Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/323830343a353165383a3a2f33322d3332203d3e20323638343834.roa
File:                     323830343a353165383a3a2f33322d3332203d3e20323638343834.roa (raw, json)
Hash identifier:          yOWu1HB/a7n14UvwQ1O3nL6Jk/kG+flHVdwBm7I+fBo=
Subject key identifier:   59:B7:A4:1E:28:D2:C5:41:C6:DC:94:FC:14:82:32:56:7E:50:10:07
Certificate issuer:       /CN=47A396325DF9EBD8DDDCB2149F0084823FA67B1E
Certificate serial:       5C80E83FC40416AC68D5B782A80169A7D90773FB
Authority key identifier: 47:A3:96:32:5D:F9:EB:D8:DD:DC:B2:14:9F:00:84:82:3F:A6:7B:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/323830343a353165383a3a2f33322d3332203d3e20323638343834.roa
Signing time:             Tue 23 Jun 2026 01:24:58 +0000
ROA not before:           Tue 23 Jun 2026 01:19:58 +0000
ROA not after:            Tue 22 Jun 2027 01:24:58 +0000
asID:                     268484
IP address blocks:        2804:51e8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.crl
                          rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:80:e8:3f:c4:04:16:ac:68:d5:b7:82:a8:01:69:a7:d9:07:73:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A396325DF9EBD8DDDCB2149F0084823FA67B1E
        Validity
            Not Before: Jun 23 01:19:58 2026 GMT
            Not After : Jun 22 01:24:58 2027 GMT
        Subject: CN=59B7A41E28D2C541C6DC94FC148232567E501007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:bc:f2:7a:0c:9b:fe:e1:90:3e:34:cc:ab:
                    cf:dd:6d:b9:79:b1:65:ba:c0:13:38:8c:83:c5:e4:
                    92:24:da:f9:5b:2e:72:4b:49:36:c2:e3:a7:b7:7a:
                    bd:dd:ed:2d:31:11:d6:2c:6a:b8:61:0c:1b:0f:c2:
                    4c:dd:29:0c:a9:eb:5c:db:a6:36:b6:f4:9c:8b:cb:
                    34:5a:b9:c6:bf:90:cc:64:17:a0:2e:85:1d:df:5d:
                    81:0e:b6:01:14:47:18:3b:ab:0c:e6:84:35:25:51:
                    06:4c:32:8f:a4:a3:75:a9:a2:45:ce:8b:08:f3:57:
                    3d:54:51:41:03:e3:f2:82:5e:f6:01:da:45:a9:8f:
                    fd:4f:1a:dd:90:8c:71:21:94:df:cb:7f:9f:63:28:
                    ed:4c:99:f8:ab:92:d5:22:01:80:ff:fa:ed:ac:14:
                    91:27:9a:6c:72:ee:78:91:48:14:35:f0:66:52:f5:
                    4c:10:b9:dd:a6:e1:94:29:86:d1:2e:59:97:9f:0a:
                    8f:d9:83:50:d6:1d:3f:9c:7b:3d:3a:6b:c1:3c:6f:
                    43:52:04:04:97:66:91:8d:b2:7e:ce:dc:e8:5e:4b:
                    1e:fc:be:60:3d:f3:cd:ba:f6:49:e7:bc:b7:5a:48:
                    87:b2:ec:b0:34:5e:3d:ae:8c:db:7b:b3:dc:63:fa:
                    6c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B7:A4:1E:28:D2:C5:41:C6:DC:94:FC:14:82:32:56:7E:50:10:07
            X509v3 Authority Key Identifier:
