Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/323830343a353165383a383030303a3a2f33332d3333203d3e20323638343834.roa
File:                     323830343a353165383a383030303a3a2f33332d3333203d3e20323638343834.roa (raw, json)
Hash identifier:          WAEWKKtfVrFJsMM2CWbErYgncDlzGCNjgk8fS8TAttk=
Subject key identifier:   68:C3:F5:0C:B6:1E:79:24:84:E2:24:1F:3B:E5:9C:47:3C:24:40:DA
Certificate issuer:       /CN=47A396325DF9EBD8DDDCB2149F0084823FA67B1E
Certificate serial:       3E49D32B94E0EAF08A986C8A8214581536A57EE8
Authority key identifier: 47:A3:96:32:5D:F9:EB:D8:DD:DC:B2:14:9F:00:84:82:3F:A6:7B:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/323830343a353165383a383030303a3a2f33332d3333203d3e20323638343834.roa
Signing time:             Tue 23 Jun 2026 01:24:46 +0000
ROA not before:           Tue 23 Jun 2026 01:19:46 +0000
ROA not after:            Tue 22 Jun 2027 01:24:46 +0000
asID:                     268484
IP address blocks:        2804:51e8:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.crl
                          rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:49:d3:2b:94:e0:ea:f0:8a:98:6c:8a:82:14:58:15:36:a5:7e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A396325DF9EBD8DDDCB2149F0084823FA67B1E
        Validity
            Not Before: Jun 23 01:19:46 2026 GMT
            Not After : Jun 22 01:24:46 2027 GMT
        Subject: CN=68C3F50CB61E792484E2241F3BE59C473C2440DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:44:13:5a:2b:b8:7e:eb:93:bf:23:57:c9:
                    d4:61:9d:59:5c:c1:80:92:58:95:3a:11:2c:2f:a5:
                    61:84:62:81:cd:a4:d8:2d:78:a3:e5:51:c2:f0:c6:
                    c3:d2:c3:d7:36:98:76:34:5f:21:f7:7a:ff:91:9f:
                    3f:13:ab:32:a5:2a:23:0c:a6:63:0e:9e:04:c8:51:
                    36:09:82:e2:aa:a8:e6:4a:2e:82:fb:80:92:02:a0:
                    e7:91:5c:fc:69:a7:06:94:f0:3d:29:cb:22:84:d6:
                    07:a3:cd:09:27:b6:fc:f5:22:a8:c9:e7:98:45:fe:
                    c4:78:eb:15:be:0b:79:b8:10:a5:5e:e4:c7:30:99:
                    19:fb:2a:12:c0:35:b8:f7:63:42:06:16:66:12:57:
                    18:35:d8:01:b8:c1:bc:e1:49:c6:70:97:9d:cb:9e:
                    a8:3b:fd:22:91:45:d4:5b:26:fb:9b:a5:1b:4b:60:
                    7a:a8:3e:8c:f5:53:87:88:cb:5c:d5:f2:80:a8:4c:
                    54:4d:ee:6b:6b:f9:e3:9a:a1:0e:6e:79:ad:c5:1c:
                    76:a5:c4:4b:dd:8c:f5:d7:8b:59:cf:7f:ec:1e:60:
                    ed:ec:31:06:a5:e4:ee:6d:6c:82:d9:f1:5a:3e:4b:
                    9b:4f:ac:e1:77:e9:a8:1e:e2:4c:1c:a0:04:94:6b:
                    cd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C3:F5:0C:B6:1E:79:24:84:E2:24:1F:3B:E5:9C:47:3C:24:40:DA
            X509v3 Authority Key Identifier:
