Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/323830343a393135343a3a2f33322d3438203d3e20323734363334.roa
File:                     323830343a393135343a3a2f33322d3438203d3e20323734363334.roa (raw, json)
Hash identifier:          vhbTm1vcO49uWFtqu1F9q50sOEakNJvZgWxdQlfhTB8=
Subject key identifier:   F4:B4:B3:02:8C:6A:41:53:89:91:E8:12:4C:46:C8:0B:BF:EB:37:A3
Certificate issuer:       /CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
Certificate serial:       3ABCA84CE4119BA8E15FB22872A4F4144C14A7B6
Authority key identifier: 2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/323830343a393135343a3a2f33322d3438203d3e20323734363334.roa
Signing time:             Fri 04 Sep 2026 19:17:39 +0000
ROA not before:           Fri 04 Sep 2026 19:12:39 +0000
ROA not after:            Fri 03 Sep 2027 19:17:39 +0000
asID:                     274634
IP address blocks:        2804:9154::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl
                          rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 15:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bc:a8:4c:e4:11:9b:a8:e1:5f:b2:28:72:a4:f4:14:4c:14:a7:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
        Validity
            Not Before: Sep  4 19:12:39 2026 GMT
            Not After : Sep  3 19:17:39 2027 GMT
        Subject: CN=F4B4B3028C6A41538991E8124C46C80BBFEB37A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:a7:ee:61:73:9f:49:cb:c5:38:f3:20:59:
                    49:2a:ef:1e:4a:c0:e7:5e:bd:a9:0e:1f:e3:dd:7d:
                    60:60:cb:48:5a:8b:b9:8e:21:19:a9:1e:76:f3:66:
                    04:f2:47:f3:fa:34:00:43:b4:1e:77:33:88:b0:29:
                    c8:64:72:09:57:30:2b:af:8b:34:03:4f:c8:76:89:
                    a0:1a:90:df:6c:cf:30:a6:64:5d:27:9a:f0:9d:11:
                    7d:4b:39:04:d0:c8:f1:7d:61:a9:d9:7e:3f:f3:74:
                    20:7f:0e:29:ce:37:d4:9e:14:9a:f8:35:eb:04:39:
                    07:ea:ba:d8:fa:56:9d:eb:f6:c1:33:79:12:6c:1c:
                    c5:e9:fe:ca:2c:8c:9d:3d:f9:30:33:cd:f8:0e:d6:
                    12:4d:dc:07:e7:7f:7d:54:4f:a2:20:b2:26:60:03:
                    a1:c4:60:c0:c2:4d:e5:b5:c7:8a:93:a9:f3:b7:48:
                    96:be:64:56:bc:28:39:3f:fa:f6:ed:92:32:7a:8f:
                    d5:e7:8d:e3:49:c2:d5:19:3b:06:be:3b:a9:d4:ac:
                    86:7f:19:e4:a2:1b:60:df:9b:82:bc:8d:01:93:29:
                    c9:6d:9c:0a:96:b5:5f:85:09:e5:85:b9:05:03:db:
                    4d:99:2c:13:71:47:84:fd:aa:19:b0:d6:51:97:97:
                    b0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B4:B3:02:8C:6A:41:53:89:91:E8:12:4C:46:C8:0B:BF:EB:37:A3
            X509v3 Authority Key Identifier:
