Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/323830343a356532343a3a2f33322d3336203d3e20323639303134.roa
File:                     323830343a356532343a3a2f33322d3336203d3e20323639303134.roa (raw, json)
Hash identifier:          GEDe8Crb8E8hryIGEyTA9CD8eSF8LTOae/OP02CbiAU=
Subject key identifier:   CD:07:58:EB:C6:C3:7B:5D:3F:D1:3B:22:9E:61:0F:3D:8F:3D:49:3D
Certificate issuer:       /CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
Certificate serial:       2E10A40A5254D1A5B0B054F22DFEA1500E95572B
Authority key identifier: DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/323830343a356532343a3a2f33322d3336203d3e20323639303134.roa
Signing time:             Wed 02 Sep 2026 13:21:43 +0000
ROA not before:           Wed 02 Sep 2026 13:16:43 +0000
ROA not after:            Wed 01 Sep 2027 13:21:43 +0000
asID:                     269014
IP address blocks:        2804:5e24::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl
                          rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 12:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:10:a4:0a:52:54:d1:a5:b0:b0:54:f2:2d:fe:a1:50:0e:95:57:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
        Validity
            Not Before: Sep  2 13:16:43 2026 GMT
            Not After : Sep  1 13:21:43 2027 GMT
        Subject: CN=CD0758EBC6C37B5D3FD13B229E610F3D8F3D493D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:48:8d:cb:e2:c9:fd:12:1d:01:2b:81:1c:e1:
                    89:7f:fd:cb:af:2c:15:fb:8e:78:1d:7c:11:03:20:
                    fc:67:6b:8b:42:a9:b5:57:a3:fa:d3:0a:07:93:7f:
                    6c:9e:5c:e5:ed:cf:07:80:63:f1:0a:16:10:6b:07:
                    6c:68:77:fa:1c:b5:76:79:d4:68:7f:07:21:a8:72:
                    7e:5f:5e:49:9d:9a:97:dc:ce:49:1d:37:6f:b8:60:
                    04:1f:29:ce:91:be:47:f9:c3:6c:df:d1:8e:87:58:
                    04:94:ee:40:07:2d:16:90:34:12:c3:a0:fc:55:9f:
                    c4:f0:0e:c7:22:c4:47:9b:51:97:02:b9:97:8b:0e:
                    b8:fd:12:a4:64:82:22:28:b2:78:67:2e:a6:cd:7d:
                    0c:f6:72:87:e2:1e:e1:36:ff:c8:3b:c5:59:ca:89:
                    b3:3b:b4:d5:8b:f2:04:77:3b:f4:fa:8f:f7:f9:65:
                    37:7d:90:29:25:20:e6:e9:b7:07:a6:33:cd:1a:7c:
                    a8:ef:d2:ab:79:7f:53:89:90:2d:2e:92:ee:63:3d:
                    54:17:54:24:11:96:19:ec:04:89:dd:1c:f3:f4:bc:
                    bb:44:41:43:da:e9:56:2e:50:46:ae:b9:d5:09:73:
                    71:58:8f:15:ee:63:87:0d:2e:85:4a:3f:ef:ec:d3:
                    a8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:07:58:EB:C6:C3:7B:5D:3F:D1:3B:22:9E:61:0F:3D:8F:3D:49:3D
            X509v3 Authority Key Identifier:
                keyid:DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/323830343a356532343a3a2f33322d3336203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e24::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:3b:92:7d:33:7c:f5:91:db:29:33:f3:e1:b7:57:b7:57:9e:
         68:db:24:8f:7f:70:43:cc:d6:75:82:78:89:7a:a9:b3:39:46:
         58:c8:82:60:34:fb:9f:ba:a9:96:c3:8a:b7:77:70:fc:b3:ac:
         59:39:f1:ef:5f:d4:08:56:f2:f3:85:63:b4:ab:49:d0:ec:71:
         bd:70:78:5a:1c:53:4b:ab:88:4d:5d:5f:70:fd:3a:43:54:a9:
         df:e7:ed:15:75:92:5f:2a:74:13:76:8a:bb:52:0f:b5:28:1b:
         75:b2:ae:6b:de:cb:cb:87:57:cb:c7:68:a7:6f:06:51:99:be:
         84:bd:50:c9:7a:c5:98:d8:99:a5:17:75:b9:1a:54:c9:45:d5:
         64:2c:db:72:c9:3f:33:78:bd:0f:a8:66:02:6b:10:e3:f9:bb:
         38:37:0b:61:1c:95:5c:fb:95:38:c6:f5:4b:38:f1:40:27:c4:
         92:65:b3:0c:43:2c:59:fd:91:a4:1d:bc:18:4f:c2:44:6b:be:
         36:05:87:58:7d:cd:9b:a5:dc:b7:ee:c7:3a:cb:f6:2e:a2:c7:
         25:58:02:55:6b:88:ad:3a:0f:d4:d8:9b:a4:d2:ab:bf:d9:bf:
         fd:9a:54:08:37:aa:9c:2b:bb:58:45:30:f9:f4:56:34:ca:a1:
         5e:d8:78:40
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIULhCkClJU0aWwsFTyLf6hUA6VVyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENFMTJFQzBEQTQxQjU5QkU3NTIxNkUyOEEzRDc5OEQ0
MzEzQUZFRTAeFw0yNjA5MDIxMzE2NDNaFw0yNzA5MDExMzIxNDNaMDMxMTAvBgNV
BAMTKENEMDc1OEVCQzZDMzdCNUQzRkQxM0IyMjlFNjEwRjNEOEYzRDQ5M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsSI3L4sn9Eh0BK4Ec4Yl//cuv
LBX7jngdfBEDIPxna4tCqbVXo/rTCgeTf2yeXOXtzweAY/EKFhBrB2xod/octXZ5
1Gh/ByGocn5fXkmdmpfczkkdN2+4YAQfKc6Rvkf5w2zf0Y6HWASU7kAHLRaQNBLD
oPxVn8TwDscixEebUZcCuZeLDrj9EqRkgiIosnhnLqbNfQz2cofiHuE2/8g7xVnK
ibM7tNWL8gR3O/T6j/f5ZTd9kCklIObptwemM80afKjv0qt5f1OJkC0uku5jPVQX
VCQRlhnsBIndHPP0vLtEQUPa6VYuUEauudUJc3FYjxXuY4cNLoVKP+/s06jLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUzQdY68bDe10/0TsinmEPPY89ST0wHwYDVR0j
BBgwFoAU3OEuwNpBtZvnUhbiij15jUMTr+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hUS0U2TDE0RkhmU0xybkIxa1EyYjVqaHRjaWY2UHh0aE5FOVpUNFRY
V1AvMC9EQ0UxMkVDMERBNDFCNTlCRTc1MjE2RTI4QTNENzk4RDQzMTNBRkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRTEyRUMwREE0MUI1OUJF
NzUyMTZFMjhBM0Q3OThENDMxM0FGRUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N4VEtFNkwxNEZIZlNMcm5CMWtRMmI1amh0Y2lmNlB4dGhORTlaVDRUWFdQLzAv
MzIzODMwMzQzYTM1NjUzMjM0M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM5
MzAzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAReJDANBgkqhkiG9w0BAQsFAAOCAQEAAzuSfTN8
9ZHbKTPz4bdXt1eeaNskj39wQ8zWdYJ4iXqpszlGWMiCYDT7n7qplsOKt3dw/LOs
WTnx71/UCFby84VjtKtJ0OxxvXB4WhxTS6uITV1fcP06Q1Sp3+ftFXWSXyp0E3aK
u1IPtSgbdbKua97Ly4dXy8dop28GUZm+hL1QyXrFmNiZpRd1uRpUyUXVZCzbcsk/
M3i9D6hmAmsQ4/m7ODcLYRyVXPuVOMb1SzjxQCfEkmWzDEMsWf2RpB28GE/CRGu+
NgWHWH3Nm6Xct+7HOsv2LqLHJVgCVWuIrToP1NibpNKrv9m//ZpUCDeqnCu7WEUw
+fRWNMqhXth4QA==
-----END CERTIFICATE-----