNTIwNTgyQzg1Q0RBN0RFRjM4MTUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0QTM2QjBERjAzNEFBN0FB
ODM1MjA1ODJDODVDREE3REVGMzgxNTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hXZVlRMmdIRXMzcEZIOGJlbXNNdHF1N3Y3NkxnV1lGWHdOUUd6N1NBTVd1LzAv
MzIzODMwMzQzYTM4NjM2MjM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMz
MzgzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASMtAAwDQYJKoZIhvcNAQELBQADggEBAL/5CWWp
Jifvs6g9awmMTEpo3TPqX0EGY2dKWpVAGTnB3diLDmJxmPHhzgEVo5JPxeMbsatu
Wwp04r9T0gtwIw9vySm7Qtfb4PN7glupUGeXFRgsEqDg7oW6pIAi6LH0Ij8YBze2
Pf7z64IgHAlREnK6BCOrLdGKZOZ281h/O2nVKwe9d/fOWmJu3PaJDAqjP5AEM3No
3KEUgO7Z934hrBECeXhzzm9FxyenPrC05kMdB2K3NJ3bUMShK++RQBSlQLSmXh0k
26jwGGVErfX9n3zEDlBiG1THnUK3ZXnxEoro019pQvz6+FCS5TrDq6c9RIvzRTlj
F9gLpkmSkK4e2K4=
-----END CERTIFICATE-----
Generated at Mon Feb 23 04:08:32 2026 by rpki-client