Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa
File:                     323830343a343730383a3a2f33332d3333203d3e20323637303237.roa (raw, json)
Hash identifier:          +a5hBLRxbyb0bJEXLy0DultS8cVipkAwx103WXOqj6g=
Subject key identifier:   E7:FD:4F:04:00:DC:F4:01:F1:44:D4:3B:A3:CA:4D:57:87:C5:6E:19
Certificate issuer:       /CN=47346B59454651D4EE5CD1E334F536445B470812
Certificate serial:       0C0CA295FD5A088BD1A1DE23293053A260F1589F
Authority key identifier: 47:34:6B:59:45:46:51:D4:EE:5C:D1:E3:34:F5:36:44:5B:47:08:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47346B59454651D4EE5CD1E334F536445B470812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa
Signing time:             Sat 12 Sep 2026 14:31:15 +0000
ROA not before:           Sat 12 Sep 2026 14:26:15 +0000
ROA not after:            Sat 11 Sep 2027 14:31:15 +0000
asID:                     267027
IP address blocks:        2804:4708::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/47346B59454651D4EE5CD1E334F536445B470812.crl
                          rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/47346B59454651D4EE5CD1E334F536445B470812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47346B59454651D4EE5CD1E334F536445B470812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 04:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0c:a2:95:fd:5a:08:8b:d1:a1:de:23:29:30:53:a2:60:f1:58:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47346B59454651D4EE5CD1E334F536445B470812
        Validity
            Not Before: Sep 12 14:26:15 2026 GMT
            Not After : Sep 11 14:31:15 2027 GMT
        Subject: CN=E7FD4F0400DCF401F144D43BA3CA4D5787C56E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:95:35:60:eb:f1:8b:67:98:00:74:a4:7d:11:
                    b7:a1:0a:e5:66:17:4e:22:73:3b:d5:29:00:ed:d8:
                    cb:f8:49:60:fd:26:f2:86:1e:a9:46:e4:2c:bb:b9:
                    fb:e4:89:7a:b6:ec:d1:72:2c:75:2d:6f:36:e9:9c:
                    86:b2:fa:fb:bc:9d:88:0f:fd:2b:16:68:02:20:a6:
                    17:2f:7a:59:1a:d7:17:9e:67:28:f3:c4:55:3d:c9:
                    23:70:a7:5c:f2:a1:c3:62:bd:dd:78:d1:45:94:2e:
                    44:a8:d7:5a:f9:5f:b3:8f:89:55:87:6c:e0:39:d7:
                    89:42:c3:10:4f:79:38:46:8e:3c:f0:9c:e4:f1:7b:
                    3a:f2:e6:6d:0e:d6:b5:57:c8:cb:0b:31:ee:33:19:
                    93:e6:31:98:d4:b1:27:e5:93:cf:50:65:2e:5d:56:
                    34:7f:66:6c:8a:ca:9f:d7:05:bb:c2:e0:50:57:4d:
                    92:2a:07:fa:de:b1:cb:f0:62:ca:20:3a:74:05:57:
                    f2:06:4e:52:fd:e1:76:f5:7b:e5:12:a9:08:bb:54:
                    a7:2b:5b:7e:de:2e:7a:13:d1:56:96:4b:5b:25:27:
                    59:9a:d1:7b:d5:4f:a2:ca:8b:6a:99:57:12:5d:66:
                    67:f1:90:91:a5:fb:6a:4d:28:58:ac:49:48:d4:16:
                    1d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FD:4F:04:00:DC:F4:01:F1:44:D4:3B:A3:CA:4D:57:87:C5:6E:19
            X509v3 Authority Key Identifier:
                keyid:47:34:6B:59:45:46:51:D4:EE:5C:D1:E3:34:F5:36:44:5B:47:08:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/47346B59454651D4EE5CD1E334F536445B470812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47346B59454651D4EE5CD1E334F536445B470812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708::/33

    Signature Algorithm: sha256WithRSAEncryption
         01:39:36:18:f0:90:6b:ae:37:0f:b8:28:a3:53:23:16:6c:46:
         7a:a3:64:11:b4:6a:64:17:5c:cd:a1:c1:d9:5e:fc:34:a8:45:
         c7:c0:c9:82:0c:54:32:6c:81:6c:5d:0f:d3:a2:be:7a:2c:fd:
         12:14:47:7b:49:60:56:1b:6e:01:50:ae:83:b2:19:39:df:95:
         0e:01:76:88:30:f2:46:1f:0a:2e:53:3d:1e:f2:6f:42:05:fa:
         f5:c6:b6:b8:f8:91:67:7b:9c:95:26:7b:bf:11:3c:2c:53:c3:
         8d:8b:bc:88:69:3c:03:ca:c6:2d:f0:44:ef:af:ff:d0:bc:59:
         b9:3e:31:e3:b7:0c:2a:ad:c5:e5:27:a1:48:bd:bc:10:fa:9b:
         85:c2:64:4a:75:1d:b1:5c:cc:79:1e:1a:f0:41:9f:d3:dd:ef:
         e8:17:de:73:54:53:28:d5:a1:a1:13:06:5c:41:1a:04:ac:53:
         d5:f1:c2:00:d1:8e:b7:ef:8b:a4:d1:8f:3f:42:d0:a0:68:4f:
         8a:55:1b:80:21:81:48:f4:83:ba:81:12:a3:cf:7b:87:0a:48:
         9e:c6:85:ed:b0:c5:56:80:b0:78:6e:a3:56:b3:07:21:1e:2d:
         e2:6f:0c:28:27:6b:bf:22:da:e0:e8:0b:8d:fc:4d:3b:d3:4f:
         52:83:f7:1d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDAyilf1aCIvRod4jKTBTomDxWJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDczNDZCNTk0NTQ2NTFENEVFNUNEMUUzMzRGNTM2NDQ1
QjQ3MDgxMjAeFw0yNjA5MTIxNDI2MTVaFw0yNzA5MTExNDMxMTVaMDMxMTAvBgNV
BAMTKEU3RkQ0RjA0MDBEQ0Y0MDFGMTQ0RDQzQkEzQ0E0RDU3ODdDNTZFMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwlTVg6/GLZ5gAdKR9EbehCuVm
F04iczvVKQDt2Mv4SWD9JvKGHqlG5Cy7ufvkiXq27NFyLHUtbzbpnIay+vu8nYgP
/SsWaAIgphcvelka1xeeZyjzxFU9ySNwp1zyocNivd140UWULkSo11r5X7OPiVWH
bOA514lCwxBPeThGjjzwnOTxezry5m0O1rVXyMsLMe4zGZPmMZjUsSflk89QZS5d
VjR/ZmyKyp/XBbvC4FBXTZIqB/rescvwYsogOnQFV/IGTlL94Xb1e+USqQi7VKcr
W37eLnoT0VaWS1slJ1ma0XvVT6LKi2qZVxJdZmfxkJGl+2pNKFisSUjUFh19AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5/1PBADc9AHxRNQ7o8pNV4fFbhkwHwYDVR0j
BBgwFoAURzRrWUVGUdTuXNHjNPU2RFtHCBIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RFpxZ0xxWVBvdEVjZUJzbWNTNlNlTWR3cHlxWFZ1YWhodnJhV3RK
WXovMC80NzM0NkI1OTQ1NDY1MUQ0RUU1Q0QxRTMzNEY1MzY0NDVCNDcwODEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3MzQ2QjU5NDU0NjUxRDRF
RTVDRDFFMzM0RjUzNjQ0NUI0NzA4MTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1dURacWdMcVlQb3RFY2VCc21jUzZTZU1kd3B5cVhWdWFoaHZyYVd0Sll6LzAv
MzIzODMwMzQzYTM0MzczMDM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM3
MzAzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARHCAAwDQYJKoZIhvcNAQELBQADggEBAAE5Nhjw
kGuuNw+4KKNTIxZsRnqjZBG0amQXXM2hwdle/DSoRcfAyYIMVDJsgWxdD9Oivnos
/RIUR3tJYFYbbgFQroOyGTnflQ4Bdogw8kYfCi5TPR7yb0IF+vXGtrj4kWd7nJUm
e78RPCxTw42LvIhpPAPKxi3wRO+v/9C8Wbk+MeO3DCqtxeUnoUi9vBD6m4XCZEp1
HbFczHkeGvBBn9Pd7+gX3nNUUyjVoaETBlxBGgSsU9XxwgDRjrfvi6TRjz9C0KBo
T4pVG4AhgUj0g7qBEqPPe4cKSJ7Ghe2wxVaAsHhuo1azByEeLeJvDCgna78i2uDo
C438TTvTT1KD9x0=
-----END CERTIFICATE-----
Generated at Sat Oct 31 16:14:48 2026 by rpki-client