Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/323830343a336238343a313430303a3a2f34302d3430203d3e20323636313534.roa
File:                     323830343a336238343a313430303a3a2f34302d3430203d3e20323636313534.roa (raw, json)
Hash identifier:          OFk9kIIYRAWf1ANTIzoYZ3V3E20XjlgdjzfZfdMBedU=
Subject key identifier:   7C:83:00:5F:96:AA:06:F4:DE:F8:A7:74:AB:8D:82:0E:A5:BF:30:3B
Certificate issuer:       /CN=6161DCDEAC336F5128DE0AC943B5D036BF0F16C1
Certificate serial:       65856AE9D88A7E92292E86B085CD73DF2DF4F8B3
Authority key identifier: 61:61:DC:DE:AC:33:6F:51:28:DE:0A:C9:43:B5:D0:36:BF:0F:16:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/323830343a336238343a313430303a3a2f34302d3430203d3e20323636313534.roa
Signing time:             Wed 08 Jul 2026 12:45:32 +0000
ROA not before:           Wed 08 Jul 2026 12:40:32 +0000
ROA not after:            Wed 07 Jul 2027 12:45:32 +0000
asID:                     266154
IP address blocks:        2804:3b84:1400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.crl
                          rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:85:6a:e9:d8:8a:7e:92:29:2e:86:b0:85:cd:73:df:2d:f4:f8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6161DCDEAC336F5128DE0AC943B5D036BF0F16C1
        Validity
            Not Before: Jul  8 12:40:32 2026 GMT
            Not After : Jul  7 12:45:32 2027 GMT
        Subject: CN=7C83005F96AA06F4DEF8A774AB8D820EA5BF303B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:12:93:6d:bb:b5:88:07:bd:ae:79:ac:62:90:
                    c2:35:02:1e:9d:4e:f2:0a:ba:87:47:53:1c:e0:ce:
                    71:a4:91:0b:d4:c3:60:19:5b:a7:0e:10:ae:bc:2c:
                    cb:53:5e:38:6e:7b:c9:35:85:c3:b0:56:5c:ea:37:
                    a0:ae:dc:35:99:b5:46:d1:59:88:4f:e8:66:63:b4:
                    57:e7:4a:fb:34:c5:d9:0c:c2:ef:30:20:fd:98:d6:
                    c8:5f:26:0a:e5:2e:6a:50:f9:22:a8:6a:e7:54:c1:
                    ee:47:57:83:73:c4:6a:c7:c9:db:e4:10:83:96:8d:
                    7b:19:75:c5:ee:21:01:f8:96:0d:66:bf:02:9f:c4:
                    3d:25:0b:40:dc:3f:5b:e3:cf:c2:e3:9e:cc:21:c0:
                    98:0e:e0:d2:be:e3:36:4f:8f:dd:c1:62:32:d9:41:
                    57:46:cf:79:09:c3:27:33:74:ac:49:68:7f:d7:f2:
                    9f:aa:34:02:1f:99:26:fc:cc:3e:c2:5e:2e:dc:ac:
                    d6:c8:2c:d8:d8:89:aa:e5:ca:91:9b:46:d4:39:6a:
                    40:9e:c8:d8:7f:9d:85:7e:9d:f3:0c:65:17:a3:34:
                    54:cd:f4:3e:ec:47:a5:11:88:bf:65:60:25:ca:e9:
                    a0:13:cf:7a:b8:dc:b7:a5:3f:60:54:4e:de:11:65:
                    23:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:83:00:5F:96:AA:06:F4:DE:F8:A7:74:AB:8D:82:0E:A5:BF:30:3B
            X509v3 Authority Key Identifier:
                keyid:61:61:DC:DE:AC:33:6F:51:28:DE:0A:C9:43:B5:D0:36:BF:0F:16:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/323830343a336238343a313430303a3a2f34302d3430203d3e20323636313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b84:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:8c:c1:4c:2e:29:3e:2c:c4:23:a6:a1:17:07:be:fb:c1:56:
         2f:70:fd:34:27:d9:0c:7e:bf:79:60:02:83:7d:17:c9:a9:85:
         0b:53:e2:ad:2b:21:90:50:75:e7:f9:cc:3a:1f:52:36:67:db:
         13:23:a5:f0:af:e7:ce:19:84:58:cd:f1:3b:ab:6a:0b:52:93:
         e5:b7:70:5a:36:80:e5:5b:ba:79:5f:19:db:58:de:6f:a8:9c:
         a0:8c:78:b3:46:f1:55:53:28:0c:8f:94:82:54:da:f9:ec:31:
         18:f7:bf:45:0d:1e:03:dc:4b:c2:d8:03:2e:35:81:8a:f8:48:
         db:77:81:79:88:b1:1e:0b:c6:11:2e:16:1f:b6:d8:fe:c6:0b:
         f6:f0:7b:f7:78:06:db:63:7f:eb:59:c8:8a:bc:1f:c9:df:dc:
         a9:d4:1c:3b:da:04:75:84:d1:93:ef:a7:f7:35:3b:70:a7:6f:
         de:be:6e:6b:16:0e:7f:e9:16:94:68:b9:ce:5e:87:fc:c4:eb:
         2d:35:45:39:21:09:15:7e:c2:87:0b:f9:b8:16:47:fe:f4:f8:
         74:59:f8:d0:72:10:09:2c:c6:ef:70:69:de:f3:ed:1e:4b:ff:
         09:20:0d:a8:19:0d:e1:34:11:63:0e:bb:99:d5:8f:68:c6:2e:
         97:ff:54:41
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZYVq6diKfpIpLoawhc1z3y30+LMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE2MURDREVBQzMzNkY1MTI4REUwQUM5NDNCNUQwMzZC
RjBGMTZDMTAeFw0yNjA3MDgxMjQwMzJaFw0yNzA3MDcxMjQ1MzJaMDMxMTAvBgNV
BAMTKDdDODMwMDVGOTZBQTA2RjRERUY4QTc3NEFCOEQ4MjBFQTVCRjMwM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjEpNtu7WIB72ueaxikMI1Ah6d
TvIKuodHUxzgznGkkQvUw2AZW6cOEK68LMtTXjhue8k1hcOwVlzqN6Cu3DWZtUbR
WYhP6GZjtFfnSvs0xdkMwu8wIP2Y1shfJgrlLmpQ+SKoaudUwe5HV4NzxGrHydvk
EIOWjXsZdcXuIQH4lg1mvwKfxD0lC0DcP1vjz8LjnswhwJgO4NK+4zZPj93BYjLZ
QVdGz3kJwyczdKxJaH/X8p+qNAIfmSb8zD7CXi7crNbILNjYiarlypGbRtQ5akCe
yNh/nYV+nfMMZRejNFTN9D7sR6URiL9lYCXK6aATz3q43LelP2BUTt4RZSPJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUfIMAX5aqBvTe+Kd0q42CDqW/MDswHwYDVR0j
BBgwFoAUYWHc3qwzb1Eo3grJQ7XQNr8PFsEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE16dFpSQVUyR1FyNGV6azhSODk4Z0YzYUZnbnBoQTlRc05LQWRDa0Z0
TWsvMC82MTYxRENERUFDMzM2RjUxMjhERTBBQzk0M0I1RDAzNkJGMEYxNkMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxNjFEQ0RFQUMzMzZGNTEy
OERFMEFDOTQzQjVEMDM2QkYwRjE2QzEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRNenRaUkFVMkdRcjRlems4Ujg5OGdGM2FGZ25waEE5UXNOS0FkQ2tGdE1rLzAv
MzIzODMwMzQzYTMzNjIzODM0M2EzMTM0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNjMxMzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEO4QUMA0GCSqGSIb3DQEBCwUA
A4IBAQAujMFMLik+LMQjpqEXB777wVYvcP00J9kMfr95YAKDfRfJqYULU+KtKyGQ
UHXn+cw6H1I2Z9sTI6Xwr+fOGYRYzfE7q2oLUpPlt3BaNoDlW7p5XxnbWN5vqJyg
jHizRvFVUygMj5SCVNr57DEY979FDR4D3EvC2AMuNYGK+Ejbd4F5iLEeC8YRLhYf
ttj+xgv28Hv3eAbbY3/rWciKvB/J39yp1Bw72gR1hNGT76f3NTtwp2/evm5rFg5/
6RaUaLnOXof8xOstNUU5IQkVfsKHC/m4Fkf+9Ph0WfjQchAJLMbvcGne8+0eS/8J
IA2oGQ3hNBFjDruZ1Y9oxi6X/1RB
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:30:38 2026 by rpki-client