Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/323830343a336166383a3a2f33322d3332203d3e20323636313231.roa
File:                     323830343a336166383a3a2f33322d3332203d3e20323636313231.roa (raw, json)
Hash identifier:          9miaslDaDIJFkI0Chxl0C/V5KtD4dXcJsIxBEuTNCx0=
Subject key identifier:   61:AA:8E:34:62:47:7C:A2:D7:37:9C:E7:FA:AD:15:19:A9:3B:F8:63
Certificate issuer:       /CN=4483FC94AC3AF616894064AA3508F70A4814E8F0
Certificate serial:       2621C103DF7A85D692538F56D3781CEA2FEC4597
Authority key identifier: 44:83:FC:94:AC:3A:F6:16:89:40:64:AA:35:08:F7:0A:48:14:E8:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4483FC94AC3AF616894064AA3508F70A4814E8F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/323830343a336166383a3a2f33322d3332203d3e20323636313231.roa
Signing time:             Fri 18 Sep 2026 13:56:25 +0000
ROA not before:           Fri 18 Sep 2026 13:51:25 +0000
ROA not after:            Fri 17 Sep 2027 13:56:25 +0000
asID:                     266121
IP address blocks:        2804:3af8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/4483FC94AC3AF616894064AA3508F70A4814E8F0.crl
                          rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/4483FC94AC3AF616894064AA3508F70A4814E8F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4483FC94AC3AF616894064AA3508F70A4814E8F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:21:c1:03:df:7a:85:d6:92:53:8f:56:d3:78:1c:ea:2f:ec:45:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4483FC94AC3AF616894064AA3508F70A4814E8F0
        Validity
            Not Before: Sep 18 13:51:25 2026 GMT
            Not After : Sep 17 13:56:25 2027 GMT
        Subject: CN=61AA8E3462477CA2D7379CE7FAAD1519A93BF863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:33:d4:07:ea:27:3e:4a:af:6b:a9:ee:63:ea:
                    59:14:be:d5:4c:4f:ae:75:e0:6b:32:d0:7d:26:b0:
                    4c:0e:d6:25:41:4b:73:8b:4b:17:90:d5:7e:cb:a7:
                    2a:03:59:d8:76:4f:f0:c4:17:ac:04:cd:9b:68:f9:
                    d7:e5:72:39:14:7d:0c:f0:1c:38:86:64:aa:f0:4b:
                    25:3c:0e:02:21:36:32:e6:e8:6f:c2:33:8e:95:73:
                    30:13:94:e1:74:54:f8:8d:b3:f2:d6:db:1e:32:48:
                    a2:9b:0b:4e:c7:77:f1:8d:cc:bc:e4:3b:31:62:2c:
                    e7:2d:6b:4b:86:49:31:12:b9:46:38:40:8f:9f:c2:
                    f4:9c:e6:af:f7:3c:13:12:09:0c:6e:ae:00:a0:3e:
                    b4:0d:6b:6d:16:e7:7f:00:a7:ae:fe:56:03:e8:19:
                    6d:b6:7d:14:2a:31:69:0b:bb:58:a2:5d:bc:57:de:
                    b0:66:82:b2:16:dd:23:ac:3b:23:07:0c:f6:d9:74:
                    4b:5d:a5:7a:00:7d:99:fa:ed:85:da:51:c2:ef:d1:
                    37:1b:01:b0:b4:02:52:12:c0:5b:dc:36:8d:5f:7d:
                    0e:79:f4:bb:20:da:7e:d4:c1:c5:61:a2:0a:23:2b:
                    48:01:6e:56:68:df:e9:9d:ba:6d:10:9e:8b:bc:1f:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AA:8E:34:62:47:7C:A2:D7:37:9C:E7:FA:AD:15:19:A9:3B:F8:63
            X509v3 Authority Key Identifier:
