Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/323830343a386262633a3a2f33322d313238203d3e20323733373535.roa
File:                     323830343a386262633a3a2f33322d313238203d3e20323733373535.roa (raw, json)
Hash identifier:          TG+73epUv0UgXXrtyjl089OE9oW4ckeDLIxg3O1GA3Y=
Subject key identifier:   ED:8C:1E:97:6B:51:69:0D:40:E9:5D:37:97:D0:75:12:8D:47:52:B7
Certificate issuer:       /CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211
Certificate serial:       4BC90A69BDCED34AF1AB8D063B21AC3AB06BA41A
Authority key identifier: D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/323830343a386262633a3a2f33322d313238203d3e20323733373535.roa
Signing time:             Mon 04 May 2026 16:42:39 +0000
ROA not before:           Mon 04 May 2026 16:37:39 +0000
ROA not after:            Mon 03 May 2027 16:42:39 +0000
asID:                     273755
IP address blocks:        2804:8bbc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl
                          rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c9:0a:69:bd:ce:d3:4a:f1:ab:8d:06:3b:21:ac:3a:b0:6b:a4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211
        Validity
            Not Before: May  4 16:37:39 2026 GMT
            Not After : May  3 16:42:39 2027 GMT
        Subject: CN=ED8C1E976B51690D40E95D3797D075128D4752B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:81:70:ca:f3:7b:69:eb:a8:ac:42:82:32:
                    86:10:94:03:25:8c:d3:db:1f:bf:f7:07:0d:9c:e8:
                    d4:ad:41:9a:a9:9d:f0:fe:d5:41:7a:1e:79:17:8f:
                    97:d1:e6:f1:23:5a:2a:d0:54:44:cf:b1:d1:8d:d6:
                    1e:45:cb:a3:0c:ba:66:f7:5c:56:4d:89:dd:8e:0c:
                    2e:1d:20:ff:e7:e3:59:7d:48:10:26:71:21:c3:51:
                    86:4a:a8:b8:55:cc:b8:6a:c5:f1:89:6a:b9:9d:60:
                    53:65:68:c5:c7:80:06:77:bb:25:6a:1a:05:70:97:
                    ea:e0:c3:a2:be:07:3a:6e:7f:8b:66:42:c7:da:72:
                    17:f1:7a:f9:98:d9:51:fe:d3:c7:fc:68:72:dc:89:
                    e3:c4:a0:fe:76:55:da:25:b5:b0:46:83:3d:ad:e2:
                    31:d9:5d:ed:57:26:9f:33:d5:5f:9b:c6:c8:d2:b2:
                    85:7d:2c:d7:a1:a1:dd:52:d9:4a:89:ac:f9:38:b3:
                    54:8d:15:b5:92:fd:80:f6:e7:5c:48:a3:96:a4:8a:
                    de:3d:1d:a6:36:3a:ab:eb:d4:a3:af:28:de:88:20:
                    30:c1:f3:34:b3:15:bc:c8:c4:34:86:6f:ae:79:48:
                    ff:7d:f3:d0:fe:f9:ed:35:d4:e3:80:e0:37:a6:73:
                    46:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8C:1E:97:6B:51:69:0D:40:E9:5D:37:97:D0:75:12:8D:47:52:B7
            X509v3 Authority Key Identifier:
