Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYNfcbc5AhsccNkQhPwxx436xBaZ29t5L44re75SsmY3/0/323830343a373664303a323030303a3a2f34382d3438203d3e20323731313336.roa
File:                     323830343a373664303a323030303a3a2f34382d3438203d3e20323731313336.roa (raw, json)
Hash identifier:          E3/TkzphXCoyH6N4S0rAkJypbgOj7qzoRncakR1zNbU=
Subject key identifier:   67:1C:7B:1C:31:7D:6D:37:A9:7A:36:24:D8:C3:2E:9B:A0:1A:B6:7E
Certificate issuer:       /CN=C3B0DC7E3B76BACFAA1454394A79C0FFB6404E56
Certificate serial:       4A3ADF09E34F9D205D580215ADB29CFEEC8A869A
Authority key identifier: C3:B0:DC:7E:3B:76:BA:CF:AA:14:54:39:4A:79:C0:FF:B6:40:4E:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B0DC7E3B76BACFAA1454394A79C0FFB6404E56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYNfcbc5AhsccNkQhPwxx436xBaZ29t5L44re75SsmY3/0/323830343a373664303a323030303a3a2f34382d3438203d3e20323731313336.roa
Signing time:             Sun 12 Jul 2026 16:47:03 +0000
ROA not before:           Sun 12 Jul 2026 16:42:03 +0000
ROA not after:            Sun 11 Jul 2027 16:47:03 +0000
asID:                     271136
IP address blocks:        2804:76d0:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYNfcbc5AhsccNkQhPwxx436xBaZ29t5L44re75SsmY3/0/C3B0DC7E3B76BACFAA1454394A79C0FFB6404E56.crl
                          rsync://rpki-repo.registro.br/repo/AYNfcbc5AhsccNkQhPwxx436xBaZ29t5L44re75SsmY3/0/C3B0DC7E3B76BACFAA1454394A79C0FFB6404E56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B0DC7E3B76BACFAA1454394A79C0FFB6404E56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3a:df:09:e3:4f:9d:20:5d:58:02:15:ad:b2:9c:fe:ec:8a:86:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3B0DC7E3B76BACFAA1454394A79C0FFB6404E56
        Validity
            Not Before: Jul 12 16:42:03 2026 GMT
            Not After : Jul 11 16:47:03 2027 GMT
        Subject: CN=671C7B1C317D6D37A97A3624D8C32E9BA01AB67E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f8:f9:8c:8d:98:a7:41:2c:ff:3b:81:9c:59:
                    b0:57:11:33:50:a2:1e:58:e8:b3:17:6c:fb:40:b3:
                    1c:c4:fc:78:7d:f0:7a:b1:c9:c1:88:e0:5b:13:72:
                    ce:09:72:a9:e3:93:04:54:93:f2:69:52:52:62:2c:
                    b9:92:e0:18:6c:06:5b:68:5e:a9:b4:ef:14:73:f5:
                    d6:39:d4:b4:e1:33:9d:b8:75:7b:b1:71:1c:67:49:
                    09:68:47:34:b4:e3:35:d9:36:8c:8a:e9:a7:f7:3b:
                    0f:d4:38:89:e9:14:b0:f7:e7:15:b6:41:a9:f6:1f:
                    29:c8:4d:d4:46:ef:00:ff:9e:1c:5d:28:fa:9d:85:
                    4b:6b:d1:74:bc:5e:71:ef:fe:50:f0:65:6c:f0:62:
                    9a:8c:a9:29:57:82:d7:05:8c:98:db:ac:c8:81:44:
                    36:7b:26:5d:23:8b:41:94:66:51:f2:7d:24:25:b7:
                    95:ca:40:73:13:e8:f1:bb:4d:73:7d:4d:e2:6d:bd:
                    59:bb:55:71:8b:39:78:d6:d8:1d:87:60:53:44:34:
                    b1:b1:be:9a:0a:64:69:f8:d5:e3:81:02:da:37:67:
                    44:3d:17:29:07:28:8f:e7:ec:7f:66:c3:8a:9c:91:
                    9d:9f:08:f8:05:ad:c2:f3:82:4d:6d:bd:0e:73:95:
                    c7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1C:7B:1C:31:7D:6D:37:A9:7A:36:24:D8:C3:2E:9B:A0:1A:B6:7E
            X509v3 Authority Key Identifier:
                keyid:C3:B0:DC:7E:3B:76:BA:CF:AA:14:54:39:4A:79:C0:FF:B6:40:4E:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYNfcbc5AhsccNkQhPwxx436xBaZ29t5L44re75SsmY3/0/C3B0DC7E3B76BACFAA1454394A79C0FFB6404E56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B0DC7E3B76BACFAA1454394A79C0FFB6404E56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYNfcbc5AhsccNkQhPwxx436xBaZ29t5L44re75SsmY3/0/323830343a373664303a323030303a3a2f34382d3438203d3e20323731313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76d0:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:5f:94:15:38:6b:d8:cd:77:d2:64:63:d2:6f:49:a6:7e:b5:
         c4:fe:47:63:69:af:e9:1b:d6:2b:73:47:9c:cc:3e:ba:fc:4f:
         7f:9c:ea:76:47:ba:3b:5a:15:0e:f3:bd:f1:01:ee:55:7c:5f:
         61:79:e6:a0:47:b6:fa:55:36:0c:f5:82:d3:92:88:4d:6a:25:
         2b:d9:96:37:a6:aa:5a:1d:c0:e4:da:0e:95:5c:b1:a8:e6:06:
         b7:35:02:3e:fc:d2:28:d7:3f:ef:1e:96:ad:cc:06:03:10:c2:
         0d:cb:f0:54:99:2c:b5:95:63:f4:13:38:1a:13:5d:96:35:a9:
         92:f9:cf:0d:0a:0f:1e:86:de:4e:24:bb:54:aa:d0:0d:b8:0c:
         94:44:08:a3:db:34:df:01:01:ee:17:1e:32:8a:69:ec:5b:9e:
         72:f7:84:5c:cc:44:1b:33:76:90:1a:b9:85:4e:da:bd:8a:35:
         37:36:59:18:ed:11:7d:35:39:02:05:00:73:88:bb:1c:65:41:
         09:44:ec:3f:89:f7:08:7e:b7:d0:82:78:3f:bb:97:cd:88:ec:
         33:54:7b:bb:e9:d2:58:bd:ac:8d:e1:56:49:63:be:7e:eb:ff:
         9b:38:a3:a6:ef:08:d6:6f:01:91:9b:68:c8:f4:61:d5:eb:d0:
         70:07:1e:fa
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUSjrfCeNPnSBdWAIVrbKc/uyKhpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNCMERDN0UzQjc2QkFDRkFBMTQ1NDM5NEE3OUMwRkZC
NjQwNEU1NjAeFw0yNjA3MTIxNjQyMDNaFw0yNzA3MTExNjQ3MDNaMDMxMTAvBgNV
BAMTKDY3MUM3QjFDMzE3RDZEMzdBOTdBMzYyNEQ4QzMyRTlCQTAxQUI2N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL+PmMjZinQSz/O4GcWbBXETNQ
oh5Y6LMXbPtAsxzE/Hh98HqxycGI4FsTcs4JcqnjkwRUk/JpUlJiLLmS4BhsBlto
Xqm07xRz9dY51LThM524dXuxcRxnSQloRzS04zXZNoyK6af3Ow/UOInpFLD35xW2
Qan2HynITdRG7wD/nhxdKPqdhUtr0XS8XnHv/lDwZWzwYpqMqSlXgtcFjJjbrMiB
RDZ7Jl0ji0GUZlHyfSQlt5XKQHMT6PG7TXN9TeJtvVm7VXGLOXjW2B2HYFNENLGx
vpoKZGn41eOBAto3Z0Q9FykHKI/n7H9mw4qckZ2fCPgFrcLzgk1tvQ5zlcdLAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUZxx7HDF9bTepejYk2MMum6Aatn4wHwYDVR0j
BBgwFoAUw7Dcfjt2us+qFFQ5SnnA/7ZATlYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlOZmNiYzVBaHNjY05rUWhQd3h4NDM2eEJhWjI5dDVMNDRyZTc1U3Nt
WTMvMC9DM0IwREM3RTNCNzZCQUNGQUExNDU0Mzk0QTc5QzBGRkI2NDA0RTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzQjBEQzdFM0I3NkJBQ0ZB
QTE0NTQzOTRBNzlDMEZGQjY0MDRFNTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZTmZjYmM1QWhzY2NOa1FoUHd4eDQzNnhCYVoyOXQ1TDQ0cmU3NVNzbVkzLzAv
MzIzODMwMzQzYTM3MzY2NDMwM2EzMjMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMTMxMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEdtAgADANBgkqhkiG9w0BAQsF
AAOCAQEAOV+UFThr2M130mRj0m9Jpn61xP5HY2mv6RvWK3NHnMw+uvxPf5zqdke6
O1oVDvO98QHuVXxfYXnmoEe2+lU2DPWC05KITWolK9mWN6aqWh3A5NoOlVyxqOYG
tzUCPvzSKNc/7x6WrcwGAxDCDcvwVJkstZVj9BM4GhNdljWpkvnPDQoPHobeTiS7
VKrQDbgMlEQIo9s03wEB7hceMopp7FuecveEXMxEGzN2kBq5hU7avYo1NzZZGO0R
fTU5AgUAc4i7HGVBCUTsP4n3CH630IJ4P7uXzYjsM1R7u+nSWL2sjeFWSWO+fuv/
mzijpu8I1m8BkZtoyPRh1evQcAce+g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:41 2026 by rpki-client