Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/323830343a343332383a383030303a3a2f33342d3334203d3e20323637353532.roa
File:                     323830343a343332383a383030303a3a2f33342d3334203d3e20323637353532.roa (raw, json)
Hash identifier:          uUrItSL/kYCcIrGAviycov+i0DtibwC3/CupBS7rIEU=
Subject key identifier:   8E:B0:2A:9E:BC:EF:42:00:B3:D1:AE:56:CD:7F:BE:B4:C7:C8:63:2F
Certificate issuer:       /CN=66F2AAD200D9E7BF577BA3DE5A46D415C8075697
Certificate serial:       509D0960EE274D2231F1D433AFA64414E9F3F13D
Authority key identifier: 66:F2:AA:D2:00:D9:E7:BF:57:7B:A3:DE:5A:46:D4:15:C8:07:56:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/323830343a343332383a383030303a3a2f33342d3334203d3e20323637353532.roa
Signing time:             Wed 15 Jul 2026 16:50:56 +0000
ROA not before:           Wed 15 Jul 2026 16:45:56 +0000
ROA not after:            Wed 14 Jul 2027 16:50:56 +0000
asID:                     267552
IP address blocks:        2804:4328:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.crl
                          rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9d:09:60:ee:27:4d:22:31:f1:d4:33:af:a6:44:14:e9:f3:f1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F2AAD200D9E7BF577BA3DE5A46D415C8075697
        Validity
            Not Before: Jul 15 16:45:56 2026 GMT
            Not After : Jul 14 16:50:56 2027 GMT
        Subject: CN=8EB02A9EBCEF4200B3D1AE56CD7FBEB4C7C8632F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:af:c3:37:d8:9b:50:bb:be:68:6d:15:3d:37:
                    6a:f7:18:be:be:e1:60:45:0b:9a:a1:13:78:75:1b:
                    99:ab:4b:14:26:66:15:e2:9a:44:fd:8d:dc:d4:80:
                    f2:f6:0a:7f:4e:05:73:36:81:fd:e8:8d:be:6b:58:
                    f5:5e:d3:c0:8e:88:fa:b2:35:f6:1e:7d:3b:02:61:
                    56:ce:3c:7a:aa:0b:71:9d:97:5d:e8:1e:51:a1:47:
                    65:71:67:27:f8:0d:8d:6b:cb:6e:6e:e4:1f:9e:9b:
                    e5:07:4e:e2:22:36:d0:e4:c3:1b:f2:c6:be:7f:d2:
                    fe:c4:19:de:64:62:d8:4c:4c:80:bb:c0:d7:e1:0c:
                    ac:3a:2f:44:00:ed:a2:93:ea:1e:05:79:34:ad:a5:
                    0f:ae:84:1f:97:af:c7:20:d0:81:9a:5f:95:fe:3e:
                    69:0a:f5:44:ca:bb:c7:20:d7:27:6a:5c:00:d7:95:
                    9f:07:c4:33:54:f8:5c:5a:86:36:5f:4c:a1:6e:5b:
                    8d:e2:c4:3b:c8:58:43:25:9c:be:4f:47:61:b0:bd:
                    78:f1:3b:a0:8e:32:6e:a0:6e:e2:69:fa:c6:b9:74:
                    60:c7:cb:49:e5:a2:4d:69:ab:87:12:c9:b4:c5:dd:
                    8e:42:44:27:7a:c8:7d:b7:b3:f0:cd:4c:76:0a:7a:
                    8b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B0:2A:9E:BC:EF:42:00:B3:D1:AE:56:CD:7F:BE:B4:C7:C8:63:2F
            X509v3 Authority Key Identifier:
                keyid:66:F2:AA:D2:00:D9:E7:BF:57:7B:A3:DE:5A:46:D4:15:C8:07:56:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F2AAD200D9E7BF577BA3DE5A46D415C8075697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/323830343a343332383a383030303a3a2f33342d3334203d3e20323637353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4328:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         45:82:81:e3:d1:6e:6c:77:83:da:2c:fe:2e:67:9b:e2:83:60:
         ac:33:aa:23:18:76:e2:b7:33:8a:8c:8e:11:a2:39:d2:87:45:
         b9:aa:db:1f:aa:4c:c9:6b:c7:35:40:49:e5:de:d5:78:b8:8d:
         65:12:fa:ea:4a:ee:9e:da:ba:53:78:35:50:e7:1e:92:80:6b:
         0a:4b:5b:76:ca:3b:85:d7:66:e9:5d:b6:a8:61:3d:3d:31:a1:
         90:e9:3f:62:26:38:4a:db:a9:2f:59:f8:7e:88:cb:b8:da:78:
         6e:26:68:5a:9c:52:66:37:d1:e1:9f:61:5f:94:eb:c1:d4:67:
         25:b5:60:38:29:46:fd:69:45:cb:4d:74:3b:02:94:4a:4a:68:
         2c:41:c6:6d:09:ce:1d:f4:15:0e:e6:c3:66:94:06:79:43:36:
         7d:1b:05:7b:1c:8f:cb:4c:97:54:8f:90:55:78:52:02:04:e4:
         3a:5b:b4:49:5a:3d:a6:2d:42:f2:aa:e7:d7:09:f0:8a:8b:74:
         64:fe:a4:ac:f1:17:1f:84:f1:7f:40:a2:ca:eb:f7:d0:9a:f3:
         30:84:f8:dc:20:71:2d:fe:1a:d0:c3:a3:99:74:f6:03:5a:65:
         f6:ba:50:ac:ca:57:1e:c0:4c:a3:3c:92:eb:27:c2:70:f4:f4:
         10:63:f5:2a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUJ0JYO4nTSIx8dQzr6ZEFOnz8T0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZGMkFBRDIwMEQ5RTdCRjU3N0JBM0RFNUE0NkQ0MTVD
ODA3NTY5NzAeFw0yNjA3MTUxNjQ1NTZaFw0yNzA3MTQxNjUwNTZaMDMxMTAvBgNV
BAMTKDhFQjAyQTlFQkNFRjQyMDBCM0QxQUU1NkNEN0ZCRUI0QzdDODYzMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgr8M32JtQu75obRU9N2r3GL6+
4WBFC5qhE3h1G5mrSxQmZhXimkT9jdzUgPL2Cn9OBXM2gf3ojb5rWPVe08COiPqy
NfYefTsCYVbOPHqqC3Gdl13oHlGhR2VxZyf4DY1ry25u5B+em+UHTuIiNtDkwxvy
xr5/0v7EGd5kYthMTIC7wNfhDKw6L0QA7aKT6h4FeTStpQ+uhB+Xr8cg0IGaX5X+
PmkK9UTKu8cg1ydqXADXlZ8HxDNU+FxahjZfTKFuW43ixDvIWEMlnL5PR2GwvXjx
O6COMm6gbuJp+sa5dGDHy0nlok1pq4cSybTF3Y5CRCd6yH23s/DNTHYKeotdAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUjrAqnrzvQgCz0a5WzX++tMfIYy8wHwYDVR0j
BBgwFoAUZvKq0gDZ579Xe6PeWkbUFcgHVpcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmNzUnRTOGtzOTRVMnNnMWV3QnBxQVJ2Y21zRDhDZUhRcnozQ3FlRW5a
aHAvMC82NkYyQUFEMjAwRDlFN0JGNTc3QkEzREU1QTQ2RDQxNUM4MDc1Njk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RjJBQUQyMDBEOUU3QkY1
NzdCQTNERTVBNDZENDE1QzgwNzU2OTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jjc1J0Uzhrczk0VTJzZzFld0JwcUFSdmNtc0Q4Q2VIUXJ6M0NxZUVuWmhwLzAv
MzIzODMwMzQzYTM0MzMzMjM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQyiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBFgoHj0W5sd4PaLP4uZ5vig2CsM6ojGHbitzOKjI4RojnSh0W5qtsfqkzJ
a8c1QEnl3tV4uI1lEvrqSu6e2rpTeDVQ5x6SgGsKS1t2yjuF12bpXbaoYT09MaGQ
6T9iJjhK26kvWfh+iMu42nhuJmhanFJmN9Hhn2FflOvB1GcltWA4KUb9aUXLTXQ7
ApRKSmgsQcZtCc4d9BUO5sNmlAZ5QzZ9GwV7HI/LTJdUj5BVeFICBOQ6W7RJWj2m
LULyqufXCfCKi3Rk/qSs8RcfhPF/QKLK6/fQmvMwhPjcIHEt/hrQw6OZdPYDWmX2
ulCsylcewEyjPJLrJ8Jw9PQQY/Uq
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:47:33 2026 by rpki-client