Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/323830343a323566633a3a2f33322d3332203d3e20323634333136.roa
File:                     323830343a323566633a3a2f33322d3332203d3e20323634333136.roa (raw, json)
Hash identifier:          njSsgydwYcqPrWfrusayrXBamn3JgBIqsakaHO5Te8w=
Subject key identifier:   E9:90:E7:E6:7E:EF:F1:96:94:AE:AF:2F:D1:BC:97:84:65:56:2B:78
Certificate issuer:       /CN=8D70EDA63A000300CA6254AFB93B7CE5A0E823A1
Certificate serial:       14E23BED395E6105D4DD68A03EAD08AE29297C99
Authority key identifier: 8D:70:ED:A6:3A:00:03:00:CA:62:54:AF:B9:3B:7C:E5:A0:E8:23:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D70EDA63A000300CA6254AFB93B7CE5A0E823A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/323830343a323566633a3a2f33322d3332203d3e20323634333136.roa
Signing time:             Wed 15 Apr 2026 19:45:55 +0000
ROA not before:           Wed 15 Apr 2026 19:40:55 +0000
ROA not after:            Wed 14 Apr 2027 19:45:55 +0000
asID:                     264316
IP address blocks:        2804:25fc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8D70EDA63A000300CA6254AFB93B7CE5A0E823A1.crl
                          rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8D70EDA63A000300CA6254AFB93B7CE5A0E823A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D70EDA63A000300CA6254AFB93B7CE5A0E823A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e2:3b:ed:39:5e:61:05:d4:dd:68:a0:3e:ad:08:ae:29:29:7c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D70EDA63A000300CA6254AFB93B7CE5A0E823A1
        Validity
            Not Before: Apr 15 19:40:55 2026 GMT
            Not After : Apr 14 19:45:55 2027 GMT
        Subject: CN=E990E7E67EEFF19694AEAF2FD1BC978465562B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:b3:d6:f6:0f:e1:3e:ae:d3:3a:1f:e2:3b:
                    6d:3e:d6:9f:7b:9f:cf:27:cd:01:bd:10:e0:1a:41:
                    e9:de:a1:c6:b7:c4:23:83:61:fc:07:6d:ac:c1:4f:
                    83:9b:a9:5c:15:c1:c8:56:e0:4e:d7:fa:50:86:8c:
                    7e:26:95:5c:ed:46:cf:95:da:8d:1b:aa:af:af:99:
                    72:b0:7c:ae:39:21:f8:1a:cc:a6:a3:fe:34:7b:95:
                    36:89:4b:4d:4c:f2:06:ba:29:b5:3e:9c:3e:f2:05:
                    c9:2f:ed:c7:73:d0:f5:dc:0c:f2:dc:fc:1a:f0:c0:
                    46:8c:7b:08:09:64:b0:d2:63:40:5b:ae:01:67:74:
                    d8:d3:c1:96:1b:d9:45:10:d7:71:ab:4b:5b:84:82:
                    09:26:9d:3f:05:ad:c5:9e:9b:df:6a:f4:bd:9a:3e:
                    56:b3:79:58:27:83:1b:da:bb:71:6d:f9:0a:28:6d:
                    61:b5:41:37:61:b4:4d:66:8b:fa:cf:19:9c:4a:c7:
                    84:e4:5e:4a:82:04:03:20:1b:b7:01:48:1e:8f:bb:
                    a7:5a:68:7e:05:cd:66:6b:4e:d4:fc:03:11:e1:f1:
                    53:f7:49:b5:ee:fc:95:4c:ae:bc:28:51:af:02:fb:
                    e6:47:ff:07:ba:87:4e:85:e2:9b:4a:76:38:1e:e4:
                    82:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:90:E7:E6:7E:EF:F1:96:94:AE:AF:2F:D1:BC:97:84:65:56:2B:78
            X509v3 Authority Key Identifier:
                keyid:8D:70:ED:A6:3A:00:03:00:CA:62:54:AF:B9:3B:7C:E5:A0:E8:23:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/8D70EDA63A000300CA6254AFB93B7CE5A0E823A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D70EDA63A000300CA6254AFB93B7CE5A0E823A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/323830343a323566633a3a2f33322d3332203d3e20323634333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:b2:20:66:dc:87:4b:cd:5a:34:4d:2d:6a:4c:6a:bc:96:8c:
         2b:2e:df:52:8f:6f:a4:ca:61:a0:85:7b:06:d2:00:61:14:9f:
         b1:0d:23:3a:ec:85:05:bd:1d:99:e1:83:d7:d6:20:34:55:e7:
         6e:f8:d0:f1:69:fb:39:90:09:3f:4a:43:2f:0c:ed:a8:c7:3f:
         04:f8:e4:6e:bd:67:d0:77:2b:6a:94:ba:82:63:d0:5f:83:a2:
         79:60:1f:bc:d8:26:80:0b:e0:01:24:c0:c6:78:b7:c7:d4:bd:
         5e:06:c8:e3:a9:b8:82:7e:5f:78:f8:ef:7e:d2:e7:30:00:08:
         99:9f:12:3a:02:2f:e9:2a:65:2b:ab:54:c8:1e:27:d5:24:1d:
         44:77:fa:4e:dc:d5:a4:a5:7b:db:d1:9d:eb:4f:14:6e:f2:97:
         47:1e:de:bf:c3:5d:91:c4:e4:8a:a9:b1:a2:41:a2:dc:a6:fd:
         2c:43:48:b9:bb:7d:03:6e:49:f7:b3:34:20:c9:38:49:a6:31:
         8b:f9:53:1a:2e:2f:29:44:aa:4d:cd:89:05:d5:c4:a1:14:84:
         89:e5:34:d6:7d:f6:29:59:17:f0:41:a7:4a:9c:23:b5:51:86:
         f6:2e:eb:df:d9:9e:2b:35:82:a5:85:f4:42:c0:44:28:00:29:
         8f:0f:84:82
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFOI77TleYQXU3WigPq0IrikpfJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ3MEVEQTYzQTAwMDMwMENBNjI1NEFGQjkzQjdDRTVB
MEU4MjNBMTAeFw0yNjA0MTUxOTQwNTVaFw0yNzA0MTQxOTQ1NTVaMDMxMTAvBgNV
BAMTKEU5OTBFN0U2N0VFRkYxOTY5NEFFQUYyRkQxQkM5Nzg0NjU1NjJCNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8bPW9g/hPq7TOh/iO20+1p97
n88nzQG9EOAaQeneoca3xCODYfwHbazBT4ObqVwVwchW4E7X+lCGjH4mlVztRs+V
2o0bqq+vmXKwfK45IfgazKaj/jR7lTaJS01M8ga6KbU+nD7yBckv7cdz0PXcDPLc
/BrwwEaMewgJZLDSY0BbrgFndNjTwZYb2UUQ13GrS1uEggkmnT8FrcWem99q9L2a
PlazeVgngxvau3Ft+QoobWG1QTdhtE1mi/rPGZxKx4TkXkqCBAMgG7cBSB6Pu6da
aH4FzWZrTtT8AxHh8VP3SbXu/JVMrrwoUa8C++ZH/we6h06F4ptKdjge5ILnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6ZDn5n7v8ZaUrq8v0byXhGVWK3gwHwYDVR0j
BBgwFoAUjXDtpjoAAwDKYlSvuTt85aDoI6EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTJCS2I2ZXRVUVR3SEVYSkJQODJES1NiOE1TelBKUDRKU3d3WnNuSzY1
cm0vMC84RDcwRURBNjNBMDAwMzAwQ0E2MjU0QUZCOTNCN0NFNUEwRTgyM0ExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhENzBFREE2M0EwMDAzMDBD
QTYyNTRBRkI5M0I3Q0U1QTBFODIzQTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UyQktiNmV0VVFUd0hFWEpCUDgyREtTYjhNU3pQSlA0SlN3d1pzbks2NXJtLzAv
MzIzODMwMzQzYTMyMzU2NjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzMzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQl/DANBgkqhkiG9w0BAQsFAAOCAQEAlrIgZtyH
S81aNE0takxqvJaMKy7fUo9vpMphoIV7BtIAYRSfsQ0jOuyFBb0dmeGD19YgNFXn
bvjQ8Wn7OZAJP0pDLwztqMc/BPjkbr1n0HcrapS6gmPQX4OieWAfvNgmgAvgASTA
xni3x9S9XgbI46m4gn5fePjvftLnMAAImZ8SOgIv6SplK6tUyB4n1SQdRHf6TtzV
pKV729Gd608UbvKXRx7ev8NdkcTkiqmxokGi3Kb9LENIubt9A25J97M0IMk4SaYx
i/lTGi4vKUSqTc2JBdXEoRSEieU01n32KVkX8EGnSpwjtVGG9i7r39meKzWCpYX0
QsBEKAApjw+Egg==
-----END CERTIFICATE-----
Generated at Wed May 13 18:08:30 2026 by rpki-client