Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/323830343a376363303a323030313a3a2f34382d3438203d3e20323731353136.roa
File:                     323830343a376363303a323030313a3a2f34382d3438203d3e20323731353136.roa (raw, json)
Hash identifier:          sW7BWvpjVDsPmOiHwathWMfaTQkYd2kBLO1OD6vH6VU=
Subject key identifier:   A9:36:87:E5:2B:5C:C2:B5:19:5A:3D:C9:ED:BC:B4:00:25:93:5C:D7
Certificate issuer:       /CN=EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45
Certificate serial:       379BE47D7C59A6041BA074B088F942406C89A8D4
Authority key identifier: EC:30:90:F1:DA:B0:9A:D2:B6:D2:95:F6:B0:F5:C0:F2:1E:DC:4D:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/323830343a376363303a323030313a3a2f34382d3438203d3e20323731353136.roa
Signing time:             Fri 17 Jul 2026 14:02:00 +0000
ROA not before:           Fri 17 Jul 2026 13:57:00 +0000
ROA not after:            Fri 16 Jul 2027 14:02:00 +0000
asID:                     271516
IP address blocks:        2804:7cc0:2001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.crl
                          rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9b:e4:7d:7c:59:a6:04:1b:a0:74:b0:88:f9:42:40:6c:89:a8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45
        Validity
            Not Before: Jul 17 13:57:00 2026 GMT
            Not After : Jul 16 14:02:00 2027 GMT
        Subject: CN=A93687E52B5CC2B5195A3DC9EDBCB40025935CD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9f:92:f7:3a:d3:e5:be:f2:92:74:cd:41:00:
                    1f:60:14:bc:39:73:dd:ec:59:a3:82:c4:28:be:30:
                    2f:04:8c:de:31:93:f9:5f:7e:fb:0a:ad:4d:61:34:
                    2c:7e:3c:3b:c7:12:0f:66:e8:88:38:46:57:33:f4:
                    f8:f7:2e:13:4a:f4:8c:7d:a2:ce:d7:aa:1d:37:63:
                    b5:0a:cf:60:8b:55:f0:07:85:8b:5c:4b:1f:ef:a5:
                    90:6c:a5:2a:ce:4a:bd:8a:95:b6:b4:53:36:b6:a0:
                    2b:8b:96:00:5d:5f:b8:49:c2:2c:2d:ec:8c:76:01:
                    cc:07:61:1b:6f:d2:5d:e8:ce:9e:29:79:aa:8c:23:
                    f8:ba:1c:6e:99:31:f5:00:60:5d:60:32:89:e4:aa:
                    81:1a:e1:fd:07:31:ea:bf:e3:68:bb:ea:6e:51:64:
                    65:68:e5:6d:cd:4a:86:66:2a:e8:f4:d5:25:d4:4a:
                    b4:e3:a5:ff:f3:6a:2a:eb:8a:d6:25:f4:4a:23:d3:
                    dd:e3:9a:2b:ac:86:c7:78:c5:af:79:a4:9b:53:0c:
                    c4:2b:41:d7:82:57:28:a8:0f:04:ea:99:73:86:d6:
                    f1:84:c8:55:78:42:5d:9a:7e:35:14:2f:b0:59:68:
                    e7:2c:f3:d2:55:8e:7c:77:ca:fe:ae:4f:86:3b:24:
                    8f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:36:87:E5:2B:5C:C2:B5:19:5A:3D:C9:ED:BC:B4:00:25:93:5C:D7
            X509v3 Authority Key Identifier:
