Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33332d3333203d3e20323632333933.roa
File:                     323830343a3863383a3a2f33332d3333203d3e20323632333933.roa (raw, json)
Hash identifier:          ETVX6+n5oKhE+dkDm5BXqOayJWa5PNKGZVoWl98lNyo=
Subject key identifier:   9F:87:2F:F7:ED:91:17:8F:48:E2:74:C5:53:E8:FD:9C:8F:01:CA:5C
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       59F10CB23CFF3C8A9A5C29A4FCE2EEBA59F37731
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33332d3333203d3e20323632333933.roa
Signing time:             Sun 08 Mar 2026 22:48:33 +0000
ROA not before:           Sun 08 Mar 2026 22:43:33 +0000
ROA not after:            Sun 07 Mar 2027 22:48:33 +0000
asID:                     262393
IP address blocks:        2804:8c8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 09:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f1:0c:b2:3c:ff:3c:8a:9a:5c:29:a4:fc:e2:ee:ba:59:f3:77:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Mar  8 22:43:33 2026 GMT
            Not After : Mar  7 22:48:33 2027 GMT
        Subject: CN=9F872FF7ED91178F48E274C553E8FD9C8F01CA5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:18:44:53:bb:2b:c4:e6:47:2a:dd:a4:fa:83:
                    4b:0c:a5:6a:76:8a:7d:5c:da:a6:b9:be:0d:fb:e7:
                    81:b1:a8:77:22:44:30:51:18:5e:88:e9:72:ec:43:
                    09:80:44:e5:c2:b0:60:51:d2:1b:38:3d:47:7a:69:
                    35:2f:6e:a8:24:88:65:30:c8:62:2f:d3:99:1f:5b:
                    f4:c8:d5:d3:1f:42:12:7e:b9:0c:b7:7d:dc:5d:1e:
                    90:eb:4c:71:c4:8c:cd:b0:44:8a:0a:55:4c:e3:b7:
                    e2:f9:8e:e3:11:1c:9e:d0:98:b7:5e:42:b2:c7:53:
                    ce:e8:7e:f0:23:94:ef:ff:63:c6:64:ff:a8:f6:f7:
                    a0:fd:02:25:0f:3a:5e:10:b0:c6:ec:67:cc:53:8d:
                    19:25:15:a3:de:05:1f:3e:18:20:4f:ff:f5:53:f8:
                    fc:5b:3f:af:5a:94:a9:7d:39:bd:15:d6:9d:22:fe:
                    2d:1b:fe:f0:ea:2e:67:02:6c:64:bc:04:8a:5d:b0:
                    44:cf:b7:88:56:d3:cb:16:ee:a3:c7:85:4c:8c:c4:
                    bd:23:7b:42:b4:1c:bc:21:09:ae:83:a4:1b:a4:5a:
                    67:1d:1d:5e:68:90:69:ff:22:51:4c:a5:4c:86:f8:
                    4e:6c:bf:a2:b7:6c:c2:1f:39:79:0a:c7:66:bb:6d:
                    bf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:87:2F:F7:ED:91:17:8F:48:E2:74:C5:53:E8:FD:9C:8F:01:CA:5C
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33332d3333203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8::/33

    Signature Algorithm: sha256WithRSAEncryption
         46:a6:76:f4:f5:1b:81:2e:f6:7b:ee:de:a3:26:9b:13:e0:33:
         5e:7d:8d:5c:e5:5e:22:a2:ae:18:59:d7:98:38:b4:45:76:1e:
         27:4d:41:4b:80:10:56:29:69:50:3f:78:7d:00:81:65:e5:b1:
         16:a7:c7:c1:c3:47:6c:32:24:43:ef:0a:97:7c:97:c2:b3:c2:
         dd:75:52:b7:29:60:16:92:f7:2f:fe:1a:34:13:a9:28:f1:f5:
         7c:90:0e:9a:b1:e3:36:c8:4b:9d:b0:5e:2a:10:5a:cc:31:ad:
         c6:75:d4:f0:f7:b5:47:e0:d2:45:03:57:8b:e1:44:02:56:72:
         6f:83:8b:d6:fb:f2:b5:0d:bb:30:c8:8e:37:f6:38:86:3f:9c:
         cc:d7:ab:b2:fb:c0:e3:87:74:c2:c1:af:9f:8e:fb:bf:e3:93:
         7d:34:26:48:16:1d:57:5a:08:38:ab:a4:09:e5:d9:5a:7f:70:
         4f:53:d9:18:8e:38:9a:5f:03:f1:17:b0:31:45:60:c1:d6:71:
         11:4f:d1:54:8a:98:6e:9c:d0:44:01:28:cb:aa:4e:62:29:c4:
         23:d8:2c:a7:d7:d1:94:8e:bb:72:58:d9:0e:15:e8:0f:88:64:
         d2:e1:ca:ad:9d:2c:a7:a6:53:82:7e:dd:6c:3a:13:a7:9c:90:
         0e:de:0d:21
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWfEMsjz/PIqaXCmk/OLuulnzdzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF
NEM0QjFFNTAeFw0yNjAzMDgyMjQzMzNaFw0yNzAzMDcyMjQ4MzNaMDMxMTAvBgNV
BAMTKDlGODcyRkY3RUQ5MTE3OEY0OEUyNzRDNTUzRThGRDlDOEYwMUNBNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3GERTuyvE5kcq3aT6g0sMpWp2
in1c2qa5vg3754GxqHciRDBRGF6I6XLsQwmAROXCsGBR0hs4PUd6aTUvbqgkiGUw
yGIv05kfW/TI1dMfQhJ+uQy3fdxdHpDrTHHEjM2wRIoKVUzjt+L5juMRHJ7QmLde
QrLHU87ofvAjlO//Y8Zk/6j296D9AiUPOl4QsMbsZ8xTjRklFaPeBR8+GCBP//VT
+PxbP69alKl9Ob0V1p0i/i0b/vDqLmcCbGS8BIpdsETPt4hW08sW7qPHhUyMxL0j
e0K0HLwhCa6DpBukWmcdHV5okGn/IlFMpUyG+E5sv6K3bMIfOXkKx2a7bb9zAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUn4cv9+2RF49I4nTFU+j9nI8BylwwHwYDVR0j
BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5
N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv
MzIzODMwMzQzYTM4NjMzODNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzMjMz
MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygECMgAMA0GCSqGSIb3DQEBCwUAA4IBAQBGpnb09RuB
LvZ77t6jJpsT4DNefY1c5V4ioq4YWdeYOLRFdh4nTUFLgBBWKWlQP3h9AIFl5bEW
p8fBw0dsMiRD7wqXfJfCs8LddVK3KWAWkvcv/ho0E6ko8fV8kA6aseM2yEudsF4q
EFrMMa3GddTw97VH4NJFA1eL4UQCVnJvg4vW+/K1DbswyI439jiGP5zM16uy+8Dj
h3TCwa+fjvu/45N9NCZIFh1XWgg4q6QJ5dlaf3BPU9kYjjiaXwPxF7AxRWDB1nER
T9FUiphunNBEASjLqk5iKcQj2Cyn19GUjrtyWNkOFegPiGTS4cqtnSynplOCft1s
OhOnnJAO3g0h
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:23:20 2026 by rpki-client