Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/323830343a3832303a3a2f33322d3332203d3e20323632333532.roa
File:                     323830343a3832303a3a2f33322d3332203d3e20323632333532.roa (raw, json)
Hash identifier:          CwCZHuXwjUs0YyoKxr1D7TuuJrlUCNPH/tXZojZ2iUY=
Subject key identifier:   01:8E:EC:47:EF:E7:26:73:8C:30:C2:F1:CF:65:E4:11:4F:58:C9:F8
Certificate issuer:       /CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
Certificate serial:       093BEC32F854F1CB9B377393D5BC9B8C16C1938C
Authority key identifier: E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/323830343a3832303a3a2f33322d3332203d3e20323632333532.roa
Signing time:             Tue 11 Aug 2026 12:25:37 +0000
ROA not before:           Tue 11 Aug 2026 12:20:37 +0000
ROA not after:            Tue 10 Aug 2027 12:25:37 +0000
asID:                     262352
IP address blocks:        2804:820::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 02:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3b:ec:32:f8:54:f1:cb:9b:37:73:93:d5:bc:9b:8c:16:c1:93:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
        Validity
            Not Before: Aug 11 12:20:37 2026 GMT
            Not After : Aug 10 12:25:37 2027 GMT
        Subject: CN=018EEC47EFE726738C30C2F1CF65E4114F58C9F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:79:1f:5f:55:6e:a6:17:f7:a9:c2:c3:d5:
                    3b:13:d1:87:da:61:a8:8d:8c:05:0b:02:9c:30:f0:
                    af:e9:4d:63:64:b8:cf:48:f6:6e:63:a0:d4:29:d7:
                    c9:b6:fe:d9:88:17:43:b9:33:d4:2a:7a:eb:69:59:
                    53:1e:27:13:7a:36:66:33:c1:af:f2:77:47:1d:e5:
                    ce:12:cc:88:84:13:bf:a3:f6:73:9d:3c:43:7e:1b:
                    60:b7:ce:20:86:a4:74:e7:8d:cd:7f:50:2b:89:dc:
                    f5:0a:d6:52:bf:7e:59:cd:01:f4:38:3b:32:7a:9a:
                    dc:f4:93:7f:7a:a0:72:71:65:dd:b2:70:82:a0:f8:
                    71:54:26:c0:79:4a:11:33:d0:9f:70:db:97:7a:bb:
                    08:e1:9e:1a:36:ca:09:43:3b:86:d3:5b:81:f7:d9:
                    60:67:f6:e4:63:d7:8d:fc:e6:3f:9a:3e:ec:e9:1f:
                    b5:b4:1c:bf:16:77:8e:15:f5:44:a5:b7:a2:8c:e6:
                    03:fb:7e:bb:07:3d:9f:b7:ff:e3:4c:fc:54:f4:2a:
                    e4:c6:d6:27:29:0c:e2:9c:3c:84:1e:7b:28:ee:aa:
                    a8:e5:9a:75:26:70:c1:eb:ba:f4:c9:31:5f:e1:28:
                    2b:ac:8b:a6:c8:b5:61:c8:8a:35:90:17:90:e6:a6:
                    11:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8E:EC:47:EF:E7:26:73:8C:30:C2:F1:CF:65:E4:11:4F:58:C9:F8
            X509v3 Authority Key Identifier:
                keyid:E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/323830343a3832303a3a2f33322d3332203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:820::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:f2:52:cf:4d:6d:51:83:93:be:19:d1:1a:8d:20:66:f3:2b:
         f2:be:f1:28:d0:76:ad:3d:c9:4d:e2:3f:c6:dc:80:85:a7:a5:
         af:4c:19:09:68:b0:8b:71:21:4f:b6:f0:7c:3f:64:9d:13:34:
         a2:46:de:51:4c:d1:93:9d:52:25:23:86:11:a9:af:27:35:22:
         e7:4d:53:74:c9:9e:01:f7:16:45:21:db:af:08:2f:86:37:13:
         3e:cd:48:e6:1a:d9:98:5d:e3:f8:b4:03:75:34:9e:fc:bd:c3:
         16:57:b0:78:65:a2:bc:19:38:8e:a4:4f:8f:61:e8:bb:a0:9e:
         41:db:39:7e:cf:6a:31:44:e2:e2:64:8f:bc:e7:93:c2:c8:c5:
         b0:94:4f:4f:7e:2c:2c:00:39:cf:8e:14:d5:4d:d7:1a:f4:f8:
         14:f1:88:ce:9b:ea:1c:da:50:14:55:e6:be:6d:1e:ed:65:4b:
         79:48:f7:6c:6a:6d:0b:f4:bf:51:a3:69:5d:f4:aa:ef:e6:a7:
         7f:98:54:09:f0:6e:a1:14:04:2b:07:21:90:d6:38:eb:a2:2d:
         17:6c:dd:da:db:74:29:91:9d:a9:35:10:23:26:ea:c7:22:33:
         ca:f6:83:6a:92:2a:ca:b0:10:4b:55:0d:f0:e2:cc:81:f0:29:
         a8:38:1f:c9
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUCTvsMvhU8cubN3OT1bybjBbBk4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE5M0ZERkMzQjc3Q0Y0N0ZDM0FGNjNCMzA4QjdCQUQw
QTNGN0EwQjAeFw0yNjA4MTExMjIwMzdaFw0yNzA4MTAxMjI1MzdaMDMxMTAvBgNV
BAMTKDAxOEVFQzQ3RUZFNzI2NzM4QzMwQzJGMUNGNjVFNDExNEY1OEM5RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/k3kfX1Vuphf3qcLD1TsT0Yfa
YaiNjAULApww8K/pTWNkuM9I9m5joNQp18m2/tmIF0O5M9QqeutpWVMeJxN6NmYz
wa/yd0cd5c4SzIiEE7+j9nOdPEN+G2C3ziCGpHTnjc1/UCuJ3PUK1lK/flnNAfQ4
OzJ6mtz0k396oHJxZd2ycIKg+HFUJsB5ShEz0J9w25d6uwjhnho2yglDO4bTW4H3
2WBn9uRj14385j+aPuzpH7W0HL8Wd44V9USlt6KM5gP7frsHPZ+3/+NM/FT0KuTG
1icpDOKcPIQeeyjuqqjlmnUmcMHruvTJMV/hKCusi6bItWHIijWQF5DmphFNAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUAY7sR+/nJnOMMMLxz2XkEU9YyfgwHwYDVR0j
BBgwFoAU4ZP9/Dt3z0f8OvY7MIt7rQo/egswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzAvRTE5M0ZERkMzQjc3Q0Y0N0ZDM0FGNjNCMzA4QjdCQUQwQTNGN0EwQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FMTkzRkRGQzNCNzdDRjQ3RkMz
QUY2M0IzMDhCN0JBRDBBM0Y3QTBCLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzAvMzIz
ODMwMzQzYTM4MzIzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjMzMzUz
Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgECCAwDQYJKoZIhvcNAQELBQADggEBAHDyUs9NbVGDk74Z
0RqNIGbzK/K+8SjQdq09yU3iP8bcgIWnpa9MGQlosItxIU+28Hw/ZJ0TNKJG3lFM
0ZOdUiUjhhGpryc1IudNU3TJngH3FkUh268IL4Y3Ez7NSOYa2Zhd4/i0A3U0nvy9
wxZXsHhlorwZOI6kT49h6LugnkHbOX7PajFE4uJkj7znk8LIxbCUT09+LCwAOc+O
FNVN1xr0+BTxiM6b6hzaUBRV5r5tHu1lS3lI92xqbQv0v1GjaV30qu/mp3+YVAnw
bqEUBCsHIZDWOOuiLRds3drbdCmRnak1ECMm6sciM8r2g2qSKsqwEEtVDfDizIHw
Kag4H8k=
-----END CERTIFICATE-----
Generated at Tue Oct 27 10:13:45 2026 by rpki-client