Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a633030303a3a2f33342d3334203d3e203631383531.roa
File:                     323830343a316134633a633030303a3a2f33342d3334203d3e203631383531.roa (raw, json)
Hash identifier:          AfvViAVUCUIhwhF6i7np0Ya8HACrUipTycvrwVF6RrM=
Subject key identifier:   E3:1E:5A:1A:63:34:1F:A6:07:B3:78:08:BD:69:0C:66:EF:CC:95:6D
Certificate issuer:       /CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
Certificate serial:       5B57E16471A9CCF7E74C15817B18F47BE8D0C5DB
Authority key identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a633030303a3a2f33342d3334203d3e203631383531.roa
Signing time:             Wed 22 Jul 2026 22:02:13 +0000
ROA not before:           Wed 22 Jul 2026 21:57:13 +0000
ROA not after:            Wed 21 Jul 2027 22:02:13 +0000
asID:                     61851
IP address blocks:        2804:1a4c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:57:e1:64:71:a9:cc:f7:e7:4c:15:81:7b:18:f4:7b:e8:d0:c5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
        Validity
            Not Before: Jul 22 21:57:13 2026 GMT
            Not After : Jul 21 22:02:13 2027 GMT
        Subject: CN=E31E5A1A63341FA607B37808BD690C66EFCC956D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:4c:fe:ec:5a:fe:24:bf:fc:29:66:46:e9:
                    da:3d:e2:4e:fc:72:71:43:96:b2:39:46:b1:76:70:
                    93:56:aa:52:3e:1b:d7:ec:de:76:21:07:54:9c:0b:
                    b8:e1:53:05:6c:83:3d:5c:91:45:c0:b2:4b:eb:92:
                    26:0e:59:54:42:e6:20:f2:b1:7c:84:0d:2e:1b:4d:
                    ff:59:3c:ae:db:ab:ac:69:1c:1b:c3:f2:92:67:69:
                    30:c1:5e:2b:b8:6f:9f:d2:d4:8b:ed:87:48:cb:95:
                    1c:95:0c:c0:49:86:a8:ff:34:72:a2:33:9e:d0:ea:
                    4e:8c:0b:18:c4:d2:2a:73:39:55:88:4e:fe:3e:d2:
                    ac:f4:0f:93:bf:95:48:4c:83:b4:ad:94:23:42:14:
                    3c:ca:5a:8b:4e:d9:6f:79:92:00:38:4a:1e:d0:2b:
                    1f:e5:c8:61:90:3e:f2:1f:83:95:62:d9:51:42:90:
                    46:7d:70:80:a6:c3:a6:c6:54:44:95:ed:8d:db:bd:
                    44:b2:97:4c:b8:e8:a6:99:21:d0:9b:8f:c1:53:f9:
                    0d:af:53:5d:3e:a7:7b:bf:59:cc:dd:d7:4c:b3:43:
                    97:53:c3:b9:66:dd:d9:d1:94:15:df:3b:22:63:ee:
                    9a:70:b7:a2:cf:ba:92:6e:c4:3d:0f:e1:5a:d2:d3:
                    25:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1E:5A:1A:63:34:1F:A6:07:B3:78:08:BD:69:0C:66:EF:CC:95:6D
            X509v3 Authority Key Identifier:
                keyid:6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a633030303a3a2f33342d3334203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a4c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         aa:bf:77:12:73:cd:d8:75:09:82:ca:ad:e2:33:2f:55:a0:94:
         38:b6:85:bb:66:28:6d:5b:76:db:68:05:d7:67:6e:5b:37:23:
         d8:4f:3c:ee:0a:23:90:6c:7f:ca:6e:05:af:ff:3f:59:ed:a5:
         51:31:4d:89:d2:c1:d1:77:ba:12:66:43:9b:be:43:a3:b6:83:
         e5:09:43:49:44:db:d9:3c:6c:c2:78:0d:9d:75:19:81:c9:e9:
         72:65:26:9e:b7:de:6c:e9:04:3f:86:69:53:25:8d:e3:0c:a1:
         0e:fb:75:07:8c:cf:cb:91:ff:68:66:61:b2:6c:37:f5:49:af:
         33:aa:e4:47:47:e1:b8:de:06:9f:7f:60:bc:20:81:96:cf:0b:
         7a:e5:ff:8d:98:62:32:99:21:2c:e7:a0:c0:e7:93:68:86:67:
         39:05:6b:30:57:61:64:ed:32:63:af:b6:86:98:34:de:80:1e:
         57:49:e0:63:90:4e:fe:07:37:04:e9:32:9a:d3:4e:97:70:35:
         5e:f2:d5:2b:12:70:4c:06:33:84:cf:1b:f9:64:7b:93:82:a0:
         c7:54:d6:9e:35:ff:e3:dc:70:63:0b:69:56:53:79:7e:29:2b:
         67:80:21:e7:df:a7:4f:87:36:b5:fa:a6:14:dc:e8:8a:97:15:
         ff:e6:66:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUW1fhZHGpzPfnTBWBexj0e+jQxdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM2NkQzNzVCOTY3NTEzNkU3QzY4QkFBQzRGMkREREIy
Q0U0RTE2NzAeFw0yNjA3MjIyMTU3MTNaFw0yNzA3MjEyMjAyMTNaMDMxMTAvBgNV
BAMTKEUzMUU1QTFBNjMzNDFGQTYwN0IzNzgwOEJENjkwQzY2RUZDQzk1NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAV0z+7Fr+JL/8KWZG6do94k78
cnFDlrI5RrF2cJNWqlI+G9fs3nYhB1ScC7jhUwVsgz1ckUXAskvrkiYOWVRC5iDy
sXyEDS4bTf9ZPK7bq6xpHBvD8pJnaTDBXiu4b5/S1Ivth0jLlRyVDMBJhqj/NHKi
M57Q6k6MCxjE0ipzOVWITv4+0qz0D5O/lUhMg7StlCNCFDzKWotO2W95kgA4Sh7Q
Kx/lyGGQPvIfg5Vi2VFCkEZ9cICmw6bGVESV7Y3bvUSyl0y46KaZIdCbj8FT+Q2v
U10+p3u/Wczd10yzQ5dTw7lm3dnRlBXfOyJj7ppwt6LPupJuxD0P4VrS0yVBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU4x5aGmM0H6YHs3gIvWkMZu/MlW0wHwYDVR0j
BBgwFoAUbGbTdblnUTbnxouqxPLd2yzk4WcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1lNzgyWWFacUV3V0YzdVBFSzlrR0g3b0E4a0FzRjlSa2lxdDZUZGpR
QjkvMC82QzY2RDM3NUI5Njc1MTM2RTdDNjhCQUFDNEYyREREQjJDRTRFMTY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDNjZEMzc1Qjk2NzUxMzZF
N0M2OEJBQUM0RjJERERCMkNFNEUxNjcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZTc4MllhWnFFd1dGM3VQRUs5a0dIN29BOGtBc0Y5UmtpcXQ2VGRqUUI5LzAv
MzIzODMwMzQzYTMxNjEzNDYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzODM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBBpMwDANBgkqhkiG9w0BAQsFAAOC
AQEAqr93EnPN2HUJgsqt4jMvVaCUOLaFu2YobVt222gF12duWzcj2E887gojkGx/
ym4Fr/8/We2lUTFNidLB0Xe6EmZDm75Do7aD5QlDSUTb2TxswngNnXUZgcnpcmUm
nrfebOkEP4ZpUyWN4wyhDvt1B4zPy5H/aGZhsmw39UmvM6rkR0fhuN4Gn39gvCCB
ls8LeuX/jZhiMpkhLOegwOeTaIZnOQVrMFdhZO0yY6+2hpg03oAeV0ngY5BO/gc3
BOkymtNOl3A1XvLVKxJwTAYzhM8b+WR7k4Kgx1TWnjX/49xwYwtpVlN5fikrZ4Ah
59+nT4c2tfqmFNzoipcV/+ZmGw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:03:25 2026 by rpki-client