Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a633030303a3a2f33342d3334203d3e20323638303730.roa
File:                     323830343a353738383a633030303a3a2f33342d3334203d3e20323638303730.roa (raw, json)
Hash identifier:          a9hAcgCKHPbOP6Vw77oC9CVJ36L1DCRTgDKApGct2q4=
Subject key identifier:   6A:C6:99:5D:8D:E1:50:DD:BC:28:C7:DB:F7:26:0F:FB:E4:67:66:2A
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       4F4F15E0F14E45A727AEC8371C85B4BC4A0FFD28
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a633030303a3a2f33342d3334203d3e20323638303730.roa
Signing time:             Fri 28 Aug 2026 22:24:09 +0000
ROA not before:           Fri 28 Aug 2026 22:19:09 +0000
ROA not after:            Fri 27 Aug 2027 22:24:09 +0000
asID:                     268070
IP address blocks:        2804:5788:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl
                          rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4f:15:e0:f1:4e:45:a7:27:ae:c8:37:1c:85:b4:bc:4a:0f:fd:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Aug 28 22:19:09 2026 GMT
            Not After : Aug 27 22:24:09 2027 GMT
        Subject: CN=3082010A02820101009FFD354D640A4E0EBB369ED2D948E59306A5506CC9085E75214C4A10DC5F919567B90E7798A4D00DBFC4D375927FACD547F0939C1782746DBB150BDA28A08BC1F6C9BB6C2F9EBFCCC2EF61B1FCC4DD280DE7D9F94053CDED4E51731161026D51E6CF78D5C5F259B9D40567FEFD621EEB16E15F4E31F5B1787A3B28BEEACB469F3A737448BCAC43F3E359A1EACB1B45978B7EAB66159BFE43D3AE95638509C3E02160A6821B183FC933555CA69A76D6B94EBC46749C57216012B261EAD7C1AA747F4AB716277EEE8116284F12A6F00FF84B58385E2D0891819324633BA671F33A4D97ACC3231A8100DB3C0F330F2A95E63C4BFE9F3E12FDB09979E44C7DE4E4BF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:35:4d:64:0a:4e:0e:bb:36:9e:d2:d9:48:
                    e5:93:06:a5:50:6c:c9:08:5e:75:21:4c:4a:10:dc:
                    5f:91:95:67:b9:0e:77:98:a4:d0:0d:bf:c4:d3:75:
                    92:7f:ac:d5:47:f0:93:9c:17:82:74:6d:bb:15:0b:
                    da:28:a0:8b:c1:f6:c9:bb:6c:2f:9e:bf:cc:c2:ef:
                    61:b1:fc:c4:dd:28:0d:e7:d9:f9:40:53:cd:ed:4e:
                    51:73:11:61:02:6d:51:e6:cf:78:d5:c5:f2:59:b9:
                    d4:05:67:fe:fd:62:1e:eb:16:e1:5f:4e:31:f5:b1:
                    78:7a:3b:28:be:ea:cb:46:9f:3a:73:74:48:bc:ac:
                    43:f3:e3:59:a1:ea:cb:1b:45:97:8b:7e:ab:66:15:
                    9b:fe:43:d3:ae:95:63:85:09:c3:e0:21:60:a6:82:
                    1b:18:3f:c9:33:55:5c:a6:9a:76:d6:b9:4e:bc:46:
                    74:9c:57:21:60:12:b2:61:ea:d7:c1:aa:74:7f:4a:
                    b7:16:27:7e:ee:81:16:28:4f:12:a6:f0:0f:f8:4b:
                    58:38:5e:2d:08:91:81:93:24:63:3b:a6:71:f3:3a:
                    4d:97:ac:c3:23:1a:81:00:db:3c:0f:33:0f:2a:95:
                    e6:3c:4b:fe:9f:3e:12:fd:b0:99:79:e4:4c:7d:e4:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C6:99:5D:8D:E1:50:DD:BC:28:C7:DB:F7:26:0F:FB:E4:67:66:2A
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a633030303a3a2f33342d3334203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5788:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         42:2b:d5:29:f1:d8:85:8f:07:49:92:f0:30:41:a8:80:5f:84:
         02:88:23:b7:33:86:68:10:f4:de:12:79:13:2d:98:02:a8:ca:
