Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a3a2f33322d313238203d3e20323635343437.roa
File:                     323830343a333434383a3a2f33322d313238203d3e20323635343437.roa (raw, json)
Hash identifier:          PphbQVatUDH+ZAE4KqIoDeUplu2X50aEtUcmbZ7zmH0=
Subject key identifier:   05:C0:81:72:C4:D9:63:5A:AB:36:70:A6:E0:1F:AA:52:FE:01:25:BB
Certificate issuer:       /CN=71D1103F44C00016AA1BE641CD9DD99010DC14CC
Certificate serial:       175505391465002653989DCE17FE82395A36F63F
Authority key identifier: 71:D1:10:3F:44:C0:00:16:AA:1B:E6:41:CD:9D:D9:90:10:DC:14:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D1103F44C00016AA1BE641CD9DD99010DC14CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a3a2f33322d313238203d3e20323635343437.roa
Signing time:             Wed 22 Jul 2026 12:37:15 +0000
ROA not before:           Wed 22 Jul 2026 12:32:15 +0000
ROA not after:            Wed 21 Jul 2027 12:37:15 +0000
asID:                     265447
IP address blocks:        2804:3448::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/71D1103F44C00016AA1BE641CD9DD99010DC14CC.crl
                          rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/71D1103F44C00016AA1BE641CD9DD99010DC14CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D1103F44C00016AA1BE641CD9DD99010DC14CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:55:05:39:14:65:00:26:53:98:9d:ce:17:fe:82:39:5a:36:f6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71D1103F44C00016AA1BE641CD9DD99010DC14CC
        Validity
            Not Before: Jul 22 12:32:15 2026 GMT
            Not After : Jul 21 12:37:15 2027 GMT
        Subject: CN=05C08172C4D9635AAB3670A6E01FAA52FE0125BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fc:ef:36:17:b9:e3:88:e2:5d:5a:9d:e7:a5:
                    c5:1f:74:05:10:0b:5a:a3:0f:e4:21:00:33:df:8a:
                    fd:9e:5c:75:c7:88:bb:a0:6f:7f:a6:5b:0a:0b:25:
                    be:bd:11:bd:50:be:d9:21:2a:5e:e2:43:50:bd:57:
                    3d:42:46:b5:4d:65:77:b6:57:37:4e:9a:8e:c5:db:
                    99:b9:19:44:f3:c9:1f:81:09:72:83:5c:fd:d8:34:
                    7d:45:5a:64:20:1a:f9:80:21:f0:9c:83:8d:cf:40:
                    97:32:28:0b:e4:2b:90:87:e8:86:0c:f6:4a:ec:ce:
                    02:c9:4c:1a:00:21:23:5c:36:df:dc:80:dc:37:89:
                    8c:3b:4c:1d:11:35:a0:9a:ab:8d:fd:41:3d:5a:a5:
                    d8:4d:b6:20:04:47:dd:25:fa:46:23:fa:67:07:79:
                    84:e7:c6:1c:9d:6b:7b:ea:7a:22:52:9d:6d:89:61:
                    0f:7f:c4:88:d7:a2:ed:0b:de:5e:fa:e9:0b:68:5d:
                    ca:b2:d6:df:b0:f4:b3:81:ff:f8:7d:93:e6:cb:d1:
                    9b:3f:82:e5:07:b7:36:0d:5c:ff:8b:1e:f8:fd:a1:
                    01:38:b0:11:41:84:34:95:2e:bb:68:b9:42:f7:0e:
                    42:16:98:55:22:c0:9d:18:54:04:3f:df:83:47:09:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C0:81:72:C4:D9:63:5A:AB:36:70:A6:E0:1F:AA:52:FE:01:25:BB
            X509v3 Authority Key Identifier:
