Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYL3y4SUcBN7k2FGSU65LickvnQ4uWdQPmwEQqfwAjxd/0/323830343a316633323a3a2f33322d3438203d3e20323635393934.roa
File:                     323830343a316633323a3a2f33322d3438203d3e20323635393934.roa (raw, json)
Hash identifier:          FV/mjNGQz3zz1RWavJO9clOg63V5aCOTvob28HncGCc=
Subject key identifier:   D0:9B:09:1C:30:13:F3:DC:45:7E:97:C8:85:79:C5:97:B9:6A:37:CA
Certificate issuer:       /CN=18DB7CFB0D56EB89E80CF5192FE53A4F266067A9
Certificate serial:       57F3285A341C26851C04DE29B65267B1312FAE9A
Authority key identifier: 18:DB:7C:FB:0D:56:EB:89:E8:0C:F5:19:2F:E5:3A:4F:26:60:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18DB7CFB0D56EB89E80CF5192FE53A4F266067A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYL3y4SUcBN7k2FGSU65LickvnQ4uWdQPmwEQqfwAjxd/0/323830343a316633323a3a2f33322d3438203d3e20323635393934.roa
Signing time:             Tue 14 Jul 2026 13:53:06 +0000
ROA not before:           Tue 14 Jul 2026 13:48:06 +0000
ROA not after:            Tue 13 Jul 2027 13:53:06 +0000
asID:                     265994
IP address blocks:        2804:1f32::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYL3y4SUcBN7k2FGSU65LickvnQ4uWdQPmwEQqfwAjxd/0/18DB7CFB0D56EB89E80CF5192FE53A4F266067A9.crl
                          rsync://rpki-repo.registro.br/repo/CYL3y4SUcBN7k2FGSU65LickvnQ4uWdQPmwEQqfwAjxd/0/18DB7CFB0D56EB89E80CF5192FE53A4F266067A9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18DB7CFB0D56EB89E80CF5192FE53A4F266067A9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 17:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f3:28:5a:34:1c:26:85:1c:04:de:29:b6:52:67:b1:31:2f:ae:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18DB7CFB0D56EB89E80CF5192FE53A4F266067A9
        Validity
            Not Before: Jul 14 13:48:06 2026 GMT
            Not After : Jul 13 13:53:06 2027 GMT
        Subject: CN=D09B091C3013F3DC457E97C88579C597B96A37CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:dc:d7:a4:d3:37:cd:9d:0e:aa:8b:8a:97:
                    20:b6:54:4f:14:e4:9d:91:de:dc:68:00:92:55:a9:
                    cc:d3:59:26:3f:fe:ad:47:6d:2e:70:db:83:8f:d4:
                    69:fd:f0:c1:cc:33:d5:e1:43:17:49:b0:7f:3d:c7:
                    1c:c8:44:28:40:8e:f5:4a:fd:60:1b:70:91:55:ac:
                    91:84:78:fd:6f:4e:54:b6:b3:33:76:fa:49:11:6d:
                    a7:6c:04:4c:8f:2f:ec:fd:31:f4:15:0b:32:36:3a:
                    58:48:17:07:a6:5d:72:3b:7d:2a:9c:f6:11:60:ea:
                    c0:98:a5:dd:8c:2f:47:01:c7:10:2a:20:fc:a3:27:
                    90:90:94:14:5c:5a:49:75:23:54:a9:0b:80:fc:f6:
                    39:ad:78:d2:f1:78:90:1f:1f:dd:65:a7:7b:6e:2e:
                    3d:b0:d8:c8:e5:12:fd:a0:c3:03:9e:7a:e5:2c:c6:
                    54:70:31:04:71:e3:ed:3e:3e:6c:bf:68:af:e9:e3:
                    8b:4d:7c:bc:23:17:c0:db:14:b0:da:ee:c1:af:96:
                    0f:33:46:3c:29:74:e8:2b:b4:1f:7d:9b:20:62:3e:
                    5d:c8:ae:c0:6f:23:0c:83:be:9a:b0:8f:bc:3f:c0:
                    6f:cf:3f:5c:a3:5c:20:c9:9f:14:49:c2:fa:75:33:
                    5b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9B:09:1C:30:13:F3:DC:45:7E:97:C8:85:79:C5:97:B9:6A:37:CA
            X509v3 Authority Key Identifier:
