Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/323830343a363232633a666530303a3a2f33392d3339203d3e20323639323830.roa
File:                     323830343a363232633a666530303a3a2f33392d3339203d3e20323639323830.roa (raw, json)
Hash identifier:          kV+N/B4pIArGski3w8xSVnYLJgYi555iKz8uWnH+kbs=
Subject key identifier:   4E:5A:52:72:01:84:1F:B0:21:FF:FA:27:62:6E:BB:BA:7C:1B:74:C0
Certificate issuer:       /CN=0B58E844A7455326509E054B4A28E81E6C01AC01
Certificate serial:       4EE597216C29C54C28103376C6E51984983B91D0
Authority key identifier: 0B:58:E8:44:A7:45:53:26:50:9E:05:4B:4A:28:E8:1E:6C:01:AC:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B58E844A7455326509E054B4A28E81E6C01AC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/323830343a363232633a666530303a3a2f33392d3339203d3e20323639323830.roa
Signing time:             Fri 10 Jul 2026 14:46:14 +0000
ROA not before:           Fri 10 Jul 2026 14:41:14 +0000
ROA not after:            Fri 09 Jul 2027 14:46:14 +0000
asID:                     269280
IP address blocks:        2804:622c:fe00::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/0B58E844A7455326509E054B4A28E81E6C01AC01.crl
                          rsync://rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/0B58E844A7455326509E054B4A28E81E6C01AC01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B58E844A7455326509E054B4A28E81E6C01AC01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e5:97:21:6c:29:c5:4c:28:10:33:76:c6:e5:19:84:98:3b:91:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B58E844A7455326509E054B4A28E81E6C01AC01
        Validity
            Not Before: Jul 10 14:41:14 2026 GMT
            Not After : Jul  9 14:46:14 2027 GMT
        Subject: CN=4E5A527201841FB021FFFA27626EBBBA7C1B74C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:34:38:41:80:b5:3d:fc:d0:df:fe:31:fd:6c:
                    7d:63:a8:ed:1c:71:91:89:74:b7:00:05:06:a0:91:
                    67:fa:0b:25:af:b1:a6:84:e4:17:ba:93:ba:47:63:
                    6f:8d:01:2f:77:69:b1:b9:67:66:ba:c5:13:42:ca:
                    df:49:7f:dc:01:f4:35:30:8c:de:d0:06:fe:25:71:
                    ed:0d:d2:1d:45:e4:c3:60:d4:73:79:ad:e0:cd:39:
                    4a:45:2d:90:26:75:d7:bb:03:9a:06:b5:87:2f:b8:
                    66:da:3f:2d:5c:28:b6:83:c4:14:c2:d1:cd:78:58:
                    0f:de:f1:46:da:04:17:25:3d:31:ca:37:63:3a:39:
                    6d:ed:81:8e:e6:73:52:1a:84:ee:40:9f:22:d5:2f:
                    95:66:24:a2:5f:39:3e:c0:e3:60:27:1d:84:80:ea:
                    36:b5:2d:93:13:d7:28:c7:65:8e:31:3f:2b:2e:56:
                    40:09:00:70:b2:78:60:9b:4e:0f:8d:6e:d4:8c:8d:
                    61:ed:be:99:a8:e3:c2:f0:d2:df:1f:b5:40:05:d1:
                    87:c9:e1:24:7f:b6:86:0e:44:4c:eb:b8:f4:c1:87:
                    b9:7c:38:0e:e8:64:5f:e2:c3:88:49:13:c3:bf:35:
                    28:c5:2d:f6:68:fd:58:8f:99:17:2f:84:4a:e4:51:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5A:52:72:01:84:1F:B0:21:FF:FA:27:62:6E:BB:BA:7C:1B:74:C0
            X509v3 Authority Key Identifier:
                keyid:0B:58:E8:44:A7:45:53:26:50:9E:05:4B:4A:28:E8:1E:6C:01:AC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/0B58E844A7455326509E054B4A28E81E6C01AC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B58E844A7455326509E054B4A28E81E6C01AC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Ct6sGp6LmMCneRvJ78dNEvFQiSpPAUNdohXnUL2b9mr/0/323830343a363232633a666530303a3a2f33392d3339203d3e20323639323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:622c:fe00::/39

    Signature Algorithm: sha256WithRSAEncryption
         9d:11:42:e5:1f:36:4a:82:c5:2a:48:af:53:00:a0:9d:a5:4b:
         00:25:0d:3b:d4:3a:19:18:82:0f:4d:9c:9b:61:fc:16:65:d1:
         30:fc:fa:1b:df:26:ca:1e:98:3d:ef:1a:b2:38:35:2a:3e:15:
         50:7b:f1:4c:7c:7b:ff:e5:fd:69:7a:d8:83:15:71:30:57:b7:
         84:45:4c:8d:5b:7b:9f:d7:52:59:be:ef:1b:b7:f5:7a:ef:81:
         4d:de:0d:32:4b:91:41:7e:2c:1b:a6:04:e7:75:c7:d6:28:b1:
         b0:1a:e4:c8:58:7f:27:4e:c4:93:5c:56:70:e2:89:a6:a3:1e:
         70:d5:31:e4:47:f6:d4:f8:ce:7b:48:be:b8:1f:62:b7:2d:fc:
         3a:f3:a2:50:b1:f8:ce:13:1e:8b:7f:1d:26:98:b7:e5:51:1c:
         ef:4b:2e:c7:f6:10:ce:09:51:e7:bd:7e:e1:a3:0c:e6:24:dd:
         73:ad:9c:fe:a5:8c:d4:96:b1:e4:18:c7:e1:42:1a:bc:98:62:
         1a:49:7c:4f:1a:e6:f2:e9:43:88:57:e3:69:c5:26:75:8f:71:
         23:b1:a6:00:4c:83:4f:82:52:02:05:ae:2b:16:fb:8f:88:81:
         ce:e6:02:cd:44:82:d0:7d:72:d3:f1:d9:78:b8:ce:b3:4a:f3:
         2b:17:87:13
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTuWXIWwpxUwoEDN2xuUZhJg7kdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI1OEU4NDRBNzQ1NTMyNjUwOUUwNTRCNEEyOEU4MUU2
QzAxQUMwMTAeFw0yNjA3MTAxNDQxMTRaFw0yNzA3MDkxNDQ2MTRaMDMxMTAvBgNV
BAMTKDRFNUE1MjcyMDE4NDFGQjAyMUZGRkEyNzYyNkVCQkJBN0MxQjc0QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYNDhBgLU9/NDf/jH9bH1jqO0c
cZGJdLcABQagkWf6CyWvsaaE5Be6k7pHY2+NAS93abG5Z2a6xRNCyt9Jf9wB9DUw
jN7QBv4lce0N0h1F5MNg1HN5reDNOUpFLZAmdde7A5oGtYcvuGbaPy1cKLaDxBTC
0c14WA/e8UbaBBclPTHKN2M6OW3tgY7mc1IahO5AnyLVL5VmJKJfOT7A42AnHYSA
6ja1LZMT1yjHZY4xPysuVkAJAHCyeGCbTg+NbtSMjWHtvpmo48Lw0t8ftUAF0YfJ
4SR/toYOREzruPTBh7l8OA7oZF/iw4hJE8O/NSjFLfZo/ViPmRcvhErkUXJbAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUTlpScgGEH7Ah//onYm67unwbdMAwHwYDVR0j
BBgwFoAUC1joRKdFUyZQngVLSijoHmwBrAEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUN0NnNHcDZMbU1DbmVSdko3OGRORXZGUWlTcFBBVU5kb2hYblVMMmI5
bXIvMC8wQjU4RTg0NEE3NDU1MzI2NTA5RTA1NEI0QTI4RTgxRTZDMDFBQzAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCNThFODQ0QTc0NTUzMjY1
MDlFMDU0QjRBMjhFODFFNkMwMUFDMDEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlDdDZzR3A2TG1NQ25lUnZKNzhkTkV2RlFpU3BQQVVOZG9oWG5VTDJiOW1yLzAv
MzIzODMwMzQzYTM2MzIzMjYzM2E2NjY1MzAzMDNhM2EyZjMzMzkyZDMzMzkyMDNk
M2UyMDMyMzYzOTMyMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGASgEYiz+MA0GCSqGSIb3DQEBCwUA
A4IBAQCdEULlHzZKgsUqSK9TAKCdpUsAJQ071DoZGIIPTZybYfwWZdEw/Pob3ybK
Hpg97xqyODUqPhVQe/FMfHv/5f1petiDFXEwV7eERUyNW3uf11JZvu8bt/V674FN
3g0yS5FBfiwbpgTndcfWKLGwGuTIWH8nTsSTXFZw4ommox5w1THkR/bU+M57SL64
H2K3Lfw686JQsfjOEx6Lfx0mmLflURzvSy7H9hDOCVHnvX7howzmJN1zrZz+pYzU
lrHkGMfhQhq8mGIaSXxPGuby6UOIV+NpxSZ1j3EjsaYATINPglICBa4rFvuPiIHO
5gLNRILQfXLT8dl4uM6zSvMrF4cT
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:49:51 2026 by rpki-client