                keyid:EC:30:90:F1:DA:B0:9A:D2:B6:D2:95:F6:B0:F5:C0:F2:1E:DC:4D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/323830343a376363303a323030313a3a2f34382d3438203d3e20323731353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cc0:2001::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:8c:cf:09:7b:07:53:26:4c:a8:84:89:84:c1:7a:e2:79:3c:
         99:6d:a5:98:fc:87:a8:4d:60:c9:89:90:70:41:33:93:90:c7:
         32:b1:36:79:35:a9:91:12:19:61:23:8b:bb:fa:52:90:60:88:
         cf:b4:17:0b:ca:13:3a:c8:49:8e:14:f7:82:bb:07:63:79:74:
         75:b5:af:78:65:0b:fc:2f:e4:ec:f1:27:78:31:c2:09:e6:89:
         f3:58:6d:51:f2:72:62:0f:a3:3e:ae:ec:f8:74:32:7d:25:c6:
         8a:47:5c:ce:a8:12:fb:e1:a0:60:bb:d7:0f:0e:3f:6c:bb:4d:
         c5:ea:e4:aa:3d:d6:c4:07:e3:37:5a:d0:8b:78:95:4f:bb:64:
         e4:65:7e:e2:39:1b:10:8a:d0:d8:2f:db:bb:a1:e2:19:4f:58:
         6e:6b:5b:08:35:3b:61:ab:0e:9d:f4:59:cc:ae:97:0e:e8:1c:
         cc:7f:49:88:0d:5f:19:fa:2d:d3:78:84:f3:3f:00:24:b2:a6:
         24:57:83:e8:39:d9:d3:f9:f4:71:a6:c5:07:9e:77:9f:13:3a:
         23:eb:9e:72:ea:34:15:ff:2f:90:88:a1:bd:b6:25:85:15:2a:
         de:4a:a4:43:fa:72:c2:fd:7d:90:47:db:9c:29:21:10:bb:af:
         0f:ad:c1:a7
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUN5vkfXxZpgQboHSwiPlCQGyJqNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMzMDkwRjFEQUIwOUFEMkI2RDI5NUY2QjBGNUMwRjIx
RURDNEQ0NTAeFw0yNjA3MTcxMzU3MDBaFw0yNzA3MTYxNDAyMDBaMDMxMTAvBgNV
BAMTKEE5MzY4N0U1MkI1Q0MyQjUxOTVBM0RDOUVEQkNCNDAwMjU5MzVDRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfn5L3OtPlvvKSdM1BAB9gFLw5
c93sWaOCxCi+MC8EjN4xk/lffvsKrU1hNCx+PDvHEg9m6Ig4Rlcz9Pj3LhNK9Ix9
os7Xqh03Y7UKz2CLVfAHhYtcSx/vpZBspSrOSr2Klba0Uza2oCuLlgBdX7hJwiwt
7Ix2AcwHYRtv0l3ozp4peaqMI/i6HG6ZMfUAYF1gMonkqoEa4f0HMeq/42i76m5R
ZGVo5W3NSoZmKuj01SXUSrTjpf/zairritYl9Eoj093jmiushsd4xa95pJtTDMQr
QdeCVyioDwTqmXOG1vGEyFV4Ql2afjUUL7BZaOcs89JVjnx3yv6uT4Y7JI8XAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUqTaH5StcwrUZWj3J7by0ACWTXNcwHwYDVR0j
BBgwFoAU7DCQ8dqwmtK20pX2sPXA8h7cTUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWtKcm9ZUFpyakJZdXJrQjFMSzhESk5NQmtKMlJodDZUdG5SY1R4a3Rx
bmIvMC9FQzMwOTBGMURBQjA5QUQyQjZEMjk1RjZCMEY1QzBGMjFFREM0RDQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDMzA5MEYxREFCMDlBRDJC
NkQyOTVGNkIwRjVDMEYyMUVEQzRENDUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlrSnJvWVBacmpCWXVya0IxTEs4REpOTUJrSjJSaHQ2VHRuUmNUeGt0cW5iLzAv
MzIzODMwMzQzYTM3NjM2MzMwM2EzMjMwMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMTM1MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEfMAgATANBgkqhkiG9w0BAQsF
AAOCAQEAm4zPCXsHUyZMqISJhMF64nk8mW2lmPyHqE1gyYmQcEEzk5DHMrE2eTWp
kRIZYSOLu/pSkGCIz7QXC8oTOshJjhT3grsHY3l0dbWveGUL/C/k7PEneDHCCeaJ
81htUfJyYg+jPq7s+HQyfSXGikdczqgS++GgYLvXDw4/bLtNxerkqj3WxAfjN1rQ
i3iVT7tk5GV+4jkbEIrQ2C/bu6HiGU9YbmtbCDU7YasOnfRZzK6XDugczH9JiA1f
Gfot03iE8z8AJLKmJFeD6DnZ0/n0cabFB553nxM6I+uecuo0Ff8vkIihvbYlhRUq
3kqkQ/pywv19kEfbnCkhELuvD63Bpw==
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:01:22 2026 by rpki-client