                keyid:18:DB:7C:FB:0D:56:EB:89:E8:0C:F5:19:2F:E5:3A:4F:26:60:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYL3y4SUcBN7k2FGSU65LickvnQ4uWdQPmwEQqfwAjxd/0/18DB7CFB0D56EB89E80CF5192FE53A4F266067A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18DB7CFB0D56EB89E80CF5192FE53A4F266067A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYL3y4SUcBN7k2FGSU65LickvnQ4uWdQPmwEQqfwAjxd/0/323830343a316633323a3a2f33322d3438203d3e20323635393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f32::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:97:d6:13:08:db:47:6f:68:0a:79:d7:f8:83:14:38:08:cb:
         a0:83:a1:f0:ae:dd:0f:a2:a8:14:7f:c6:35:f9:ce:0b:bf:43:
         dc:2b:96:8a:f5:2e:f9:15:f1:e5:93:f1:17:22:12:25:c7:3e:
         7e:cf:7b:6a:d3:52:64:38:82:8d:4a:0d:55:f3:d3:50:c8:22:
         37:02:ed:05:16:88:00:61:fe:77:9c:0f:55:19:9f:25:99:ca:
         f9:ca:aa:10:84:1c:ff:47:df:ca:15:f3:4b:68:36:3b:75:d1:
         58:a5:50:f0:78:d6:dc:37:ef:78:06:03:12:03:48:f6:dc:55:
         7b:1c:be:83:c2:b7:5f:16:ac:1a:31:f5:e0:ca:d3:20:87:a4:
         bd:e7:b4:d3:42:cc:bd:62:35:b5:3a:c3:e1:5d:4b:2e:de:72:
         67:9c:1f:08:1f:f3:7f:4b:27:bc:0f:8a:8b:91:57:55:09:46:
         b5:46:f9:3e:55:6d:88:e3:63:b5:97:c2:4a:3e:54:a6:c0:4e:
         6d:81:e0:d8:60:a6:a4:ba:b4:d6:8b:c3:dd:ad:bb:80:06:5b:
         00:bb:ee:04:35:ee:29:f2:a7:e8:79:7f:c9:88:d4:e6:83:43:
         7e:48:0a:0b:f6:76:bc:b0:72:89:71:e7:65:c6:a6:3d:32:ab:
         6e:59:a2:7a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUV/MoWjQcJoUcBN4ptlJnsTEvrpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThEQjdDRkIwRDU2RUI4OUU4MENGNTE5MkZFNTNBNEYy
NjYwNjdBOTAeFw0yNjA3MTQxMzQ4MDZaFw0yNzA3MTMxMzUzMDZaMDMxMTAvBgNV
BAMTKEQwOUIwOTFDMzAxM0YzREM0NTdFOTdDODg1NzlDNTk3Qjk2QTM3Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwxtzXpNM3zZ0OqouKlyC2VE8U
5J2R3txoAJJVqczTWSY//q1HbS5w24OP1Gn98MHMM9XhQxdJsH89xxzIRChAjvVK
/WAbcJFVrJGEeP1vTlS2szN2+kkRbadsBEyPL+z9MfQVCzI2OlhIFwemXXI7fSqc
9hFg6sCYpd2ML0cBxxAqIPyjJ5CQlBRcWkl1I1SpC4D89jmteNLxeJAfH91lp3tu
Lj2w2MjlEv2gwwOeeuUsxlRwMQRx4+0+Pmy/aK/p44tNfLwjF8DbFLDa7sGvlg8z
RjwpdOgrtB99myBiPl3IrsBvIwyDvpqwj7w/wG/PP1yjXCDJnxRJwvp1M1tnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU0JsJHDAT89xFfpfIhXnFl7lqN8owHwYDVR0j
BBgwFoAUGNt8+w1W64noDPUZL+U6TyZgZ6kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1lMM3k0U1VjQk43azJGR1NVNjVMaWNrdm5RNHVXZFFQbXdFUXFmd0Fq
eGQvMC8xOERCN0NGQjBENTZFQjg5RTgwQ0Y1MTkyRkU1M0E0RjI2NjA2N0E5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4REI3Q0ZCMEQ1NkVCODlF
ODBDRjUxOTJGRTUzQTRGMjY2MDY3QTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NZTDN5NFNVY0JON2syRkdTVTY1TGlja3ZuUTR1V2RRUG13RVFxZndBanhkLzAv
MzIzODMwMzQzYTMxNjYzMzMyM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzkzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQfMjANBgkqhkiG9w0BAQsFAAOCAQEADZfWEwjb
R29oCnnX+IMUOAjLoIOh8K7dD6KoFH/GNfnOC79D3CuWivUu+RXx5ZPxFyISJcc+
fs97atNSZDiCjUoNVfPTUMgiNwLtBRaIAGH+d5wPVRmfJZnK+cqqEIQc/0ffyhXz
S2g2O3XRWKVQ8HjW3DfveAYDEgNI9txVexy+g8K3XxasGjH14MrTIIekvee000LM
vWI1tTrD4V1LLt5yZ5wfCB/zf0snvA+Ki5FXVQlGtUb5PlVtiONjtZfCSj5UpsBO
bYHg2GCmpLq01ovD3a27gAZbALvuBDXuKfKn6Hl/yYjU5oNDfkgKC/Z2vLByiXHn
ZcamPTKrblmieg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:02 2026 by rpki-client