Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a343030303a3a2f33342d3334203d3e20323635343834.roa
File:                     323830343a333464383a343030303a3a2f33342d3334203d3e20323635343834.roa (raw, json)
Hash identifier:          MqHf8Co4aOlfYU4DcbPiTsFGUObTM9xiDeh9AQ76DLo=
Subject key identifier:   15:3E:A8:E9:6D:50:F8:98:6B:50:02:91:A3:CA:56:0E:82:33:D2:15
Certificate issuer:       /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Certificate serial:       05C9525D783DC58DB14CBDC87C32DABD399E7D74
Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a343030303a3a2f33342d3334203d3e20323635343834.roa
Signing time:             Thu 08 Oct 2026 14:50:18 +0000
ROA not before:           Thu 08 Oct 2026 14:45:18 +0000
ROA not after:            Thu 07 Oct 2027 14:50:18 +0000
asID:                     265484
IP address blocks:        2804:34d8:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 08:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c9:52:5d:78:3d:c5:8d:b1:4c:bd:c8:7c:32:da:bd:39:9e:7d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
        Validity
            Not Before: Oct  8 14:45:18 2026 GMT
            Not After : Oct  7 14:50:18 2027 GMT
        Subject: CN=153EA8E96D50F8986B500291A3CA560E8233D215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:6d:d1:de:a6:f0:8b:b3:26:ae:95:d2:59:
                    69:05:a7:01:a4:ba:f4:99:e7:52:c6:17:7b:51:e1:
                    2a:c2:ba:af:64:82:ab:69:d5:28:95:75:22:61:a9:
                    21:c7:ee:11:2b:69:11:14:9d:a8:04:81:40:b9:0e:
                    d7:bc:70:a4:2a:91:eb:fa:cb:d9:70:5b:49:95:84:
                    1e:28:2d:47:e3:0b:a1:c6:73:d6:b3:d3:3e:0b:b6:
                    8c:77:8a:8b:0f:dc:92:32:ad:72:94:69:c3:f3:87:
                    96:68:98:3f:94:a7:f9:5d:8d:66:2c:4e:b9:bc:4d:
                    5f:9d:79:6c:80:f4:db:f3:76:30:f1:16:d2:93:19:
                    61:22:d8:13:93:d0:85:a9:6d:cb:9e:f8:92:8e:f4:
                    e1:47:d7:3d:74:5a:03:b2:eb:6d:0d:a8:6a:7f:51:
                    ca:97:6d:56:cd:e7:a4:cd:ab:6b:da:39:ef:66:2d:
                    87:cd:4f:9d:3f:fe:d0:42:00:9f:d8:a1:cf:2a:a4:
                    73:77:a2:42:f3:e3:ac:93:ae:56:25:04:6b:53:68:
                    4b:66:61:ea:4b:b6:a9:50:7b:d5:df:36:61:4a:af:
                    29:0c:9b:ef:9f:4d:b6:6e:04:bb:5f:1e:fb:33:fa:
                    a4:b3:e7:2c:17:ff:24:ad:74:00:3d:36:3c:b9:8a:
                    e9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3E:A8:E9:6D:50:F8:98:6B:50:02:91:A3:CA:56:0E:82:33:D2:15
            X509v3 Authority Key Identifier:
                keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a343030303a3a2f33342d3334203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2b:15:68:38:c7:12:35:ab:49:c1:d2:d5:ca:1b:51:6a:ce:83:
         b3:9c:05:a3:fa:d5:32:21:8d:51:69:4f:13:22:d0:b4:b3:02:
         df:1c:98:ae:c8:d0:36:49:f3:4c:52:1a:29:69:71:33:15:77:
         2c:b7:23:08:6b:06:84:18:0a:c7:e1:ed:01:af:ce:a2:04:d8:
         0e:81:dd:a2:b4:57:dc:96:f4:b3:e6:26:2d:0e:34:63:cb:74:
         6c:14:af:ad:84:4d:f3:e7:be:b1:4b:ad:66:29:31:ad:43:80:
         00:6c:6a:50:44:20:4e:40:ea:cb:82:d9:73:b9:80:c0:cf:f3:
         8d:81:9f:10:9f:ed:e9:dc:44:0c:3b:4b:e6:7c:a3:c9:aa:5c:
         5f:c4:1d:fb:68:0b:b9:4f:82:48:20:b2:51:f7:0b:08:5a:32:
         7c:23:e6:20:b8:42:da:a9:9f:84:17:62:53:f3:4e:eb:09:25:
         97:6c:15:80:17:bb:bb:4f:a2:ac:eb:bb:ea:01:05:ad:31:c1:
         24:02:10:62:c5:7a:8c:e2:1b:49:17:ad:51:d0:09:33:a5:fd:
         c7:a3:46:69:b2:d6:dc:4e:ce:11:d6:35:cd:78:86:3d:37:9d:
         41:49:a1:11:d4:0b:f8:14:6c:dc:68:85:c5:bb:b0:bb:08:c4:
         2f:19:aa:8b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBclSXXg9xY2xTL3IfDLavTmefXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGMzNGQkZFM0NGMDhBMEQ2QkU3QzhDNzMwRjMyQTY2
Rjk3M0VENjAeFw0yNjEwMDgxNDQ1MThaFw0yNzEwMDcxNDUwMThaMDMxMTAvBgNV
BAMTKDE1M0VBOEU5NkQ1MEY4OTg2QjUwMDI5MUEzQ0E1NjBFODIzM0QyMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8cG3R3qbwi7MmrpXSWWkFpwGk
uvSZ51LGF3tR4SrCuq9kgqtp1SiVdSJhqSHH7hEraREUnagEgUC5Dte8cKQqkev6
y9lwW0mVhB4oLUfjC6HGc9az0z4Ltox3iosP3JIyrXKUacPzh5ZomD+Up/ldjWYs
Trm8TV+deWyA9NvzdjDxFtKTGWEi2BOT0IWpbcue+JKO9OFH1z10WgOy620NqGp/
UcqXbVbN56TNq2vaOe9mLYfNT50//tBCAJ/Yoc8qpHN3okLz46yTrlYlBGtTaEtm
YepLtqlQe9XfNmFKrykMm++fTbZuBLtfHvsz+qSz5ywX/yStdAA9Njy5iun7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUFT6o6W1Q+JhrUAKRo8pWDoIz0hUwHwYDVR0j
BBgwFoAUOPM/v+PPCKDWvnyMcw8ypm+XPtYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWZNQ20zeUc2OEpia2V0OHBkaTgyOVozaUVKWDg3RjhoZVJ3TVVtb1NS
bW0vMC8zOEYzM0ZCRkUzQ0YwOEEwRDZCRTdDOEM3MzBGMzJBNjZGOTczRUQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RjMzRkJGRTNDRjA4QTBE
NkJFN0M4QzczMEYzMkE2NkY5NzNFRDYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VmTUNtM3lHNjhKYmtldDhwZGk4MjlaM2lFSlg4N0Y4aGVSd01VbW9TUm1tLzAv
MzIzODMwMzQzYTMzMzQ2NDM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNTM0MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigENNhAMA0GCSqGSIb3DQEBCwUA
A4IBAQArFWg4xxI1q0nB0tXKG1FqzoOznAWj+tUyIY1RaU8TItC0swLfHJiuyNA2
SfNMUhopaXEzFXcstyMIawaEGArH4e0Br86iBNgOgd2itFfclvSz5iYtDjRjy3Rs
FK+thE3z576xS61mKTGtQ4AAbGpQRCBOQOrLgtlzuYDAz/ONgZ8Qn+3p3EQMO0vm
fKPJqlxfxB37aAu5T4JIILJR9wsIWjJ8I+YguELaqZ+EF2JT807rCSWXbBWAF7u7
T6Ks67vqAQWtMcEkAhBixXqM4htJF61R0Akzpf3Ho0ZpstbcTs4R1jXNeIY9N51B
SaER1Av4FGzcaIXFu7C7CMQvGaqL
-----END CERTIFICATE-----
Generated at Sat Oct 17 22:26:44 2026 by rpki-client