Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a3a2f33322d3438203d3e20323636353434.roa
File:                     323830343a336461343a3a2f33322d3438203d3e20323636353434.roa (raw, json)
Hash identifier:          IM3iGjOpteCDLD/YFwwGDhLvkhf9wd84ztMhNyZ6GuI=
Subject key identifier:   9C:65:E1:12:71:7D:30:22:7E:8D:61:74:75:2C:8A:29:A4:3F:DE:C1
Certificate issuer:       /CN=27BCA8A634D8E0265A10D55EFADF2D934B6DBFEE
Certificate serial:       2F8B19D008B9A6323EF5F804509683FB4DFF057C
Authority key identifier: 27:BC:A8:A6:34:D8:E0:26:5A:10:D5:5E:FA:DF:2D:93:4B:6D:BF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27BCA8A634D8E0265A10D55EFADF2D934B6DBFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a3a2f33322d3438203d3e20323636353434.roa
Signing time:             Thu 16 Jul 2026 00:29:19 +0000
ROA not before:           Thu 16 Jul 2026 00:24:19 +0000
ROA not after:            Thu 15 Jul 2027 00:29:19 +0000
asID:                     266544
IP address blocks:        2804:3da4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/27BCA8A634D8E0265A10D55EFADF2D934B6DBFEE.crl
                          rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/27BCA8A634D8E0265A10D55EFADF2D934B6DBFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27BCA8A634D8E0265A10D55EFADF2D934B6DBFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8b:19:d0:08:b9:a6:32:3e:f5:f8:04:50:96:83:fb:4d:ff:05:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27BCA8A634D8E0265A10D55EFADF2D934B6DBFEE
        Validity
            Not Before: Jul 16 00:24:19 2026 GMT
            Not After : Jul 15 00:29:19 2027 GMT
        Subject: CN=9C65E112717D30227E8D6174752C8A29A43FDEC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:94:4f:62:48:e0:a5:2e:74:ef:8e:79:62:cc:
                    3a:a4:74:99:80:1b:7c:cb:67:1a:e0:ac:1e:7f:ed:
                    42:6e:37:fa:09:3d:c0:14:8f:0a:d6:36:fc:38:c3:
                    9f:13:56:62:ee:d8:1e:13:79:44:6a:04:84:59:7b:
                    e3:a2:79:39:fe:71:61:b2:82:53:88:ea:99:59:6c:
                    0c:e2:58:4e:f5:b9:c9:74:47:83:13:ba:9b:00:84:
                    14:52:08:69:b8:d3:7e:e8:11:01:1f:77:fe:73:ff:
                    27:2c:16:2c:38:c9:79:e4:b1:14:c9:e3:b3:c2:35:
                    44:ea:ec:2f:cd:36:3c:e3:45:6e:c0:b0:ad:2b:21:
                    bd:4d:97:4b:c5:b7:d5:dc:a3:22:6c:8f:c9:a2:66:
                    7f:1a:b7:5e:a2:df:45:e9:8d:be:fc:08:5b:50:e2:
                    f2:c3:71:34:2d:dd:73:d6:8a:9b:c6:49:60:42:da:
                    8b:a8:9b:f4:ba:6c:45:b9:11:79:a0:b3:15:4d:c3:
                    03:d4:d6:c0:8c:d9:4f:34:fe:85:8d:72:f0:cd:ab:
                    d0:a3:45:9d:40:d2:b2:c3:cd:0e:ff:a2:6d:13:f1:
                    bf:70:17:d3:0a:d2:b4:6d:ed:40:b1:34:7d:8d:2e:
                    1c:03:34:b0:22:a3:87:9d:70:f1:62:2e:28:e2:3b:
                    23:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:65:E1:12:71:7D:30:22:7E:8D:61:74:75:2C:8A:29:A4:3F:DE:C1
            X509v3 Authority Key Identifier:
