Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/323830343a383065303a623030303a3a2f33362d3336203d3e20323732343138.roa
File:                     323830343a383065303a623030303a3a2f33362d3336203d3e20323732343138.roa (raw, json)
Hash identifier:          gbNPEwgsZ41EfzJUUiDk8TgK9Oq40xxWNaRH/s1GzW0=
Subject key identifier:   A1:B0:01:0D:7D:4A:5D:BF:0B:8B:F5:4B:D4:53:91:15:51:10:90:36
Certificate issuer:       /CN=39CD9EE6F1482AE552599C27C0466BF860C4D235
Certificate serial:       15E6BE17ECD786D22DDA3ED81E5619AE15CC085B
Authority key identifier: 39:CD:9E:E6:F1:48:2A:E5:52:59:9C:27:C0:46:6B:F8:60:C4:D2:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CD9EE6F1482AE552599C27C0466BF860C4D235.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/323830343a383065303a623030303a3a2f33362d3336203d3e20323732343138.roa
Signing time:             Tue 25 Aug 2026 11:26:25 +0000
ROA not before:           Tue 25 Aug 2026 11:21:25 +0000
ROA not after:            Tue 24 Aug 2027 11:26:25 +0000
asID:                     272418
IP address blocks:        2804:80e0:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/39CD9EE6F1482AE552599C27C0466BF860C4D235.crl
                          rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/39CD9EE6F1482AE552599C27C0466BF860C4D235.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CD9EE6F1482AE552599C27C0466BF860C4D235.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 14:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e6:be:17:ec:d7:86:d2:2d:da:3e:d8:1e:56:19:ae:15:cc:08:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39CD9EE6F1482AE552599C27C0466BF860C4D235
        Validity
            Not Before: Aug 25 11:21:25 2026 GMT
            Not After : Aug 24 11:26:25 2027 GMT
        Subject: CN=A1B0010D7D4A5DBF0B8BF54BD453911551109036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:86:41:ad:41:c5:97:e8:ad:98:47:ba:83:e2:
                    90:4d:87:94:95:c7:bf:d7:1c:f8:8e:b3:1a:5b:6c:
                    ba:51:61:73:23:d8:0d:33:af:5a:c7:97:db:bd:10:
                    66:ac:44:55:66:f7:59:5c:f3:a7:79:90:0c:6a:88:
                    77:00:15:51:9d:df:1f:8e:44:9b:f6:f9:ed:3d:76:
                    c6:7b:73:24:e3:f9:9b:8d:0e:24:82:06:8e:e8:92:
                    43:6c:5a:27:24:49:ba:a7:1c:bd:0a:05:d1:4e:7c:
                    9d:02:00:bf:2d:a3:8e:62:01:ea:84:f4:a2:b4:97:
                    61:29:d5:61:c9:5f:1a:6b:ff:f4:67:7b:15:5e:32:
                    5a:fb:24:8f:a3:67:78:48:c1:71:64:98:d2:97:7c:
                    7b:4a:7f:2c:89:79:ae:52:56:9b:34:ad:82:b5:95:
                    bb:20:3f:ac:82:80:2e:3b:04:90:c5:48:a9:ed:00:
                    be:07:e9:6a:af:73:08:22:5e:a3:fa:f7:e6:f7:ca:
                    57:2d:6b:48:50:79:6e:7e:39:b0:95:1e:b6:9c:c9:
                    59:75:7c:b4:9e:0d:7e:88:f8:82:09:92:32:9b:35:
                    55:2a:87:86:43:33:3d:f5:7a:31:66:68:21:e2:32:
                    32:43:41:00:d7:46:97:15:01:43:24:90:f5:5d:92:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B0:01:0D:7D:4A:5D:BF:0B:8B:F5:4B:D4:53:91:15:51:10:90:36
            X509v3 Authority Key Identifier:
                keyid:39:CD:9E:E6:F1:48:2A:E5:52:59:9C:27:C0:46:6B:F8:60:C4:D2:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/39CD9EE6F1482AE552599C27C0466BF860C4D235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CD9EE6F1482AE552599C27C0466BF860C4D235.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/323830343a383065303a623030303a3a2f33362d3336203d3e20323732343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80e0:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:07:fe:6b:da:8e:c6:6d:d0:89:ca:2f:d8:24:d8:67:15:d5:
         45:27:5b:91:09:02:70:43:4f:79:30:ca:b6:dc:98:3a:08:20:
         98:ed:d7:31:4c:5f:2f:bb:b0:52:0f:30:e7:73:3f:a5:38:ca:
         aa:51:3c:a5:d2:bb:a4:af:50:b7:da:30:05:e4:7a:b1:74:f7:
         17:64:c5:40:47:ac:8e:ca:1f:87:d1:c6:9e:9b:d2:6c:02:61:
         a9:16:2e:11:3c:02:72:7a:39:65:77:0f:3f:8f:d0:1f:b5:37:
         2f:11:fb:d6:34:c2:e8:86:c8:45:fa:89:05:aa:31:d6:94:0d:
         55:87:ca:36:46:94:1e:0b:fb:43:ca:5b:69:b4:ae:4a:73:d8:
         87:8e:f1:5f:8d:cf:4f:b8:ce:d7:d4:49:56:cb:06:de:f2:87:
         5d:fe:12:57:df:56:a0:33:b8:79:54:74:b1:39:ad:2c:49:8e:
         d0:7e:17:c8:b0:2d:83:32:cb:22:4b:87:0f:48:3b:b9:b1:5e:
         fe:1f:88:28:27:14:ad:56:aa:be:dc:68:cc:e6:39:51:79:b1:
         fa:b8:46:33:34:2d:75:ca:fd:55:19:c4:b0:41:c1:25:cb:07:
         97:6d:44:f3:9b:73:82:a3:cf:0f:04:81:9f:76:53:d0:b9:58:
         0e:98:a8:96
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUFea+F+zXhtIt2j7YHlYZrhXMCFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlDRDlFRTZGMTQ4MkFFNTUyNTk5QzI3QzA0NjZCRjg2
MEM0RDIzNTAeFw0yNjA4MjUxMTIxMjVaFw0yNzA4MjQxMTI2MjVaMDMxMTAvBgNV
BAMTKEExQjAwMTBEN0Q0QTVEQkYwQjhCRjU0QkQ0NTM5MTE1NTExMDkwMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCShkGtQcWX6K2YR7qD4pBNh5SV
x7/XHPiOsxpbbLpRYXMj2A0zr1rHl9u9EGasRFVm91lc86d5kAxqiHcAFVGd3x+O
RJv2+e09dsZ7cyTj+ZuNDiSCBo7okkNsWickSbqnHL0KBdFOfJ0CAL8to45iAeqE
9KK0l2Ep1WHJXxpr//RnexVeMlr7JI+jZ3hIwXFkmNKXfHtKfyyJea5SVps0rYK1
lbsgP6yCgC47BJDFSKntAL4H6WqvcwgiXqP69+b3ylcta0hQeW5+ObCVHracyVl1
fLSeDX6I+IIJkjKbNVUqh4ZDMz31ejFmaCHiMjJDQQDXRpcVAUMkkPVdkm5pAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUobABDX1KXb8Li/VL1FORFVEQkDYwHwYDVR0j
BBgwFoAUOc2e5vFIKuVSWZwnwEZr+GDE0jUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0xTYmhCNTV4UlhRaUNrd2hWN2RySGZqVzdNczJRVERxdHk3b2ZVeExS
S3AvMC8zOUNEOUVFNkYxNDgyQUU1NTI1OTlDMjdDMDQ2NkJGODYwQzREMjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5Q0Q5RUU2RjE0ODJBRTU1
MjU5OUMyN0MwNDY2QkY4NjBDNEQyMzUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNMU2JoQjU1eFJYUWlDa3doVjdkckhmalc3TXMyUVREcXR5N29mVXhMUktwLzAv
MzIzODMwMzQzYTM4MzA2NTMwM2E2MjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMjM0MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEgOCwMA0GCSqGSIb3DQEBCwUA
A4IBAQBbB/5r2o7GbdCJyi/YJNhnFdVFJ1uRCQJwQ095MMq23Jg6CCCY7dcxTF8v
u7BSDzDncz+lOMqqUTyl0rukr1C32jAF5HqxdPcXZMVAR6yOyh+H0caem9JsAmGp
Fi4RPAJyejlldw8/j9AftTcvEfvWNMLohshF+okFqjHWlA1Vh8o2RpQeC/tDyltp
tK5Kc9iHjvFfjc9PuM7X1ElWywbe8odd/hJX31agM7h5VHSxOa0sSY7QfhfIsC2D
MssiS4cPSDu5sV7+H4goJxStVqq+3GjM5jlRebH6uEYzNC11yv1VGcSwQcElyweX
bUTzm3OCo88PBIGfdlPQuVgOmKiW
-----END CERTIFICATE-----
Generated at Thu Oct 15 06:30:09 2026 by rpki-client