Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/323830343a313364383a3a2f33322d3438203d3e20323632363639.roa
File:                     323830343a313364383a3a2f33322d3438203d3e20323632363639.roa (raw, json)
Hash identifier:          ec6pBDBB260b4cGM+6aoen3dKB6Zii2PYgstRroeBiU=
Subject key identifier:   14:4F:8F:57:1A:30:45:38:0A:43:14:60:64:E2:71:5E:A1:A5:0D:24
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       77B051B601B485B9BC97EFC0273096C8FECD94E2
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/323830343a313364383a3a2f33322d3438203d3e20323632363639.roa
Signing time:             Sat 04 Jul 2026 13:43:54 +0000
ROA not before:           Sat 04 Jul 2026 13:38:54 +0000
ROA not after:            Sat 03 Jul 2027 13:43:54 +0000
asID:                     262669
IP address blocks:        2804:13d8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 22:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b0:51:b6:01:b4:85:b9:bc:97:ef:c0:27:30:96:c8:fe:cd:94:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Jul  4 13:38:54 2026 GMT
            Not After : Jul  3 13:43:54 2027 GMT
        Subject: CN=144F8F571A3045380A43146064E2715EA1A50D24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9d:fb:4e:c9:76:b7:3d:bf:9b:d1:76:72:9e:
                    9f:83:09:35:ac:93:28:a3:da:c1:78:79:2b:61:03:
                    fd:e1:c5:23:1f:d0:a3:93:92:e7:8f:72:5b:e8:a4:
                    bc:26:8b:f8:9b:40:24:cc:ec:90:9e:09:41:f6:7c:
                    1d:ad:65:07:ea:4b:45:98:77:dc:31:a8:8a:0a:78:
                    7e:7f:0a:42:fa:f9:a5:5f:01:6e:8a:f4:d4:8f:e7:
                    9b:f6:cf:61:89:52:15:b2:21:57:1e:29:3a:69:a1:
                    bf:43:10:92:43:f7:8d:40:07:9f:4f:c1:dc:67:40:
                    bb:4c:cb:bf:6a:38:7b:c6:69:9f:43:09:07:b6:3f:
                    b3:9a:b3:10:9e:fd:d2:46:a7:5b:6f:88:4d:65:11:
                    af:e1:a2:13:6b:c8:55:74:6e:5d:4d:28:ae:2b:23:
                    2e:05:03:85:fe:e7:44:bb:14:69:82:7a:4f:16:5f:
                    8a:d9:2f:91:b9:b0:3d:50:57:00:e8:09:89:07:f8:
                    b2:66:b6:5c:1c:cc:6c:01:ca:d2:2d:c0:99:e9:42:
                    ca:a3:24:a8:f0:c7:01:20:6a:ed:3a:29:d4:cf:d1:
                    f6:bf:fe:b7:a8:a7:7d:15:86:2d:a8:93:83:97:78:
                    50:63:a2:e0:a3:1e:51:78:f4:f5:b1:b1:42:ec:bd:
                    76:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4F:8F:57:1A:30:45:38:0A:43:14:60:64:E2:71:5E:A1:A5:0D:24
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/323830343a313364383a3a2f33322d3438203d3e20323632363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:72:7e:28:de:43:79:08:f1:67:53:47:9f:5a:f6:b2:40:71:
         c5:21:74:66:d0:12:bd:2b:3f:94:f5:84:99:7a:1a:b3:75:20:
         78:c7:04:3b:0b:df:68:6c:ca:bd:dd:f8:4c:fb:e7:68:4f:1c:
         5c:99:0b:7a:10:58:a2:3f:df:ce:dd:19:19:64:f9:80:59:d2:
         5a:12:d4:fd:b2:33:fe:26:4b:a7:2d:69:0c:97:9e:3d:4e:55:
         7e:6d:17:e4:e3:40:24:31:ee:50:7a:64:60:e8:d6:fa:ba:59:
         17:3c:18:c0:c1:aa:ef:e5:0d:40:c9:c0:81:6a:86:ef:14:e3:
         c8:45:a1:cc:7b:dd:38:0b:b6:ae:55:21:67:88:b9:33:d4:f1:
         30:26:4e:0b:1b:3c:59:77:6a:64:8e:cb:c6:ce:02:27:0b:04:
         b3:c0:e5:5c:d9:05:3b:e5:3a:0a:19:d2:de:39:d5:00:9a:10:
         ec:51:32:21:ad:13:85:f9:6f:6c:e4:9a:6d:b6:d3:55:cd:0f:
         61:cf:90:a8:55:70:92:85:10:02:3b:e9:d6:d5:38:26:14:89:
         98:58:23:68:21:5e:87:db:f8:32:a3:32:c1:d0:56:fe:82:2b:
         a3:35:1c:d5:1f:65:bf:2d:85:bc:fc:0c:6a:80:12:5c:a3:3e:
         ba:41:4f:ef
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUd7BRtgG0hbm8l+/AJzCWyP7NlOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMxRkU5Mzg3NjQwQTc3N0I3M0Q5NDIxMUQ0QzhGRkE1
QzY2OTMwNDAeFw0yNjA3MDQxMzM4NTRaFw0yNzA3MDMxMzQzNTRaMDMxMTAvBgNV
BAMTKDE0NEY4RjU3MUEzMDQ1MzgwQTQzMTQ2MDY0RTI3MTVFQTFBNTBEMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtnftOyXa3Pb+b0XZynp+DCTWs
kyij2sF4eSthA/3hxSMf0KOTkuePclvopLwmi/ibQCTM7JCeCUH2fB2tZQfqS0WY
d9wxqIoKeH5/CkL6+aVfAW6K9NSP55v2z2GJUhWyIVceKTppob9DEJJD941AB59P
wdxnQLtMy79qOHvGaZ9DCQe2P7OasxCe/dJGp1tviE1lEa/hohNryFV0bl1NKK4r
Iy4FA4X+50S7FGmCek8WX4rZL5G5sD1QVwDoCYkH+LJmtlwczGwBytItwJnpQsqj
JKjwxwEgau06KdTP0fa//reop30Vhi2ok4OXeFBjouCjHlF49PWxsULsvXZbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUFE+PVxowRTgKQxRgZOJxXqGlDSQwHwYDVR0j
BBgwFoAUrB/pOHZAp3e3PZQhHUyP+lxmkwQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMC9BQzFGRTkzODc2NDBBNzc3QjczRDk0MjExRDRDOEZGQTVDNjY5MzA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMUZFOTM4NzY0MEE3NzdC
NzNEOTQyMTFENEM4RkZBNUM2NjkzMDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzAv
MzIzODMwMzQzYTMxMzM2NDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMy
MzYzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQT2DANBgkqhkiG9w0BAQsFAAOCAQEApnJ+KN5D
eQjxZ1NHn1r2skBxxSF0ZtASvSs/lPWEmXoas3UgeMcEOwvfaGzKvd34TPvnaE8c
XJkLehBYoj/fzt0ZGWT5gFnSWhLU/bIz/iZLpy1pDJeePU5Vfm0X5ONAJDHuUHpk
YOjW+rpZFzwYwMGq7+UNQMnAgWqG7xTjyEWhzHvdOAu2rlUhZ4i5M9TxMCZOCxs8
WXdqZI7Lxs4CJwsEs8DlXNkFO+U6ChnS3jnVAJoQ7FEyIa0ThflvbOSabbbTVc0P
Yc+QqFVwkoUQAjvp1tU4JhSJmFgjaCFeh9v4MqMywdBW/oIrozUc1R9lvy2FvPwM
aoASXKM+ukFP7w==
-----END CERTIFICATE-----
Generated at Sat Jul 25 03:25:54 2026 by rpki-client