                keyid:27:BC:A8:A6:34:D8:E0:26:5A:10:D5:5E:FA:DF:2D:93:4B:6D:BF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/27BCA8A634D8E0265A10D55EFADF2D934B6DBFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27BCA8A634D8E0265A10D55EFADF2D934B6DBFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a3a2f33322d3438203d3e20323636353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3da4::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:08:0f:0f:8a:27:18:0a:7a:10:00:2a:d8:53:e5:13:10:33:
         25:e7:77:61:e6:57:3d:42:e5:8b:1a:92:10:3f:ab:c2:33:13:
         34:2e:b2:de:fd:9e:35:f6:d5:17:af:c7:84:95:4d:95:64:94:
         46:bb:d2:78:8b:c6:50:00:13:ee:f4:83:85:7d:45:71:09:a5:
         16:56:a9:62:53:aa:bb:f7:bf:8a:b1:34:2e:bf:c4:b5:fd:44:
         d3:31:8e:08:4d:9a:5a:99:e9:15:e7:25:da:ca:f3:bc:ab:99:
         bf:f2:3d:80:4e:1d:75:96:18:6e:07:33:d6:b2:b7:6b:c5:1e:
         07:f8:5d:a2:5f:6e:4e:75:39:02:9f:ad:d2:7f:4c:ba:ab:a5:
         bb:0b:16:28:13:86:bb:b4:f0:65:9b:46:dc:8d:cc:38:4d:53:
         48:83:46:b2:7b:b7:5f:ae:a9:86:b2:6c:e6:84:c4:d3:b4:2e:
         fd:b2:0d:2a:4f:0b:f4:ff:6c:1c:82:68:16:47:06:e9:2d:e4:
         d8:ab:2e:51:95:c1:b5:7b:4d:21:68:e0:00:ef:71:89:b0:5f:
         92:cd:f8:9f:3a:be:0e:7f:09:a9:21:6b:39:4b:37:d1:76:a7:
         8a:a8:9a:bd:7f:da:72:6c:cc:66:4f:0e:e5:7e:e4:34:9e:ef:
         03:f1:a1:93
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUL4sZ0Ai5pjI+9fgEUJaD+03/BXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdCQ0E4QTYzNEQ4RTAyNjVBMTBENTVFRkFERjJEOTM0
QjZEQkZFRTAeFw0yNjA3MTYwMDI0MTlaFw0yNzA3MTUwMDI5MTlaMDMxMTAvBgNV
BAMTKDlDNjVFMTEyNzE3RDMwMjI3RThENjE3NDc1MkM4QTI5QTQzRkRFQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCClE9iSOClLnTvjnlizDqkdJmA
G3zLZxrgrB5/7UJuN/oJPcAUjwrWNvw4w58TVmLu2B4TeURqBIRZe+OieTn+cWGy
glOI6plZbAziWE71ucl0R4MTupsAhBRSCGm4037oEQEfd/5z/ycsFiw4yXnksRTJ
47PCNUTq7C/NNjzjRW7AsK0rIb1Nl0vFt9XcoyJsj8miZn8at16i30Xpjb78CFtQ
4vLDcTQt3XPWipvGSWBC2ouom/S6bEW5EXmgsxVNwwPU1sCM2U80/oWNcvDNq9Cj
RZ1A0rLDzQ7/om0T8b9wF9MK0rRt7UCxNH2NLhwDNLAio4edcPFiLijiOyPtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUnGXhEnF9MCJ+jWF0dSyKKaQ/3sEwHwYDVR0j
BBgwFoAUJ7yopjTY4CZaENVe+t8tk0ttv+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVg1TDdWZUhjSHROMTlwRVpyV3VMNkdpZjNEdk1SbzNBUVNKOWdMWTZ4
TG4vMC8yN0JDQThBNjM0RDhFMDI2NUExMEQ1NUVGQURGMkQ5MzRCNkRCRkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3QkNBOEE2MzREOEUwMjY1
QTEwRDU1RUZBREYyRDkzNEI2REJGRUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVYNUw3VmVIY0h0TjE5cEVacld1TDZHaWYzRHZNUm8zQVFTSjlnTFk2eExuLzAv
MzIzODMwMzQzYTMzNjQ2MTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzUzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ9pDANBgkqhkiG9w0BAQsFAAOCAQEAkggPD4on
GAp6EAAq2FPlExAzJed3YeZXPULlixqSED+rwjMTNC6y3v2eNfbVF6/HhJVNlWSU
RrvSeIvGUAAT7vSDhX1FcQmlFlapYlOqu/e/irE0Lr/Etf1E0zGOCE2aWpnpFecl
2srzvKuZv/I9gE4ddZYYbgcz1rK3a8UeB/hdol9uTnU5Ap+t0n9MuquluwsWKBOG
u7TwZZtG3I3MOE1TSINGsnu3X66phrJs5oTE07Qu/bINKk8L9P9sHIJoFkcG6S3k
2KsuUZXBtXtNIWjgAO9xibBfks34nzq+Dn8JqSFrOUs30XaniqiavX/acmzMZk8O
5X7kNJ7vA/Ghkw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:51 2026 by rpki-client