Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a353030303a3a2f34382d3438203d3e20323635303933.roa
File:                     323830343a333262303a353030303a3a2f34382d3438203d3e20323635303933.roa (raw, json)
Hash identifier:          2tv5C0ZI4yWVJP3B5LZ7NQnePXa9gTy6DqU5Fi3rBA8=
Subject key identifier:   C4:BB:F5:2E:01:B9:2E:1E:32:DC:B8:9D:33:89:B3:26:EB:48:E7:7D
Certificate issuer:       /CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
Certificate serial:       5C8D2D73B29B4BE99B14F2E490A828D9D801B1BD
Authority key identifier: 35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a353030303a3a2f34382d3438203d3e20323635303933.roa
Signing time:             Tue 23 Jun 2026 10:08:15 +0000
ROA not before:           Tue 23 Jun 2026 10:03:15 +0000
ROA not after:            Tue 22 Jun 2027 10:08:15 +0000
asID:                     265093
IP address blocks:        2804:32b0:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl
                          rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8d:2d:73:b2:9b:4b:e9:9b:14:f2:e4:90:a8:28:d9:d8:01:b1:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2
        Validity
            Not Before: Jun 23 10:03:15 2026 GMT
            Not After : Jun 22 10:08:15 2027 GMT
        Subject: CN=C4BBF52E01B92E1E32DCB89D3389B326EB48E77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:22:7d:ca:0d:96:db:6d:cf:5a:da:c7:8f:81:
                    00:eb:61:3a:ec:48:88:d7:57:27:cd:bc:ad:94:71:
                    df:1f:f2:85:0c:89:79:9b:81:8e:1c:40:4f:42:fc:
                    3d:50:0c:4f:4f:db:8f:cd:7c:42:44:25:ac:c2:fe:
                    f1:d3:0e:39:8c:0d:c6:2e:0e:68:77:4f:64:04:01:
                    f2:79:e1:4c:29:89:0b:04:c2:4d:52:a1:d7:7b:52:
                    f3:84:f5:13:4c:7a:38:0c:33:00:20:db:25:a2:38:
                    33:5f:8c:f2:32:04:b6:bd:78:28:b4:47:f8:9f:4b:
                    c0:c4:ad:86:2d:7e:d7:31:eb:b4:46:20:fe:cb:cc:
                    42:71:ba:7e:9f:1f:ae:42:f5:ee:aa:c4:75:dd:3c:
                    70:3a:d9:d6:c4:8e:84:8a:f9:32:f6:3b:9a:0c:ad:
                    0c:1e:6d:c8:e4:49:12:ea:4d:5a:38:0c:46:99:04:
                    ca:00:f6:20:e8:95:65:8b:10:cb:be:22:78:5e:d0:
                    2a:9e:ed:63:bf:87:ca:b3:bc:09:c9:63:73:fa:b8:
                    27:bf:1a:a6:ad:73:77:13:02:b4:80:63:35:d2:f8:
                    4b:ea:3d:0b:02:89:66:2a:cf:77:ed:02:94:88:d5:
                    e8:65:07:b3:20:7b:b4:62:a5:29:5a:b5:67:3f:29:
                    d2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BB:F5:2E:01:B9:2E:1E:32:DC:B8:9D:33:89:B3:26:EB:48:E7:7D
            X509v3 Authority Key Identifier:
                keyid:35:5F:C2:C6:7F:E7:38:EC:AC:BF:EF:94:B8:DB:5D:5D:52:28:C7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/355FC2C67FE738ECACBFEF94B8DB5D5D5228C7C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ETW4C6YMkep4ZFnSXwCnxQyuwkwrsAvgvQvJftuyg9h/0/323830343a333262303a353030303a3a2f34382d3438203d3e20323635303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32b0:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:4d:a1:0c:42:d5:7e:ed:ed:86:60:51:dd:61:61:c3:ae:82:
