Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a3a2f33342d3334203d3e20323638303730.roa
File:                     323830343a353738383a3a2f33342d3334203d3e20323638303730.roa (raw, json)
Hash identifier:          3daVssIffcCIDQDnfKpYxQBFbKg4RcYGYCc8PkLiRU0=
Subject key identifier:   77:7C:C7:43:B1:3D:99:93:E3:40:E9:BE:D3:77:40:B8:95:D1:73:B6
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       3D7CE8C77F6EA150655377DC3965A716375FEAF8
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a3a2f33342d3334203d3e20323638303730.roa
Signing time:             Fri 28 Aug 2026 22:24:08 +0000
ROA not before:           Fri 28 Aug 2026 22:19:08 +0000
ROA not after:            Fri 27 Aug 2027 22:24:08 +0000
asID:                     268070
IP address blocks:        2804:5788::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl
                          rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7c:e8:c7:7f:6e:a1:50:65:53:77:dc:39:65:a7:16:37:5f:ea:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Aug 28 22:19:08 2026 GMT
            Not After : Aug 27 22:24:08 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:23:18:18:b6:2e:42:ff:e5:94:cd:06:40:
                    c4:3d:1f:f2:b5:32:ae:10:95:a2:79:55:44:47:a5:
                    5d:7f:2f:a7:f2:58:e0:c7:05:05:74:b5:61:39:e8:
                    e6:15:d5:54:a3:3e:47:ae:2d:52:09:a7:97:9d:ac:
                    21:97:c9:5c:6b:d0:49:7b:c0:b5:34:6c:3e:96:c2:
                    c3:00:ff:63:3d:46:94:cf:fd:ed:d2:44:ab:64:7d:
                    af:fe:36:db:df:85:e6:1b:f0:e8:e2:09:dc:5c:4e:
                    16:d1:68:28:f8:77:78:59:5d:6a:4f:ad:16:29:bc:
                    7c:43:9b:be:f6:76:31:25:67:4d:13:d2:df:31:a8:
                    7c:b1:73:9f:bb:92:4d:ca:27:c6:e1:81:f6:59:fa:
                    69:8e:b5:74:47:fb:6f:ec:55:98:0f:ab:8d:95:1a:
                    03:a4:dd:29:f8:2e:7a:56:46:7a:ff:9d:3f:43:03:
                    92:54:cb:e9:a9:b3:55:67:e2:16:fe:4a:73:88:05:
                    46:82:95:2a:a3:e5:70:6e:73:ee:7f:dc:06:90:00:
                    6f:2b:6b:61:0a:e3:ce:12:cc:58:b4:4a:49:08:91:
                    0b:32:d2:86:d6:2f:5a:26:06:e6:51:2f:be:82:98:
                    6a:52:c4:d4:cf:61:73:1e:b9:8a:24:08:1f:be:c2:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7C:C7:43:B1:3D:99:93:E3:40:E9:BE:D3:77:40:B8:95:D1:73:B6
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a3a2f33342d3334203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5788::/34

    Signature Algorithm: sha256WithRSAEncryption
         28:ba:94:90:81:4b:8d:f9:9f:bf:96:96:f1:05:b4:37:ef:66:
         2d:d5:e4:d1:de:50:55:94:d9:75:cb:d7:e5:ad:cf:fe:17:bc:
         22:d1:69:cc:1f:71:43:c5:c1:7f:0d:43:10:2b:19:27:2a:8b:
         3e:6a:81:a1:f6:c1:9d:b8:7e:69:7e:87:fe:9f:08:5c:0d:71:
         a9:5f:bf:38:48:c3:1c:d2:65:86:06:bd:3c:5a:6d:85:ca:c8:
         95:3a:e6:f9:55:e6:5d:2b:d3:ec:85:28:d0:e8:37:59:c8:47:
         80:05:2e:8a:98:47:7e:6e:50:6c:6e:9c:3e:70:8b:85:4b:74:
         15:94:11:1f:6a:7e:b3:1a:7c:79:98:5b:56:17:ba:99:15:a7:
         01:4f:57:47:2d:95:10:df:d9:64:62:be:33:32:b2:4d:12:5b:
         a5:32:99:ba:34:7d:8a:af:f7:3f:38:e0:fe:cd:51:64:cb:87:
         f3:51:b8:3b:30:d9:7f:2c:e3:a4:75:2e:80:8d:8a:29:ae:ff:
         c2:cc:62:39:7d:40:84:f0:37:bc:81:b8:0b:6b:f2:e2:8c:03:
         22:be:c6:a4:5b:56:a2:a2:80:27:b1:e1:5d:c5:15:04:f8:0a:
         f3:6a:83:93:8f:9f:1e:fa:bc:d3:17:5c:c0:a0:01:9b:14:56:
         b3:fd:c2:b0
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUPXzox39uoVBlU3fcOWWnFjdf6vgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVDNDIwNTVBRkM1OUExMDRCODdGRDY3MDYzNzUzMzFC
OEY2QkY1NTAeFw0yNjA4MjgyMjE5MDhaFw0yNzA4MjcyMjI0MDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTEyODIzMTgxOEI2MkU0MkZG
RTU5NENEMDY0MEM0M0QxRkYyQjUzMkFFMTA5NUEyNzk1NTQ0NDdBNTVEN0YyRkE3
RjI1OEUwQzcwNTA1NzRCNTYxMzlFOEU2MTVENTU0QTMzRTQ3QUUyRDUyMDlBNzk3
OURBQzIxOTdDOTVDNkJEMDQ5N0JDMEI1MzQ2QzNFOTZDMkMzMDBGRjYzM0Q0Njk0
Q0ZGREVERDI0NEFCNjQ3REFGRkUzNkRCREY4NUU2MUJGMEU4RTIwOURDNUM0RTE2
RDE2ODI4Rjg3Nzc4NTk1RDZBNEZBRDE2MjlCQzdDNDM5QkJFRjY3NjMxMjU2NzRE
MTNEMkRGMzFBODdDQjE3MzlGQkI5MjREQ0EyN0M2RTE4MUY2NTlGQTY5OEVCNTc0
NDdGQjZGRUM1NTk4MEZBQjhEOTUxQTAzQTRERDI5RjgyRTdBNTY0NjdBRkY5RDNG
NDMwMzkyNTRDQkU5QTlCMzU1NjdFMjE2RkU0QTczODgwNTQ2ODI5NTJBQTNFNTcw
NkU3M0VFN0ZEQzA2OTAwMDZGMkI2QjYxMEFFM0NFMTJDQzU4QjQ0QTQ5MDg5MTBC
MzJEMjg2RDYyRjVBMjYwNkU2NTEyRkJFODI5ODZBNTJDNEQ0Q0Y2MTczMUVCOThB
MjQwODFGQkVDMkI0M0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAoSgjGBi2LkL/5ZTNBkDEPR/ytTKuEJWieVVER6Vdfy+n8ljgxwUF
dLVhOejmFdVUoz5Hri1SCaeXnawhl8lca9BJe8C1NGw+lsLDAP9jPUaUz/3t0kSr
ZH2v/jbb34XmG/Do4gncXE4W0Wgo+Hd4WV1qT60WKbx8Q5u+9nYxJWdNE9LfMah8
sXOfu5JNyifG4YH2WfppjrV0R/tv7FWYD6uNlRoDpN0p+C56VkZ6/50/QwOSVMvp
qbNVZ+IW/kpziAVGgpUqo+VwbnPuf9wGkABvK2thCuPOEsxYtEpJCJELMtKG1i9a
JgbmUS++gphqUsTUz2FzHrmKJAgfvsK0OwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHd8x0OxPZmT40DpvtN3QLiV0XO2MB8GA1UdIwQYMBaAFC7EIFWvxZoQS4f9ZwY3
UzG49r9VMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZZRUZWTEtUV1JkRzdv
b0V4OVF6UGdaajhlVzhOZThqN1p3WERSRFA5aWFELzEvMkVDNDIwNTVBRkM1OUEx
MDRCODdGRDY3MDYzNzUzMzFCOEY2QkY1NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yRUM0MjA1NUFGQzU5QTEwNEI4N0ZENjcwNjM3NTMzMUI4RjZC
RjU1LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GWUVGVkxLVFdSZEc3b29FeDlR
elBnWmo4ZVc4TmU4ajdad1hEUkRQOWlhRC8xLzMyMzgzMDM0M2EzNTM3MzgzODNh
M2EyZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzYzODMwMzczMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigE
V4gAMA0GCSqGSIb3DQEBCwUAA4IBAQAoupSQgUuN+Z+/lpbxBbQ372Yt1eTR3lBV
lNl1y9flrc/+F7wi0WnMH3FDxcF/DUMQKxknKos+aoGh9sGduH5pfof+nwhcDXGp
X784SMMc0mWGBr08Wm2FysiVOub5VeZdK9PshSjQ6DdZyEeABS6KmEd+blBsbpw+
cIuFS3QVlBEfan6zGnx5mFtWF7qZFacBT1dHLZUQ39lkYr4zMrJNElulMpm6NH2K
r/c/OOD+zVFky4fzUbg7MNl/LOOkdS6AjYoprv/CzGI5fUCE8De8gbgLa/LijAMi
vsakW1aiooAnseFdxRUE+ArzaoOTj58e+rzTF1zAoAGbFFaz/cKw
-----END CERTIFICATE-----