Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33342d3334203d3e203631383531.roa
File:                     323830343a316134633a3a2f33342d3334203d3e203631383531.roa (raw, json)
Hash identifier:          kvYdsYBokxFS2YZUIhQyonD5So3e9ryB4EyQqO/W0es=
Subject key identifier:   49:B2:74:47:1A:18:6B:FD:1E:C2:6C:FE:1B:95:BF:D3:46:13:9C:53
Certificate issuer:       /CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
Certificate serial:       20CE1BDB64CDF5703CA549F51A67FD12BF44CE58
Authority key identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33342d3334203d3e203631383531.roa
Signing time:             Wed 22 Jul 2026 22:02:08 +0000
ROA not before:           Wed 22 Jul 2026 21:57:08 +0000
ROA not after:            Wed 21 Jul 2027 22:02:08 +0000
asID:                     61851
IP address blocks:        2804:1a4c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ce:1b:db:64:cd:f5:70:3c:a5:49:f5:1a:67:fd:12:bf:44:ce:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
        Validity
            Not Before: Jul 22 21:57:08 2026 GMT
            Not After : Jul 21 22:02:08 2027 GMT
        Subject: CN=49B274471A186BFD1EC26CFE1B95BFD346139C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1b:1b:dd:cd:89:50:a3:88:ea:59:0d:99:98:
                    0c:aa:a7:84:a8:1b:14:99:1b:f9:1b:8c:6e:e0:2b:
                    63:dd:62:5f:7d:aa:89:b0:7b:db:4a:65:6a:27:23:
                    61:90:57:27:2e:f0:10:c0:5a:fb:2d:5b:a5:8b:b3:
                    bc:df:2b:b0:ae:c4:ee:7b:9e:08:b9:2b:ad:15:65:
                    7f:f6:e9:ed:bc:0d:32:22:c4:b6:3e:62:f7:e8:7a:
                    f7:be:c9:34:db:18:b1:56:9b:72:31:ae:1a:9b:74:
                    ce:59:11:35:a1:5b:e5:6c:16:fb:19:fa:ef:91:f3:
                    f5:f5:15:13:b4:94:79:7b:25:3b:81:a4:07:ac:aa:
                    58:31:2b:b7:82:e3:a5:93:93:8a:2f:b8:4b:04:3c:
                    4c:bc:b6:51:0c:d3:ab:78:7b:28:33:72:de:9d:36:
                    f1:55:1c:d9:84:28:b9:0f:99:52:ee:2b:46:44:5a:
                    75:4e:0d:01:8d:a3:f6:19:da:b4:df:d7:a2:80:93:
                    45:2a:d1:45:16:d5:68:1f:69:92:fb:5c:c8:42:c0:
                    7f:e8:58:5f:c1:19:a5:7f:ab:95:3b:fd:56:4b:28:
                    ca:74:8e:0c:b9:2e:7d:b8:2d:8e:ee:5b:df:e1:5d:
                    df:6f:8a:62:94:39:f3:4a:90:54:03:5c:20:ef:53:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B2:74:47:1A:18:6B:FD:1E:C2:6C:FE:1B:95:BF:D3:46:13:9C:53
            X509v3 Authority Key Identifier:
                keyid:6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33342d3334203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a4c::/34

    Signature Algorithm: sha256WithRSAEncryption