                keyid:44:83:FC:94:AC:3A:F6:16:89:40:64:AA:35:08:F7:0A:48:14:E8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/4483FC94AC3AF616894064AA3508F70A4814E8F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4483FC94AC3AF616894064AA3508F70A4814E8F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CchdKrLWQc5gxjWDs2tKb7yGWjLfTTjXw8eqW1dCYfo/0/323830343a336166383a3a2f33322d3332203d3e20323636313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3af8::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:ca:ee:55:59:b0:ef:1a:77:2b:be:99:ad:1e:f1:b9:cb:17:
         f5:b7:3b:d7:77:fb:65:a3:13:6a:38:33:cd:95:e9:33:d8:8e:
         31:7d:1d:9c:40:d0:f0:37:91:7b:a0:d8:65:6a:6b:8f:e9:00:
         70:03:6f:fa:7f:c5:74:ec:e4:37:7c:23:0a:7d:d1:ee:3a:86:
         1b:ac:c2:8f:2d:e5:1e:25:09:38:0b:2f:1f:09:6c:60:31:22:
         e1:9f:9d:be:0b:f8:79:6f:40:8a:32:69:fe:05:77:e2:3e:76:
         46:35:98:87:7b:a5:f5:8c:97:66:85:e4:56:fd:33:75:a1:34:
         c2:0d:2d:13:cd:30:3a:4b:74:7c:d6:04:cc:6a:54:3c:36:dd:
         8b:b9:63:79:0f:64:24:87:c8:4c:ba:56:5f:29:32:89:d3:5f:
         1f:f4:c8:5c:f1:2c:ce:d1:18:d5:f5:68:eb:42:3a:a8:52:fd:
         9e:0a:ce:61:dd:d8:c4:46:0a:df:c8:4f:f5:9a:d9:d9:bd:6d:
         b8:18:fa:7b:34:8c:c9:34:13:37:ab:d7:9f:82:c5:c4:d4:3c:
         93:d4:20:e9:1e:0f:57:79:9b:f2:43:f8:75:60:5b:76:d8:2d:
         b7:c8:8d:07:53:a6:69:18:73:b1:46:a4:d5:09:84:67:e6:3a:
         ba:71:a7:54
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJiHBA996hdaSU49W03gc6i/sRZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ4M0ZDOTRBQzNBRjYxNjg5NDA2NEFBMzUwOEY3MEE0
ODE0RThGMDAeFw0yNjA5MTgxMzUxMjVaFw0yNzA5MTcxMzU2MjVaMDMxMTAvBgNV
BAMTKDYxQUE4RTM0NjI0NzdDQTJENzM3OUNFN0ZBQUQxNTE5QTkzQkY4NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClM9QH6ic+Sq9rqe5j6lkUvtVM
T6514Gsy0H0msEwO1iVBS3OLSxeQ1X7LpyoDWdh2T/DEF6wEzZto+dflcjkUfQzw
HDiGZKrwSyU8DgIhNjLm6G/CM46VczATlOF0VPiNs/LW2x4ySKKbC07Hd/GNzLzk
OzFiLOcta0uGSTESuUY4QI+fwvSc5q/3PBMSCQxurgCgPrQNa20W538Ap67+VgPo
GW22fRQqMWkLu1iiXbxX3rBmgrIW3SOsOyMHDPbZdEtdpXoAfZn67YXaUcLv0Tcb
AbC0AlISwFvcNo1ffQ559Lsg2n7UwcVhogojK0gBblZo3+mdum0Qnou8HxYZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUYaqONGJHfKLXN5zn+q0VGak7+GMwHwYDVR0j
BBgwFoAURIP8lKw69haJQGSqNQj3CkgU6PAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DY2hkS3JMV1FjNWd4aldEczJ0S2I3eUdXakxmVFRqWHc4ZXFXMWRDWWZv
LzAvNDQ4M0ZDOTRBQzNBRjYxNjg5NDA2NEFBMzUwOEY3MEE0ODE0RThGMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80NDgzRkM5NEFDM0FGNjE2ODk0
MDY0QUEzNTA4RjcwQTQ4MTRFOEYwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9D
Y2hkS3JMV1FjNWd4aldEczJ0S2I3eUdXakxmVFRqWHc4ZXFXMWRDWWZvLzAvMzIz
ODMwMzQzYTMzNjE2NjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2MzEz
MjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQ6+DANBgkqhkiG9w0BAQsFAAOCAQEAgMruVVmw7xp3
K76ZrR7xucsX9bc713f7ZaMTajgzzZXpM9iOMX0dnEDQ8DeRe6DYZWprj+kAcANv
+n/FdOzkN3wjCn3R7jqGG6zCjy3lHiUJOAsvHwlsYDEi4Z+dvgv4eW9AijJp/gV3
4j52RjWYh3ul9YyXZoXkVv0zdaE0wg0tE80wOkt0fNYEzGpUPDbdi7ljeQ9kJIfI
TLpWXykyidNfH/TIXPEsztEY1fVo60I6qFL9ngrOYd3YxEYK38hP9ZrZ2b1tuBj6
ezSMyTQTN6vXn4LFxNQ8k9Qg6R4PV3mb8kP4dWBbdtgtt8iNB1OmaRhzsUak1QmE
Z+Y6unGnVA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:10:13 2026 by rpki-client