Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/323830343a393066383a3a2f33322d3634203d3e20323734363130.roa
File:                     323830343a393066383a3a2f33322d3634203d3e20323734363130.roa (raw, json)
Hash identifier:          LTpq4l+cYa65uYW9Ekh5GgbC0UpN9Qy3BnoX57NX438=
Subject key identifier:   52:F9:FA:9F:16:4D:77:01:F5:F9:A1:F0:90:5B:D0:5D:1C:DB:0F:73
Certificate issuer:       /CN=2AA55D9F660358994534C0B5C412474014767770
Certificate serial:       2324F48133B3280700D425F53138659DE7F9A0F1
Authority key identifier: 2A:A5:5D:9F:66:03:58:99:45:34:C0:B5:C4:12:47:40:14:76:77:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA55D9F660358994534C0B5C412474014767770.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/323830343a393066383a3a2f33322d3634203d3e20323734363130.roa
Signing time:             Fri 03 Jul 2026 17:55:11 +0000
ROA not before:           Fri 03 Jul 2026 17:50:11 +0000
ROA not after:            Fri 02 Jul 2027 17:55:11 +0000
asID:                     274610
IP address blocks:        2804:90f8::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/2AA55D9F660358994534C0B5C412474014767770.crl
                          rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/2AA55D9F660358994534C0B5C412474014767770.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA55D9F660358994534C0B5C412474014767770.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 09:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:24:f4:81:33:b3:28:07:00:d4:25:f5:31:38:65:9d:e7:f9:a0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AA55D9F660358994534C0B5C412474014767770
        Validity
            Not Before: Jul  3 17:50:11 2026 GMT
            Not After : Jul  2 17:55:11 2027 GMT
        Subject: CN=52F9FA9F164D7701F5F9A1F0905BD05D1CDB0F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ac:0a:3f:f1:6d:e3:8f:68:b6:35:60:77:99:
                    ca:c3:00:6e:c6:a2:31:58:2a:d3:0e:82:b1:f9:5a:
                    69:28:ac:3c:0c:ac:8d:96:e3:1b:1c:8d:90:2f:b0:
                    f2:6a:36:ef:76:d1:5c:04:e5:d2:05:6f:a8:73:2a:
                    83:7c:31:46:f6:22:89:99:6c:1d:3c:4a:fc:fc:7f:
                    23:41:86:e5:8a:d6:43:47:7c:59:df:06:be:af:2c:
                    cb:45:7c:b4:76:c8:6e:c4:65:15:d0:7a:9a:d7:41:
                    20:68:62:8f:c3:d6:16:64:1a:3d:40:26:51:3c:f9:
                    ab:7f:6e:4b:ac:36:71:d0:32:13:6b:79:4c:32:06:
                    48:ea:39:93:48:8a:a0:c4:db:bf:4d:c1:c9:93:e4:
                    af:88:09:a8:c1:45:f9:b4:a7:6a:48:15:54:57:be:
                    5d:0a:cd:6c:c7:43:cd:82:b1:97:c5:36:01:03:f6:
                    82:83:9b:b2:6a:42:5a:3f:12:65:8b:66:47:eb:eb:
                    d6:99:ee:64:70:3f:e4:5a:a6:48:9c:52:1e:97:7e:
                    c2:de:d4:2c:02:57:3b:a3:7c:1b:ba:2b:de:03:b4:
                    7a:f8:51:27:17:14:27:96:cd:ab:cc:0c:6a:c8:b0:
                    87:a6:05:60:8e:e2:12:9e:f4:16:1e:28:29:c1:8c:
                    51:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F9:FA:9F:16:4D:77:01:F5:F9:A1:F0:90:5B:D0:5D:1C:DB:0F:73
            X509v3 Authority Key Identifier:
                keyid:2A:A5:5D:9F:66:03:58:99:45:34:C0:B5:C4:12:47:40:14:76:77:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/2AA55D9F660358994534C0B5C412474014767770.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA55D9F660358994534C0B5C412474014767770.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/323830343a393066383a3a2f33322d3634203d3e20323734363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:6c:f6:ce:ed:6b:b2:e1:a7:93:23:8e:83:ab:bd:31:86:7c:
         e3:68:11:e4:2c:ec:a4:e3:41:fe:e6:17:ba:dd:a8:d5:12:6c:
         d7:f6:d4:69:e5:9e:4f:e2:66:28:1f:db:9b:c0:f7:98:fb:ea:
         36:e8:cb:41:da:b6:b9:f3:6c:7a:34:23:fa:f1:31:97:79:3d:
         3e:29:e2:27:70:ab:14:a7:7e:18:aa:f5:23:2c:6c:59:80:14:
         75:3b:8a:a6:f3:dd:95:07:41:27:af:da:d7:d2:3a:9a:0f:ea:
         e9:21:40:9e:94:e4:02:0d:42:9f:0e:c6:54:85:8b:da:13:c9:
         89:a0:26:a4:86:36:21:b4:b3:77:4a:2d:50:07:18:5b:d4:75:
         a6:27:f2:02:d3:a5:ab:ce:94:cb:b6:3d:79:df:94:a0:70:94:
         9f:b2:5a:c4:65:c8:6d:ea:b6:2c:fb:b6:03:9d:ba:1d:16:4d:
         7d:7f:e5:45:2a:7d:f1:ee:75:6a:26:49:e5:72:01:44:08:5b:
         72:08:e1:82:1a:37:bf:3a:b8:18:b2:a7:c1:b9:65:49:1a:1e:
         9f:d3:ce:7d:fc:e7:76:4b:90:3f:85:50:f7:c2:b0:99:a7:6a:
         97:a3:56:a3:f8:e9:19:01:fc:db:54:d3:cb:35:9b:e6:a1:1e:
         c0:cf:0b:18
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUIyT0gTOzKAcA1CX1MThlnef5oPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFBNTVEOUY2NjAzNTg5OTQ1MzRDMEI1QzQxMjQ3NDAx
NDc2Nzc3MDAeFw0yNjA3MDMxNzUwMTFaFw0yNzA3MDIxNzU1MTFaMDMxMTAvBgNV
BAMTKDUyRjlGQTlGMTY0RDc3MDFGNUY5QTFGMDkwNUJEMDVEMUNEQjBGNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrAo/8W3jj2i2NWB3mcrDAG7G
ojFYKtMOgrH5WmkorDwMrI2W4xscjZAvsPJqNu920VwE5dIFb6hzKoN8MUb2IomZ
bB08Svz8fyNBhuWK1kNHfFnfBr6vLMtFfLR2yG7EZRXQeprXQSBoYo/D1hZkGj1A
JlE8+at/bkusNnHQMhNreUwyBkjqOZNIiqDE279NwcmT5K+ICajBRfm0p2pIFVRX
vl0KzWzHQ82CsZfFNgED9oKDm7JqQlo/EmWLZkfr69aZ7mRwP+RapkicUh6XfsLe
1CwCVzujfBu6K94DtHr4UScXFCeWzavMDGrIsIemBWCO4hKe9BYeKCnBjFEfAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUUvn6nxZNdwH1+aHwkFvQXRzbD3MwHwYDVR0j
BBgwFoAUKqVdn2YDWJlFNMC1xBJHQBR2d3AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby84eFpDa2Rkb1NiM3NRQW11R3FVeFpqVzlkOWhLYVJZbm9LcVh2TjVXUjc3
LzAvMkFBNTVEOUY2NjAzNTg5OTQ1MzRDMEI1QzQxMjQ3NDAxNDc2Nzc3MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQUE1NUQ5RjY2MDM1ODk5NDUz
NEMwQjVDNDEyNDc0MDE0NzY3NzcwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84
eFpDa2Rkb1NiM3NRQW11R3FVeFpqVzlkOWhLYVJZbm9LcVh2TjVXUjc3LzAvMzIz
ODMwMzQzYTM5MzA2NjM4M2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzIzNzM0MzYz
MTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKASQ+DANBgkqhkiG9w0BAQsFAAOCAQEAYmz2zu1rsuGn
kyOOg6u9MYZ842gR5CzspONB/uYXut2o1RJs1/bUaeWeT+JmKB/bm8D3mPvqNujL
Qdq2ufNsejQj+vExl3k9PiniJ3CrFKd+GKr1IyxsWYAUdTuKpvPdlQdBJ6/a19I6
mg/q6SFAnpTkAg1Cnw7GVIWL2hPJiaAmpIY2IbSzd0otUAcYW9R1pifyAtOlq86U
y7Y9ed+UoHCUn7JaxGXIbeq2LPu2A526HRZNfX/lRSp98e51aiZJ5XIBRAhbcgjh
gho3vzq4GLKnwbllSRoen9POffzndkuQP4VQ98Kwmadql6NWo/jpGQH821TTyzWb
5qEewM8LGA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:27 2026 by rpki-client