Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/323830343a336534633a3a2f33322d3438203d3e20323636353836.roa
File:                     323830343a336534633a3a2f33322d3438203d3e20323636353836.roa (raw, json)
Hash identifier:          yjmB0HkeGCDskPLe2/RZPDAPmWEjonm2mf8OJrTkPi4=
Subject key identifier:   E8:C4:8C:7F:AD:ED:19:38:C6:FF:D4:60:3E:85:64:1F:59:73:ED:03
Certificate issuer:       /CN=3FCC36F1DDF68309E93E427762E77B115A3C00D6
Certificate serial:       5A73FFD9ED97C23A1C619B8DAC15BC36217B1CF1
Authority key identifier: 3F:CC:36:F1:DD:F6:83:09:E9:3E:42:77:62:E7:7B:11:5A:3C:00:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FCC36F1DDF68309E93E427762E77B115A3C00D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/323830343a336534633a3a2f33322d3438203d3e20323636353836.roa
Signing time:             Tue 07 Jul 2026 14:57:02 +0000
ROA not before:           Tue 07 Jul 2026 14:52:02 +0000
ROA not after:            Tue 06 Jul 2027 14:57:02 +0000
asID:                     266586
IP address blocks:        2804:3e4c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/3FCC36F1DDF68309E93E427762E77B115A3C00D6.crl
                          rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/3FCC36F1DDF68309E93E427762E77B115A3C00D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FCC36F1DDF68309E93E427762E77B115A3C00D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:73:ff:d9:ed:97:c2:3a:1c:61:9b:8d:ac:15:bc:36:21:7b:1c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FCC36F1DDF68309E93E427762E77B115A3C00D6
        Validity
            Not Before: Jul  7 14:52:02 2026 GMT
            Not After : Jul  6 14:57:02 2027 GMT
        Subject: CN=E8C48C7FADED1938C6FFD4603E85641F5973ED03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:a9:f9:85:07:24:2f:ea:ac:b4:3b:75:c2:
                    07:3b:1d:d6:d4:4d:73:8b:ad:b6:d3:b3:5c:eb:3c:
                    23:a8:72:71:41:9e:ca:5b:db:f5:6e:49:55:0c:09:
                    f6:07:20:a5:c7:2f:ce:3e:5b:4c:18:f1:40:f1:6b:
                    b0:66:68:2c:9c:f7:dc:3d:eb:01:54:33:7c:75:08:
                    74:1c:bb:fa:17:c0:a8:65:e3:1f:7f:e6:cf:1c:d5:
                    5c:48:06:97:7b:6a:3c:bb:2e:da:7d:18:ee:6b:1f:
                    b7:55:0c:d1:05:e9:ad:8d:96:ea:e6:0b:16:e4:a5:
                    8d:2c:43:59:c0:22:09:86:44:b1:04:ed:de:5c:29:
                    99:02:61:91:18:55:77:db:57:3b:7a:9e:0b:e8:64:
                    74:69:c6:85:3e:d4:93:a7:45:6e:1e:cb:65:0c:26:
                    70:46:66:73:67:48:f5:2a:43:03:68:c7:4b:5f:b4:
                    97:df:6f:7b:79:1b:d3:f4:9f:94:5c:48:9e:fd:22:
                    09:c8:8f:0b:1d:a2:5b:77:06:61:43:63:9d:05:11:
                    23:ed:20:83:69:c8:92:e9:c0:ad:79:10:ec:54:86:
                    91:89:ce:da:cb:16:e4:0c:60:3a:03:51:af:37:56:
                    70:e2:a0:17:db:62:91:06:26:58:45:6c:09:d0:b3:
                    1b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C4:8C:7F:AD:ED:19:38:C6:FF:D4:60:3E:85:64:1F:59:73:ED:03
            X509v3 Authority Key Identifier:
                keyid:3F:CC:36:F1:DD:F6:83:09:E9:3E:42:77:62:E7:7B:11:5A:3C:00:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/3FCC36F1DDF68309E93E427762E77B115A3C00D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FCC36F1DDF68309E93E427762E77B115A3C00D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Haii6hNktBYmKW5JujzgesjkmBrhJm62d7DdbjRc9gV5/0/323830343a336534633a3a2f33322d3438203d3e20323636353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:32:83:c8:5b:d3:6f:6d:e5:08:b3:c9:32:ee:0f:c9:11:86:
         6e:47:0a:2f:82:da:c8:36:ae:9d:ee:84:f3:1c:0d:78:a5:78:
         12:6a:de:0a:6d:4d:ca:d1:e2:f0:59:ef:03:68:e2:aa:1c:d1:
         f9:a7:51:59:89:f6:49:3d:45:0e:9f:1d:b4:5f:b9:9c:ff:1c:
         c8:6d:84:d5:23:d5:9d:20:c6:40:03:6a:e3:dd:af:91:e5:65:
         d4:e9:f8:94:0d:7e:68:e0:05:27:89:08:e3:2b:06:7e:b6:b1:
         9f:7e:c3:7f:61:6b:62:e3:43:b9:87:a0:59:26:17:80:b2:28:
         d3:2a:ab:aa:94:a4:67:7c:a9:15:97:8e:0b:7f:f8:f2:4f:bb:
         5f:2a:08:1e:77:75:8b:73:24:52:77:3e:59:26:2f:7d:78:e8:
         67:80:6e:a2:3a:0f:f6:38:44:28:09:b5:82:8a:c0:e1:96:32:
         07:11:2f:54:1c:c2:e6:70:e5:6d:50:ca:32:63:f7:2e:f9:c2:
         2e:3e:76:fe:0e:cc:25:29:71:1d:96:54:2b:1c:04:b0:74:b4:
         dc:3f:a1:be:67:a5:68:94:4f:6f:15:bc:1f:1d:5d:59:10:ba:
         e1:d1:19:2e:ed:e3:1f:c0:46:e4:73:ea:9e:6a:79:e4:f9:3f:
         d0:c0:f2:42
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWnP/2e2XwjocYZuNrBW8NiF7HPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZDQzM2RjFEREY2ODMwOUU5M0U0Mjc3NjJFNzdCMTE1
QTNDMDBENjAeFw0yNjA3MDcxNDUyMDJaFw0yNzA3MDYxNDU3MDJaMDMxMTAvBgNV
BAMTKEU4QzQ4QzdGQURFRDE5MzhDNkZGRDQ2MDNFODU2NDFGNTk3M0VEMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Xqn5hQckL+qstDt1wgc7HdbU
TXOLrbbTs1zrPCOocnFBnspb2/VuSVUMCfYHIKXHL84+W0wY8UDxa7BmaCyc99w9
6wFUM3x1CHQcu/oXwKhl4x9/5s8c1VxIBpd7ajy7Ltp9GO5rH7dVDNEF6a2Nlurm
CxbkpY0sQ1nAIgmGRLEE7d5cKZkCYZEYVXfbVzt6ngvoZHRpxoU+1JOnRW4ey2UM
JnBGZnNnSPUqQwNox0tftJffb3t5G9P0n5RcSJ79IgnIjwsdolt3BmFDY50FESPt
IINpyJLpwK15EOxUhpGJztrLFuQMYDoDUa83VnDioBfbYpEGJlhFbAnQsxttAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6MSMf63tGTjG/9RgPoVkH1lz7QMwHwYDVR0j
BBgwFoAUP8w28d32gwnpPkJ3Yud7EVo8ANYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFpaTZoTmt0QlltS1c1SnVqemdlc2prbUJyaEptNjJkN0RkYmpSYzln
VjUvMC8zRkNDMzZGMURERjY4MzA5RTkzRTQyNzc2MkU3N0IxMTVBM0MwMEQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQ0MzNkYxRERGNjgzMDlF
OTNFNDI3NzYyRTc3QjExNUEzQzAwRDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhaWk2aE5rdEJZbUtXNUp1anpnZXNqa21CcmhKbTYyZDdEZGJqUmM5Z1Y1LzAv
MzIzODMwMzQzYTMzNjUzNDYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzUzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ+TDANBgkqhkiG9w0BAQsFAAOCAQEACDKDyFvT
b23lCLPJMu4PyRGGbkcKL4LayDaune6E8xwNeKV4EmreCm1NytHi8FnvA2jiqhzR
+adRWYn2ST1FDp8dtF+5nP8cyG2E1SPVnSDGQANq492vkeVl1On4lA1+aOAFJ4kI
4ysGfraxn37Df2FrYuNDuYegWSYXgLIo0yqrqpSkZ3ypFZeOC3/48k+7XyoIHnd1
i3MkUnc+WSYvfXjoZ4BuojoP9jhEKAm1gorA4ZYyBxEvVBzC5nDlbVDKMmP3LvnC
Lj52/g7MJSlxHZZUKxwEsHS03D+hvmelaJRPbxW8Hx1dWRC64dEZLu3jH8BG5HPq
nmp55Pk/0MDyQg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:00:50 2026 by rpki-client