Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a376630303a3a2f34302d3430203d3e20323730363131.roa
File:                     323830343a366561383a376630303a3a2f34302d3430203d3e20323730363131.roa (raw, json)
Hash identifier:          XYisNPQkJlyaRJicNDG22q3LqNbeLPpXexH20jQdGj4=
Subject key identifier:   26:4B:E7:A2:62:FC:1D:0B:DF:E9:EB:F5:4F:EB:4D:7B:A8:BE:ED:7B
Certificate issuer:       /CN=D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC
Certificate serial:       12ABA0F3F68ACFCC0DC6E5245D09FDBCD06AD953
Authority key identifier: D9:46:D3:A1:7B:DB:97:DC:8D:DD:BA:A9:D7:A5:2E:E3:96:C9:D1:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a376630303a3a2f34302d3430203d3e20323730363131.roa
Signing time:             Tue 21 Jul 2026 17:41:05 +0000
ROA not before:           Tue 21 Jul 2026 17:36:05 +0000
ROA not after:            Tue 20 Jul 2027 17:41:05 +0000
asID:                     270611
IP address blocks:        2804:6ea8:7f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.crl
                          rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 21:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ab:a0:f3:f6:8a:cf:cc:0d:c6:e5:24:5d:09:fd:bc:d0:6a:d9:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC
        Validity
            Not Before: Jul 21 17:36:05 2026 GMT
            Not After : Jul 20 17:41:05 2027 GMT
        Subject: CN=264BE7A262FC1D0BDFE9EBF54FEB4D7BA8BEED7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:69:59:5b:6c:af:a8:fb:71:41:6b:97:5f:30:
                    f6:7d:23:18:6b:23:c0:09:d3:54:a7:df:98:01:6d:
                    94:26:ed:c0:40:52:38:bb:5f:8a:20:ff:34:6b:bb:
                    3c:ff:73:9c:a5:9a:6a:c5:2a:0d:4a:b4:01:01:0a:
                    0f:5e:dc:78:08:54:52:74:46:75:67:ce:16:e6:6c:
                    31:75:41:7e:f2:db:28:bf:38:27:a1:51:24:62:e2:
                    09:10:40:0a:80:b1:01:7a:db:14:03:6e:c5:67:95:
                    32:73:fc:e5:69:82:a8:e3:c0:14:5f:d9:67:33:cd:
                    8f:71:3c:44:65:48:f3:06:c5:e7:3a:58:6a:61:b5:
                    64:62:0b:2c:bf:d7:1c:7d:6c:f6:34:11:ae:7c:36:
                    ab:77:b9:59:8f:2e:8c:bc:d6:e4:fd:21:05:00:0a:
                    99:6f:4c:cf:f6:cb:8b:b8:0c:1e:73:93:e5:23:8a:
                    2d:ff:f6:b9:4d:62:47:8f:e7:17:ea:2b:28:48:4c:
                    86:8d:a9:07:11:32:6d:a2:a2:82:54:eb:45:df:68:
                    df:d9:76:93:a3:7b:8b:2e:b0:1f:67:77:05:40:b6:
                    54:1f:a0:a3:8d:db:39:1b:99:0c:ec:f2:d4:f9:6c:
                    84:97:ec:aa:53:86:22:ab:e8:a4:e9:68:85:d8:83:
                    0a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4B:E7:A2:62:FC:1D:0B:DF:E9:EB:F5:4F:EB:4D:7B:A8:BE:ED:7B
            X509v3 Authority Key Identifier:
                keyid:D9:46:D3:A1:7B:DB:97:DC:8D:DD:BA:A9:D7:A5:2E:E3:96:C9:D1:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a376630303a3a2f34302d3430203d3e20323730363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ea8:7f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:81:e0:08:87:8f:b9:64:c0:60:6a:47:e2:c0:35:89:02:33:
         45:f4:07:f0:55:8f:3c:b6:52:76:5c:88:74:fa:a8:70:80:e6:
         04:17:5f:8d:37:52:01:40:15:54:d3:e5:ed:9a:33:f0:39:af:
         fb:3e:ae:e4:75:1e:77:6c:c5:48:b8:ac:f6:4f:78:0e:08:83:
         b9:f6:51:21:7b:11:a5:43:80:b3:7f:ba:3c:ef:a3:8e:ea:5d:
         fc:5f:36:51:30:15:82:23:e5:aa:44:ed:76:8c:85:46:09:2d:
         4c:f6:11:a6:e1:57:1e:ac:68:d9:4e:57:f2:9e:c7:77:5e:ed:
         38:4e:e6:b3:ec:a7:6f:26:cd:3a:c9:ac:f3:96:06:fc:43:9d:
         7e:f1:d0:7f:c7:9d:e9:78:67:2f:f2:2a:f7:23:85:fb:1a:4f:
         f9:fc:db:a0:ca:3b:cc:cd:35:ce:9d:87:e9:67:72:90:38:92:
         bc:2c:e6:70:c6:d6:68:87:06:02:18:9b:9b:99:f1:3f:7a:54:
         4c:74:7e:d7:37:61:46:eb:27:f1:eb:39:ae:84:fa:8a:6e:46:
         5c:02:e9:1f:2b:94:51:d2:dd:d8:f2:12:85:0f:b8:b7:67:61:
         54:27:26:ca:03:e9:c4:04:2a:4b:10:5a:d4:7d:64:e1:08:bb:
         bd:e3:1c:3a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEqug8/aKz8wNxuUkXQn9vNBq2VMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk0NkQzQTE3QkRCOTdEQzhERERCQUE5RDdBNTJFRTM5
NkM5RDFDQzAeFw0yNjA3MjExNzM2MDVaFw0yNzA3MjAxNzQxMDVaMDMxMTAvBgNV
BAMTKDI2NEJFN0EyNjJGQzFEMEJERkU5RUJGNTRGRUI0RDdCQThCRUVEN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXaVlbbK+o+3FBa5dfMPZ9Ixhr
I8AJ01Sn35gBbZQm7cBAUji7X4og/zRruzz/c5ylmmrFKg1KtAEBCg9e3HgIVFJ0
RnVnzhbmbDF1QX7y2yi/OCehUSRi4gkQQAqAsQF62xQDbsVnlTJz/OVpgqjjwBRf
2WczzY9xPERlSPMGxec6WGphtWRiCyy/1xx9bPY0Ea58Nqt3uVmPLoy81uT9IQUA
CplvTM/2y4u4DB5zk+Ujii3/9rlNYkeP5xfqKyhITIaNqQcRMm2iooJU60XfaN/Z
dpOje4susB9ndwVAtlQfoKON2zkbmQzs8tT5bISX7KpThiKr6KTpaIXYgwpDAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUJkvnomL8HQvf6ev1T+tNe6i+7XswHwYDVR0j
BBgwFoAU2UbToXvbl9yN3bqp16Uu45bJ0cwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2dSclRXNlZ2NzJjWnZod29yeFczZUFYdXpqd052a01BODZHMmdtNjJZ
aVEvMC9EOTQ2RDNBMTdCREI5N0RDOEREREJBQTlEN0E1MkVFMzk2QzlEMUNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NDZEM0ExN0JEQjk3REM4
REREQkFBOUQ3QTUyRUUzOTZDOUQxQ0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NnUnJUVzZWdjcyY1p2aHdvcnhXM2VBWHV6andOdmtNQTg2RzJnbTYyWWlRLzAv
MzIzODMwMzQzYTM2NjU2MTM4M2EzNzY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMDM2MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEbqh/MA0GCSqGSIb3DQEBCwUA
A4IBAQAsgeAIh4+5ZMBgakfiwDWJAjNF9AfwVY88tlJ2XIh0+qhwgOYEF1+NN1IB
QBVU0+XtmjPwOa/7Pq7kdR53bMVIuKz2T3gOCIO59lEhexGlQ4Czf7o876OO6l38
XzZRMBWCI+WqRO12jIVGCS1M9hGm4VcerGjZTlfynsd3Xu04Tuaz7KdvJs06yazz
lgb8Q51+8dB/x53peGcv8ir3I4X7Gk/5/NugyjvMzTXOnYfpZ3KQOJK8LOZwxtZo
hwYCGJubmfE/elRMdH7XN2FG6yfx6zmuhPqKbkZcAukfK5RR0t3Y8hKFD7i3Z2FU
JybKA+nEBCpLEFrUfWThCLu94xw6
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:24:38 2026 by rpki-client