Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HP9ExGCJePheLzXxgvAuXpjYAGR32TAaxbfS9Dag7XFp/0/323830343a353565383a3a2f33322d313238203d3e20323637393634.roa
File:                     323830343a353565383a3a2f33322d313238203d3e20323637393634.roa (raw, json)
Hash identifier:          RRbT+DLNPErRTsDUdFqaZNL60uLZxfv3/lqJyd6PGlE=
Subject key identifier:   D1:14:31:B6:5D:9A:77:29:05:99:6C:47:2F:47:AE:E2:EF:C0:09:1A
Certificate issuer:       /CN=358ED7BCB08A53CCBE55F0C30437A8ED262319EB
Certificate serial:       68B0A0471C7277A759A86F01588F93EAA2634B7C
Authority key identifier: 35:8E:D7:BC:B0:8A:53:CC:BE:55:F0:C3:04:37:A8:ED:26:23:19:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358ED7BCB08A53CCBE55F0C30437A8ED262319EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HP9ExGCJePheLzXxgvAuXpjYAGR32TAaxbfS9Dag7XFp/0/323830343a353565383a3a2f33322d313238203d3e20323637393634.roa
Signing time:             Tue 21 Jul 2026 17:31:31 +0000
ROA not before:           Tue 21 Jul 2026 17:26:31 +0000
ROA not after:            Tue 20 Jul 2027 17:31:31 +0000
asID:                     267964
IP address blocks:        2804:55e8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HP9ExGCJePheLzXxgvAuXpjYAGR32TAaxbfS9Dag7XFp/0/358ED7BCB08A53CCBE55F0C30437A8ED262319EB.crl
                          rsync://rpki-repo.registro.br/repo/HP9ExGCJePheLzXxgvAuXpjYAGR32TAaxbfS9Dag7XFp/0/358ED7BCB08A53CCBE55F0C30437A8ED262319EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358ED7BCB08A53CCBE55F0C30437A8ED262319EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b0:a0:47:1c:72:77:a7:59:a8:6f:01:58:8f:93:ea:a2:63:4b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358ED7BCB08A53CCBE55F0C30437A8ED262319EB
        Validity
            Not Before: Jul 21 17:26:31 2026 GMT
            Not After : Jul 20 17:31:31 2027 GMT
        Subject: CN=D11431B65D9A772905996C472F47AEE2EFC0091A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d3:8e:61:54:71:a8:99:35:b4:31:4c:7b:bf:
                    f8:d8:80:bf:99:81:1d:09:d5:dc:dc:a5:44:93:2a:
                    16:da:69:6a:2b:73:b8:c8:7f:68:68:43:63:93:bb:
                    19:91:cd:2b:0e:22:72:b3:34:c9:99:95:9d:2a:86:
                    69:4f:4e:42:cf:bd:02:ea:da:ac:b3:d9:45:fa:bc:
                    5d:05:57:72:09:25:29:eb:41:a6:33:f6:9e:7c:e5:
                    1e:b9:b2:61:8d:35:84:d6:d1:0d:46:fb:33:87:b1:
                    dd:56:9e:c5:f1:76:0d:06:03:4e:49:8d:99:f3:20:
                    2c:ad:89:d4:e5:89:30:65:58:02:1c:f7:cc:c0:22:
                    bd:66:8a:6a:13:0a:cc:16:c4:56:35:54:36:ed:3e:
                    24:85:78:b5:b9:44:60:81:fb:e1:a3:3b:07:5f:21:
                    0b:30:83:6b:d1:ca:88:8e:42:2a:43:10:e0:4d:8b:
                    0a:d6:08:c5:73:25:e7:a4:4c:fc:6f:f3:9c:74:89:
                    ab:7d:c9:78:8e:a5:bb:ef:63:27:14:c1:20:26:c1:
                    b2:bb:82:cf:29:cf:90:2b:15:a1:20:0c:37:ca:6a:
                    d3:8e:12:16:ed:1c:a3:44:49:bb:9a:2c:71:75:1f:
                    84:03:9e:be:78:ec:eb:df:b7:86:12:5c:5f:b8:f8:
                    44:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:14:31:B6:5D:9A:77:29:05:99:6C:47:2F:47:AE:E2:EF:C0:09:1A
            X509v3 Authority Key Identifier:
                keyid:35:8E:D7:BC:B0:8A:53:CC:BE:55:F0:C3:04:37:A8:ED:26:23:19:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HP9ExGCJePheLzXxgvAuXpjYAGR32TAaxbfS9Dag7XFp/0/358ED7BCB08A53CCBE55F0C30437A8ED262319EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358ED7BCB08A53CCBE55F0C30437A8ED262319EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HP9ExGCJePheLzXxgvAuXpjYAGR32TAaxbfS9Dag7XFp/0/323830343a353565383a3a2f33322d313238203d3e20323637393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:88:3c:e9:a1:6d:d4:dc:49:7d:00:b2:3e:39:51:74:4c:a6:
         eb:87:12:fa:38:2f:e9:ef:5b:54:5b:08:0d:44:90:b4:de:ff:
         a8:f9:16:28:a3:99:2e:1f:a2:0c:80:10:75:f0:dc:31:ae:50:
         60:e8:68:52:ec:e2:79:2a:bd:a6:47:c3:ff:13:fd:0d:c7:e1:
         cc:6c:10:19:f2:4a:ed:0e:29:6d:8d:40:6a:f3:c9:e0:e1:c9:
         d4:d8:97:12:ee:9b:08:04:c7:e7:94:55:d8:37:a0:c8:8a:46:
         dd:3a:7b:e2:40:3f:4e:11:aa:92:95:e1:56:36:f6:db:10:27:
         3c:86:74:09:7a:3a:9e:39:4e:23:aa:70:d1:be:13:3e:99:f8:
         36:da:68:a7:ab:b2:5f:04:db:ca:61:24:d0:8d:f8:45:f7:e4:
         99:8b:38:d2:2b:1a:d4:5e:8f:17:0a:14:ed:58:e3:ee:08:a6:
         69:b6:7f:47:2a:c2:d8:e4:5e:e1:ee:0b:38:54:48:ce:1a:43:
         63:c4:45:02:90:4f:50:53:58:56:65:d9:10:b2:33:ae:45:d1:
         10:6c:6f:f5:84:0b:ce:92:da:aa:63:50:33:82:4a:79:01:4d:
         7f:b1:48:e0:b2:e6:cd:ce:05:da:b3:87:25:c2:81:28:4a:7f:
         02:b8:b9:ce
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUaLCgRxxyd6dZqG8BWI+T6qJjS3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU4RUQ3QkNCMDhBNTNDQ0JFNTVGMEMzMDQzN0E4RUQy
NjIzMTlFQjAeFw0yNjA3MjExNzI2MzFaFw0yNzA3MjAxNzMxMzFaMDMxMTAvBgNV
BAMTKEQxMTQzMUI2NUQ5QTc3MjkwNTk5NkM0NzJGNDdBRUUyRUZDMDA5MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB045hVHGomTW0MUx7v/jYgL+Z
gR0J1dzcpUSTKhbaaWorc7jIf2hoQ2OTuxmRzSsOInKzNMmZlZ0qhmlPTkLPvQLq
2qyz2UX6vF0FV3IJJSnrQaYz9p585R65smGNNYTW0Q1G+zOHsd1WnsXxdg0GA05J
jZnzICytidTliTBlWAIc98zAIr1mimoTCswWxFY1VDbtPiSFeLW5RGCB++GjOwdf
IQswg2vRyoiOQipDEOBNiwrWCMVzJeekTPxv85x0iat9yXiOpbvvYycUwSAmwbK7
gs8pz5ArFaEgDDfKatOOEhbtHKNESbuaLHF1H4QDnr547Ovft4YSXF+4+EQxAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU0RQxtl2adykFmWxHL0eu4u/ACRowHwYDVR0j
BBgwFoAUNY7XvLCKU8y+VfDDBDeo7SYjGeswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFA5RXhHQ0plUGhlTHpYeGd2QXVYcGpZQUdSMzJUQWF4YmZTOURhZzdY
RnAvMC8zNThFRDdCQ0IwOEE1M0NDQkU1NUYwQzMwNDM3QThFRDI2MjMxOUVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1OEVEN0JDQjA4QTUzQ0NC
RTU1RjBDMzA0MzdBOEVEMjYyMzE5RUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hQOUV4R0NKZVBoZUx6WHhndkF1WHBqWUFHUjMyVEFheGJmUzlEYWc3WEZwLzAv
MzIzODMwMzQzYTM1MzU2NTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczOTM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFXoMA0GCSqGSIb3DQEBCwUAA4IBAQB5iDzp
oW3U3El9ALI+OVF0TKbrhxL6OC/p71tUWwgNRJC03v+o+RYoo5kuH6IMgBB18Nwx
rlBg6GhS7OJ5Kr2mR8P/E/0Nx+HMbBAZ8krtDiltjUBq88ng4cnU2JcS7psIBMfn
lFXYN6DIikbdOnviQD9OEaqSleFWNvbbECc8hnQJejqeOU4jqnDRvhM+mfg22min
q7JfBNvKYSTQjfhF9+SZizjSKxrUXo8XChTtWOPuCKZptn9HKsLY5F7h7gs4VEjO
GkNjxEUCkE9QU1hWZdkQsjOuRdEQbG/1hAvOktqqY1Azgkp5AU1/sUjgsubNzgXa
s4clwoEoSn8CuLnO
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:00:00 2026 by rpki-client