Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3566343a3a2f33322d313238203d3e203238363439.roa
File:                     323830343a3566343a3a2f33322d313238203d3e203238363439.roa (raw, json)
Hash identifier:          gK6Alyi6MhUvv3DhD/IuVzQvIP/VpiVC2TOqRhDpB2k=
Subject key identifier:   5C:86:C7:A5:A8:F3:79:F7:2C:B9:F0:3B:77:C7:99:90:25:84:9F:F4
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       0C48775C4DD8BE4B30D468220A399CC81B0C518F
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3566343a3a2f33322d313238203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:10 +0000
ROA not before:           Fri 17 Jul 2026 20:56:10 +0000
ROA not after:            Fri 16 Jul 2027 21:01:10 +0000
asID:                     28649
IP address blocks:        2804:5f4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:48:77:5c:4d:d8:be:4b:30:d4:68:22:0a:39:9c:c8:1b:0c:51:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:10 2026 GMT
            Not After : Jul 16 21:01:10 2027 GMT
        Subject: CN=5C86C7A5A8F379F72CB9F03B77C7999025849FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:8f:b5:87:01:f4:68:0a:36:b1:65:b1:32:
                    54:62:42:79:88:8a:ae:13:2c:85:74:a2:1f:6c:ee:
                    20:9f:87:5a:b9:f2:d5:86:c2:1c:a9:e4:68:d5:b0:
                    13:df:a3:70:55:89:de:95:6f:66:a5:17:a3:c4:ad:
                    21:3a:26:b1:f6:bb:ac:80:7a:c0:f0:9f:b7:c2:65:
                    7e:99:01:ad:93:24:4d:94:a6:c9:f6:cc:65:6d:9a:
                    45:d2:d1:d4:f6:ef:34:03:a4:f5:21:bc:8f:5d:d0:
                    b0:06:cb:3c:52:07:88:9a:e3:49:e5:de:9e:9d:3e:
                    17:c1:81:4f:8e:46:24:5b:67:5f:4b:5f:57:d0:b8:
                    f5:50:a8:64:87:87:1d:de:35:ae:67:bb:ce:73:fe:
                    f9:a1:c4:20:b9:2a:6a:89:18:db:f4:c1:8e:34:1c:
                    67:aa:64:cc:58:58:32:07:e3:3a:91:78:24:42:b6:
                    e1:e4:10:57:ac:80:76:63:d6:a1:66:6b:77:f7:36:
                    f4:32:23:a7:42:e8:e0:08:d9:c8:cb:2b:d8:0e:b7:
                    80:45:c6:b0:3b:c5:07:7b:59:c0:e2:af:3e:b4:5d:
                    d4:cc:14:0b:02:5d:5b:65:7e:33:3d:52:3e:d8:91:
                    2c:fb:36:7c:b8:04:b4:60:f3:7b:d0:2f:21:ff:c6:
                    18:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:86:C7:A5:A8:F3:79:F7:2C:B9:F0:3B:77:C7:99:90:25:84:9F:F4
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3566343a3a2f33322d313238203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:fa:96:b1:59:55:01:ff:fc:aa:79:6f:d7:6d:37:2e:5c:14:
         d7:c3:bf:62:ec:25:e2:66:c0:f6:50:de:48:02:34:e2:72:24:
         69:db:14:89:bb:49:f2:ae:2f:78:4f:61:eb:2a:e9:07:e0:7b:
         99:72:94:58:d4:27:8b:76:26:40:58:f5:9a:d2:bb:ae:e4:83:
         4e:91:4a:04:d9:d7:5b:b6:39:d5:33:86:30:9f:68:4d:15:bb:
         06:b7:c8:55:2d:ee:e0:3c:60:5e:fa:66:d2:05:7d:b4:df:80:
         39:e5:89:c0:70:82:cf:93:c9:aa:5c:25:eb:00:25:a3:2e:b5:
         92:49:80:ef:af:be:4c:7e:5f:ae:25:e5:b2:7f:af:3e:8f:e0:
         ff:76:56:dc:ae:b2:2d:6b:af:5a:44:cc:85:77:d9:cd:70:50:
         4d:43:e4:da:3d:44:05:39:ee:c0:15:58:0e:e1:94:01:99:17:
         3c:4e:36:23:73:ee:b4:3b:ce:c3:22:55:9b:21:d8:35:7e:65:
         54:f0:fd:db:e0:f0:46:df:87:13:ec:75:65:38:17:68:4d:9f:
         80:87:f7:c5:9b:3b:9d:f3:45:e7:c1:74:50:a1:56:43:7d:dc:
         f9:42:7f:92:91:b4:4d:24:23:98:7b:22:fb:8d:8f:1a:bb:fc:
         3c:83:67:81
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUDEh3XE3Yvksw1GgiCjmcyBsMUY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG
RjBDNTY1MjAeFw0yNjA3MTcyMDU2MTBaFw0yNzA3MTYyMTAxMTBaMDMxMTAvBgNV
BAMTKDVDODZDN0E1QThGMzc5RjcyQ0I5RjAzQjc3Qzc5OTkwMjU4NDlGRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/R4+1hwH0aAo2sWWxMlRiQnmI
iq4TLIV0oh9s7iCfh1q58tWGwhyp5GjVsBPfo3BVid6Vb2alF6PErSE6JrH2u6yA
esDwn7fCZX6ZAa2TJE2Upsn2zGVtmkXS0dT27zQDpPUhvI9d0LAGyzxSB4ia40nl
3p6dPhfBgU+ORiRbZ19LX1fQuPVQqGSHhx3eNa5nu85z/vmhxCC5KmqJGNv0wY40
HGeqZMxYWDIH4zqReCRCtuHkEFesgHZj1qFma3f3NvQyI6dC6OAI2cjLK9gOt4BF
xrA7xQd7WcDirz60XdTMFAsCXVtlfjM9Uj7YkSz7Nny4BLRg83vQLyH/xhgPAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUXIbHpajzefcsufA7d8eZkCWEn/QwHwYDVR0j
BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB
Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzIzODMwMzQzYTM1NjYzNDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzODM2
MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBfQwDQYJKoZIhvcNAQELBQADggEBAIP6lrFZVQH/
/Kp5b9dtNy5cFNfDv2LsJeJmwPZQ3kgCNOJyJGnbFIm7SfKuL3hPYesq6Qfge5ly
lFjUJ4t2JkBY9ZrSu67kg06RSgTZ11u2OdUzhjCfaE0Vuwa3yFUt7uA8YF76ZtIF
fbTfgDnlicBwgs+TyapcJesAJaMutZJJgO+vvkx+X64l5bJ/rz6P4P92Vtyusi1r
r1pEzIV32c1wUE1D5No9RAU57sAVWA7hlAGZFzxONiNz7rQ7zsMiVZsh2DV+ZVTw
/dvg8EbfhxPsdWU4F2hNn4CH98WbO53zRefBdFChVkN93PlCf5KRtE0kI5h7IvuN
jxq7/DyDZ4E=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:11:17 2026 by rpki-client