         ab:33:b7:82:2e:cd:93:04:f2:27:62:2d:05:29:7d:52:66:b0:
         cc:19:02:2f:dc:62:24:d3:f2:98:8e:7a:25:03:d0:ba:f0:ff:
         e1:c1:9e:44:97:da:f4:65:fe:ae:96:e4:ea:ae:96:13:8d:e2:
         ee:93:38:87:0d:43:0d:11:4c:2f:ba:c2:8c:3f:6c:d2:c8:a5:
         a6:56:0e:2a:b7:27:45:0d:9d:ed:b5:33:e9:93:f3:84:13:06:
         60:d9:04:64:a6:fa:2c:ac:50:7d:5a:f6:ec:54:c5:1e:7f:c8:
         da:74:9a:7f:4a:a6:6a:e5:84:29:36:51:95:c2:b2:02:22:91:
         b8:5c:12:d8:13:84:23:5e:9f:59:dc:84:00:39:59:4f:fc:08:
         3f:6a:4b:ee:c4:41:58:5d:83:95:59:a8:2e:5c:e9:7b:97:c8:
         2e:d5:e0:f2:f6:3e:d2:50:74:8e:52:2e:f3:dd:0d:c4:56:27:
         25:a1:15:e5:8a:e7:91:24:fd:b3:92:56:5c:b1:b7:8a:06:47:
         03:2c:2a:f0:b2:39:8b:29:fa:81:32:61:9f:8d:fe:d5:01:20:
         99:c3:17:39
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUT08V4PFORacnrsg3HIW0vEoP/SgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVDNDIwNTVBRkM1OUExMDRCODdGRDY3MDYzNzUzMzFC
OEY2QkY1NTAeFw0yNjA4MjgyMjE5MDlaFw0yNzA4MjcyMjI0MDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUZGRDM1NEQ2NDBBNEUwRUJC
MzY5RUQyRDk0OEU1OTMwNkE1NTA2Q0M5MDg1RTc1MjE0QzRBMTBEQzVGOTE5NTY3
QjkwRTc3OThBNEQwMERCRkM0RDM3NTkyN0ZBQ0Q1NDdGMDkzOUMxNzgyNzQ2REJC
MTUwQkRBMjhBMDhCQzFGNkM5QkI2QzJGOUVCRkNDQzJFRjYxQjFGQ0M0REQyODBE
RTdEOUY5NDA1M0NERUQ0RTUxNzMxMTYxMDI2RDUxRTZDRjc4RDVDNUYyNTlCOUQ0
MDU2N0ZFRkQ2MjFFRUIxNkUxNUY0RTMxRjVCMTc4N0EzQjI4QkVFQUNCNDY5RjNB
NzM3NDQ4QkNBQzQzRjNFMzU5QTFFQUNCMUI0NTk3OEI3RUFCNjYxNTlCRkU0M0Qz
QUU5NTYzODUwOUMzRTAyMTYwQTY4MjFCMTgzRkM5MzM1NTVDQTY5QTc2RDZCOTRF
QkM0Njc0OUM1NzIxNjAxMkIyNjFFQUQ3QzFBQTc0N0Y0QUI3MTYyNzdFRUU4MTE2
Mjg0RjEyQTZGMDBGRjg0QjU4Mzg1RTJEMDg5MTgxOTMyNDYzM0JBNjcxRjMzQTRE
OTdBQ0MzMjMxQTgxMDBEQjNDMEYzMzBGMkE5NUU2M0M0QkZFOUYzRTEyRkRCMDk5
NzlFNDRDN0RFNEU0QkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAn/01TWQKTg67Np7S2UjlkwalUGzJCF51IUxKENxfkZVnuQ53mKTQ
Db/E03WSf6zVR/CTnBeCdG27FQvaKKCLwfbJu2wvnr/Mwu9hsfzE3SgN59n5QFPN
7U5RcxFhAm1R5s941cXyWbnUBWf+/WIe6xbhX04x9bF4ejsovurLRp86c3RIvKxD
8+NZoerLG0WXi36rZhWb/kPTrpVjhQnD4CFgpoIbGD/JM1Vcppp21rlOvEZ0nFch
YBKyYerXwap0f0q3Fid+7oEWKE8SpvAP+EtYOF4tCJGBkyRjO6Zx8zpNl6zDIxqB
ANs8DzMPKpXmPEv+nz4S/bCZeeRMfeTkvwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FGrGmV2N4VDdvCjH2/cmD/vkZ2YqMB8GA1UdIwQYMBaAFC7EIFWvxZoQS4f9ZwY3
UzG49r9VMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZZRUZWTEtUV1JkRzdv
b0V4OVF6UGdaajhlVzhOZThqN1p3WERSRFA5aWFELzEvMkVDNDIwNTVBRkM1OUEx
MDRCODdGRDY3MDYzNzUzMzFCOEY2QkY1NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yRUM0MjA1NUFGQzU5QTEwNEI4N0ZENjcwNjM3NTMzMUI4RjZC
RjU1LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GWUVGVkxLVFdSZEc3b29FeDlR
elBnWmo4ZVc4TmU4ajdad1hEUkRQOWlhRC8xLzMyMzgzMDM0M2EzNTM3MzgzODNh
NjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzgzMDM3MzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBFeIwDANBgkqhkiG9w0BAQsFAAOCAQEAQivVKfHYhY8HSZLwMEGo
gF+EAogjtzOGaBD03hJ5Ey2YAqjKqzO3gi7NkwTyJ2ItBSl9UmawzBkCL9xiJNPy
mI56JQPQuvD/4cGeRJfa9GX+rpbk6q6WE43i7pM4hw1DDRFML7rCjD9s0silplYO
KrcnRQ2d7bUz6ZPzhBMGYNkEZKb6LKxQfVr27FTFHn/I2nSaf0qmauWEKTZRlcKy
AiKRuFwS2BOEI16fWdyEADlZT/wIP2pL7sRBWF2DlVmoLlzpe5fILtXg8vY+0lB0
jlIu890NxFYnJaEV5YrnkST9s5JWXLG3igZHAywq8LI5iyn6gTJhn43+1QEgmcMX
OQ==
-----END CERTIFICATE-----