Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa
File:                     323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa (raw, json)
Hash identifier:          Qw6cvSGPAGCXc+IOnnT8kZRQWxGIDcJ6va/N5avayi8=
Subject key identifier:   53:44:99:CF:CC:CF:12:0A:3A:71:7A:F5:80:64:B5:58:E2:62:4A:7F
Certificate issuer:       /CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
Certificate serial:       4FFA986273133C88DD33AEA7D81F082F1C7DC2A5
Authority key identifier: 4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa
Signing time:             Wed 07 Oct 2026 05:01:07 +0000
ROA not before:           Wed 07 Oct 2026 04:56:07 +0000
ROA not after:            Wed 06 Oct 2027 05:01:07 +0000
asID:                     270765
IP address blocks:        2804:7114:167::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl
                          rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 20:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:fa:98:62:73:13:3c:88:dd:33:ae:a7:d8:1f:08:2f:1c:7d:c2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Validity
            Not Before: Oct  7 04:56:07 2026 GMT
            Not After : Oct  6 05:01:07 2027 GMT
        Subject: CN=534499CFCCCF120A3A717AF58064B558E2624A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:01:cc:88:45:80:a5:82:31:ac:82:a4:35:fd:
                    b5:d4:24:bb:0d:bb:7d:2d:c9:e3:c3:b9:d0:5b:f7:
                    8f:c1:31:05:10:b2:19:c6:9b:80:75:de:c9:09:fb:
                    39:de:c4:1a:11:9e:c0:4a:93:9a:4c:91:5c:b9:3c:
                    46:24:ae:13:3d:93:c9:ca:ac:7f:21:37:e8:e8:b6:
                    2a:b1:9b:78:39:3e:b4:6d:a1:e9:12:37:51:c7:1d:
                    c5:48:26:39:b4:e8:67:bb:2d:a5:95:f6:e9:4e:c1:
                    ce:cd:cc:dd:cf:f4:e7:fc:be:49:92:44:e0:7f:a0:
                    5b:d1:0b:68:ba:33:67:18:f4:12:3c:94:e8:d2:5d:
                    1f:28:0e:04:c0:04:45:a0:8b:c0:03:38:ba:6a:02:
                    d8:d8:c3:98:cf:d7:5c:89:b8:de:ca:b0:26:c8:70:
                    6b:f3:df:0b:e6:62:8c:dc:2d:c0:ed:c3:27:c9:b8:
                    cf:6e:83:07:e6:46:4e:ef:83:97:60:d1:b0:96:9a:
                    47:83:3b:a3:f0:a7:f7:27:9c:71:c6:3e:a7:40:f5:
                    60:03:68:d0:65:fb:52:d6:47:fb:aa:fe:1d:02:17:
                    b1:a7:9f:58:50:3f:62:08:09:c8:43:38:27:1d:a9:
                    ec:16:4d:f6:63:45:b0:f5:8c:17:78:36:d8:b8:e9:
                    ba:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:44:99:CF:CC:CF:12:0A:3A:71:7A:F5:80:64:B5:58:E2:62:4A:7F
            X509v3 Authority Key Identifier:
                keyid:4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/323830343a373131343a3136373a3a2f3438203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7114:167::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:06:f2:60:80:0e:8e:26:ba:0b:52:64:cd:13:08:ed:6f:48:
