Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/323830343a333666343a3a2f33322d3333203d3e20323636333832.roa
File:                     323830343a333666343a3a2f33322d3333203d3e20323636333832.roa (raw, json)
Hash identifier:          FgmsRQ+RiofrDW03nCbI1ChCism2GAFFFQhjdObAwBo=
Subject key identifier:   CE:87:C6:EA:EF:CD:FA:0D:54:23:04:DB:C8:F6:EB:0B:FB:6D:CB:C2
Certificate issuer:       /CN=8E95D3CD0B54F4CD3BC974AC0D3589B283049569
Certificate serial:       7AAE6A170F589CE20971E238962B64F4BC76D839
Authority key identifier: 8E:95:D3:CD:0B:54:F4:CD:3B:C9:74:AC:0D:35:89:B2:83:04:95:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/323830343a333666343a3a2f33322d3333203d3e20323636333832.roa
Signing time:             Wed 01 Jul 2026 15:42:02 +0000
ROA not before:           Wed 01 Jul 2026 15:37:02 +0000
ROA not after:            Wed 30 Jun 2027 15:42:02 +0000
asID:                     266382
IP address blocks:        2804:36f4::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.crl
                          rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Jul 2026 03:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ae:6a:17:0f:58:9c:e2:09:71:e2:38:96:2b:64:f4:bc:76:d8:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E95D3CD0B54F4CD3BC974AC0D3589B283049569
        Validity
            Not Before: Jul  1 15:37:02 2026 GMT
            Not After : Jun 30 15:42:02 2027 GMT
        Subject: CN=CE87C6EAEFCDFA0D542304DBC8F6EB0BFB6DCBC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:74:f9:62:08:98:e2:77:a5:16:e7:d8:bf:
                    8f:d1:55:e8:07:0f:f2:24:31:a4:31:e9:bb:ec:fe:
                    9d:5c:86:d7:e3:21:13:2a:f0:26:0e:07:ad:5f:82:
                    8b:4b:d5:3a:b0:71:48:cc:f3:07:e3:fc:6c:2c:a0:
                    d3:e6:33:66:98:ec:83:a1:6a:de:f0:f7:36:7e:86:
                    b0:57:aa:cb:98:75:b0:ce:b9:5f:6d:a7:a6:94:0e:
                    ca:4f:e6:d9:92:6a:37:8f:bb:a2:e2:50:42:48:68:
                    82:23:b1:11:dc:67:87:8f:38:cb:d6:1b:45:26:a8:
                    66:6f:b3:1d:b6:69:2d:40:ab:5b:aa:2e:5d:00:ae:
                    7f:04:c0:a2:0c:cc:de:96:e8:bc:19:86:9d:0e:a9:
                    22:63:57:2f:c9:03:4f:0e:6c:d5:56:c4:f8:b2:fd:
                    d6:da:b0:a9:f4:0b:de:6c:72:6f:f5:28:d5:e1:81:
                    ad:73:9f:c0:f1:5b:f3:70:a1:19:4e:05:57:35:f5:
                    aa:85:83:ff:8a:52:4e:8b:7d:29:b6:e8:5d:a7:39:
                    e1:d5:95:8a:8c:15:e0:6e:36:cf:f3:9d:f4:4c:c9:
                    59:19:75:90:52:de:42:26:b8:68:a1:ab:a6:05:2e:
                    cd:2c:3c:a9:44:62:0c:a0:ea:89:5f:6b:98:2b:b8:
                    b9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:87:C6:EA:EF:CD:FA:0D:54:23:04:DB:C8:F6:EB:0B:FB:6D:CB:C2
            X509v3 Authority Key Identifier:
                keyid:8E:95:D3:CD:0B:54:F4:CD:3B:C9:74:AC:0D:35:89:B2:83:04:95:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E95D3CD0B54F4CD3BC974AC0D3589B283049569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/323830343a333666343a3a2f33322d3333203d3e20323636333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:0e:8f:3a:15:2c:ec:af:6e:15:d4:86:4c:ed:e9:89:92:d4:
         3a:90:71:62:53:8c:c3:40:b6:cb:8e:53:ac:0f:56:4f:93:9c:
         c8:35:be:81:13:36:74:28:5c:c8:81:4c:ed:e3:a3:f8:73:e3:
         2c:4d:13:0f:4a:36:b4:37:d7:1d:58:bf:2c:a8:46:06:cc:3e:
         91:f2:c5:f1:ed:b7:2d:98:50:b2:26:4f:9c:06:16:a6:ec:ad:
         4e:a0:e9:f9:ff:e9:16:93:f2:44:5b:3d:11:b8:ed:53:52:ef:
         18:79:eb:a4:53:fe:b7:c1:a3:d4:be:9d:d9:39:f1:bd:dd:a9:
         5a:d5:96:46:72:d2:c5:56:74:89:8c:c4:9b:45:4b:fb:4d:5d:
         43:19:8d:e2:b4:cd:44:b7:4f:df:c6:b9:e6:c9:5d:0f:e6:c6:
         b7:7a:20:fb:ca:bc:6c:fc:1a:65:73:3e:4e:aa:75:c9:07:4d:
         ce:c9:8d:c9:00:16:d3:7e:cf:cc:d3:9e:83:c0:82:f3:dc:24:
         ab:84:f2:61:34:82:70:c1:b5:7a:e7:77:00:ac:6d:3a:02:a0:
         e4:73:c0:fa:e8:83:66:e0:8b:da:41:51:f3:12:c4:89:b9:55:
         d8:42:9e:8a:bd:8c:21:fb:5c:c7:a5:e9:c6:47:92:f6:2d:2f:
         93:25:46:51
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUeq5qFw9YnOIJceI4litk9Lx22DkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU5NUQzQ0QwQjU0RjRDRDNCQzk3NEFDMEQzNTg5QjI4
MzA0OTU2OTAeFw0yNjA3MDExNTM3MDJaFw0yNzA2MzAxNTQyMDJaMDMxMTAvBgNV
BAMTKENFODdDNkVBRUZDREZBMEQ1NDIzMDREQkM4RjZFQjBCRkI2RENCQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqv3T5YgiY4nelFufYv4/RVegH
D/IkMaQx6bvs/p1chtfjIRMq8CYOB61fgotL1TqwcUjM8wfj/GwsoNPmM2aY7IOh
at7w9zZ+hrBXqsuYdbDOuV9tp6aUDspP5tmSajePu6LiUEJIaIIjsRHcZ4ePOMvW
G0UmqGZvsx22aS1Aq1uqLl0Arn8EwKIMzN6W6LwZhp0OqSJjVy/JA08ObNVWxPiy
/dbasKn0C95scm/1KNXhga1zn8DxW/NwoRlOBVc19aqFg/+KUk6LfSm26F2nOeHV
lYqMFeBuNs/znfRMyVkZdZBS3kImuGihq6YFLs0sPKlEYgyg6olfa5gruLkpAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUzofG6u/N+g1UIwTbyPbrC/tty8IwHwYDVR0j
BBgwFoAUjpXTzQtU9M07yXSsDTWJsoMElWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG10OWdubUpGdXo4NnQ2WnJ1ZGNhbXJLdVhSbTd1ZDVXSmJvTkRxRzVu
R28vMC84RTk1RDNDRDBCNTRGNENEM0JDOTc0QUMwRDM1ODlCMjgzMDQ5NTY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFOTVEM0NEMEI1NEY0Q0Qz
QkM5NzRBQzBEMzU4OUIyODMwNDk1NjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htdDlnbm1KRnV6ODZ0NlpydWRjYW1yS3VYUm03dWQ1V0pib05EcUc1bkdvLzAv
MzIzODMwMzQzYTMzMzY2NjM0M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM2
MzMzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ29DANBgkqhkiG9w0BAQsFAAOCAQEAhA6POhUs
7K9uFdSGTO3piZLUOpBxYlOMw0C2y45TrA9WT5OcyDW+gRM2dChcyIFM7eOj+HPj
LE0TD0o2tDfXHVi/LKhGBsw+kfLF8e23LZhQsiZPnAYWpuytTqDp+f/pFpPyRFs9
EbjtU1LvGHnrpFP+t8Gj1L6d2Tnxvd2pWtWWRnLSxVZ0iYzEm0VL+01dQxmN4rTN
RLdP38a55sldD+bGt3og+8q8bPwaZXM+Tqp1yQdNzsmNyQAW037PzNOeg8CC89wk
q4TyYTSCcMG1eud3AKxtOgKg5HPA+uiDZuCL2kFR8xLEiblV2EKeir2MIftcx6Xp
xkeS9i0vkyVGUQ==
-----END CERTIFICATE-----
Generated at Sat Jul 25 03:20:05 2026 by rpki-client