Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a393030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a393030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          NGgeb935Jb8JzM4DyznYNow7o7trKToFxhq4Kqt4QIc=
Subject key identifier:   B7:83:F7:24:1E:A3:60:78:A3:AC:29:D6:0A:FD:EF:5E:CD:23:75:73
Certificate issuer:       /CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
Certificate serial:       19F8452887FC60283552C60D1BF0D4837054EAC0
Authority key identifier: 62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a393030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Tue 13 Oct 2026 15:22:41 +0000
ROA not before:           Tue 13 Oct 2026 15:17:41 +0000
ROA not after:            Tue 12 Oct 2027 15:22:41 +0000
asID:                     268296
IP address blocks:        2804:4efc:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 16:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f8:45:28:87:fc:60:28:35:52:c6:0d:1b:f0:d4:83:70:54:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
        Validity
            Not Before: Oct 13 15:17:41 2026 GMT
            Not After : Oct 12 15:22:41 2027 GMT
        Subject: CN=B783F7241EA36078A3AC29D60AFDEF5ECD237573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:15:55:f9:64:bd:7b:e6:d4:6e:25:46:f8:
                    8a:cf:04:78:c8:b8:ad:54:42:99:ef:b1:0d:c4:a9:
                    cd:99:1a:f1:ca:e1:0c:a0:c4:cd:d9:a2:a6:7e:14:
                    39:bb:c9:fc:00:83:3d:a8:8e:35:15:93:96:40:e7:
                    da:09:96:81:48:41:24:a5:8b:fe:5a:14:0e:0c:89:
                    0d:b3:7f:c8:66:75:6f:bc:c0:20:b8:50:2d:58:0a:
                    55:a8:49:4a:a1:ed:f6:4d:54:08:c0:c1:a7:d5:da:
                    47:87:e7:e4:17:42:6c:c7:a4:b5:9f:a9:cb:00:46:
                    c5:26:7c:b9:65:9e:4f:f1:5b:95:06:2b:f9:fd:97:
                    fd:01:4e:37:b8:c1:46:c8:40:ff:56:eb:6b:b2:9c:
                    e5:a1:d2:6d:a4:e0:e4:19:54:5b:97:dd:5b:c4:6e:
                    ee:ba:75:07:9b:02:7b:9f:e2:88:6b:58:69:1f:7d:
                    15:05:cd:52:da:3d:c5:ff:dc:bd:4f:77:64:3a:fb:
                    86:bd:f1:31:d7:a3:a2:e9:a9:ef:b0:6d:4d:14:f1:
                    1e:d5:d7:d4:20:51:c3:76:71:d3:ec:05:48:8e:d4:
                    98:3f:aa:0b:77:5e:66:7e:c9:af:ae:90:5a:11:22:
                    a9:0b:ec:4a:2b:d1:8d:1f:a5:85:40:e3:1b:76:50:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:83:F7:24:1E:A3:60:78:A3:AC:29:D6:0A:FD:EF:5E:CD:23:75:73
            X509v3 Authority Key Identifier:
                keyid:62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a393030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5f:44:36:af:a5:4c:f1:72:c7:c6:25:16:4b:95:f4:c8:7a:dc:
         2f:28:44:13:5e:30:06:48:ee:cf:aa:00:74:22:13:62:c6:41:
         88:45:4d:47:7f:97:82:ae:08:05:d6:a1:59:3a:c8:a6:78:0b:
         4d:90:fb:da:55:16:ec:79:88:36:e8:17:88:02:51:93:59:c5:
         99:b4:e3:01:21:bc:f4:b4:81:17:3e:fd:ec:98:e9:24:f4:16:
         6c:2f:76:b7:ac:39:4f:57:f7:f9:e2:6a:a8:74:12:bc:ba:a1:
         79:2c:5b:b9:09:9d:0b:84:cd:9e:63:17:36:df:b8:74:e7:7a:
         b1:b9:af:4c:95:93:f0:29:a0:0a:81:d1:1b:fe:45:48:62:12:
         e4:09:d8:38:88:dc:ce:66:0f:1a:ae:2c:8a:48:63:1b:10:52:
         69:a4:56:bd:54:a1:14:50:af:d3:6b:cd:20:0d:ed:18:b0:01:
         54:e4:55:32:ec:aa:3b:d0:d9:17:c7:7c:f7:63:67:ec:30:c2:
         92:25:78:39:4f:e1:4f:28:ca:5e:02:06:b3:b7:34:ee:20:ea:
         11:f0:05:58:81:cb:1b:4b:da:90:c6:de:0e:25:46:62:2b:68:
         e7:b1:ea:7a:a9:f9:02:5a:9a:15:c8:80:e1:e6:ee:3d:ed:5f:
         3e:de:99:b4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGfhFKIf8YCg1UsYNG/DUg3BU6sAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjIwNDBFMEY4MzhBMDlFREFEMzhDQjdFNkI2QkJCREMy
M0IxQ0I2RjAeFw0yNjEwMTMxNTE3NDFaFw0yNzEwMTIxNTIyNDFaMDMxMTAvBgNV
BAMTKEI3ODNGNzI0MUVBMzYwNzhBM0FDMjlENjBBRkRFRjVFQ0QyMzc1NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZBVV+WS9e+bUbiVG+IrPBHjI
uK1UQpnvsQ3Eqc2ZGvHK4QygxM3ZoqZ+FDm7yfwAgz2ojjUVk5ZA59oJloFIQSSl
i/5aFA4MiQ2zf8hmdW+8wCC4UC1YClWoSUqh7fZNVAjAwafV2keH5+QXQmzHpLWf
qcsARsUmfLllnk/xW5UGK/n9l/0BTje4wUbIQP9W62uynOWh0m2k4OQZVFuX3VvE
bu66dQebAnuf4ohrWGkffRUFzVLaPcX/3L1Pd2Q6+4a98THXo6Lpqe+wbU0U8R7V
19QgUcN2cdPsBUiO1Jg/qgt3XmZ+ya+ukFoRIqkL7Eor0Y0fpYVA4xt2UA5BAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUt4P3JB6jYHijrCnWCv3vXs0jdXMwHwYDVR0j
BBgwFoAUYgQOD4OKCe2tOMt+a2u73COxy28wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ
SnIvMC82MjA0MEUwRjgzOEEwOUVEQUQzOENCN0U2QjZCQkJEQzIzQjFDQjZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyMDQwRTBGODM4QTA5RURB
RDM4Q0I3RTZCNkJCQkRDMjNCMUNCNkYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv
MzIzODMwMzQzYTM0NjU2NjYzM2EzOTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgETvyQMA0GCSqGSIb3DQEBCwUA
A4IBAQBfRDavpUzxcsfGJRZLlfTIetwvKEQTXjAGSO7PqgB0IhNixkGIRU1Hf5eC
rggF1qFZOsimeAtNkPvaVRbseYg26BeIAlGTWcWZtOMBIbz0tIEXPv3smOkk9BZs
L3a3rDlPV/f54mqodBK8uqF5LFu5CZ0LhM2eYxc237h053qxua9MlZPwKaAKgdEb
/kVIYhLkCdg4iNzOZg8ariyKSGMbEFJppFa9VKEUUK/Ta80gDe0YsAFU5FUy7Ko7
0NkXx3z3Y2fsMMKSJXg5T+FPKMpeAgaztzTuIOoR8AVYgcsbS9qQxt4OJUZiK2jn
sep6qfkCWpoVyIDh5u497V8+3pm0
-----END CERTIFICATE-----
Generated at Tue Oct 13 21:36:36 2026 by rpki-client