         00:5d:8f:7f:e4:75:f0:2b:00:54:51:40:ed:eb:e2:38:14:95:
         7c:06:11:9a:78:67:dc:39:e7:1f:72:a7:b0:13:af:b9:a2:c1:
         9e:ba:32:f6:aa:2a:0a:8d:f5:97:d8:f0:87:21:a2:55:f7:25:
         c7:b3:fd:b7:6d:fe:a2:d9:f2:a0:54:ec:ba:bf:7f:cb:e8:9f:
         d1:eb:08:86:eb:94:ef:58:7c:cf:12:bd:99:2f:e1:40:2c:23:
         f8:0a:d9:de:eb:c2:3b:87:c5:58:1d:44:04:bb:bf:c5:ae:6c:
         c1:40:d7:df:48:0d:d5:14:8c:42:84:53:5c:0c:53:34:0c:3b:
         59:30:7c:23:b5:61:fd:c2:a3:74:2c:3e:bf:7b:a6:69:9a:3a:
         eb:26:52:f6:b3:8a:dc:2e:8a:1e:dc:79:5a:9d:13:7e:fa:c1:
         80:2a:56:3e:49:c6:18:80:e2:b9:b2:6f:d2:44:0a:b4:8b:0d:
         bb:4e:66:12:46:0a:19:23:ac:b1:d7:34:87:d4:86:9d:76:17:
         7c:89:02:b9:5d:ab:bc:93:9e:5a:5b:49:60:bd:25:04:ec:5d:
         4f:54:7f:b1:6b:6a:0f:19:ce:bd:2b:93:7f:5a:12:ef:70:84:
         46:18:ff:35
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUT/qYYnMTPIjdM66n2B8ILxx9wqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERBMjdFQjgzNEEyQjgzRjBCMkFDOEMwNERGRkFFOTY4
MzgxOTczQTAeFw0yNjEwMDcwNDU2MDdaFw0yNzEwMDYwNTAxMDdaMDMxMTAvBgNV
BAMTKDUzNDQ5OUNGQ0NDRjEyMEEzQTcxN0FGNTgwNjRCNTU4RTI2MjRBN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpAcyIRYClgjGsgqQ1/bXUJLsN
u30tyePDudBb94/BMQUQshnGm4B13skJ+znexBoRnsBKk5pMkVy5PEYkrhM9k8nK
rH8hN+jotiqxm3g5PrRtoekSN1HHHcVIJjm06Ge7LaWV9ulOwc7NzN3P9Of8vkmS
ROB/oFvRC2i6M2cY9BI8lOjSXR8oDgTABEWgi8ADOLpqAtjYw5jP11yJuN7KsCbI
cGvz3wvmYozcLcDtwyfJuM9ugwfmRk7vg5dg0bCWmkeDO6Pwp/cnnHHGPqdA9WAD
aNBl+1LWR/uq/h0CF7Gnn1hQP2IICchDOCcdqewWTfZjRbD1jBd4Nti46boJAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUU0SZz8zPEgo6cXr1gGS1WOJiSn8wHwYDVR0j
BBgwFoAUTaJ+uDSiuD8LKsjATf+uloOBlzowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnhrOXZjZ3gxYjRkREh1UlY4TXI1Ykw3UU5UajVva1ZnZVFRUzVSd1lr
R2svMS80REEyN0VCODM0QTJCODNGMEIyQUM4QzA0REZGQUU5NjgzODE5NzNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREQTI3RUI4MzRBMkI4M0Yw
QjJBQzhDMDRERkZBRTk2ODM4MTk3M0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z4azl2Y2d4MWI0ZERIdVJWOE1yNWJMN1FOVGo1b2tWZ2VRUVM1UndZa0drLzEv
MzIzODMwMzQzYTM3MzEzMTM0M2EzMTM2MzczYTNhMmYzNDM4MjAzZDNlMjAzMjM3
MzAzNzM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBHEUAWcwDQYJKoZIhvcNAQELBQADggEBAIIG
8mCADo4mugtSZM0TCO1vSABdj3/kdfArAFRRQO3r4jgUlXwGEZp4Z9w55x9yp7AT
r7miwZ66MvaqKgqN9ZfY8IcholX3Jcez/bdt/qLZ8qBU7Lq/f8von9HrCIbrlO9Y
fM8SvZkv4UAsI/gK2d7rwjuHxVgdRAS7v8WubMFA199IDdUUjEKEU1wMUzQMO1kw
fCO1Yf3Co3QsPr97pmmaOusmUvazitwuih7ceVqdE376wYAqVj5JxhiA4rmyb9JE
CrSLDbtOZhJGChkjrLHXNIfUhp12F3yJArldq7yTnlpbSWC9JQTsXU9Uf7Frag8Z
zr0rk39aEu9whEYY/zU=
-----END CERTIFICATE-----
Generated at Mon Nov 2 02:03:41 2026 by rpki-client