Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/323830343a353430303a3a2f33322d3438203d3e20323638363232.roa
File:                     323830343a353430303a3a2f33322d3438203d3e20323638363232.roa (raw, json)
Hash identifier:          tgiyvq8b14HFlzev9Qk8yubIMDewQb/BK/UFkDpDBsk=
Subject key identifier:   7A:EE:99:32:B9:68:DD:13:1D:9B:F6:0D:9F:B1:83:33:03:CC:5C:E4
Certificate issuer:       /CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4
Certificate serial:       1839C025AFF1478D4CEAD6B17DD9064E1D3ED932
Authority key identifier: 0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/323830343a353430303a3a2f33322d3438203d3e20323638363232.roa
Signing time:             Mon 07 Sep 2026 19:17:44 +0000
ROA not before:           Mon 07 Sep 2026 19:12:44 +0000
ROA not after:            Mon 06 Sep 2027 19:17:44 +0000
asID:                     268622
IP address blocks:        2804:5400::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl
                          rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 21:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:39:c0:25:af:f1:47:8d:4c:ea:d6:b1:7d:d9:06:4e:1d:3e:d9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AC324E95DDE8107D6C9FCF9C7931D836843F4A4
        Validity
            Not Before: Sep  7 19:12:44 2026 GMT
            Not After : Sep  6 19:17:44 2027 GMT
        Subject: CN=7AEE9932B968DD131D9BF60D9FB1833303CC5CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:d6:1d:9a:f3:56:02:b7:af:e5:ef:ef:d3:
                    9e:98:8d:b2:de:63:7d:24:43:ec:e8:f6:5b:c6:d5:
                    dd:4b:60:4a:1a:b8:2b:fa:30:cb:45:1f:e9:6b:b9:
                    3d:40:5f:40:be:15:25:46:a4:f8:71:44:85:f7:e6:
                    10:e1:b4:47:1b:fe:eb:fd:8a:1a:c5:bd:df:a3:d4:
                    41:5f:ef:cf:a0:dd:1b:db:ce:53:c1:4e:44:fa:ed:
                    55:70:57:34:4b:79:f0:bf:93:c2:d4:28:24:39:c5:
                    d9:d3:74:d2:99:4f:8b:d7:a6:11:a8:26:a1:06:4c:
                    01:ab:fd:32:7f:d8:45:33:95:69:ef:66:f9:85:2f:
                    11:ca:1c:60:4c:15:59:c9:de:d3:ae:fe:8f:db:fd:
                    5d:09:34:bf:f2:59:b7:e5:b4:59:19:43:d4:40:e4:
                    d4:d2:b8:62:f8:73:23:d3:e3:a7:b9:1e:24:6d:3a:
                    a6:aa:df:8b:84:54:fe:c7:04:67:bc:32:4e:98:83:
                    ea:f1:28:1e:19:29:93:9f:95:e2:bd:72:97:02:c8:
                    c1:4d:92:e6:ec:f4:6d:20:fa:1b:1e:1f:8b:09:7f:
                    08:7c:4a:f0:b5:8b:a9:c4:a4:6c:3b:0c:a4:0e:e5:
                    57:3e:55:d6:fe:64:67:76:8d:d6:7e:8b:d4:98:39:
                    4a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EE:99:32:B9:68:DD:13:1D:9B:F6:0D:9F:B1:83:33:03:CC:5C:E4
            X509v3 Authority Key Identifier:
                keyid:0A:C3:24:E9:5D:DE:81:07:D6:C9:FC:F9:C7:93:1D:83:68:43:F4:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AC324E95DDE8107D6C9FCF9C7931D836843F4A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/323830343a353430303a3a2f33322d3438203d3e20323638363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5400::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:da:ef:fc:80:53:5c:68:77:b5:b9:3c:22:d0:a7:23:6b:d5:
         ae:8b:7b:29:37:d3:c4:a9:86:36:ec:82:1c:ac:e4:7c:c5:38:
         25:d3:08:dd:f7:e8:48:77:55:91:af:7f:69:0a:b5:4c:ad:5b:
         ba:53:d2:44:16:1a:a9:30:fe:76:17:2a:cc:1a:0b:d0:dd:14:
         6d:ae:3a:18:c7:ed:2b:83:81:f1:83:e7:15:d9:a8:88:9b:20:
         4e:5d:4a:e8:ff:fc:de:0d:ae:08:9f:87:79:5d:d5:2a:ae:77:
         3f:1b:64:63:76:6e:99:91:0d:f2:7a:83:0a:97:91:8f:c4:c5:
         a1:bf:3d:25:44:c7:12:9f:67:1b:c0:98:9f:63:c9:70:15:e1:
         5f:6c:63:da:da:96:f7:8a:4f:08:8b:8b:26:61:9f:00:57:a3:
         59:6d:a4:e9:36:00:10:73:48:4b:a6:35:d1:bc:c6:92:94:71:
         94:c4:65:39:d3:f9:d2:ae:df:a2:b3:c3:d2:bd:50:73:4b:25:
         04:78:67:57:b6:44:3e:bc:0c:e3:c0:c8:2d:7a:06:e8:95:68:
         be:ed:bf:cf:cd:67:95:6e:10:80:2e:0e:2c:54:ef:c4:8f:08:
         90:cd:c3:fe:92:13:8b:86:51:f2:75:ba:6e:3e:05:bc:14:68:
         c0:4b:41:9b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGDnAJa/xR41M6taxfdkGTh0+2TIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFDMzI0RTk1RERFODEwN0Q2QzlGQ0Y5Qzc5MzFEODM2
ODQzRjRBNDAeFw0yNjA5MDcxOTEyNDRaFw0yNzA5MDYxOTE3NDRaMDMxMTAvBgNV
BAMTKDdBRUU5OTMyQjk2OEREMTMxRDlCRjYwRDlGQjE4MzMzMDNDQzVDRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ddYdmvNWArev5e/v056YjbLe
Y30kQ+zo9lvG1d1LYEoauCv6MMtFH+lruT1AX0C+FSVGpPhxRIX35hDhtEcb/uv9
ihrFvd+j1EFf78+g3RvbzlPBTkT67VVwVzRLefC/k8LUKCQ5xdnTdNKZT4vXphGo
JqEGTAGr/TJ/2EUzlWnvZvmFLxHKHGBMFVnJ3tOu/o/b/V0JNL/yWbfltFkZQ9RA
5NTSuGL4cyPT46e5HiRtOqaq34uEVP7HBGe8Mk6Yg+rxKB4ZKZOfleK9cpcCyMFN
kubs9G0g+hseH4sJfwh8SvC1i6nEpGw7DKQO5Vc+Vdb+ZGd2jdZ+i9SYOUo7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUeu6ZMrlo3RMdm/YNn7GDMwPMXOQwHwYDVR0j
BBgwFoAUCsMk6V3egQfWyfz5x5Mdg2hD9KQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2U0cUVOSmY4QzNFVnJZNVJQWGNNY0pMaGYyVWJmSmFoeVdkSkhDVGZX
a3EvMC8wQUMzMjRFOTVEREU4MTA3RDZDOUZDRjlDNzkzMUQ4MzY4NDNGNEE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBQzMyNEU5NURERTgxMDdE
NkM5RkNGOUM3OTMxRDgzNjg0M0Y0QTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdlNHFFTkpmOEMzRVZyWTVSUFhjTWNKTGhmMlViZkphaHlXZEpIQ1RmV2txLzAv
MzIzODMwMzQzYTM1MzQzMDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzYzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARUADANBgkqhkiG9w0BAQsFAAOCAQEAWtrv/IBT
XGh3tbk8ItCnI2vVrot7KTfTxKmGNuyCHKzkfMU4JdMI3ffoSHdVka9/aQq1TK1b
ulPSRBYaqTD+dhcqzBoL0N0Uba46GMftK4OB8YPnFdmoiJsgTl1K6P/83g2uCJ+H
eV3VKq53PxtkY3ZumZEN8nqDCpeRj8TFob89JUTHEp9nG8CYn2PJcBXhX2xj2tqW
94pPCIuLJmGfAFejWW2k6TYAEHNIS6Y10bzGkpRxlMRlOdP50q7forPD0r1Qc0sl
BHhnV7ZEPrwM48DILXoG6JVovu2/z81nlW4QgC4OLFTvxI8IkM3D/pITi4ZR8nW6
bj4FvBRowEtBmw==
-----END CERTIFICATE-----
Generated at Sun Nov 1 09:21:14 2026 by rpki-client