Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/323830343a356563633a383030303a3a2f33332d3333203d3e20323639303537.roa
File:                     323830343a356563633a383030303a3a2f33332d3333203d3e20323639303537.roa (raw, json)
Hash identifier:          HEouQm1DS3T+rYZ7h+H3ZD9QKehws7hmoAv+NAreEes=
Subject key identifier:   97:83:4D:DA:07:D1:87:4E:6F:70:E4:20:45:B7:D6:8E:F0:EA:3E:C5
Certificate issuer:       /CN=2394302CD5C8ECF673B6BC6DB508B14EFB67DD82
Certificate serial:       0383081C25A750409795EE6052A2B47AC8735368
Authority key identifier: 23:94:30:2C:D5:C8:EC:F6:73:B6:BC:6D:B5:08:B1:4E:FB:67:DD:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/323830343a356563633a383030303a3a2f33332d3333203d3e20323639303537.roa
Signing time:             Mon 28 Sep 2026 14:47:19 +0000
ROA not before:           Mon 28 Sep 2026 14:42:19 +0000
ROA not after:            Mon 27 Sep 2027 14:47:19 +0000
asID:                     269057
IP address blocks:        2804:5ecc:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.crl
                          rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 14:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:83:08:1c:25:a7:50:40:97:95:ee:60:52:a2:b4:7a:c8:73:53:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2394302CD5C8ECF673B6BC6DB508B14EFB67DD82
        Validity
            Not Before: Sep 28 14:42:19 2026 GMT
            Not After : Sep 27 14:47:19 2027 GMT
        Subject: CN=97834DDA07D1874E6F70E42045B7D68EF0EA3EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:14:47:bd:31:ee:8b:10:8c:03:e6:8a:2d:
                    f0:95:94:7d:1e:b8:69:02:f0:34:f3:0a:91:af:d5:
                    64:24:cf:73:5d:7b:8f:e6:7a:0b:49:37:42:0b:54:
                    92:dd:64:c6:4b:1a:87:e0:a0:4f:7d:75:92:25:23:
                    9f:58:65:98:06:a0:7e:40:cd:15:48:c6:cb:00:70:
                    0b:03:5b:c8:02:44:33:60:85:25:68:02:f5:a2:61:
                    97:b3:6d:4a:b6:00:17:5a:fc:97:f3:86:cd:e0:72:
                    83:87:d7:9e:9e:05:04:c1:0d:b1:ea:42:b3:ab:c1:
                    f0:9d:71:ec:4d:4c:3d:50:c7:95:9b:a3:94:a1:45:
                    ee:68:17:9e:c7:46:39:e1:bb:50:2f:bc:7d:1b:7c:
                    eb:63:26:c9:ad:f3:36:4c:86:1d:46:ce:f7:58:e9:
                    4e:05:0f:9d:32:c4:9b:fe:d7:bf:e0:5d:d5:4b:d0:
                    bd:9e:1b:86:cd:af:dc:ff:50:cc:69:50:ba:1a:45:
                    04:47:1b:74:a7:87:c2:73:a5:e6:7d:78:4f:45:e5:
                    25:1e:90:61:03:63:31:61:03:e5:71:23:80:69:e6:
                    38:ef:7c:df:bd:97:d0:42:34:40:28:f1:db:d1:6c:
                    cf:91:51:63:9e:1b:61:23:84:42:b5:ec:58:3e:e7:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:83:4D:DA:07:D1:87:4E:6F:70:E4:20:45:B7:D6:8E:F0:EA:3E:C5
            X509v3 Authority Key Identifier:
                keyid:23:94:30:2C:D5:C8:EC:F6:73:B6:BC:6D:B5:08:B1:4E:FB:67:DD:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/323830343a356563633a383030303a3a2f33332d3333203d3e20323639303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ecc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a6:11:89:0e:66:e0:65:bb:dd:b2:b9:d5:fb:de:5f:27:58:52:
         e5:b6:e2:b7:f0:80:aa:50:9e:78:80:a3:ca:f0:04:a2:56:6a:
         8f:00:13:2f:16:ed:3f:58:98:6b:73:c3:a7:bd:1d:98:30:08:
         ba:09:17:68:64:00:35:a5:96:42:83:2d:48:1a:e4:aa:df:7c:
         1d:7f:27:c8:fc:6b:e4:59:16:b0:d6:05:1e:e6:58:19:44:4d:
         ca:8d:c6:d7:e7:21:88:ce:3b:e3:c5:c0:9f:ff:23:62:8a:ad:
         54:e4:04:db:c5:0a:3d:cb:fc:48:1a:4d:1c:e9:03:e7:1f:92:
         77:95:d6:d1:26:a8:6f:90:f6:8f:05:3f:b4:45:09:32:a5:9d:
         43:09:9d:93:f1:11:89:0e:d4:a8:94:27:b8:be:65:c8:9c:cd:
         27:16:63:bc:1b:80:54:d0:7e:08:c7:b3:79:53:15:c7:7d:a1:
         f0:a1:52:02:93:79:8b:bd:74:3b:ce:b8:c7:d9:5a:2f:86:97:
         99:78:3f:2a:a6:1f:81:46:0e:51:a6:b0:df:7a:35:0a:4a:70:
         26:0e:de:db:59:30:00:57:65:71:2a:3f:26:9e:48:06:58:0a:
         cc:23:ae:05:c5:c0:c0:4b:97:82:b9:6c:71:97:16:65:69:9f:
         f4:ab:3c:c9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUA4MIHCWnUECXle5gUqK0eshzU2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM5NDMwMkNENUM4RUNGNjczQjZCQzZEQjUwOEIxNEVG
QjY3REQ4MjAeFw0yNjA5MjgxNDQyMTlaFw0yNzA5MjcxNDQ3MTlaMDMxMTAvBgNV
BAMTKDk3ODM0RERBMDdEMTg3NEU2RjcwRTQyMDQ1QjdENjhFRjBFQTNFQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ6BRHvTHuixCMA+aKLfCVlH0e
uGkC8DTzCpGv1WQkz3Nde4/megtJN0ILVJLdZMZLGofgoE99dZIlI59YZZgGoH5A
zRVIxssAcAsDW8gCRDNghSVoAvWiYZezbUq2ABda/Jfzhs3gcoOH156eBQTBDbHq
QrOrwfCdcexNTD1Qx5Wbo5ShRe5oF57HRjnhu1AvvH0bfOtjJsmt8zZMhh1GzvdY
6U4FD50yxJv+17/gXdVL0L2eG4bNr9z/UMxpULoaRQRHG3Snh8JzpeZ9eE9F5SUe
kGEDYzFhA+VxI4Bp5jjvfN+9l9BCNEAo8dvRbM+RUWOeG2EjhEK17Fg+5zMtAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUl4NN2gfRh05vcOQgRbfWjvDqPsUwHwYDVR0j
BBgwFoAUI5QwLNXI7PZztrxttQixTvtn3YIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2haZGJUYmVMVThQZVpLcEREUjYydjRZYjk0R3VqRDlKWktueEJ5U2F6
amQvMC8yMzk0MzAyQ0Q1QzhFQ0Y2NzNCNkJDNkRCNTA4QjE0RUZCNjdERDgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzOTQzMDJDRDVDOEVDRjY3
M0I2QkM2REI1MDhCMTRFRkI2N0REODIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NoWmRiVGJlTFU4UGVaS3BERFI2MnY0WWI5NEd1akQ5SlpLbnhCeVNhempkLzAv
MzIzODMwMzQzYTM1NjU2MzYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzOTMwMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEXsyAMA0GCSqGSIb3DQEBCwUA
A4IBAQCmEYkOZuBlu92yudX73l8nWFLltuK38ICqUJ54gKPK8ASiVmqPABMvFu0/
WJhrc8OnvR2YMAi6CRdoZAA1pZZCgy1IGuSq33wdfyfI/GvkWRaw1gUe5lgZRE3K
jcbX5yGIzjvjxcCf/yNiiq1U5ATbxQo9y/xIGk0c6QPnH5J3ldbRJqhvkPaPBT+0
RQkypZ1DCZ2T8RGJDtSolCe4vmXInM0nFmO8G4BU0H4Ix7N5UxXHfaHwoVICk3mL
vXQ7zrjH2VovhpeZeD8qph+BRg5RprDfejUKSnAmDt7bWTAAV2VxKj8mnkgGWArM
I64FxcDAS5eCuWxxlxZlaZ/0qzzJ
-----END CERTIFICATE-----
Generated at Tue Oct 13 23:44:19 2026 by rpki-client