Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a383030303a3a2f33332d3333203d3e20323635343931.roa
File:                     323830343a333466343a383030303a3a2f33332d3333203d3e20323635343931.roa (raw, json)
Hash identifier:          yKiPruW9n98rLHgDqVcFT9iHrFEfNXlgyACK2sjhDqI=
Subject key identifier:   32:DD:66:62:3D:4C:C2:1D:26:08:4E:27:EF:26:DE:86:87:90:D0:12
Certificate issuer:       /CN=205DB4059EFB07B48AE7EF22E19D03ACD75D514B
Certificate serial:       29DDD3A1CCA97E9418525A1D3125B2127550259A
Authority key identifier: 20:5D:B4:05:9E:FB:07:B4:8A:E7:EF:22:E1:9D:03:AC:D7:5D:51:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a383030303a3a2f33332d3333203d3e20323635343931.roa
Signing time:             Mon 13 Jul 2026 14:04:45 +0000
ROA not before:           Mon 13 Jul 2026 13:59:45 +0000
ROA not after:            Mon 12 Jul 2027 14:04:45 +0000
asID:                     265491
IP address blocks:        2804:34f4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.crl
                          rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 20:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:dd:d3:a1:cc:a9:7e:94:18:52:5a:1d:31:25:b2:12:75:50:25:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=205DB4059EFB07B48AE7EF22E19D03ACD75D514B
        Validity
            Not Before: Jul 13 13:59:45 2026 GMT
            Not After : Jul 12 14:04:45 2027 GMT
        Subject: CN=32DD66623D4CC21D26084E27EF26DE868790D012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:30:c0:04:07:2c:bd:40:25:87:9e:42:c1:
                    9b:2f:b6:23:d5:b6:c0:78:50:0a:f4:da:27:59:5f:
                    0b:a2:89:3f:2d:05:26:5d:10:35:c1:ce:b6:2a:35:
                    cc:19:38:01:18:ef:15:66:df:50:98:df:e6:c9:6a:
                    5e:4a:11:7e:1f:d1:e8:5e:27:3b:b0:b1:75:4b:06:
                    db:73:d9:d6:ec:99:73:d5:9d:78:04:bb:79:2f:d3:
                    ff:80:47:d8:69:f2:a6:93:8c:4c:fb:b7:e1:f9:7c:
                    bc:63:0b:d8:be:24:ea:d1:8b:e1:2f:01:40:37:aa:
                    4b:83:8c:07:ed:08:ef:e3:39:83:2b:29:cc:cc:0c:
                    d2:5b:4c:9f:04:c3:eb:21:ef:2a:e6:4a:b9:e6:34:
                    5a:e4:87:b1:14:a2:4b:60:14:90:c0:e1:de:74:17:
                    eb:44:63:f5:ff:31:72:32:3c:32:16:7d:b7:e4:21:
                    1f:e2:31:43:08:8e:e4:f7:0a:12:4d:a9:1f:e6:b2:
                    6b:71:80:17:14:70:b6:a8:68:70:eb:a9:76:50:ad:
                    44:4f:3f:e9:2b:21:f6:d5:13:0d:3b:50:75:23:13:
                    1d:d2:88:30:b9:a6:f7:71:e9:e4:65:57:3d:06:6f:
                    9b:42:ae:51:18:a6:b9:8e:b0:ee:8a:05:1e:e3:1d:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DD:66:62:3D:4C:C2:1D:26:08:4E:27:EF:26:DE:86:87:90:D0:12
            X509v3 Authority Key Identifier:
                keyid:20:5D:B4:05:9E:FB:07:B4:8A:E7:EF:22:E1:9D:03:AC:D7:5D:51:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205DB4059EFB07B48AE7EF22E19D03ACD75D514B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a383030303a3a2f33332d3333203d3e20323635343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34f4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         39:20:ce:ad:41:5b:1d:37:4c:b1:7e:fd:aa:88:10:36:7f:cb:
         08:a5:04:9b:4b:88:7e:ab:9f:04:f4:43:d9:53:7e:7e:38:ce:
         b2:8f:73:0b:03:52:36:44:f2:d8:6f:df:7c:74:cd:b9:e8:46:
         16:df:21:a6:f7:a1:3a:d0:99:66:e2:6d:bd:81:5f:50:df:71:
         77:1a:3c:67:77:4c:2d:d7:8a:9f:bc:71:99:1c:21:8f:6e:72:
         72:81:55:ca:4f:09:20:4c:91:a2:a2:ca:88:b0:82:d2:de:62:
         01:08:e8:a7:eb:0a:b2:54:43:c3:79:3b:1d:b0:67:5f:9e:af:
         39:74:92:5e:85:2c:6c:ee:e2:89:07:79:6e:5a:66:b8:ee:33:
         3b:7f:a8:d4:98:07:f5:33:fb:91:ce:01:81:13:f4:62:75:ab:
         61:e1:56:cc:d8:9e:ea:98:a3:57:fd:d1:d3:4e:00:43:49:d8:
         63:ed:78:f9:f5:94:c5:5a:bd:03:0e:da:1f:aa:e3:fa:d3:3b:
         eb:17:55:13:14:dc:1c:54:5f:cc:09:4d:4f:14:d6:bc:d9:5f:
         c4:50:79:a0:2c:3e:a5:cb:32:9a:cf:3c:2b:06:80:f6:4b:82:
         43:0e:dc:a2:ac:db:12:89:8a:75:fe:3f:c2:34:0f:59:df:2b:
         f9:13:38:44
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKd3TocypfpQYUlodMSWyEnVQJZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA1REI0MDU5RUZCMDdCNDhBRTdFRjIyRTE5RDAzQUNE
NzVENTE0QjAeFw0yNjA3MTMxMzU5NDVaFw0yNzA3MTIxNDA0NDVaMDMxMTAvBgNV
BAMTKDMyREQ2NjYyM0Q0Q0MyMUQyNjA4NEUyN0VGMjZERTg2ODc5MEQwMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vDDABAcsvUAlh55CwZsvtiPV
tsB4UAr02idZXwuiiT8tBSZdEDXBzrYqNcwZOAEY7xVm31CY3+bJal5KEX4f0ehe
JzuwsXVLBttz2dbsmXPVnXgEu3kv0/+AR9hp8qaTjEz7t+H5fLxjC9i+JOrRi+Ev
AUA3qkuDjAftCO/jOYMrKczMDNJbTJ8Ew+sh7yrmSrnmNFrkh7EUoktgFJDA4d50
F+tEY/X/MXIyPDIWfbfkIR/iMUMIjuT3ChJNqR/msmtxgBcUcLaoaHDrqXZQrURP
P+krIfbVEw07UHUjEx3SiDC5pvdx6eRlVz0Gb5tCrlEYprmOsO6KBR7jHcHRAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUMt1mYj1Mwh0mCE4n7ybehoeQ0BIwHwYDVR0j
BBgwFoAUIF20BZ77B7SK5+8i4Z0DrNddUUswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFF2UHg0UHpyTHRac1ZaYUo3RHBLM0Y4UkZWclNiUWpxY3FROXg3MjJl
dUQvMC8yMDVEQjQwNTlFRkIwN0I0OEFFN0VGMjJFMTlEMDNBQ0Q3NUQ1MTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwNURCNDA1OUVGQjA3QjQ4
QUU3RUYyMkUxOUQwM0FDRDc1RDUxNEIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhRdlB4NFB6ckx0WnNWWmFKN0RwSzNGOFJGVnJTYlFqcWNxUTl4NzIyZXVELzAv
MzIzODMwMzQzYTMzMzQ2NjM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNTM0MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygENPSAMA0GCSqGSIb3DQEBCwUA
A4IBAQA5IM6tQVsdN0yxfv2qiBA2f8sIpQSbS4h+q58E9EPZU35+OM6yj3MLA1I2
RPLYb998dM256EYW3yGm96E60Jlm4m29gV9Q33F3Gjxnd0wt14qfvHGZHCGPbnJy
gVXKTwkgTJGiosqIsILS3mIBCOin6wqyVEPDeTsdsGdfnq85dJJehSxs7uKJB3lu
Wma47jM7f6jUmAf1M/uRzgGBE/Ridath4VbM2J7qmKNX/dHTTgBDSdhj7Xj59ZTF
Wr0DDtofquP60zvrF1UTFNwcVF/MCU1PFNa82V/EUHmgLD6lyzKazzwrBoD2S4JD
DtyirNsSiYp1/j/CNA9Z3yv5EzhE
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:04:54 2026 by rpki-client