Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/323830343a373862633a3a2f33322d3438203d3e20323731323632.roa
File:                     323830343a373862633a3a2f33322d3438203d3e20323731323632.roa (raw, json)
Hash identifier:          KdpG7lTJtOhZbJtVEZZRNAFAUOV4Mh9+j6GnerGFNTc=
Subject key identifier:   09:2A:90:C6:F2:E9:12:98:1E:63:A7:9C:69:35:A7:24:08:1E:F2:ED
Certificate issuer:       /CN=27F1C15838307FE48F718317A7D65996759AA543
Certificate serial:       16C59EEEFE1677A4911F64C7FDA8F3C762531554
Authority key identifier: 27:F1:C1:58:38:30:7F:E4:8F:71:83:17:A7:D6:59:96:75:9A:A5:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F1C15838307FE48F718317A7D65996759AA543.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/323830343a373862633a3a2f33322d3438203d3e20323731323632.roa
Signing time:             Fri 22 May 2026 14:27:18 +0000
ROA not before:           Fri 22 May 2026 14:22:18 +0000
ROA not after:            Fri 21 May 2027 14:27:18 +0000
asID:                     271262
IP address blocks:        2804:78bc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/27F1C15838307FE48F718317A7D65996759AA543.crl
                          rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/27F1C15838307FE48F718317A7D65996759AA543.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F1C15838307FE48F718317A7D65996759AA543.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 05:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c5:9e:ee:fe:16:77:a4:91:1f:64:c7:fd:a8:f3:c7:62:53:15:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27F1C15838307FE48F718317A7D65996759AA543
        Validity
            Not Before: May 22 14:22:18 2026 GMT
            Not After : May 21 14:27:18 2027 GMT
        Subject: CN=092A90C6F2E912981E63A79C6935A724081EF2ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d6:85:b4:11:b8:75:3e:fe:3d:e4:96:3f:fc:
                    5f:65:e0:23:41:d4:62:a0:e6:02:36:e6:c8:35:0d:
                    2b:1c:6c:d1:38:98:f2:e3:20:7c:a9:9a:ca:43:9b:
                    e3:13:f4:2d:49:c1:27:c4:16:af:3a:b7:e0:4f:59:
                    8a:15:7a:73:01:cf:af:b2:d6:da:83:db:ad:b6:76:
                    9a:8f:f0:02:7b:b9:ac:2e:21:7c:88:41:c7:54:89:
                    f7:68:85:f3:43:8b:f0:0a:0e:3f:a6:5d:0f:29:a9:
                    2b:e6:cf:d3:29:1a:70:36:77:dc:aa:07:81:c6:7b:
                    83:fa:41:fa:1d:2e:dd:43:cd:b3:c0:a3:6a:1d:de:
                    f8:5b:d5:19:4f:88:11:67:37:36:9c:12:7f:39:16:
                    e8:b4:9e:15:51:05:7a:a4:4d:e3:f8:b2:6e:cf:e1:
                    03:dc:6a:ee:df:22:33:f1:a3:b2:3c:c6:9e:a6:9b:
                    38:28:0f:29:89:d4:eb:54:fa:62:ac:f4:e3:2e:6c:
                    2b:72:8a:33:0f:06:fc:bf:8f:47:f3:49:bb:c0:97:
                    12:73:60:0f:3c:e9:c4:9b:6d:62:19:f5:2b:3c:40:
                    3a:4e:3e:c9:94:42:31:09:c1:d4:c4:bd:2b:92:2d:
                    fa:16:67:e4:ed:a0:70:0a:46:38:0d:f3:3f:72:a5:
                    99:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2A:90:C6:F2:E9:12:98:1E:63:A7:9C:69:35:A7:24:08:1E:F2:ED
            X509v3 Authority Key Identifier:
                keyid:27:F1:C1:58:38:30:7F:E4:8F:71:83:17:A7:D6:59:96:75:9A:A5:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/27F1C15838307FE48F718317A7D65996759AA543.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F1C15838307FE48F718317A7D65996759AA543.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/323830343a373862633a3a2f33322d3438203d3e20323731323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:91:48:35:12:b8:d8:58:10:ed:fa:1b:0e:d2:15:dc:ec:7a:
         fb:ad:ea:d4:92:74:b2:2b:28:d7:c8:4f:2f:51:51:44:f0:f0:
         9e:34:94:57:ce:64:cb:92:8f:c3:e4:d2:25:73:65:e8:c9:28:
         c9:1c:65:12:7b:72:c4:f1:54:9b:31:54:8c:e0:ad:e9:a3:66:
         f5:a7:a2:9b:a1:3e:ea:09:d7:9d:21:3d:be:ad:d3:64:bd:e3:
         f3:d4:20:87:ab:08:cf:26:f6:00:fe:ad:e2:0d:ad:b6:8f:4e:
         c6:69:80:60:e9:37:1e:79:50:5b:1c:27:0a:a6:32:95:ff:c9:
         f7:b2:89:fa:50:de:59:e0:ea:7c:65:09:f9:5a:be:49:36:c1:
         8b:83:3c:6e:4f:34:0e:55:62:50:03:ca:60:bb:9b:17:35:61:
         1e:b0:5c:30:e1:51:33:8a:18:7d:61:61:3b:5b:dd:d1:8e:6d:
         9d:69:d0:1d:19:fd:ed:37:8d:45:2b:a7:be:97:0c:84:db:fd:
         b9:9b:9b:34:e6:9d:a6:f3:51:19:d1:18:a0:c7:fd:f0:e6:33:
         eb:01:ff:85:7a:4f:78:e4:5a:9a:5b:a2:20:61:06:85:e5:0f:
         c4:c2:8e:48:41:f1:7a:b9:86:90:9e:fb:9e:ce:99:00:4d:54:
         f1:88:54:ef
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFsWe7v4Wd6SRH2TH/ajzx2JTFVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdGMUMxNTgzODMwN0ZFNDhGNzE4MzE3QTdENjU5OTY3
NTlBQTU0MzAeFw0yNjA1MjIxNDIyMThaFw0yNzA1MjExNDI3MThaMDMxMTAvBgNV
BAMTKDA5MkE5MEM2RjJFOTEyOTgxRTYzQTc5QzY5MzVBNzI0MDgxRUYyRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF1oW0Ebh1Pv495JY//F9l4CNB
1GKg5gI25sg1DSscbNE4mPLjIHypmspDm+MT9C1JwSfEFq86t+BPWYoVenMBz6+y
1tqD2622dpqP8AJ7uawuIXyIQcdUifdohfNDi/AKDj+mXQ8pqSvmz9MpGnA2d9yq
B4HGe4P6QfodLt1DzbPAo2od3vhb1RlPiBFnNzacEn85Fui0nhVRBXqkTeP4sm7P
4QPcau7fIjPxo7I8xp6mmzgoDymJ1OtU+mKs9OMubCtyijMPBvy/j0fzSbvAlxJz
YA886cSbbWIZ9Ss8QDpOPsmUQjEJwdTEvSuSLfoWZ+TtoHAKRjgN8z9ypZkFAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUCSqQxvLpEpgeY6ecaTWnJAge8u0wHwYDVR0j
BBgwFoAUJ/HBWDgwf+SPcYMXp9ZZlnWapUMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9mWGk1VTk0SHg4am5mY0NUOEgzTXlRcWFZdEpZbXJLeDJHbUM3NGJvTXRZ
LzAvMjdGMUMxNTgzODMwN0ZFNDhGNzE4MzE3QTdENjU5OTY3NTlBQTU0My5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yN0YxQzE1ODM4MzA3RkU0OEY3
MTgzMTdBN0Q2NTk5Njc1OUFBNTQzLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9m
WGk1VTk0SHg4am5mY0NUOEgzTXlRcWFZdEpZbXJLeDJHbUM3NGJvTXRZLzAvMzIz
ODMwMzQzYTM3Mzg2MjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMxMzIz
NjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAR4vDANBgkqhkiG9w0BAQsFAAOCAQEAYpFINRK42FgQ
7fobDtIV3Ox6+63q1JJ0siso18hPL1FRRPDwnjSUV85ky5KPw+TSJXNl6MkoyRxl
EntyxPFUmzFUjOCt6aNm9aeim6E+6gnXnSE9vq3TZL3j89Qgh6sIzyb2AP6t4g2t
to9OxmmAYOk3HnlQWxwnCqYylf/J97KJ+lDeWeDqfGUJ+Vq+STbBi4M8bk80DlVi
UAPKYLubFzVhHrBcMOFRM4oYfWFhO1vd0Y5tnWnQHRn97TeNRSunvpcMhNv9uZub
NOadpvNRGdEYoMf98OYz6wH/hXpPeORamluiIGEGheUPxMKOSEHxermGkJ77ns6Z
AE1U8YhU7w==
-----END CERTIFICATE-----
Generated at Sun May 24 14:06:47 2026 by rpki-client