Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/323830343a363233633a3a2f33322d313238203d3e20323639323835.roa
File:                     323830343a363233633a3a2f33322d313238203d3e20323639323835.roa (raw, json)
Hash identifier:          Y4FFf0Yu2yN/JXuvd+a1MVQDBDhuKLo5Srnwc76f/p4=
Subject key identifier:   F6:A4:DB:8B:BF:89:C0:74:9A:E7:E7:14:01:0B:F1:09:AA:4F:57:1C
Certificate issuer:       /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial:       1AEB795AE6BCB70D1DCC690D484915AC675C6355
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/323830343a363233633a3a2f33322d313238203d3e20323639323835.roa
Signing time:             Wed 01 Jul 2026 18:02:46 +0000
ROA not before:           Wed 01 Jul 2026 17:57:46 +0000
ROA not after:            Wed 30 Jun 2027 18:02:46 +0000
asID:                     269285
IP address blocks:        2804:623c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
                          rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:eb:79:5a:e6:bc:b7:0d:1d:cc:69:0d:48:49:15:ac:67:5c:63:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
        Validity
            Not Before: Jul  1 17:57:46 2026 GMT
            Not After : Jun 30 18:02:46 2027 GMT
        Subject: CN=F6A4DB8BBF89C0749AE7E714010BF109AA4F571C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:02:8a:10:1e:ed:ee:bb:78:c5:75:1b:4a:d9:
                    be:b5:8a:15:d9:d2:ee:df:cb:7d:7d:c8:39:4f:3b:
                    52:c9:1c:41:8c:f1:11:a2:0d:e2:dc:39:4e:ce:19:
                    ab:0d:9f:c0:b0:b7:f5:dd:be:34:5e:fa:d1:c3:8f:
                    06:5c:cb:50:d1:35:18:27:1b:d7:54:71:09:e5:26:
                    75:e1:91:1e:a0:df:ad:de:82:4d:c1:57:91:09:67:
                    3e:ed:d4:37:10:b6:13:6a:8f:ee:b6:83:3c:25:25:
                    07:f3:93:ff:9d:d7:9c:8a:cd:a0:f5:76:b7:8d:7e:
                    ba:e7:f6:b6:5b:f5:b0:7c:62:f0:7e:df:f2:f6:5c:
                    dc:ba:f2:de:69:a2:85:e5:94:00:f6:67:82:1c:5c:
                    cd:85:b0:d6:29:0c:a5:08:72:97:27:e7:8c:2d:8c:
                    44:6f:29:2a:13:3c:27:f9:97:17:8e:2f:2c:74:85:
                    00:68:05:57:e5:f3:21:b5:88:c8:55:cc:03:41:cd:
                    1f:8c:30:b5:04:cc:25:a3:8f:a6:67:d7:ea:db:9b:
                    f1:6e:89:fc:63:20:8d:44:1f:2a:74:cc:14:1e:e3:
                    ea:d6:95:f4:e4:52:12:7e:2f:8d:6f:93:b3:4a:2b:
                    b0:44:be:c4:a5:2f:76:37:4a:9c:bb:18:0b:7c:26:
                    d4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A4:DB:8B:BF:89:C0:74:9A:E7:E7:14:01:0B:F1:09:AA:4F:57:1C
            X509v3 Authority Key Identifier:
                keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/323830343a363233633a3a2f33322d313238203d3e20323639323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:623c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:84:19:8f:80:d6:de:16:5c:78:01:f5:dc:de:1f:b7:20:46:
         45:1b:4c:80:8c:9e:d2:80:52:1a:82:7e:41:89:42:e0:8e:7a:
         de:b5:4b:14:72:98:2a:42:13:eb:6e:77:7c:44:8b:7a:d2:da:
         41:ed:00:d4:a9:50:ad:cd:b0:83:26:aa:16:e4:28:f3:55:f5:
         fd:cb:91:9b:a3:a7:3e:62:00:80:e0:f7:18:b5:29:6d:74:4c:
         c2:26:bb:f9:98:22:05:08:b0:6b:05:b7:68:9b:a2:c6:0e:a9:
         5b:fb:91:f2:3e:93:4e:70:42:ed:4b:55:91:76:84:0b:25:42:
         73:d9:74:be:b2:64:d8:10:88:58:22:fe:59:7d:5f:fd:39:6d:
         de:24:75:53:c3:b4:4b:aa:5a:9c:d3:ad:33:67:41:d7:b7:d8:
         bf:81:b5:a8:02:a2:40:a8:90:9b:56:74:70:ee:20:a3:47:bd:
         c4:ce:92:3a:8f:d3:46:20:65:c1:17:7d:c3:b5:f5:9a:e1:53:
         bd:11:d0:07:c3:a5:54:40:bc:99:dd:e1:a4:fd:c1:f6:e5:17:
         15:b1:e7:89:73:a9:dc:69:e7:8d:2a:be:74:8f:2d:a3:a3:41:
         d0:fd:74:22:22:25:36:04:1e:22:e0:34:c7:a2:76:f0:13:ac:
         f9:fc:be:94
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUGut5Wua8tw0dzGkNSEkVrGdcY1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0ODY3RjExQTFENjUyNjgyRkE5NUVEOTExQjIwRDgx
MTM5ODUzRDAeFw0yNjA3MDExNzU3NDZaFw0yNzA2MzAxODAyNDZaMDMxMTAvBgNV
BAMTKEY2QTREQjhCQkY4OUMwNzQ5QUU3RTcxNDAxMEJGMTA5QUE0RjU3MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcAooQHu3uu3jFdRtK2b61ihXZ
0u7fy319yDlPO1LJHEGM8RGiDeLcOU7OGasNn8Cwt/XdvjRe+tHDjwZcy1DRNRgn
G9dUcQnlJnXhkR6g363egk3BV5EJZz7t1DcQthNqj+62gzwlJQfzk/+d15yKzaD1
dreNfrrn9rZb9bB8YvB+3/L2XNy68t5pooXllAD2Z4IcXM2FsNYpDKUIcpcn54wt
jERvKSoTPCf5lxeOLyx0hQBoBVfl8yG1iMhVzANBzR+MMLUEzCWjj6Zn1+rbm/Fu
ifxjII1EHyp0zBQe4+rWlfTkUhJ+L41vk7NKK7BEvsSlL3Y3Spy7GAt8JtT7AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU9qTbi7+JwHSa5+cUAQvxCapPVxwwHwYDVR0j
BBgwFoAUPUhn8RodZSaC+pXtkRsg2BE5hT0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJuZ1UyUGtlVFJoZEFqQnpwVTRlaFVCcGV5UHJNQnF0ekdnYXdwbXE3
aWQvMC8zRDQ4NjdGMTFBMUQ2NTI2ODJGQTk1RUQ5MTFCMjBEODExMzk4NTNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENDg2N0YxMUExRDY1MjY4
MkZBOTVFRDkxMUIyMEQ4MTEzOTg1M0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUybmdVMlBrZVRSaGRBakJ6cFU0ZWhVQnBleVByTUJxdHpHZ2F3cG1xN2lkLzAv
MzIzODMwMzQzYTM2MzIzMzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzMjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGI8MA0GCSqGSIb3DQEBCwUAA4IBAQAuhBmP
gNbeFlx4AfXc3h+3IEZFG0yAjJ7SgFIagn5BiULgjnretUsUcpgqQhPrbnd8RIt6
0tpB7QDUqVCtzbCDJqoW5CjzVfX9y5Gbo6c+YgCA4PcYtSltdEzCJrv5mCIFCLBr
Bbdom6LGDqlb+5HyPpNOcELtS1WRdoQLJUJz2XS+smTYEIhYIv5ZfV/9OW3eJHVT
w7RLqlqc060zZ0HXt9i/gbWoAqJAqJCbVnRw7iCjR73EzpI6j9NGIGXBF33DtfWa
4VO9EdAHw6VUQLyZ3eGk/cH25RcVseeJc6ncaeeNKr50jy2jo0HQ/XQiIiU2BB4i
4DTHonbwE6z5/L6U
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:20:17 2026 by rpki-client