Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/323830343a343733303a3a2f33322d3634203d3e20323637303337.roa
File:                     323830343a343733303a3a2f33322d3634203d3e20323637303337.roa (raw, json)
Hash identifier:          AcCo3nU38vHDSHP3hQqp1IX5X8pMgpcedmnmuxuizIg=
Subject key identifier:   07:C4:F0:4E:B9:76:A3:2F:D7:8D:D9:BC:0E:AD:00:DD:BC:75:7D:56
Certificate issuer:       /CN=03BF4AFF1AB77B0E0FD870EB679323489DF549B4
Certificate serial:       2A37CE776430B176D6915D482D7C886DCE46E507
Authority key identifier: 03:BF:4A:FF:1A:B7:7B:0E:0F:D8:70:EB:67:93:23:48:9D:F5:49:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/323830343a343733303a3a2f33322d3634203d3e20323637303337.roa
Signing time:             Tue 08 Sep 2026 19:10:45 +0000
ROA not before:           Tue 08 Sep 2026 19:05:45 +0000
ROA not after:            Tue 07 Sep 2027 19:10:45 +0000
asID:                     267037
IP address blocks:        2804:4730::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.crl
                          rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 17:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:37:ce:77:64:30:b1:76:d6:91:5d:48:2d:7c:88:6d:ce:46:e5:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03BF4AFF1AB77B0E0FD870EB679323489DF549B4
        Validity
            Not Before: Sep  8 19:05:45 2026 GMT
            Not After : Sep  7 19:10:45 2027 GMT
        Subject: CN=07C4F04EB976A32FD78DD9BC0EAD00DDBC757D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:19:3b:f5:a0:3f:de:ea:02:c0:3c:b2:9b:b2:
                    29:57:5c:12:9d:0b:95:17:35:4f:17:80:0c:20:15:
                    9e:45:02:1f:8b:dd:71:03:31:fa:b2:91:e8:95:56:
                    42:32:7f:26:99:c9:1c:9f:01:75:17:2f:91:d5:5c:
                    ad:09:a7:4b:e7:f2:56:d3:a0:2e:69:a2:b3:b4:e3:
                    d2:ac:d6:a4:d8:65:ee:e3:e7:72:e6:ae:f9:d5:5b:
                    17:cd:0b:2b:48:91:4a:44:47:21:19:8e:c6:6e:ea:
                    b8:46:e5:67:91:15:be:02:2a:34:2c:63:1e:e5:2a:
                    6d:b1:25:f8:ed:95:a2:a4:fa:a8:d9:1e:f5:72:4c:
                    17:61:ea:55:53:21:fd:42:73:f3:bf:45:87:d0:7d:
                    fb:6a:0d:bb:1d:09:19:6d:06:81:51:04:da:47:72:
                    0f:e5:5a:d6:8a:cf:18:7c:38:92:19:9e:b6:12:87:
                    71:93:6a:01:77:c0:ce:d8:0c:39:a2:84:95:4b:e8:
                    30:9c:ee:52:bf:b1:db:b3:70:bb:6a:f5:c4:a3:87:
                    44:33:81:46:d0:2f:ec:09:0f:f8:97:32:2f:9b:f3:
                    13:bb:f9:c2:83:b3:ff:15:d7:4d:cf:3e:55:f4:82:
                    d0:29:48:cf:b6:34:1d:d7:f3:6b:b2:33:50:be:8c:
                    98:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C4:F0:4E:B9:76:A3:2F:D7:8D:D9:BC:0E:AD:00:DD:BC:75:7D:56
            X509v3 Authority Key Identifier:
                keyid:03:BF:4A:FF:1A:B7:7B:0E:0F:D8:70:EB:67:93:23:48:9D:F5:49:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/323830343a343733303a3a2f33322d3634203d3e20323637303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4730::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:aa:14:6f:f4:2a:1c:06:63:a6:f1:55:92:dc:18:4b:e9:e4:
         ed:de:94:3c:5d:f8:e0:90:3d:f1:18:e5:04:7f:94:0f:30:c5:
         46:5c:f0:fd:18:d8:05:96:a3:d5:f1:98:c5:ee:27:c4:2a:16:
         ef:00:5d:65:3e:a3:a7:cc:26:8b:05:78:77:5b:43:ab:14:a3:
         db:1c:a8:5b:b4:c3:48:99:db:7a:23:8f:32:d3:45:cf:94:02:
         e4:64:96:95:3b:02:58:b4:e1:92:a3:84:4e:02:b5:ba:6f:e7:
         05:3b:9d:05:5b:37:b9:ab:a7:c5:a5:86:6a:01:38:bd:1c:03:
         71:eb:04:fa:4d:b0:da:e8:58:2e:0a:22:80:a7:90:fc:f8:ca:
         f9:7f:1b:8f:b5:8d:4f:56:83:bc:b1:4a:75:64:dd:c6:eb:6f:
         5b:c7:31:58:e5:c6:f5:81:e0:01:e4:e7:33:22:9a:f6:eb:51:
         68:3c:b6:83:cb:70:59:4c:f7:ea:1a:47:44:1d:d3:0e:c2:5c:
         9a:82:5e:bd:f8:f4:2e:f8:f2:ef:98:3b:3e:68:2a:01:0c:6e:
         6f:87:b9:e6:9b:e8:71:46:f8:b4:da:d2:94:ad:49:ce:59:90:
         ff:a9:0b:42:81:ce:6a:77:7c:cd:10:8b:31:8c:68:c7:f7:9c:
         af:f6:44:99
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKjfOd2QwsXbWkV1ILXyIbc5G5QcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNCRjRBRkYxQUI3N0IwRTBGRDg3MEVCNjc5MzIzNDg5
REY1NDlCNDAeFw0yNjA5MDgxOTA1NDVaFw0yNzA5MDcxOTEwNDVaMDMxMTAvBgNV
BAMTKDA3QzRGMDRFQjk3NkEzMkZENzhERDlCQzBFQUQwMEREQkM3NTdENTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGTv1oD/e6gLAPLKbsilXXBKd
C5UXNU8XgAwgFZ5FAh+L3XEDMfqykeiVVkIyfyaZyRyfAXUXL5HVXK0Jp0vn8lbT
oC5porO049Ks1qTYZe7j53LmrvnVWxfNCytIkUpERyEZjsZu6rhG5WeRFb4CKjQs
Yx7lKm2xJfjtlaKk+qjZHvVyTBdh6lVTIf1Cc/O/RYfQfftqDbsdCRltBoFRBNpH
cg/lWtaKzxh8OJIZnrYSh3GTagF3wM7YDDmihJVL6DCc7lK/sduzcLtq9cSjh0Qz
gUbQL+wJD/iXMi+b8xO7+cKDs/8V103PPlX0gtApSM+2NB3X82uyM1C+jJjPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUB8TwTrl2oy/Xjdm8Dq0A3bx1fVYwHwYDVR0j
BBgwFoAUA79K/xq3ew4P2HDrZ5MjSJ31SbQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWlHVURISGFHNmRpQlNRckVRc3RQTVlrNHY4dXZZazcyQVg2a05Kckc2
bksvMC8wM0JGNEFGRjFBQjc3QjBFMEZEODcwRUI2NzkzMjM0ODlERjU0OUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzQkY0QUZGMUFCNzdCMEUw
RkQ4NzBFQjY3OTMyMzQ4OURGNTQ5QjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VpR1VESEhhRzZkaUJTUXJFUXN0UE1ZazR2OHV2WWs3MkFYNmtOSnJHNm5LLzAv
MzIzODMwMzQzYTM0MzczMzMwM2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzIzNjM3
MzAzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARHMDANBgkqhkiG9w0BAQsFAAOCAQEALaoUb/Qq
HAZjpvFVktwYS+nk7d6UPF344JA98RjlBH+UDzDFRlzw/RjYBZaj1fGYxe4nxCoW
7wBdZT6jp8wmiwV4d1tDqxSj2xyoW7TDSJnbeiOPMtNFz5QC5GSWlTsCWLThkqOE
TgK1um/nBTudBVs3uaunxaWGagE4vRwDcesE+k2w2uhYLgoigKeQ/PjK+X8bj7WN
T1aDvLFKdWTdxutvW8cxWOXG9YHgAeTnMyKa9utRaDy2g8twWUz36hpHRB3TDsJc
moJevfj0Lvjy75g7PmgqAQxub4e55pvocUb4tNrSlK1JzlmQ/6kLQoHOand8zRCL
MYxox/ecr/ZEmQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 00:05:25 2026 by rpki-client