                keyid:2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/323830343a393135343a3a2f33322d3438203d3e20323734363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9154::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:4c:a9:94:db:5f:7f:b7:67:72:a3:52:9d:ab:fa:8c:ee:ec:
         9b:98:69:b6:7f:99:8c:54:fa:b4:f9:d8:80:1b:b6:b4:6e:9a:
         5a:e4:11:5c:2c:72:82:33:2f:17:d2:4f:7f:5c:9d:49:d4:a8:
         dd:4a:9a:cc:59:a9:7a:a5:a3:7d:5b:6a:01:ae:cf:2b:75:d9:
         3e:a5:c7:fa:03:d1:b4:82:b9:e6:61:74:79:71:0f:18:af:41:
         7e:0a:43:83:76:cb:d7:4a:95:05:43:ee:0a:02:f9:4b:c6:2a:
         9e:bd:80:3f:c2:8d:65:34:e8:88:53:b3:3a:ef:65:61:15:3d:
         bf:2d:26:df:ad:55:b2:dd:5f:45:bc:8a:9f:7e:e9:cd:5b:c8:
         df:fa:90:c1:f9:3a:08:2f:25:cf:b6:05:ba:9a:81:51:c0:78:
         e2:1e:66:0d:f1:57:2f:a7:53:4c:9c:db:63:a2:6f:2c:d7:35:
         fd:5a:14:b2:eb:44:22:6d:05:a4:62:e8:a9:1f:6b:49:32:e4:
         79:6e:4f:6a:2e:08:46:48:e0:1c:04:73:6b:8d:35:5e:7a:94:
         bb:36:7e:71:c9:da:d4:6c:4f:0c:24:44:4c:9a:ce:fc:84:1a:
         be:de:a7:dc:9c:c8:e0:cc:29:9b:62:68:c2:92:30:4d:19:28:
         e4:27:aa:9d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUOryoTOQRm6jhX7IocqT0FEwUp7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMyMjdCRTZERUZCNEI5RUIwMDVDMEFDOUZDMjg0NzI3
QTQyNEQ4OTAeFw0yNjA5MDQxOTEyMzlaFw0yNzA5MDMxOTE3MzlaMDMxMTAvBgNV
BAMTKEY0QjRCMzAyOEM2QTQxNTM4OTkxRTgxMjRDNDZDODBCQkZFQjM3QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4dqfuYXOfScvFOPMgWUkq7x5K
wOdevakOH+PdfWBgy0hai7mOIRmpHnbzZgTyR/P6NABDtB53M4iwKchkcglXMCuv
izQDT8h2iaAakN9szzCmZF0nmvCdEX1LOQTQyPF9YanZfj/zdCB/DinON9SeFJr4
NesEOQfqutj6Vp3r9sEzeRJsHMXp/sosjJ09+TAzzfgO1hJN3Afnf31UT6IgsiZg
A6HEYMDCTeW1x4qTqfO3SJa+ZFa8KDk/+vbtkjJ6j9XnjeNJwtUZOwa+O6nUrIZ/
GeSiG2Dfm4K8jQGTKcltnAqWtV+FCeWFuQUD202ZLBNxR4T9qhmw1lGXl7DvAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU9LSzAoxqQVOJkegSTEbIC7/rN6MwHwYDVR0j
BBgwFoAULCJ75t77S56wBcCsn8KEcnpCTYkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9idWs2UnBaSk55YUQ3ek1RN1cyTVlvc3ZRckZCQVpMcENwdnV6Wk4xZUhu
LzAvMkMyMjdCRTZERUZCNEI5RUIwMDVDMEFDOUZDMjg0NzI3QTQyNEQ4OS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzIyN0JFNkRFRkI0QjlFQjAw
NUMwQUM5RkMyODQ3MjdBNDI0RDg5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9i
dWs2UnBaSk55YUQ3ek1RN1cyTVlvc3ZRckZCQVpMcENwdnV6Wk4xZUhuLzAvMzIz
ODMwMzQzYTM5MzEzNTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzM0MzYz
MzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKASRVDANBgkqhkiG9w0BAQsFAAOCAQEAqEyplNtff7dn
cqNSnav6jO7sm5hptn+ZjFT6tPnYgBu2tG6aWuQRXCxygjMvF9JPf1ydSdSo3Uqa
zFmpeqWjfVtqAa7PK3XZPqXH+gPRtIK55mF0eXEPGK9BfgpDg3bL10qVBUPuCgL5
S8Yqnr2AP8KNZTToiFOzOu9lYRU9vy0m361Vst1fRbyKn37pzVvI3/qQwfk6CC8l
z7YFupqBUcB44h5mDfFXL6dTTJzbY6JvLNc1/VoUsutEIm0FpGLoqR9rSTLkeW5P
ai4IRkjgHARza401XnqUuzZ+ccna1GxPDCRETJrO/IQavt6n3JzI4Mwpm2JowpIw
TRko5CeqnQ==
-----END CERTIFICATE-----