Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33332d3333203d3e20323732313832.roa
File:                     323830343a383333303a383030303a3a2f33332d3333203d3e20323732313832.roa (raw, json)
Hash identifier:          kfkyPF/VSKE+p0QzN+rmGG2R9xXLLYlqapy7SlANAWM=
Subject key identifier:   F9:5E:46:5A:22:FC:0E:62:28:7C:B6:35:A1:62:05:68:C6:C9:BF:B1
Certificate issuer:       /CN=E5E7689F4C91E9921A604490C3CDA10A32E83B10
Certificate serial:       0AFC78C31DC74D0B934F91D35C531A92E9FF7C06
Authority key identifier: E5:E7:68:9F:4C:91:E9:92:1A:60:44:90:C3:CD:A1:0A:32:E8:3B:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5E7689F4C91E9921A604490C3CDA10A32E83B10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33332d3333203d3e20323732313832.roa
Signing time:             Mon 14 Sep 2026 23:15:09 +0000
ROA not before:           Mon 14 Sep 2026 23:10:09 +0000
ROA not after:            Mon 13 Sep 2027 23:15:09 +0000
asID:                     272182
IP address blocks:        2804:8330:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/E5E7689F4C91E9921A604490C3CDA10A32E83B10.crl
                          rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/E5E7689F4C91E9921A604490C3CDA10A32E83B10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5E7689F4C91E9921A604490C3CDA10A32E83B10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 02:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:fc:78:c3:1d:c7:4d:0b:93:4f:91:d3:5c:53:1a:92:e9:ff:7c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E7689F4C91E9921A604490C3CDA10A32E83B10
        Validity
            Not Before: Sep 14 23:10:09 2026 GMT
            Not After : Sep 13 23:15:09 2027 GMT
        Subject: CN=F95E465A22FC0E62287CB635A1620568C6C9BFB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4a:24:ac:63:b2:4b:95:ab:28:64:d6:db:4b:
                    1e:c4:76:ee:b0:02:70:9f:39:f9:75:db:c0:e0:7f:
                    89:78:a0:67:24:c2:46:88:ee:8a:7b:11:4e:79:31:
                    48:b9:6c:1f:e0:08:1e:52:28:5c:7e:12:a2:21:14:
                    be:a6:02:7c:43:e9:e0:8f:e3:fa:f0:48:f8:93:4a:
                    a3:21:d3:fe:08:f7:ed:f1:e6:f7:44:d5:ed:b8:49:
                    18:b9:1f:aa:73:f9:6f:86:b8:71:a6:e1:06:3c:6b:
                    f8:b9:de:a5:e0:01:51:78:f4:c7:ca:e4:99:4e:8f:
                    a8:94:9a:d8:3f:f2:20:34:b0:b1:78:c4:39:0f:33:
                    9f:e1:41:62:9b:41:83:83:2a:f3:e4:cd:e5:bd:50:
                    e8:4d:db:8d:a8:02:11:8d:12:57:33:70:7f:7a:20:
                    c7:45:80:90:2d:19:71:e9:cf:bf:0f:54:6d:25:9b:
                    b5:e1:e0:ac:c7:0f:37:d9:0c:a1:0b:78:2a:9b:e1:
                    d8:82:3c:cc:ec:f7:40:8a:71:b1:9b:bf:89:95:a7:
                    77:3f:ba:36:4d:b6:01:5e:aa:d0:d9:a6:49:d2:09:
                    7e:12:f7:67:a9:e6:fe:1d:0c:25:2c:8a:60:3a:0b:
                    66:2d:fb:c7:e4:3e:c7:0f:78:bb:58:fa:96:81:a2:
                    aa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5E:46:5A:22:FC:0E:62:28:7C:B6:35:A1:62:05:68:C6:C9:BF:B1
            X509v3 Authority Key Identifier:
                keyid:E5:E7:68:9F:4C:91:E9:92:1A:60:44:90:C3:CD:A1:0A:32:E8:3B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/E5E7689F4C91E9921A604490C3CDA10A32E83B10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5E7689F4C91E9921A604490C3CDA10A32E83B10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33332d3333203d3e20323732313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8330:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         07:4f:10:b4:26:44:51:6e:33:c8:9c:24:18:e9:ed:e7:19:2e:
         9b:2f:be:ae:8d:c0:f6:f1:2c:8e:18:57:31:e1:38:52:7a:76:
         6e:6f:44:42:81:d9:63:6b:ce:47:ec:1a:76:5b:4d:3d:55:32:
         d2:b2:8b:ee:06:50:e8:23:e3:77:5a:13:ac:0b:ca:5b:47:bf:
         32:87:ab:59:24:fe:f8:ce:c8:74:4a:f9:ca:7c:b3:ef:07:94:
         b2:b9:2c:9e:10:a5:f9:5c:b3:9a:bc:12:37:35:4d:72:60:6c:
         9c:27:3a:d1:13:44:ce:a9:d0:89:9a:aa:44:34:28:6c:57:f3:
         b7:33:ec:65:eb:e3:b4:4d:e6:4c:79:e0:15:60:9e:00:18:04:
         b0:41:8c:d8:d1:8d:94:44:33:0a:33:80:c6:1f:be:98:6d:a5:
         bc:ca:9d:78:1e:13:98:82:a1:2e:eb:0a:0b:8c:b0:93:6e:63:
         4e:bc:c3:0c:8a:2c:e2:55:3b:56:cd:e1:a6:79:cc:d9:95:fd:
         dc:45:15:92:3b:b9:e5:33:a4:0c:e7:d0:2e:d4:7c:cd:d2:42:
         2b:27:af:89:e8:89:aa:c3:fb:fb:6b:9e:14:c2:25:ad:f5:e0:
         17:e0:bd:1d:83:dd:7d:78:ed:8a:61:06:77:ea:88:de:40:b2:
         c7:81:d3:c9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCvx4wx3HTQuTT5HTXFMakun/fAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVFNzY4OUY0QzkxRTk5MjFBNjA0NDkwQzNDREExMEEz
MkU4M0IxMDAeFw0yNjA5MTQyMzEwMDlaFw0yNzA5MTMyMzE1MDlaMDMxMTAvBgNV
BAMTKEY5NUU0NjVBMjJGQzBFNjIyODdDQjYzNUExNjIwNTY4QzZDOUJGQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOSiSsY7JLlasoZNbbSx7Edu6w
AnCfOfl128Dgf4l4oGckwkaI7op7EU55MUi5bB/gCB5SKFx+EqIhFL6mAnxD6eCP
4/rwSPiTSqMh0/4I9+3x5vdE1e24SRi5H6pz+W+GuHGm4QY8a/i53qXgAVF49MfK
5JlOj6iUmtg/8iA0sLF4xDkPM5/hQWKbQYODKvPkzeW9UOhN242oAhGNElczcH96
IMdFgJAtGXHpz78PVG0lm7Xh4KzHDzfZDKELeCqb4diCPMzs90CKcbGbv4mVp3c/
ujZNtgFeqtDZpknSCX4S92ep5v4dDCUsimA6C2Yt+8fkPscPeLtY+paBoqonAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU+V5GWiL8DmIofLY1oWIFaMbJv7EwHwYDVR0j
BBgwFoAU5edon0yR6ZIaYESQw82hCjLoOxAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFR6ZEdLVVNaOXZCdktYdko1MWd4VnI5Y1dQR01BUEtYRjNIYWJvY2tG
UGcvMC9FNUU3Njg5RjRDOTFFOTkyMUE2MDQ0OTBDM0NEQTEwQTMyRTgzQjEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1RTc2ODlGNEM5MUU5OTIx
QTYwNDQ5MEMzQ0RBMTBBMzJFODNCMTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhUemRHS1VTWjl2QnZLWHZKNTFneFZyOWNXUEdNQVBLWEYzSGFib2NrRlBnLzAv
MzIzODMwMzQzYTM4MzMzMzMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMjMxMzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEgzCAMA0GCSqGSIb3DQEBCwUA
A4IBAQAHTxC0JkRRbjPInCQY6e3nGS6bL76ujcD28SyOGFcx4ThSenZub0RCgdlj
a85H7Bp2W009VTLSsovuBlDoI+N3WhOsC8pbR78yh6tZJP74zsh0SvnKfLPvB5Sy
uSyeEKX5XLOavBI3NU1yYGycJzrRE0TOqdCJmqpENChsV/O3M+xl6+O0TeZMeeAV
YJ4AGASwQYzY0Y2URDMKM4DGH76YbaW8yp14HhOYgqEu6woLjLCTbmNOvMMMiizi
VTtWzeGmeczZlf3cRRWSO7nlM6QM59Au1HzN0kIrJ6+J6Imqw/v7a54UwiWt9eAX
4L0dg919eO2KYQZ36ojeQLLHgdPJ
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:13:35 2026 by rpki-client