         4e:4d:a6:4b:87:69:20:2a:e0:b8:99:56:66:70:8d:c5:b7:f0:
         41:59:db:d3:02:4b:60:b9:03:9a:00:c2:76:13:a3:20:50:a9:
         29:4e:85:c9:a1:af:d0:03:7f:6d:32:ec:fb:c4:ba:b1:ed:0e:
         0a:8c:6f:81:4b:af:1c:ac:dc:f6:5b:8b:cb:76:35:ac:e6:4b:
         d4:00:e3:ad:1a:e4:49:42:ff:ec:81:33:45:4f:47:12:2e:ca:
         a8:2a:a0:fc:2d:7a:21:48:72:8b:a5:e5:26:cf:5e:f3:6f:49:
         16:9c:4c:78:7c:92:b7:c0:ba:2a:2e:04:2d:0b:f8:cb:6c:31:
         0e:5a:75:fb:24:fb:8b:2b:5b:0e:30:f2:12:4d:18:96:e9:6c:
         45:40:f8:da:e1:8f:e6:43:46:a1:bc:f5:f7:2b:02:92:cb:ee:
         cc:97:ef:6c:db:7a:ab:99:7f:a0:d4:86:59:bc:43:bc:1c:e0:
         73:8f:99:03:db:82:73:20:d8:7f:77:89:fb:fc:54:bc:d4:40:
         4a:26:e5:c8:e7:08:98:d0:7b:af:c0:fa:f5:02:ac:05:47:af:
         52:26:d8:5a:d8:dc:83:32:45:c3:58:10:68:05:f3:2b:dd:cb:
         de:51:91:d1:2b:ce:30:6f:99:aa:28:48:4e:49:0d:d3:1b:1a:
         2e:9e:77:45
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIM4b22TN9XA8pUn1Gmf9Er9EzlgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM2NkQzNzVCOTY3NTEzNkU3QzY4QkFBQzRGMkREREIy
Q0U0RTE2NzAeFw0yNjA3MjIyMTU3MDhaFw0yNzA3MjEyMjAyMDhaMDMxMTAvBgNV
BAMTKDQ5QjI3NDQ3MUExODZCRkQxRUMyNkNGRTFCOTVCRkQzNDYxMzlDNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GxvdzYlQo4jqWQ2ZmAyqp4So
GxSZG/kbjG7gK2PdYl99qomwe9tKZWonI2GQVycu8BDAWvstW6WLs7zfK7CuxO57
ngi5K60VZX/26e28DTIixLY+Yvfoeve+yTTbGLFWm3IxrhqbdM5ZETWhW+VsFvsZ
+u+R8/X1FRO0lHl7JTuBpAesqlgxK7eC46WTk4ovuEsEPEy8tlEM06t4eygzct6d
NvFVHNmEKLkPmVLuK0ZEWnVODQGNo/YZ2rTf16KAk0Uq0UUW1WgfaZL7XMhCwH/o
WF/BGaV/q5U7/VZLKMp0jgy5Ln24LY7uW9/hXd9vimKUOfNKkFQDXCDvU+rbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSbJ0RxoYa/0ewmz+G5W/00YTnFMwHwYDVR0j
BBgwFoAUbGbTdblnUTbnxouqxPLd2yzk4WcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1lNzgyWWFacUV3V0YzdVBFSzlrR0g3b0E4a0FzRjlSa2lxdDZUZGpR
QjkvMC82QzY2RDM3NUI5Njc1MTM2RTdDNjhCQUFDNEYyREREQjJDRTRFMTY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDNjZEMzc1Qjk2NzUxMzZF
N0M2OEJBQUM0RjJERERCMkNFNEUxNjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZTc4MllhWnFFd1dGM3VQRUs5a0dIN29BOGtBc0Y5UmtpcXQ2VGRqUUI5LzAv
MzIzODMwMzQzYTMxNjEzNDYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzYzMTM4
MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBigEGkwAMA0GCSqGSIb3DQEBCwUAA4IBAQBOTaZLh2kg
KuC4mVZmcI3Ft/BBWdvTAktguQOaAMJ2E6MgUKkpToXJoa/QA39tMuz7xLqx7Q4K
jG+BS68crNz2W4vLdjWs5kvUAOOtGuRJQv/sgTNFT0cSLsqoKqD8LXohSHKLpeUm
z17zb0kWnEx4fJK3wLoqLgQtC/jLbDEOWnX7JPuLK1sOMPISTRiW6WxFQPja4Y/m
Q0ahvPX3KwKSy+7Ml+9s23qrmX+g1IZZvEO8HOBzj5kD24JzINh/d4n7/FS81EBK
JuXI5wiY0HuvwPr1AqwFR69SJtha2NyDMkXDWBBoBfMr3cveUZHRK84wb5mqKEhO
SQ3TGxounndF
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:22:13 2026 by rpki-client