Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a6530303a3a2f34382d3438203d3e203631383531.roa
File:                     323830343a316134633a6530303a3a2f34382d3438203d3e203631383531.roa (raw, json)
Hash identifier:          9Dsf84FfGQWpY3OKrQzUePpMoGZNMlvJn0fgr2tbSkY=
Subject key identifier:   CC:00:FD:C7:8E:9F:99:F6:4C:9A:30:67:0E:49:B4:E6:E0:BB:BE:C0
Certificate issuer:       /CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
Certificate serial:       0EF24E80A9797E7BFE5572EF285ACD44DC9254A3
Authority key identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a6530303a3a2f34382d3438203d3e203631383531.roa
Signing time:             Wed 22 Jul 2026 22:02:14 +0000
ROA not before:           Wed 22 Jul 2026 21:57:14 +0000
ROA not after:            Wed 21 Jul 2027 22:02:14 +0000
asID:                     61851
IP address blocks:        2804:1a4c:e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f2:4e:80:a9:79:7e:7b:fe:55:72:ef:28:5a:cd:44:dc:92:54:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
        Validity
            Not Before: Jul 22 21:57:14 2026 GMT
            Not After : Jul 21 22:02:14 2027 GMT
        Subject: CN=CC00FDC78E9F99F64C9A30670E49B4E6E0BBBEC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8d:3c:bf:4e:cc:03:52:7e:ac:5b:da:3a:67:
                    58:28:8f:40:da:88:c4:ac:a0:33:f6:aa:0b:f8:91:
                    53:6b:d2:de:e4:9d:63:f3:01:80:ec:a8:63:c8:60:
                    26:40:64:78:af:ff:8b:c4:6f:2d:c6:22:9b:5a:49:
                    a4:ad:ab:fb:61:39:09:4e:fd:c0:d8:d1:da:87:eb:
                    53:83:10:07:cc:34:48:c2:f6:03:91:4f:be:37:be:
                    56:a5:b3:87:b9:13:b0:92:38:0f:3d:3d:4a:47:88:
                    ad:d9:03:90:f6:16:e0:e7:f3:f2:2c:e2:35:d6:0a:
                    4a:c7:4e:23:75:04:b8:1d:38:7a:f1:85:f9:47:57:
                    f8:bb:9b:fe:30:b5:7a:83:b0:ef:3f:1c:87:d7:0d:
                    95:e2:2f:29:75:d9:f2:24:ea:2a:8f:8c:94:3a:e5:
                    f1:3f:c3:34:17:eb:cb:48:86:19:21:ad:61:f8:fc:
                    f9:47:a6:6b:ed:a5:00:9c:5c:b7:84:ca:e9:c3:24:
                    e3:96:4e:29:56:42:7e:81:60:bf:4a:e6:93:f3:b1:
                    a7:63:51:34:fe:b0:0e:91:ce:09:ad:96:54:67:3a:
                    cd:43:11:3b:c7:9f:0b:79:09:74:85:70:ea:f3:ee:
                    9a:83:a9:ed:1a:63:61:74:1a:5b:9b:54:6e:dc:a3:
                    ab:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:00:FD:C7:8E:9F:99:F6:4C:9A:30:67:0E:49:B4:E6:E0:BB:BE:C0
            X509v3 Authority Key Identifier:
                keyid:6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a6530303a3a2f34382d3438203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a4c:e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:00:a5:75:06:e0:05:66:a3:f5:fc:1b:db:eb:65:fc:03:46:
         38:cf:bf:06:24:cd:13:b3:53:fb:b3:ae:13:cc:83:ae:cc:a9:
         e6:4d:6c:ac:eb:f9:bf:c3:4a:a6:c9:00:d4:ec:73:3a:1d:13:
         45:7c:87:26:7c:7d:ae:3a:72:ae:01:51:71:95:2c:9f:7a:03:
         89:23:25:c0:21:e4:3d:c9:3b:d5:d3:da:c3:1b:eb:7b:a8:fc:
         66:bf:13:b9:d3:54:4f:db:4e:3e:a1:fa:b7:89:b0:4f:3e:b8:
         d5:4d:0f:87:74:64:b7:bc:ce:42:2f:9b:b2:af:13:b3:c3:6c:
         40:aa:96:b9:de:a5:ad:25:b2:19:6e:05:02:9d:7a:6f:05:73:
         dd:fd:6d:02:c0:b9:02:fb:21:e9:ef:de:90:9a:1e:08:07:90:
         8b:c3:b2:4d:07:0f:7f:39:fa:2a:b0:db:1d:5d:2b:c9:50:ec:
         08:7b:0d:de:8a:e2:f7:71:29:29:21:11:1a:97:a3:df:b3:29:
         32:50:3d:ba:f9:9a:e9:fd:68:f6:9c:04:89:1c:42:15:18:8f:
         7b:8d:44:d3:46:a6:6b:d1:91:fd:8c:5a:6f:8e:7b:35:99:be:
         bf:4f:b1:cc:87:03:e7:f0:eb:08:8f:db:2b:0e:5a:0d:63:69:
         99:6e:2e:64
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUDvJOgKl5fnv+VXLvKFrNRNySVKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM2NkQzNzVCOTY3NTEzNkU3QzY4QkFBQzRGMkREREIy
Q0U0RTE2NzAeFw0yNjA3MjIyMTU3MTRaFw0yNzA3MjEyMjAyMTRaMDMxMTAvBgNV
BAMTKENDMDBGREM3OEU5Rjk5RjY0QzlBMzA2NzBFNDlCNEU2RTBCQkJFQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXjTy/TswDUn6sW9o6Z1goj0Da
iMSsoDP2qgv4kVNr0t7knWPzAYDsqGPIYCZAZHiv/4vEby3GIptaSaStq/thOQlO
/cDY0dqH61ODEAfMNEjC9gORT743vlals4e5E7CSOA89PUpHiK3ZA5D2FuDn8/Is
4jXWCkrHTiN1BLgdOHrxhflHV/i7m/4wtXqDsO8/HIfXDZXiLyl12fIk6iqPjJQ6
5fE/wzQX68tIhhkhrWH4/PlHpmvtpQCcXLeEyunDJOOWTilWQn6BYL9K5pPzsadj
UTT+sA6RzgmtllRnOs1DETvHnwt5CXSFcOrz7pqDqe0aY2F0GlubVG7co6vtAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUzAD9x46fmfZMmjBnDkm05uC7vsAwHwYDVR0j
BBgwFoAUbGbTdblnUTbnxouqxPLd2yzk4WcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1lNzgyWWFacUV3V0YzdVBFSzlrR0g3b0E4a0FzRjlSa2lxdDZUZGpR
QjkvMC82QzY2RDM3NUI5Njc1MTM2RTdDNjhCQUFDNEYyREREQjJDRTRFMTY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDNjZEMzc1Qjk2NzUxMzZF
N0M2OEJBQUM0RjJERERCMkNFNEUxNjcuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZTc4MllhWnFFd1dGM3VQRUs5a0dIN29BOGtBc0Y5UmtpcXQ2VGRqUUI5LzAv
MzIzODMwMzQzYTMxNjEzNDYzM2E2NTMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNjMxMzgzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQaTA4AMA0GCSqGSIb3DQEBCwUAA4IB
AQALAKV1BuAFZqP1/Bvb62X8A0Y4z78GJM0Ts1P7s64TzIOuzKnmTWys6/m/w0qm
yQDU7HM6HRNFfIcmfH2uOnKuAVFxlSyfegOJIyXAIeQ9yTvV09rDG+t7qPxmvxO5
01RP204+ofq3ibBPPrjVTQ+HdGS3vM5CL5uyrxOzw2xAqpa53qWtJbIZbgUCnXpv
BXPd/W0CwLkC+yHp796Qmh4IB5CLw7JNBw9/OfoqsNsdXSvJUOwIew3eiuL3cSkp
IREal6PfsykyUD26+Zrp/Wj2nASJHEIVGI97jUTTRqZr0ZH9jFpvjns1mb6/T7HM
hwPn8OsIj9srDloNY2mZbi5k
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:05:22 2026 by rpki-client