         f3:8a:ed:66:ae:c5:fd:34:11:79:53:c6:33:23:3b:4f:99:8d:
         c9:a1:24:f0:9d:8a:1e:33:43:3c:91:19:e8:ad:c8:1f:9d:5f:
         4b:72:47:cf:20:52:f3:6d:1a:c4:9a:b1:b4:88:7c:a3:bd:d8:
         75:fe:a0:b3:f7:bb:57:f4:85:18:d0:99:5b:28:8e:b3:c6:70:
         07:7b:45:e7:f1:ad:81:40:31:63:b4:02:78:4d:1a:0d:42:90:
         07:cd:bc:10:60:72:e2:b2:45:2d:4c:aa:47:e8:35:bd:b3:08:
         4a:54:ff:13:6e:71:f3:1a:49:06:82:09:3c:05:88:6b:6d:6c:
         63:eb:2f:45:39:7c:42:f2:81:28:b1:52:9e:4f:15:98:2b:c5:
         cc:53:ac:61:a2:0b:68:47:07:89:3b:45:a3:50:57:bd:a3:f4:
         65:16:cb:f9:27:23:2c:7d:35:87:76:1e:95:dc:43:01:1d:4c:
         38:bf:db:0d:87:e0:7a:21:38:f0:45:61:11:6c:a9:d8:5c:91:
         b6:94:29:9f:b4:2a:34:ac:68:de:19:ac:2a:57:3e:39:64:0e:
         7a:18:5d:61:e2:9b:56:70:78:3b:c2:b5:4a:69:99:1a:bb:fa:
         f1:7a:d1:26
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUXI0tc7KbS+mbFPLkkKgo2dgBsb0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU1RkMyQzY3RkU3MzhFQ0FDQkZFRjk0QjhEQjVENUQ1
MjI4QzdDMjAeFw0yNjA2MjMxMDAzMTVaFw0yNzA2MjIxMDA4MTVaMDMxMTAvBgNV
BAMTKEM0QkJGNTJFMDFCOTJFMUUzMkRDQjg5RDMzODlCMzI2RUI0OEU3N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClIn3KDZbbbc9a2sePgQDrYTrs
SIjXVyfNvK2Ucd8f8oUMiXmbgY4cQE9C/D1QDE9P24/NfEJEJazC/vHTDjmMDcYu
Dmh3T2QEAfJ54UwpiQsEwk1Sodd7UvOE9RNMejgMMwAg2yWiODNfjPIyBLa9eCi0
R/ifS8DErYYtftcx67RGIP7LzEJxun6fH65C9e6qxHXdPHA62dbEjoSK+TL2O5oM
rQwebcjkSRLqTVo4DEaZBMoA9iDolWWLEMu+Inhe0Cqe7WO/h8qzvAnJY3P6uCe/
Gqatc3cTArSAYzXS+EvqPQsCiWYqz3ftApSI1ehlB7Mge7RipSlatWc/KdK5AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUxLv1LgG5Lh4y3LidM4mzJutI530wHwYDVR0j
BBgwFoAUNV/Cxn/nOOysv++UuNtdXVIox8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVUVzRDNllNa2VwNFpGblNYd0NueFF5dXdrd3JzQXZndlF2SmZ0dXln
OWgvMC8zNTVGQzJDNjdGRTczOEVDQUNCRkVGOTRCOERCNUQ1RDUyMjhDN0MyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1NUZDMkM2N0ZFNzM4RUNB
Q0JGRUY5NEI4REI1RDVENTIyOEM3QzIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFVFc0QzZZTWtlcDRaRm5TWHdDbnhReXV3a3dyc0F2Z3ZRdkpmdHV5ZzloLzAv
MzIzODMwMzQzYTMzMzI2MjMwM2EzNTMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNTMwMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEMrBQADANBgkqhkiG9w0BAQsF
AAOCAQEAU02hDELVfu3thmBR3WFhw66C84rtZq7F/TQReVPGMyM7T5mNyaEk8J2K
HjNDPJEZ6K3IH51fS3JHzyBS820axJqxtIh8o73Ydf6gs/e7V/SFGNCZWyiOs8Zw
B3tF5/GtgUAxY7QCeE0aDUKQB828EGBy4rJFLUyqR+g1vbMISlT/E25x8xpJBoIJ
PAWIa21sY+svRTl8QvKBKLFSnk8VmCvFzFOsYaILaEcHiTtFo1BXvaP0ZRbL+Scj
LH01h3YeldxDAR1MOL/bDYfgeiE48EVhEWyp2FyRtpQpn7QqNKxo3hmsKlc+OWQO
ehhdYeKbVnB4O8K1SmmZGrv68XrRJg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:26:48 2026 by rpki-client