Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653130303a3a2f34302d3430203d3e20323633363132.roa
File:                     323830343a6666633a653130303a3a2f34302d3430203d3e20323633363132.roa (raw, json)
Hash identifier:          X822u5gkRN3eEsSCxznnk7BbnJMMAVCaUxVM0+yTZ0g=
Subject key identifier:   27:06:31:7B:33:80:9E:8C:70:B3:DA:70:F1:0A:B9:7D:81:A5:30:D2
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       78D414E1CAE19CD56E2E18EAAEC3AA998649EBD2
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653130303a3a2f34302d3430203d3e20323633363132.roa
Signing time:             Sat 04 Apr 2026 00:30:17 +0000
ROA not before:           Sat 04 Apr 2026 00:25:17 +0000
ROA not after:            Sat 03 Apr 2027 00:30:17 +0000
asID:                     263612
IP address blocks:        2804:ffc:e100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d4:14:e1:ca:e1:9c:d5:6e:2e:18:ea:ae:c3:aa:99:86:49:eb:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Apr  4 00:25:17 2026 GMT
            Not After : Apr  3 00:30:17 2027 GMT
        Subject: CN=2706317B33809E8C70B3DA70F10AB97D81A530D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1b:99:45:43:96:19:72:ff:a7:39:53:dc:22:
                    8b:f2:d9:28:2a:56:5f:b4:0c:47:67:45:d8:c6:8d:
                    d5:be:70:00:ee:4a:9d:52:8b:3c:b5:30:f2:3d:6e:
                    00:65:f8:6f:d7:1f:30:7a:41:af:7d:fc:1d:97:99:
                    b6:98:e6:cf:e6:c7:0e:a0:04:49:09:bd:87:8d:fb:
                    1b:c7:c3:7b:59:87:e8:30:52:ab:7b:1d:ff:f1:d6:
                    5a:31:c3:82:c1:80:47:86:29:ef:2f:2d:0a:d3:61:
                    1a:9b:1f:9c:8e:9a:4d:1f:55:75:a3:39:88:59:14:
                    43:17:3f:f1:fd:a2:e1:39:fd:1c:fa:8c:31:27:a4:
                    fc:7b:91:1a:da:51:0e:c1:3d:21:c0:03:4b:37:f5:
                    53:07:64:9d:60:93:d6:50:53:ff:e7:e3:79:f8:61:
                    9c:54:14:88:88:5a:b3:d7:5c:d9:07:48:94:af:0c:
                    25:09:04:f1:05:47:4f:84:03:43:89:db:bd:cd:5a:
                    a4:db:46:00:e4:09:cc:f6:a2:f3:c0:4d:9d:e4:9a:
                    32:1b:f1:a4:b6:da:27:70:fb:1f:f8:f4:b8:0a:ce:
                    d5:22:42:2b:73:05:c7:ec:9e:ad:0b:97:f9:6e:ea:
                    d4:d6:95:53:c3:94:00:51:42:51:e0:fc:43:69:84:
                    94:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:06:31:7B:33:80:9E:8C:70:B3:DA:70:F1:0A:B9:7D:81:A5:30:D2
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653130303a3a2f34302d3430203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ffc:e100::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:1e:8f:61:cb:63:db:21:d5:1a:b6:b5:9c:00:fa:74:18:00:
