Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/323830343a323761383a383030303a3a2f33342d3334203d3e20323633393135.roa
File:                     323830343a323761383a383030303a3a2f33342d3334203d3e20323633393135.roa (raw, json)
Hash identifier:          R9uUadl+VyidVBTlQh2+2i/74yTtIYA8Soj9eCUs5eE=
Subject key identifier:   2B:F0:74:B3:84:88:07:41:30:8B:5D:3B:3B:D2:36:B7:0B:F1:2A:20
Certificate issuer:       /CN=D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643
Certificate serial:       7F151441EF07F54EC7684503845B06E6133D0930
Authority key identifier: D3:CB:04:EE:0B:E9:FF:3E:45:D2:10:20:E3:5A:20:C0:2C:DF:96:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/323830343a323761383a383030303a3a2f33342d3334203d3e20323633393135.roa
Signing time:             Mon 20 Jul 2026 14:56:48 +0000
ROA not before:           Mon 20 Jul 2026 14:51:48 +0000
ROA not after:            Mon 19 Jul 2027 14:56:48 +0000
asID:                     263915
IP address blocks:        2804:27a8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.crl
                          rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 17:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:15:14:41:ef:07:f5:4e:c7:68:45:03:84:5b:06:e6:13:3d:09:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643
        Validity
            Not Before: Jul 20 14:51:48 2026 GMT
            Not After : Jul 19 14:56:48 2027 GMT
        Subject: CN=2BF074B384880741308B5D3B3BD236B70BF12A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ea:6a:0d:27:6e:af:67:df:f0:50:05:e5:2e:
                    6b:6a:47:75:47:cc:53:7a:6f:0f:89:50:81:72:42:
                    fc:3e:4f:56:fc:8b:8c:75:33:93:9c:fe:ed:d6:02:
                    e3:0d:c6:0a:04:2f:31:a2:10:83:8b:51:82:71:48:
                    ff:25:08:66:52:8c:ce:58:c7:f2:c0:50:0c:d2:51:
                    f4:e6:e7:0c:69:60:84:7c:4a:48:04:91:63:b2:8b:
                    72:21:f2:9d:ca:d1:af:ca:a0:f7:9b:42:bc:bb:0c:
                    21:41:c2:c2:6c:f0:06:48:7e:d4:0a:47:be:ec:5b:
                    6e:96:90:38:a0:6e:fa:1c:f9:63:d5:7c:d4:52:3c:
                    57:68:d9:52:48:23:17:d1:22:5c:57:80:36:ff:94:
                    e8:b6:67:bb:38:09:99:aa:b2:ed:dc:ae:49:c9:5c:
                    66:17:d7:c5:a7:3d:87:54:7b:ca:e8:1b:ec:4a:21:
                    80:bf:48:50:b8:2e:d6:6e:0b:f8:ea:71:f8:46:e2:
                    ec:58:6a:7a:5c:2a:c1:2f:66:c9:23:99:c9:99:49:
                    42:18:7e:eb:2c:1d:3d:6f:12:fe:6b:a8:e9:12:fd:
                    e4:d0:c5:d7:4c:b5:fb:f0:6b:c3:d6:17:87:88:68:
                    fd:db:13:0d:e0:79:88:24:24:0b:b7:91:18:43:f8:
                    be:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F0:74:B3:84:88:07:41:30:8B:5D:3B:3B:D2:36:B7:0B:F1:2A:20
            X509v3 Authority Key Identifier:
                keyid:D3:CB:04:EE:0B:E9:FF:3E:45:D2:10:20:E3:5A:20:C0:2C:DF:96:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/323830343a323761383a383030303a3a2f33342d3334203d3e20323633393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27a8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         93:81:77:d7:6d:12:43:83:38:7a:8d:12:8e:f8:87:e0:e3:30:
         b0:05:37:e8:63:60:39:27:a0:80:df:22:45:c9:af:94:91:43:
         d1:62:d2:4d:2e:3e:4b:df:17:0f:bc:c7:76:91:3b:35:6c:0f:
         8d:86:fd:76:dc:0c:bd:8f:03:39:ee:45:26:47:ee:41:e2:5b:
         b6:21:c3:50:6d:ec:a2:b5:15:74:c4:44:4d:8e:dc:ca:be:f2:
         d7:3c:68:91:50:f5:44:9a:23:c5:ad:09:8b:71:ac:cb:f7:ff:
         28:d5:34:f2:f7:b5:99:88:be:9d:dc:25:ba:f0:dc:b4:b2:a9:
         51:74:e3:c6:28:f2:e8:19:df:8d:a4:ba:a1:8d:12:2f:53:1b:
         86:1e:04:c5:90:60:29:c8:d8:d3:d4:83:b7:89:ea:62:8f:18:
         fe:e8:b4:20:1d:07:fc:ab:66:2b:66:c6:4e:d9:58:58:c4:5a:
         4b:ba:03:7c:32:f7:36:1a:ad:72:7b:af:f6:96:89:29:58:42:
         16:7f:37:f3:37:6f:a1:07:e5:e2:48:51:ed:cb:7e:00:5f:d7:
         30:2a:e9:2a:be:63:ec:3c:49:a7:1b:a3:12:5b:67:fe:d9:84:
         9e:cb:89:20:fa:66:33:f4:ec:c1:2d:e8:da:d9:a0:ad:5d:17:
         43:03:75:d8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfxUUQe8H9U7HaEUDhFsG5hM9CTAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNDQjA0RUUwQkU5RkYzRTQ1RDIxMDIwRTM1QTIwQzAy
Q0RGOTY0MzAeFw0yNjA3MjAxNDUxNDhaFw0yNzA3MTkxNDU2NDhaMDMxMTAvBgNV
BAMTKDJCRjA3NEIzODQ4ODA3NDEzMDhCNUQzQjNCRDIzNkI3MEJGMTJBMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf6moNJ26vZ9/wUAXlLmtqR3VH
zFN6bw+JUIFyQvw+T1b8i4x1M5Oc/u3WAuMNxgoELzGiEIOLUYJxSP8lCGZSjM5Y
x/LAUAzSUfTm5wxpYIR8SkgEkWOyi3Ih8p3K0a/KoPebQry7DCFBwsJs8AZIftQK
R77sW26WkDigbvoc+WPVfNRSPFdo2VJIIxfRIlxXgDb/lOi2Z7s4CZmqsu3crknJ
XGYX18WnPYdUe8roG+xKIYC/SFC4LtZuC/jqcfhG4uxYanpcKsEvZskjmcmZSUIY
fussHT1vEv5rqOkS/eTQxddMtfvwa8PWF4eIaP3bEw3geYgkJAu3kRhD+L6hAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUK/B0s4SIB0Ewi107O9I2twvxKiAwHwYDVR0j
BBgwFoAU08sE7gvp/z5F0hAg41ogwCzflkMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2J0aXdGWmNhbXg4enJBbXlxVWVwaDZ4ZERWWnVIWHN4ZTY4dVFMZnhF
R3gvMi9EM0NCMDRFRTBCRTlGRjNFNDVEMjEwMjBFMzVBMjBDMDJDREY5NjQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzQ0IwNEVFMEJFOUZGM0U0
NUQyMTAyMEUzNUEyMEMwMkNERjk2NDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNidGl3RlpjYW14OHpyQW15cVVlcGg2eGREVlp1SFhzeGU2OHVRTGZ4RUd4LzIv
MzIzODMwMzQzYTMyMzc2MTM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM5MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEJ6iAMA0GCSqGSIb3DQEBCwUA
A4IBAQCTgXfXbRJDgzh6jRKO+Ifg4zCwBTfoY2A5J6CA3yJFya+UkUPRYtJNLj5L
3xcPvMd2kTs1bA+Nhv123Ay9jwM57kUmR+5B4lu2IcNQbeyitRV0xERNjtzKvvLX
PGiRUPVEmiPFrQmLcazL9/8o1TTy97WZiL6d3CW68Ny0sqlRdOPGKPLoGd+NpLqh
jRIvUxuGHgTFkGApyNjT1IO3iepijxj+6LQgHQf8q2YrZsZO2VhYxFpLugN8Mvc2
Gq1ye6/2lokpWEIWfzfzN2+hB+XiSFHty34AX9cwKukqvmPsPEmnG6MSW2f+2YSe
y4kg+mYz9OzBLeja2aCtXRdDA3XY
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:37 2026 by rpki-client