Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/323830343a313332303a613030303a3a2f33362d3336203d3e20323633353137.roa
File:                     323830343a313332303a613030303a3a2f33362d3336203d3e20323633353137.roa (raw, json)
Hash identifier:          j3RZDtWMFLW8egiguKl8sMAMUoFcfUmZA347No+PMk8=
Subject key identifier:   BA:9A:76:24:8F:FD:B6:8C:81:38:18:F2:57:41:6D:9D:E7:3D:44:95
Certificate issuer:       /CN=25C491D82730A2AF6083391B8773D984D8728328
Certificate serial:       2543D151EFD7EA3B5975922327F710A847E6D49A
Authority key identifier: 25:C4:91:D8:27:30:A2:AF:60:83:39:1B:87:73:D9:84:D8:72:83:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C491D82730A2AF6083391B8773D984D8728328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/323830343a313332303a613030303a3a2f33362d3336203d3e20323633353137.roa
Signing time:             Tue 14 Jul 2026 13:50:37 +0000
ROA not before:           Tue 14 Jul 2026 13:45:37 +0000
ROA not after:            Tue 13 Jul 2027 13:50:37 +0000
asID:                     263517
IP address blocks:        2804:1320:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/25C491D82730A2AF6083391B8773D984D8728328.crl
                          rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/25C491D82730A2AF6083391B8773D984D8728328.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C491D82730A2AF6083391B8773D984D8728328.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:43:d1:51:ef:d7:ea:3b:59:75:92:23:27:f7:10:a8:47:e6:d4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C491D82730A2AF6083391B8773D984D8728328
        Validity
            Not Before: Jul 14 13:45:37 2026 GMT
            Not After : Jul 13 13:50:37 2027 GMT
        Subject: CN=BA9A76248FFDB68C813818F257416D9DE73D4495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:22:53:f2:d6:c5:4a:bb:1d:0e:47:f5:64:64:
                    fb:32:16:74:00:3a:2d:a9:ea:ce:ea:40:71:c6:29:
                    b2:17:2e:c5:ee:ca:d5:5e:9e:d3:29:ee:54:90:03:
                    57:a1:19:52:7c:42:df:a5:dc:14:a0:d9:64:48:0b:
                    44:da:d0:03:19:18:ea:80:51:03:7d:76:e6:80:1d:
                    69:ab:6e:0b:8f:ae:f8:62:ca:37:5f:d1:6d:4e:27:
                    47:3f:57:ca:fd:68:42:5f:af:de:e5:ca:53:73:c8:
                    94:0a:8d:45:4a:dd:07:d7:c6:72:35:0b:1d:f9:3e:
                    d6:c2:bf:ff:ec:9e:f5:98:df:fa:5b:b7:c7:7d:9f:
                    95:0c:96:22:49:4c:92:93:84:1b:36:32:11:60:2a:
                    b0:e6:4e:4f:5f:fa:4d:eb:49:42:a1:dc:85:b5:a2:
                    19:5b:85:a8:8a:45:86:d7:a5:23:b7:5b:5b:2a:89:
                    c7:c7:0d:4d:df:ca:f5:41:2b:d9:44:cf:75:f6:4d:
                    88:77:34:3b:d3:37:13:31:f8:0b:b6:b2:93:8c:e8:
                    60:99:05:78:bd:1f:b0:35:28:81:bf:d9:fd:a7:79:
                    16:bd:7c:bd:90:88:c6:01:66:ca:73:55:e7:c0:a1:
                    91:9d:13:16:0d:8e:ab:76:56:e5:3f:b9:70:ce:a3:
                    8e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9A:76:24:8F:FD:B6:8C:81:38:18:F2:57:41:6D:9D:E7:3D:44:95
            X509v3 Authority Key Identifier:
                keyid:25:C4:91:D8:27:30:A2:AF:60:83:39:1B:87:73:D9:84:D8:72:83:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/25C491D82730A2AF6083391B8773D984D8728328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C491D82730A2AF6083391B8773D984D8728328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/323830343a313332303a613030303a3a2f33362d3336203d3e20323633353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1320:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a1:94:3f:02:09:1e:c6:b7:c9:88:25:07:55:ef:1d:0a:ad:fd:
         a2:1b:dd:d8:b8:8a:83:e2:db:d2:ca:a9:24:43:04:00:10:16:
         f8:62:c3:57:99:19:9f:50:87:c0:05:21:2e:cd:22:50:84:e4:
         80:11:97:87:dd:bb:0a:54:82:43:77:53:96:d1:2f:51:32:c0:
         66:40:ae:24:37:f7:b0:16:c3:f2:c0:0d:a8:51:d4:72:81:bf:
         9d:54:0d:9a:a3:1c:68:6e:37:1c:16:2c:50:7a:60:9d:5b:5a:
         dd:36:0e:60:fb:63:ca:c0:e6:33:9c:44:a1:8d:13:d1:79:bc:
         0e:7a:bc:df:40:1a:79:6a:49:df:aa:97:36:53:5f:ea:af:a5:
         88:a4:41:fe:95:9f:0f:4c:d6:ff:56:71:d0:70:24:4a:22:af:
         ed:58:ef:8f:f0:36:9f:73:d5:3b:06:99:60:60:72:2e:bc:59:
         a9:cf:06:b8:95:9f:9d:12:94:2b:00:c6:6c:0d:8d:ea:7b:65:
         01:dd:06:73:a4:f0:c8:34:91:bb:ff:61:a0:fa:ef:aa:8f:a1:
         ba:d2:06:ba:8a:77:de:45:dc:98:17:7b:a0:7a:34:09:74:81:
         dd:af:19:e0:a9:f6:9b:33:3d:f7:65:71:d3:0e:91:78:78:24:
         dc:94:83:7c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJUPRUe/X6jtZdZIjJ/cQqEfm1JowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDNDkxRDgyNzMwQTJBRjYwODMzOTFCODc3M0Q5ODRE
ODcyODMyODAeFw0yNjA3MTQxMzQ1MzdaFw0yNzA3MTMxMzUwMzdaMDMxMTAvBgNV
BAMTKEJBOUE3NjI0OEZGREI2OEM4MTM4MThGMjU3NDE2RDlERTczRDQ0OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvIlPy1sVKux0OR/VkZPsyFnQA
Oi2p6s7qQHHGKbIXLsXuytVentMp7lSQA1ehGVJ8Qt+l3BSg2WRIC0Ta0AMZGOqA
UQN9duaAHWmrbguPrvhiyjdf0W1OJ0c/V8r9aEJfr97lylNzyJQKjUVK3QfXxnI1
Cx35PtbCv//snvWY3/pbt8d9n5UMliJJTJKThBs2MhFgKrDmTk9f+k3rSUKh3IW1
ohlbhaiKRYbXpSO3W1sqicfHDU3fyvVBK9lEz3X2TYh3NDvTNxMx+Au2spOM6GCZ
BXi9H7A1KIG/2f2neRa9fL2QiMYBZspzVefAoZGdExYNjqt2VuU/uXDOo47XAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUupp2JI/9toyBOBjyV0Ftnec9RJUwHwYDVR0j
BBgwFoAUJcSR2Ccwoq9ggzkbh3PZhNhygygwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHNSUzdRNE1lcTliTnRxOVJOYlJHWGZZU0VLejZteUVNUFJhYmRLTG95
UHQvMC8yNUM0OTFEODI3MzBBMkFGNjA4MzM5MUI4NzczRDk4NEQ4NzI4MzI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1QzQ5MUQ4MjczMEEyQUY2
MDgzMzkxQjg3NzNEOTg0RDg3MjgzMjguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRzUlM3UTRNZXE5Yk50cTlSTmJSR1hmWVNFS3o2bXlFTVBSYWJkS0xveVB0LzAv
MzIzODMwMzQzYTMxMzMzMjMwM2E2MTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzMzM1MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEEyCgMA0GCSqGSIb3DQEBCwUA
A4IBAQChlD8CCR7Gt8mIJQdV7x0Krf2iG93YuIqD4tvSyqkkQwQAEBb4YsNXmRmf
UIfABSEuzSJQhOSAEZeH3bsKVIJDd1OW0S9RMsBmQK4kN/ewFsPywA2oUdRygb+d
VA2aoxxobjccFixQemCdW1rdNg5g+2PKwOYznEShjRPRebwOerzfQBp5aknfqpc2
U1/qr6WIpEH+lZ8PTNb/VnHQcCRKIq/tWO+P8Dafc9U7BplgYHIuvFmpzwa4lZ+d
EpQrAMZsDY3qe2UB3QZzpPDINJG7/2Gg+u+qj6G60ga6infeRdyYF3ugejQJdIHd
rxngqfabMz33ZXHTDpF4eCTclIN8
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:09:25 2026 by rpki-client