         7c:49:de:40:5b:ae:d1:d3:44:32:aa:76:2a:39:f9:09:86:3d:
         a0:10:f6:77:25:ea:9d:9c:84:47:06:2f:cb:22:5c:03:20:aa:
         63:4f:72:ba:d1:b8:06:c4:d9:fd:d0:af:a1:33:0a:c4:be:09:
         34:2f:52:6a:70:21:88:b1:47:fd:e0:4e:79:c6:32:7b:e3:48:
         ef:ed:36:6a:f1:32:a5:78:f9:b4:14:18:bc:03:04:16:77:09:
         f4:ac:66:fe:c7:ca:3e:8e:71:e4:9c:12:e4:71:e0:74:cc:f9:
         7d:1a:a3:df:1f:f0:06:4c:bf:9c:5d:7d:1d:3b:0d:01:4b:66:
         87:c7:6f:5a:52:83:12:10:5f:18:8b:6d:15:f0:35:d8:18:b7:
         15:72:b2:92:94:fe:b5:dc:f8:d1:c0:cb:c5:06:81:3d:b3:42:
         77:a2:75:85:01:88:92:1f:63:93:78:81:03:6c:f0:d4:a6:4c:
         21:1b:e9:4c:3d:50:1b:15:85:23:dd:ad:7b:b6:4b:c9:e6:86:
         30:79:c2:27:6f:70:e4:7b:46:31:25:51:72:2a:aa:71:35:dc:
         02:5f:d9:3a:be:c7:7b:b4:d6:45:59:e9:05:68:89:a1:d9:fd:
         4a:95:d0:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUeNQU4crhnNVuLhjqrsOqmYZJ69IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4QkUzRENBRTJFRUI0ODk1Q0YxNjRFMURDM0JCQTM2
MDIzQTlBMTAeFw0yNjA0MDQwMDI1MTdaFw0yNzA0MDMwMDMwMTdaMDMxMTAvBgNV
BAMTKDI3MDYzMTdCMzM4MDlFOEM3MEIzREE3MEYxMEFCOTdEODFBNTMwRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWG5lFQ5YZcv+nOVPcIovy2Sgq
Vl+0DEdnRdjGjdW+cADuSp1Sizy1MPI9bgBl+G/XHzB6Qa99/B2XmbaY5s/mxw6g
BEkJvYeN+xvHw3tZh+gwUqt7Hf/x1loxw4LBgEeGKe8vLQrTYRqbH5yOmk0fVXWj
OYhZFEMXP/H9ouE5/Rz6jDEnpPx7kRraUQ7BPSHAA0s39VMHZJ1gk9ZQU//n43n4
YZxUFIiIWrPXXNkHSJSvDCUJBPEFR0+EA0OJ273NWqTbRgDkCcz2ovPATZ3kmjIb
8aS22idw+x/49LgKztUiQitzBcfsnq0Ll/lu6tTWlVPDlABRQlHg/ENphJShAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUJwYxezOAnoxws9pw8Qq5fYGlMNIwHwYDVR0j
BBgwFoAU54vj3K4u60iVzxZOHcO7o2AjqaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHF4ZWFYd3htdlRkckJ3MkZVaDI1TTc5OEdTMkdzRVY2Z1JIYzZRZDI0
WEMvMC9FNzhCRTNEQ0FFMkVFQjQ4OTVDRjE2NEUxREMzQkJBMzYwMjNBOUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OEJFM0RDQUUyRUVCNDg5
NUNGMTY0RTFEQzNCQkEzNjAyM0E5QTEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxeGVhWHd4bXZUZHJCdzJGVWgyNU03OThHUzJHc0VWNmdSSGM2UWQyNFhDLzAv
MzIzODMwMzQzYTY2NjY2MzNhNjUzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzMzNjMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBA/84TANBgkqhkiG9w0BAQsFAAOC
AQEAZR6PYctj2yHVGra1nAD6dBgAfEneQFuu0dNEMqp2Kjn5CYY9oBD2dyXqnZyE
RwYvyyJcAyCqY09yutG4BsTZ/dCvoTMKxL4JNC9SanAhiLFH/eBOecYye+NI7+02
avEypXj5tBQYvAMEFncJ9Kxm/sfKPo5x5JwS5HHgdMz5fRqj3x/wBky/nF19HTsN
AUtmh8dvWlKDEhBfGIttFfA12Bi3FXKykpT+tdz40cDLxQaBPbNCd6J1hQGIkh9j
k3iBA2zw1KZMIRvpTD1QGxWFI92te7ZLyeaGMHnCJ29w5HtGMSVRciqqcTXcAl/Z
Or7He7TWRVnpBWiJodn9SpXQfg==
-----END CERTIFICATE-----
Generated at Thu Apr 9 14:41:13 2026 by rpki-client