                keyid:47:A3:96:32:5D:F9:EB:D8:DD:DC:B2:14:9F:00:84:82:3F:A6:7B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/323830343a353165383a383030303a3a2f33332d3333203d3e20323638343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51e8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4b:ad:7c:93:36:2f:c9:4d:40:4d:3a:03:a3:a9:46:3f:44:1d:
         83:3a:7f:9e:4a:6a:1f:72:8e:7a:f2:6b:13:0c:c3:df:93:c1:
         84:f2:a8:e9:70:f5:d3:52:3b:2b:d5:ae:59:30:81:27:d3:57:
         f0:b0:e1:c7:83:df:fc:fe:2d:aa:ff:f7:27:28:fb:7d:8e:c1:
         bb:37:b3:07:8f:59:01:b7:47:dc:bb:d0:ce:2c:26:8f:ed:e0:
         74:b9:c3:2f:ff:8d:f3:24:4f:68:15:90:27:6a:38:66:f9:ed:
         96:d5:08:b5:d2:f1:17:98:80:20:e3:36:1c:35:e0:94:35:c8:
         81:08:5f:01:d6:27:35:d9:21:12:57:ab:d3:90:5b:bc:4a:4e:
         d2:bc:dd:e9:78:39:02:b0:34:4f:51:ef:84:60:f3:52:ec:9f:
         e0:90:30:2f:89:35:50:97:fc:8b:45:95:4e:d0:f2:7d:13:cd:
         ce:48:e2:04:aa:48:60:5f:c3:61:ec:a7:7a:a6:58:1b:76:5f:
         bd:4b:81:df:7b:fd:cb:79:d5:05:4b:9c:f0:d3:0a:ae:94:8b:
         5a:0c:b3:8f:f3:27:ec:af:aa:d4:ac:de:8c:c9:f8:1c:e6:f7:
         1c:64:3a:e2:f9:71:90:25:81:6c:5c:cd:6b:d3:24:f4:35:b7:
         55:fd:b5:f0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPknTK5Tg6vCKmGyKghRYFTalfugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdBMzk2MzI1REY5RUJEOERERENCMjE0OUYwMDg0ODIz
RkE2N0IxRTAeFw0yNjA2MjMwMTE5NDZaFw0yNzA2MjIwMTI0NDZaMDMxMTAvBgNV
BAMTKDY4QzNGNTBDQjYxRTc5MjQ4NEUyMjQxRjNCRTU5QzQ3M0MyNDQwREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNEQTWiu4fuuTvyNXydRhnVlc
wYCSWJU6ESwvpWGEYoHNpNgteKPlUcLwxsPSw9c2mHY0XyH3ev+Rnz8TqzKlKiMM
pmMOngTIUTYJguKqqOZKLoL7gJICoOeRXPxppwaU8D0pyyKE1gejzQkntvz1IqjJ
55hF/sR46xW+C3m4EKVe5McwmRn7KhLANbj3Y0IGFmYSVxg12AG4wbzhScZwl53L
nqg7/SKRRdRbJvubpRtLYHqoPoz1U4eIy1zV8oCoTFRN7mtr+eOaoQ5uea3FHHal
xEvdjPXXi1nPf+weYO3sMQal5O5tbILZ8Vo+S5tPrOF36age4kwcoASUa83ZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUaMP1DLYeeSSE4iQfO+WcRzwkQNowHwYDVR0j
BBgwFoAUR6OWMl3569jd3LIUnwCEgj+mex4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjMya1Y2M0dMZ1NtZ05HODlxZ3FySmRKQlV1NlNQaVJEY3FmV3hqQllt
NmQvMC80N0EzOTYzMjVERjlFQkQ4REREQ0IyMTQ5RjAwODQ4MjNGQTY3QjFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3QTM5NjMyNURGOUVCRDhE
RERDQjIxNDlGMDA4NDgyM0ZBNjdCMUUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIzMmtWNjNHTGdTbWdORzg5cWdxckpkSkJVdTZTUGlSRGNxZld4akJZbTZkLzAv
MzIzODMwMzQzYTM1MzE2NTM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzODM0MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEUeiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBLrXyTNi/JTUBNOgOjqUY/RB2DOn+eSmofco568msTDMPfk8GE8qjpcPXT
Ujsr1a5ZMIEn01fwsOHHg9/8/i2q//cnKPt9jsG7N7MHj1kBt0fcu9DOLCaP7eB0
ucMv/43zJE9oFZAnajhm+e2W1Qi10vEXmIAg4zYcNeCUNciBCF8B1ic12SESV6vT
kFu8Sk7SvN3peDkCsDRPUe+EYPNS7J/gkDAviTVQl/yLRZVO0PJ9E83OSOIEqkhg
X8Nh7Kd6plgbdl+9S4Hfe/3LedUFS5zw0wqulItaDLOP8yfsr6rUrN6Myfgc5vcc
ZDri+XGQJYFsXM1r0yT0NbdV/bXw
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:22:16 2026 by rpki-client