                keyid:D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/323830343a386262633a3a2f33322d313238203d3e20323733373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:3d:eb:04:6a:c4:1b:c5:46:86:41:de:4c:06:c7:b4:a0:d4:
         3c:dd:d8:08:61:7c:f1:b6:c9:d1:93:b0:e9:90:78:2a:75:c0:
         0e:50:e8:0c:12:82:ed:d9:0f:77:9d:99:bb:71:b8:48:38:2a:
         93:ea:b7:03:e2:18:f7:15:91:5f:74:09:6b:10:e5:37:fa:31:
         5d:73:17:46:7f:2b:f6:63:cd:1f:7a:11:c6:af:94:0b:40:c7:
         30:8a:a5:fd:0a:93:38:bb:50:bc:22:fc:57:d2:35:58:a5:55:
         84:05:94:e9:09:62:e2:71:57:ad:85:67:0e:db:5e:68:5d:4d:
         72:2c:fe:7b:91:93:e1:32:d7:da:a5:63:6e:ec:89:d0:c3:95:
         45:73:71:44:be:8c:4a:ca:69:a6:43:45:ef:5d:11:5b:60:18:
         22:30:3c:67:d9:50:5d:1c:34:08:da:11:d0:52:d9:3e:b0:e7:
         b3:12:7b:53:4a:b7:7d:e7:76:8e:df:95:e0:d9:30:68:8b:cf:
         03:77:cb:dd:fa:2a:34:4b:ec:b3:5f:d0:9f:ec:f9:6e:7b:80:
         f5:6d:2d:fa:04:52:9b:83:cb:1f:df:49:6d:f2:73:f9:44:63:
         43:93:8b:75:ca:b1:0f:c2:a0:4e:cd:8a:6d:fe:13:fb:a9:25:
         01:26:c3:9c
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUS8kKab3O00rxq40GOyGsOrBrpBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA3RDNFQUM3RDYwQ0FCN0JFODQxQUY1MkZFNUJEM0JF
NzhEQjIxMTAeFw0yNjA1MDQxNjM3MzlaFw0yNzA1MDMxNjQyMzlaMDMxMTAvBgNV
BAMTKEVEOEMxRTk3NkI1MTY5MEQ0MEU5NUQzNzk3RDA3NTEyOEQ0NzUyQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrrYFwyvN7aeuorEKCMoYQlAMl
jNPbH7/3Bw2c6NStQZqpnfD+1UF6HnkXj5fR5vEjWirQVETPsdGN1h5Fy6MMumb3
XFZNid2ODC4dIP/n41l9SBAmcSHDUYZKqLhVzLhqxfGJarmdYFNlaMXHgAZ3uyVq
GgVwl+rgw6K+Bzpuf4tmQsfachfxevmY2VH+08f8aHLciePEoP52VdoltbBGgz2t
4jHZXe1XJp8z1V+bxsjSsoV9LNehod1S2UqJrPk4s1SNFbWS/YD251xIo5akit49
HaY2Oqvr1KOvKN6IIDDB8zSzFbzIxDSGb655SP9989D++e011OOA4Demc0YHAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU7Ywel2tRaQ1A6V03l9B1Eo1HUrcwHwYDVR0j
BBgwFoAU0H0+rH1gyre+hBr1L+W9O+eNshEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZoa2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZR
eDMvMC9EMDdEM0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwN0QzRUFDN0Q2MENBQjdC
RTg0MUFGNTJGRTVCRDNCRTc4REIyMTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg2aGtpZW1oRHdlUDFMMXBrUDc4THVCMlVUVFlmRTZyM0VaUExidzNmUXgzLzAv
MzIzODMwMzQzYTM4NjI2MjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzMzNzM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBIu8MA0GCSqGSIb3DQEBCwUAA4IBAQA6PesE
asQbxUaGQd5MBse0oNQ83dgIYXzxtsnRk7DpkHgqdcAOUOgMEoLt2Q93nZm7cbhI
OCqT6rcD4hj3FZFfdAlrEOU3+jFdcxdGfyv2Y80fehHGr5QLQMcwiqX9CpM4u1C8
IvxX0jVYpVWEBZTpCWLicVethWcO215oXU1yLP57kZPhMtfapWNu7InQw5VFc3FE
voxKymmmQ0XvXRFbYBgiMDxn2VBdHDQI2hHQUtk+sOezEntTSrd953aO35Xg2TBo
i88Dd8vd+io0S+yzX9Cf7Plue4D1bS36BFKbg8sf30lt8nP5RGNDk4t1yrEPwqBO
zYpt/hP7qSUBJsOc
-----END CERTIFICATE-----
Generated at Wed May 13 17:48:32 2026 by rpki-client