Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/323830343a356161633a3a2f33322d3438203d3e20323638373838.roa
File:                     323830343a356161633a3a2f33322d3438203d3e20323638373838.roa (raw, json)
Hash identifier:          iltXWUL8ShHYOeDNGUtHpGtGg/H16AvJyw+0RB8Vc9g=
Subject key identifier:   E4:44:CC:EC:9B:EA:CC:A6:79:1F:D2:6F:68:16:3E:22:3B:85:C5:EA
Certificate issuer:       /CN=24B3423445CE5D36280D8F72151340DCBE34B7BB
Certificate serial:       7134A35F9FC4EB86C2698E516428870418A8E5C2
Authority key identifier: 24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/323830343a356161633a3a2f33322d3438203d3e20323638373838.roa
Signing time:             Fri 10 Jul 2026 21:15:11 +0000
ROA not before:           Fri 10 Jul 2026 21:10:11 +0000
ROA not after:            Fri 09 Jul 2027 21:15:11 +0000
asID:                     268788
IP address blocks:        2804:5aac::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl
                          rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:34:a3:5f:9f:c4:eb:86:c2:69:8e:51:64:28:87:04:18:a8:e5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24B3423445CE5D36280D8F72151340DCBE34B7BB
        Validity
            Not Before: Jul 10 21:10:11 2026 GMT
            Not After : Jul  9 21:15:11 2027 GMT
        Subject: CN=E444CCEC9BEACCA6791FD26F68163E223B85C5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:00:cc:ab:72:19:1d:7f:01:8f:97:b3:f2:b9:
                    7b:08:3a:1c:68:08:8d:ee:2b:4b:6d:90:fc:00:70:
                    72:fa:ee:9d:9e:0e:60:19:b0:64:84:c6:9e:b0:6e:
                    51:e4:8e:6d:7a:b0:2f:3f:e1:df:d7:f2:85:aa:ab:
                    4d:3d:d6:d1:74:63:d9:23:89:c0:9c:bf:11:b1:17:
                    44:d1:7b:f5:7c:58:63:97:ad:6c:c1:1e:32:ea:6e:
                    99:0a:aa:01:c7:54:3b:0a:fb:9c:50:20:9c:5b:c8:
                    62:a8:b7:39:c8:f7:50:44:68:e5:f9:14:96:42:61:
                    bf:54:f8:96:4c:50:5b:e9:2a:7a:1c:f1:67:03:48:
                    6e:fc:f0:be:fa:ee:c9:fc:f7:30:34:0f:8f:cd:8f:
                    35:6b:d3:fd:e3:2c:06:2f:47:c6:b1:8c:d1:0e:d8:
                    1d:0e:a2:7e:f6:99:5b:f4:d1:23:ab:63:06:7e:ea:
                    0d:2d:98:70:63:3e:2c:37:1e:c5:e0:d7:2a:4d:7a:
                    93:bc:89:85:62:dc:24:4e:2a:99:08:f7:a0:94:47:
                    d0:e2:35:4e:39:44:09:34:86:9b:08:1b:c6:2b:2d:
                    b7:bd:4d:0f:bb:32:cf:d6:3a:ee:e8:f3:4f:4c:36:
                    86:8e:3b:8d:e6:57:e4:39:05:44:c9:3c:48:24:78:
                    97:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:44:CC:EC:9B:EA:CC:A6:79:1F:D2:6F:68:16:3E:22:3B:85:C5:EA
            X509v3 Authority Key Identifier:
                keyid:24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/323830343a356161633a3a2f33322d3438203d3e20323638373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aac::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:e7:61:91:bb:8a:c8:2d:ea:32:e8:d8:f0:ef:b8:60:28:da:
         4f:c0:3b:42:59:e7:c7:f3:e4:2f:b4:87:46:2f:48:da:30:58:
         c6:40:50:52:1e:2b:95:78:63:d8:2b:8f:67:e4:ac:34:0e:b1:
         9a:51:d6:b6:68:8c:2d:2d:6d:4c:bd:a9:a0:71:f3:c4:99:cc:
         4b:bb:27:d2:fa:99:cd:30:5d:b4:77:da:cf:52:d0:9f:44:db:
         8b:d9:71:ad:17:e8:ec:94:01:44:d3:5a:fc:f5:b8:49:e3:21:
         1f:49:39:8c:89:b7:03:d1:5d:29:a4:a6:9d:03:6d:12:61:65:
         de:5a:13:11:05:4c:d5:4e:fb:1f:92:eb:ac:e6:be:bd:61:f4:
         f1:a0:50:4e:5a:fb:fa:52:bd:ac:f9:d4:ed:b1:c7:5c:71:3a:
         db:e5:0c:2b:29:25:17:b1:d8:e1:a7:73:1f:71:fc:91:ec:63:
         9c:4f:06:c5:6f:4a:35:31:bc:19:3b:42:1b:fd:ca:c9:6e:29:
         7f:8e:7d:93:66:97:02:58:50:78:58:8b:26:b6:77:14:06:c6:
         59:18:a7:a0:0f:3a:66:22:02:8a:64:ae:24:b1:ae:69:a9:67:
         3d:a4:4e:e9:15:38:9f:d9:6a:ba:c0:a8:f2:65:b3:8d:fe:f5:
         7a:ed:2c:74
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcTSjX5/E64bCaY5RZCiHBBio5cIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRCMzQyMzQ0NUNFNUQzNjI4MEQ4RjcyMTUxMzQwRENC
RTM0QjdCQjAeFw0yNjA3MTAyMTEwMTFaFw0yNzA3MDkyMTE1MTFaMDMxMTAvBgNV
BAMTKEU0NDRDQ0VDOUJFQUNDQTY3OTFGRDI2RjY4MTYzRTIyM0I4NUM1RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpAMyrchkdfwGPl7PyuXsIOhxo
CI3uK0ttkPwAcHL67p2eDmAZsGSExp6wblHkjm16sC8/4d/X8oWqq0091tF0Y9kj
icCcvxGxF0TRe/V8WGOXrWzBHjLqbpkKqgHHVDsK+5xQIJxbyGKotznI91BEaOX5
FJZCYb9U+JZMUFvpKnoc8WcDSG788L767sn89zA0D4/NjzVr0/3jLAYvR8axjNEO
2B0Oon72mVv00SOrYwZ+6g0tmHBjPiw3HsXg1ypNepO8iYVi3CROKpkI96CUR9Di
NU45RAk0hpsIG8YrLbe9TQ+7Ms/WOu7o809MNoaOO43mV+Q5BUTJPEgkeJfnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU5ETM7JvqzKZ5H9JvaBY+IjuFxeowHwYDVR0j
BBgwFoAUJLNCNEXOXTYoDY9yFRNA3L40t7swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdq
QkUvMC8yNEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0QjM0MjM0NDVDRTVEMzYy
ODBEOEY3MjE1MTM0MERDQkUzNEI3QkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hDV1prd0VVZzJ4c2pLSnhuUzdwNThOOEJYQ2tYYnppc0R3WHBvUDVnakJFLzAv
MzIzODMwMzQzYTM1NjE2MTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzczODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARarDANBgkqhkiG9w0BAQsFAAOCAQEAcedhkbuK
yC3qMujY8O+4YCjaT8A7Qlnnx/PkL7SHRi9I2jBYxkBQUh4rlXhj2CuPZ+SsNA6x
mlHWtmiMLS1tTL2poHHzxJnMS7sn0vqZzTBdtHfaz1LQn0Tbi9lxrRfo7JQBRNNa
/PW4SeMhH0k5jIm3A9FdKaSmnQNtEmFl3loTEQVM1U77H5LrrOa+vWH08aBQTlr7
+lK9rPnU7bHHXHE62+UMKyklF7HY4adzH3H8kexjnE8GxW9KNTG8GTtCG/3KyW4p
f459k2aXAlhQeFiLJrZ3FAbGWRinoA86ZiICimSuJLGuaalnPaRO6RU4n9lqusCo
8mWzjf71eu0sdA==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:59:55 2026 by rpki-client