                keyid:71:D1:10:3F:44:C0:00:16:AA:1B:E6:41:CD:9D:D9:90:10:DC:14:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/71D1103F44C00016AA1BE641CD9DD99010DC14CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D1103F44C00016AA1BE641CD9DD99010DC14CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a3a2f33322d313238203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3448::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:cc:ac:26:95:cf:54:82:e3:6e:27:20:ea:6a:b7:44:d3:42:
         a7:f9:09:a9:63:79:fb:78:c9:44:f9:61:b6:6a:d7:4f:e7:79:
         ad:1e:61:b5:dd:42:a3:d5:89:df:db:47:c9:c9:18:8b:f3:d9:
         21:56:5e:f7:90:89:b9:18:8d:75:f3:9c:99:84:93:ff:6d:d5:
         6c:59:b3:2b:51:63:50:b1:d6:45:d3:a0:e0:66:6e:88:6e:4c:
         5e:2f:8e:e1:fa:58:8f:94:9b:5a:5c:37:00:58:71:fb:d7:20:
         38:c4:67:91:6b:07:6a:16:ed:5c:6f:0d:58:f4:f0:a0:fa:f5:
         bc:5c:11:8e:cc:96:96:65:de:bb:3b:d3:8c:c0:f7:9c:6b:c5:
         7c:7e:8a:9f:f8:4e:6c:09:7a:93:01:bb:59:ea:b9:78:37:6a:
         8d:89:ad:07:23:51:46:99:48:4b:22:ab:aa:f1:f9:b7:cd:45:
         5f:e7:19:e3:ed:e7:9a:0a:5e:02:99:08:9b:d6:07:67:ec:2e:
         bb:23:ec:75:a4:d8:0a:dc:25:74:25:1c:c3:97:0c:11:82:5b:
         2e:b6:c7:22:a0:68:65:f8:08:83:0f:dd:19:40:47:7c:85:6e:
         bb:35:06:8e:10:de:9d:93:53:ee:d9:1f:84:29:c7:cf:bb:13:
         27:64:b8:95
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUF1UFORRlACZTmJ3OF/6COVo29j8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFEMTEwM0Y0NEMwMDAxNkFBMUJFNjQxQ0Q5REQ5OTAx
MERDMTRDQzAeFw0yNjA3MjIxMjMyMTVaFw0yNzA3MjExMjM3MTVaMDMxMTAvBgNV
BAMTKDA1QzA4MTcyQzREOTYzNUFBQjM2NzBBNkUwMUZBQTUyRkUwMTI1QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl/O82F7njiOJdWp3npcUfdAUQ
C1qjD+QhADPfiv2eXHXHiLugb3+mWwoLJb69Eb1QvtkhKl7iQ1C9Vz1CRrVNZXe2
VzdOmo7F25m5GUTzyR+BCXKDXP3YNH1FWmQgGvmAIfCcg43PQJcyKAvkK5CH6IYM
9krszgLJTBoAISNcNt/cgNw3iYw7TB0RNaCaq439QT1apdhNtiAER90l+kYj+mcH
eYTnxhyda3vqeiJSnW2JYQ9/xIjXou0L3l766QtoXcqy1t+w9LOB//h9k+bL0Zs/
guUHtzYNXP+LHvj9oQE4sBFBhDSVLrtouUL3DkIWmFUiwJ0YVAQ/34NHCe4rAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUBcCBcsTZY1qrNnCm4B+qUv4BJbswHwYDVR0j
BBgwFoAUcdEQP0TAABaqG+ZBzZ3ZkBDcFMwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNZS2tLSkhLMmpCYVFRTWRWZFc5cm4zcnZWeDlmc04xaTJzbWZlWExi
RXcvMC83MUQxMTAzRjQ0QzAwMDE2QUExQkU2NDFDRDlERDk5MDEwREMxNENDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRDExMDNGNDRDMDAwMTZB
QTFCRTY0MUNEOUREOTkwMTBEQzE0Q0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTWUtrS0pISzJqQmFRUU1kVmRXOXJuM3J2Vng5ZnNOMWkyc21mZVhMYkV3LzAv
MzIzODMwMzQzYTMzMzQzNDM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzNDM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDRIMA0GCSqGSIb3DQEBCwUAA4IBAQCNzKwm
lc9UguNuJyDqardE00Kn+QmpY3n7eMlE+WG2atdP53mtHmG13UKj1Ynf20fJyRiL
89khVl73kIm5GI1185yZhJP/bdVsWbMrUWNQsdZF06DgZm6IbkxeL47h+liPlJta
XDcAWHH71yA4xGeRawdqFu1cbw1Y9PCg+vW8XBGOzJaWZd67O9OMwPeca8V8foqf
+E5sCXqTAbtZ6rl4N2qNia0HI1FGmUhLIquq8fm3zUVf5xnj7eeaCl4CmQib1gdn
7C67I+x1pNgK3CV0JRzDlwwRglsutscioGhl+AiDD90ZQEd8hW67NQaOEN6dk1Pu
2R+EKcfPuxMnZLiV
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:34:51 2026 by rpki-client