                keyid:47:A3:96:32:5D:F9:EB:D8:DD:DC:B2:14:9F:00:84:82:3F:A6:7B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A396325DF9EBD8DDDCB2149F0084823FA67B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/0/323830343a353165383a3a2f33322d3332203d3e20323638343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:f5:92:e3:c5:d6:bd:f1:d8:d3:9e:7c:b0:90:e9:12:02:86:
         1f:cb:b3:c5:4c:ad:33:11:54:8c:77:72:a5:f1:0a:ca:c1:35:
         bf:91:6a:cc:c9:2a:58:1f:97:a8:9a:e9:3b:7d:8a:1d:f6:5d:
         62:14:ff:90:2b:8f:83:f4:e6:7e:9e:b0:3e:31:71:b4:f7:90:
         6f:8b:ff:43:0d:fa:c2:4e:84:80:cc:41:a7:70:8b:58:fa:6a:
         df:88:e5:f9:4b:a9:36:7d:67:a8:3e:0c:f1:0c:69:4a:9c:9d:
         01:c8:e5:cd:7c:2a:98:1f:18:9b:da:95:f0:c9:51:3a:20:4a:
         3f:32:6f:a8:5f:23:af:84:96:5b:1c:6b:83:38:77:d2:53:81:
         6e:03:70:8a:66:ad:97:2a:8a:ee:58:cb:fe:b6:50:6b:ea:8d:
         6a:53:0f:c7:1b:3c:11:fd:4e:2d:c9:1f:96:35:4c:84:c9:6e:
         aa:08:73:29:16:a5:ce:d9:34:37:81:81:75:4d:fa:d8:ba:ef:
         0d:60:3d:09:c4:29:f7:43:2b:c6:67:85:67:2b:8e:20:21:c8:
         5f:b8:41:e1:2a:ae:5e:17:25:52:0a:46:26:9c:bf:68:26:81:
         d4:b0:d9:5d:81:04:ee:11:f1:c6:53:3b:a6:62:cf:e9:fd:7f:
         80:0c:b8:64
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXIDoP8QEFqxo1beCqAFpp9kHc/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdBMzk2MzI1REY5RUJEOERERENCMjE0OUYwMDg0ODIz
RkE2N0IxRTAeFw0yNjA2MjMwMTE5NThaFw0yNzA2MjIwMTI0NThaMDMxMTAvBgNV
BAMTKDU5QjdBNDFFMjhEMkM1NDFDNkRDOTRGQzE0ODIzMjU2N0U1MDEwMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKeLzyegyb/uGQPjTMq8/dbbl5
sWW6wBM4jIPF5JIk2vlbLnJLSTbC46e3er3d7S0xEdYsarhhDBsPwkzdKQyp61zb
pja29JyLyzRauca/kMxkF6AuhR3fXYEOtgEURxg7qwzmhDUlUQZMMo+ko3WpokXO
iwjzVz1UUUED4/KCXvYB2kWpj/1PGt2QjHEhlN/Lf59jKO1MmfirktUiAYD/+u2s
FJEnmmxy7niRSBQ18GZS9UwQud2m4ZQphtEuWZefCo/Zg1DWHT+cez06a8E8b0NS
BASXZpGNsn7O3OheSx78vmA988269knnvLdaSIey7LA0Xj2ujNt7s9xj+myzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUWbekHijSxUHG3JT8FIIyVn5QEAcwHwYDVR0j
BBgwFoAUR6OWMl3569jd3LIUnwCEgj+mex4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjMya1Y2M0dMZ1NtZ05HODlxZ3FySmRKQlV1NlNQaVJEY3FmV3hqQllt
NmQvMC80N0EzOTYzMjVERjlFQkQ4REREQ0IyMTQ5RjAwODQ4MjNGQTY3QjFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3QTM5NjMyNURGOUVCRDhE
RERDQjIxNDlGMDA4NDgyM0ZBNjdCMUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIzMmtWNjNHTGdTbWdORzg5cWdxckpkSkJVdTZTUGlSRGNxZld4akJZbTZkLzAv
MzIzODMwMzQzYTM1MzE2NTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzQzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARR6DANBgkqhkiG9w0BAQsFAAOCAQEAqvWS48XW
vfHY0558sJDpEgKGH8uzxUytMxFUjHdypfEKysE1v5FqzMkqWB+XqJrpO32KHfZd
YhT/kCuPg/Tmfp6wPjFxtPeQb4v/Qw36wk6EgMxBp3CLWPpq34jl+UupNn1nqD4M
8QxpSpydAcjlzXwqmB8Ym9qV8MlROiBKPzJvqF8jr4SWWxxrgzh30lOBbgNwimat
lyqK7ljL/rZQa+qNalMPxxs8Ef1OLckfljVMhMluqghzKRalztk0N4GBdU362Lrv
DWA9CcQp90MrxmeFZyuOICHIX7hB4SquXhclUgpGJpy/aCaB1LDZXYEE7hHxxlM7
pmLP6f1/gAy4ZA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:51:02 2026 by rpki-client