Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a6330303a3a2f33382d3338203d3e20323632383038.roa
File:                     323830343a313336383a6330303a3a2f33382d3338203d3e20323632383038.roa (raw, json)
Hash identifier:          j5o+tE1QYciQdYuCNq0l4jjAbwkM+Z6PeW91pS2QLC4=
Subject key identifier:   E3:A7:16:56:21:CA:57:72:68:A4:59:81:4F:68:BB:9F:4F:15:34:CA
Certificate issuer:       /CN=38A763EAA2F5787E010A7BEF5E69D86D7DF1D702
Certificate serial:       72AFE7DCD3BA99A68EDC675E3B47BB559766592F
Authority key identifier: 38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a6330303a3a2f33382d3338203d3e20323632383038.roa
Signing time:             Wed 24 Jun 2026 19:15:25 +0000
ROA not before:           Wed 24 Jun 2026 19:10:25 +0000
ROA not after:            Wed 23 Jun 2027 19:15:25 +0000
asID:                     262808
IP address blocks:        2804:1368:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.crl
                          rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Jul 2026 00:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:af:e7:dc:d3:ba:99:a6:8e:dc:67:5e:3b:47:bb:55:97:66:59:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A763EAA2F5787E010A7BEF5E69D86D7DF1D702
        Validity
            Not Before: Jun 24 19:10:25 2026 GMT
            Not After : Jun 23 19:15:25 2027 GMT
        Subject: CN=E3A7165621CA577268A459814F68BB9F4F1534CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:7f:fe:5d:9a:7a:46:da:f5:8e:3a:6f:a3:
                    00:52:b9:e9:d0:57:02:66:2c:f5:67:72:a5:c8:e4:
                    33:c1:81:d0:3c:20:68:e0:a2:56:e7:08:42:eb:19:
                    a3:df:91:09:c4:2f:0a:02:36:00:73:8c:b2:6a:88:
                    58:58:56:f3:35:59:d1:a0:bc:fc:71:ce:0b:f8:ca:
                    f2:26:88:d6:0e:b8:41:96:bb:58:89:cc:64:e1:45:
                    90:1f:a3:4e:99:17:8d:29:1b:02:a5:b9:09:c7:96:
                    e3:88:1e:5c:b8:e4:1b:b3:dc:e4:f5:c9:6e:e4:d0:
                    02:4a:16:11:bd:91:b7:1a:58:20:9d:20:b1:b4:da:
                    b5:b3:9f:0d:a6:4f:4a:d2:b9:eb:8d:0d:70:bd:7e:
                    5d:27:78:df:ee:c9:ed:31:ad:66:28:94:3f:f9:f1:
                    cd:16:70:a8:b1:53:5b:77:f9:d3:64:f6:3d:64:1f:
                    91:31:9e:b7:a7:50:da:c2:8a:6b:dc:71:87:5c:c6:
                    75:e6:81:ff:aa:c9:8d:a8:c3:a7:ff:ab:a2:fb:82:
                    d2:94:67:fb:89:c3:a6:c7:25:fc:5d:9b:6f:ae:94:
                    45:46:65:a2:7e:19:f5:30:b7:a5:fa:f6:c8:81:98:
                    3a:d7:42:be:76:51:2a:f3:59:a6:b3:27:af:4a:07:
                    6a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A7:16:56:21:CA:57:72:68:A4:59:81:4F:68:BB:9F:4F:15:34:CA
            X509v3 Authority Key Identifier:
                keyid:38:A7:63:EA:A2:F5:78:7E:01:0A:7B:EF:5E:69:D8:6D:7D:F1:D7:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38A763EAA2F5787E010A7BEF5E69D86D7DF1D702.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a6330303a3a2f33382d3338203d3e20323632383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1368:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         95:71:ab:5b:ee:e9:c4:78:85:51:b5:7d:7b:52:52:ae:8f:29:
         36:15:15:2d:7e:61:40:3a:fb:69:f6:b8:7a:e3:d1:90:1b:63:
         00:1c:f1:e9:e8:14:68:c4:78:2f:86:54:41:84:3e:85:c9:25:
         5b:c8:bd:54:03:0d:29:00:54:f2:e8:20:f8:ed:a3:0c:b7:36:
         89:4f:ab:41:80:a0:0e:61:c2:db:4b:21:32:0c:d8:73:3b:37:
         c9:fe:a5:2d:2a:09:48:28:47:f5:28:cc:e4:1c:0a:8e:a4:ed:
         90:a8:7a:96:be:28:c2:82:f7:10:c9:71:13:8d:47:bc:2f:f8:
         85:a0:06:d8:c8:58:1e:49:6d:b3:44:ea:e3:30:ce:36:07:06:
         fe:1f:ab:e1:f7:8d:52:25:3e:cd:1f:17:21:dc:7a:57:58:73:
         18:65:d6:dc:50:52:36:a6:7b:04:c7:bc:cf:b0:5e:e3:32:e9:
         62:8f:a8:d3:f3:6f:7c:91:43:6f:28:00:20:b6:37:6f:b8:79:
         1a:3d:1f:81:32:4a:35:9f:b7:da:27:47:b9:44:5c:a6:d0:06:
         54:1b:b9:c5:54:4a:72:c3:03:c8:33:ef:56:cf:61:aa:3c:1d:
         dd:ed:b6:ee:15:6c:22:6a:ba:8f:cd:09:e5:2c:d2:40:19:4b:
         1a:04:ed:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUcq/n3NO6maaO3GdeO0e7VZdmWS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhBNzYzRUFBMkY1Nzg3RTAxMEE3QkVGNUU2OUQ4NkQ3
REYxRDcwMjAeFw0yNjA2MjQxOTEwMjVaFw0yNzA2MjMxOTE1MjVaMDMxMTAvBgNV
BAMTKEUzQTcxNjU2MjFDQTU3NzI2OEE0NTk4MTRGNjhCQjlGNEYxNTM0Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1W3/+XZp6Rtr1jjpvowBSuenQ
VwJmLPVncqXI5DPBgdA8IGjgolbnCELrGaPfkQnELwoCNgBzjLJqiFhYVvM1WdGg
vPxxzgv4yvImiNYOuEGWu1iJzGThRZAfo06ZF40pGwKluQnHluOIHly45Buz3OT1
yW7k0AJKFhG9kbcaWCCdILG02rWznw2mT0rSueuNDXC9fl0neN/uye0xrWYolD/5
8c0WcKixU1t3+dNk9j1kH5ExnrenUNrCimvccYdcxnXmgf+qyY2ow6f/q6L7gtKU
Z/uJw6bHJfxdm2+ulEVGZaJ+GfUwt6X69siBmDrXQr52USrzWaazJ69KB2p1AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU46cWViHKV3JopFmBT2i7n08VNMowHwYDVR0j
BBgwFoAUOKdj6qL1eH4BCnvvXmnYbX3x1wIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTNUNGl4WVE0N3NXRXpKWGlqRUFaYVZVdjdHQ0MxcWE4Yjl6R1R4NkhW
TWgvMC8zOEE3NjNFQUEyRjU3ODdFMDEwQTdCRUY1RTY5RDg2RDdERjFENzAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4QTc2M0VBQTJGNTc4N0Uw
MTBBN0JFRjVFNjlEODZEN0RGMUQ3MDIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0EzVDRpeFlRNDdzV0V6SlhpakVBWmFWVXY3R0NDMXFhOGI5ekdUeDZIVk1oLzAv
MzIzODMwMzQzYTMxMzMzNjM4M2E2MzMwMzAzYTNhMmYzMzM4MmQzMzM4MjAzZDNl
MjAzMjM2MzIzODMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgIoBBNoDDANBgkqhkiG9w0BAQsFAAOC
AQEAlXGrW+7pxHiFUbV9e1JSro8pNhUVLX5hQDr7afa4euPRkBtjABzx6egUaMR4
L4ZUQYQ+hcklW8i9VAMNKQBU8ugg+O2jDLc2iU+rQYCgDmHC20shMgzYczs3yf6l
LSoJSChH9SjM5BwKjqTtkKh6lr4owoL3EMlxE41HvC/4haAG2MhYHklts0Tq4zDO
NgcG/h+r4feNUiU+zR8XIdx6V1hzGGXW3FBSNqZ7BMe8z7Be4zLpYo+o0/NvfJFD
bygAILY3b7h5Gj0fgTJKNZ+32idHuURcptAGVBu5xVRKcsMDyDPvVs9hqjwd3e22
7hVsImq6j80J5SzSQBlLGgTtvg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 04:07:27 2026 by rpki-client