Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/323830343a316165633a3a2f33322d3438203d3e203631363938.roa
File:                     323830343a316165633a3a2f33322d3438203d3e203631363938.roa (raw, json)
Hash identifier:          Zl/SWTd+bE1o8xBgsbLYEVMI0YrdwQeK1shPKK0Otxk=
Subject key identifier:   C2:8F:10:D9:C9:E8:6C:08:29:93:F7:E5:91:8D:C9:0D:F1:59:31:F0
Certificate issuer:       /CN=CA9298E26EC7D83F990DD29EFD395097A928590F
Certificate serial:       22DF3049BB199A4EFE603DA8874448B92E0196FE
Authority key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/323830343a316165633a3a2f33322d3438203d3e203631363938.roa
Signing time:             Tue 21 Jul 2026 19:52:17 +0000
ROA not before:           Tue 21 Jul 2026 19:47:17 +0000
ROA not after:            Tue 20 Jul 2027 19:52:17 +0000
asID:                     61698
IP address blocks:        2804:1aec::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl
                          rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:df:30:49:bb:19:9a:4e:fe:60:3d:a8:87:44:48:b9:2e:01:96:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9298E26EC7D83F990DD29EFD395097A928590F
        Validity
            Not Before: Jul 21 19:47:17 2026 GMT
            Not After : Jul 20 19:52:17 2027 GMT
        Subject: CN=C28F10D9C9E86C082993F7E5918DC90DF15931F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:6c:9f:35:f2:c0:59:0c:4a:cf:a1:d2:15:
                    fb:8f:f2:3a:fe:2f:a3:b1:20:28:9f:8a:d4:cc:ac:
                    58:c0:96:7d:c5:11:3f:7e:79:07:1f:de:b1:c1:a2:
                    d0:c7:e6:4b:10:df:e3:dd:1f:40:64:43:ea:c9:39:
                    31:c3:96:de:aa:79:ac:3b:41:89:e4:02:b4:7d:2a:
                    a0:5a:0b:32:c0:0c:e4:1a:aa:a1:84:26:33:44:86:
                    55:5f:b8:5e:d7:0b:6f:03:2f:0f:b4:fe:65:ad:dd:
                    73:cd:ab:50:55:dc:4d:c2:ec:6e:30:56:3a:9b:97:
                    a1:3e:f3:aa:48:f5:ad:ec:b3:bf:06:00:79:ea:30:
                    81:79:91:25:2b:d0:b6:a8:1b:08:3a:18:c5:04:81:
                    04:2f:9a:7a:88:d3:55:cb:d7:cd:9c:f7:d5:1d:0b:
                    56:b4:55:96:e2:6c:16:2d:b3:d4:31:10:70:b3:9a:
                    81:41:c2:e8:01:88:a7:0f:ae:0f:1d:42:2b:df:50:
                    db:3f:8e:c5:40:1d:47:5b:08:52:5a:77:cb:5a:18:
                    33:ab:a8:03:b2:a8:7e:3e:cc:5e:56:3e:e8:59:73:
                    4b:47:82:be:9b:ca:cd:37:08:48:e5:31:63:7f:71:
                    9e:28:36:12:91:f8:b5:c4:0d:27:9a:3d:90:23:59:
                    82:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8F:10:D9:C9:E8:6C:08:29:93:F7:E5:91:8D:C9:0D:F1:59:31:F0
            X509v3 Authority Key Identifier:
                keyid:CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/323830343a316165633a3a2f33322d3438203d3e203631363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1aec::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:a1:de:29:4c:2a:9b:45:b2:a9:3b:b6:20:f0:57:3e:e1:cc:
         5f:97:5c:ce:7f:40:28:25:93:6e:66:d3:0c:c4:57:7c:c3:93:
         97:5e:fe:a7:bc:3d:8b:4d:79:5e:e4:03:48:bf:88:bf:db:76:
         09:b7:dd:b8:b3:1a:d8:96:5b:98:33:3f:7f:ed:e5:98:36:de:
         53:c8:8c:d4:e7:ec:36:93:83:a0:82:80:69:63:86:2b:0f:0d:
         6c:95:7c:86:73:a0:41:08:a9:1b:e8:fd:b9:0d:a2:2b:e0:1c:
         6b:e8:42:c6:3b:f4:97:2a:7b:33:60:e4:37:f1:73:ea:c6:a5:
         7c:01:96:18:c5:6c:e9:49:9f:fa:ce:d5:7a:bb:8f:c3:80:6f:
         92:d7:29:9c:b2:f1:fc:4a:d5:57:f3:d4:d1:cb:8e:c2:e5:ed:
         3f:af:65:47:61:c3:9c:1c:af:79:ec:84:a1:d3:f5:dd:68:43:
         6a:03:13:25:eb:13:2d:36:ec:05:9e:a5:26:85:1a:7f:c1:b5:
         88:67:f7:34:7a:25:60:4f:60:77:b0:19:93:6a:87:57:0d:46:
         e5:f1:0d:2c:47:ee:bb:11:94:5d:58:5f:27:22:7c:4f:d7:8e:
         2b:1b:47:17:11:4a:db:af:e7:fb:c3:e0:e4:23:ed:0a:af:d6:
         86:a4:27:72
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUIt8wSbsZmk7+YD2oh0RIuS4Blv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E5Mjk4RTI2RUM3RDgzRjk5MEREMjlFRkQzOTUwOTdB
OTI4NTkwRjAeFw0yNjA3MjExOTQ3MTdaFw0yNzA3MjAxOTUyMTdaMDMxMTAvBgNV
BAMTKEMyOEYxMEQ5QzlFODZDMDgyOTkzRjdFNTkxOERDOTBERjE1OTMxRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwIWyfNfLAWQxKz6HSFfuP8jr+
L6OxICifitTMrFjAln3FET9+eQcf3rHBotDH5ksQ3+PdH0BkQ+rJOTHDlt6qeaw7
QYnkArR9KqBaCzLADOQaqqGEJjNEhlVfuF7XC28DLw+0/mWt3XPNq1BV3E3C7G4w
Vjqbl6E+86pI9a3ss78GAHnqMIF5kSUr0LaoGwg6GMUEgQQvmnqI01XL182c99Ud
C1a0VZbibBYts9QxEHCzmoFBwugBiKcPrg8dQivfUNs/jsVAHUdbCFJad8taGDOr
qAOyqH4+zF5WPuhZc0tHgr6bys03CEjlMWN/cZ4oNhKR+LXEDSeaPZAjWYJRAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUwo8Q2cnobAgpk/flkY3JDfFZMfAwHwYDVR0j
BBgwFoAUypKY4m7H2D+ZDdKe/TlQl6koWQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZm
emovMC9DQTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBOTI5OEUyNkVDN0Q4M0Y5
OTBERDI5RUZEMzk1MDk3QTkyODU5MEYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JpaGtpRFIxekZkaTU1eG4xMmtHeVlTTnVzd3pNZ1ZjeXhTUXo5aWZGZnpqLzAv
MzIzODMwMzQzYTMxNjE2NTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM2
MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGuwwDQYJKoZIhvcNAQELBQADggEBAEeh3ilMKptF
sqk7tiDwVz7hzF+XXM5/QCglk25m0wzEV3zDk5de/qe8PYtNeV7kA0i/iL/bdgm3
3bizGtiWW5gzP3/t5Zg23lPIjNTn7DaTg6CCgGljhisPDWyVfIZzoEEIqRvo/bkN
oivgHGvoQsY79JcqezNg5Dfxc+rGpXwBlhjFbOlJn/rO1Xq7j8OAb5LXKZyy8fxK
1Vfz1NHLjsLl7T+vZUdhw5wcr3nshKHT9d1oQ2oDEyXrEy027AWepSaFGn/BtYhn
9zR6JWBPYHewGZNqh1cNRuXxDSxH7rsRlF1YXycifE/XjisbRxcRStuv5/vD4OQj
7Qqv1oakJ3I=
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:50:59 2026 by rpki-client