Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/323830343a363335383a343030303a3a2f33342d3334203d3e20323639333535.roa
File:                     323830343a363335383a343030303a3a2f33342d3334203d3e20323639333535.roa (raw, json)
Hash identifier:          4/0DEtBrkclxhxlVpPLB0SER9uWK6KycenST6fGlg0U=
Subject key identifier:   26:5C:D2:09:75:41:6E:71:F9:E3:15:F7:CA:BD:CE:B6:CC:6A:F1:7E
Certificate issuer:       /CN=7191F9F31FCAE6ED1417B34857F66B4B522797BD
Certificate serial:       21535074CC7DAF23AA597C155CAEA5F2907A0F54
Authority key identifier: 71:91:F9:F3:1F:CA:E6:ED:14:17:B3:48:57:F6:6B:4B:52:27:97:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7191F9F31FCAE6ED1417B34857F66B4B522797BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/323830343a363335383a343030303a3a2f33342d3334203d3e20323639333535.roa
Signing time:             Mon 20 Jul 2026 22:58:11 +0000
ROA not before:           Mon 20 Jul 2026 22:53:11 +0000
ROA not after:            Mon 19 Jul 2027 22:58:11 +0000
asID:                     269355
IP address blocks:        2804:6358:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/7191F9F31FCAE6ED1417B34857F66B4B522797BD.crl
                          rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/7191F9F31FCAE6ED1417B34857F66B4B522797BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7191F9F31FCAE6ED1417B34857F66B4B522797BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:53:50:74:cc:7d:af:23:aa:59:7c:15:5c:ae:a5:f2:90:7a:0f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191F9F31FCAE6ED1417B34857F66B4B522797BD
        Validity
            Not Before: Jul 20 22:53:11 2026 GMT
            Not After : Jul 19 22:58:11 2027 GMT
        Subject: CN=265CD20975416E71F9E315F7CABDCEB6CC6AF17E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:c3:ad:e3:5d:93:02:dc:fe:17:6d:94:19:
                    4a:ab:84:a5:4e:41:6c:9f:72:b7:50:62:13:97:71:
                    50:6b:20:4a:85:a1:58:96:36:af:99:83:11:58:66:
                    60:14:08:95:72:77:91:0f:f7:11:4a:fe:d8:43:44:
                    8e:54:bf:c0:4a:82:fa:6b:3f:3b:3f:63:46:71:6a:
                    0b:ee:cb:f0:28:08:ed:c9:88:50:f6:61:2c:02:55:
                    2c:cf:a7:31:53:7f:47:ac:05:ba:6a:08:3f:65:d3:
                    ae:2d:f7:4e:62:8a:a2:13:33:d9:d7:8f:da:d8:53:
                    2f:78:82:e4:e3:b2:f4:c2:91:52:da:0e:e3:fd:0c:
                    c1:65:99:13:81:11:ae:3b:6d:f7:6a:2b:85:bc:66:
                    36:36:6a:94:ad:d6:6b:ca:f8:eb:c2:1b:f3:d6:7e:
                    4d:de:16:ee:39:6a:ea:c4:f5:d6:fd:66:a8:15:4d:
                    75:2e:52:25:f2:63:bc:61:4d:e9:d1:65:42:52:2e:
                    bb:5c:98:45:37:e0:46:44:af:23:6c:42:af:21:59:
                    c0:69:70:2d:5d:34:13:ff:20:66:0b:b8:db:3f:d1:
                    c6:ee:21:eb:e7:96:5d:d8:3b:f4:7e:ec:ba:2a:e5:
                    4e:66:74:23:33:81:b0:f5:86:ee:2c:8c:ff:0b:2c:
                    3a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5C:D2:09:75:41:6E:71:F9:E3:15:F7:CA:BD:CE:B6:CC:6A:F1:7E
            X509v3 Authority Key Identifier:
                keyid:71:91:F9:F3:1F:CA:E6:ED:14:17:B3:48:57:F6:6B:4B:52:27:97:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/7191F9F31FCAE6ED1417B34857F66B4B522797BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7191F9F31FCAE6ED1417B34857F66B4B522797BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/2/323830343a363335383a343030303a3a2f33342d3334203d3e20323639333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6358:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ae:19:c2:8d:8c:4e:ae:10:a6:0d:0e:91:91:d7:63:d4:9a:02:
         87:64:c1:96:7c:16:de:b4:fe:24:1d:1c:d7:30:ae:a2:74:0f:
         21:75:94:dd:0f:5f:0e:ab:d1:bc:f5:dd:5b:26:ca:b9:97:7e:
         3a:d0:b7:56:98:64:aa:33:99:c4:94:62:86:94:3d:ca:c0:df:
         bb:5c:75:df:51:61:68:91:a5:5a:cf:f8:bc:5a:81:49:2c:96:
         a8:5d:d0:81:b7:c7:78:56:0b:ab:ec:50:61:07:12:81:a0:58:
         a7:e3:87:e5:e8:26:5f:63:fc:b9:f5:43:ba:f8:13:4d:c5:30:
         bf:73:b8:dc:28:a5:78:e7:a0:c7:95:8f:81:af:7a:f2:f5:b9:
         0d:7c:bf:19:47:3a:c8:8b:80:91:e3:f5:c4:82:f7:06:ac:01:
         2a:00:70:cf:b0:ba:cb:1f:f4:90:ed:e1:bc:d2:94:27:84:71:
         5b:91:82:3c:3c:25:3d:5f:95:9f:b8:f0:aa:8f:41:c5:af:f8:
         e1:57:4a:e1:0e:47:d6:4e:0b:75:d9:6d:38:e6:dd:11:72:62:
         d8:1a:d7:bf:bd:ad:88:86:8e:73:b5:c8:d4:94:a4:71:e4:d9:
         1b:46:14:97:18:b2:f2:05:cc:34:9d:79:72:f0:29:68:33:62:
         33:5e:09:1a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUIVNQdMx9ryOqWXwVXK6l8pB6D1QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE5MUY5RjMxRkNBRTZFRDE0MTdCMzQ4NTdGNjZCNEI1
MjI3OTdCRDAeFw0yNjA3MjAyMjUzMTFaFw0yNzA3MTkyMjU4MTFaMDMxMTAvBgNV
BAMTKDI2NUNEMjA5NzU0MTZFNzFGOUUzMTVGN0NBQkRDRUI2Q0M2QUYxN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdcOt412TAtz+F22UGUqrhKVO
QWyfcrdQYhOXcVBrIEqFoViWNq+ZgxFYZmAUCJVyd5EP9xFK/thDRI5Uv8BKgvpr
Pzs/Y0Zxagvuy/AoCO3JiFD2YSwCVSzPpzFTf0esBbpqCD9l064t905iiqITM9nX
j9rYUy94guTjsvTCkVLaDuP9DMFlmROBEa47bfdqK4W8ZjY2apSt1mvK+OvCG/PW
fk3eFu45aurE9db9ZqgVTXUuUiXyY7xhTenRZUJSLrtcmEU34EZEryNsQq8hWcBp
cC1dNBP/IGYLuNs/0cbuIevnll3YO/R+7Loq5U5mdCMzgbD1hu4sjP8LLDrhAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUJlzSCXVBbnH54xX3yr3Otsxq8X4wHwYDVR0j
BBgwFoAUcZH58x/K5u0UF7NIV/ZrS1Inl70wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1RpR2pGZjlYbkZRRE1haEhtOENIcjhxSExUazNpTnBFeW90V29vVkdV
SjkvMi83MTkxRjlGMzFGQ0FFNkVEMTQxN0IzNDg1N0Y2NkI0QjUyMjc5N0JELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxOTFGOUYzMUZDQUU2RUQx
NDE3QjM0ODU3RjY2QjRCNTIyNzk3QkQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNUaUdqRmY5WG5GUURNYWhIbThDSHI4cUhMVGszaU5wRXlvdFdvb1ZHVUo5LzIv
MzIzODMwMzQzYTM2MzMzNTM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTMzMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEY1hAMA0GCSqGSIb3DQEBCwUA
A4IBAQCuGcKNjE6uEKYNDpGR12PUmgKHZMGWfBbetP4kHRzXMK6idA8hdZTdD18O
q9G89d1bJsq5l3460LdWmGSqM5nElGKGlD3KwN+7XHXfUWFokaVaz/i8WoFJLJao
XdCBt8d4Vgur7FBhBxKBoFin44fl6CZfY/y59UO6+BNNxTC/c7jcKKV456DHlY+B
r3ry9bkNfL8ZRzrIi4CR4/XEgvcGrAEqAHDPsLrLH/SQ7eG80pQnhHFbkYI8PCU9
X5WfuPCqj0HFr/jhV0rhDkfWTgt12W045t0RcmLYGte/va2Iho5ztcjUlKRx5Nkb
RhSXGLLyBcw0nXly8CloM2IzXgka
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:39:59 2026 by rpki-client