Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/323830343a326339383a3a2f33322d3334203d3e20323635323239.roa
File:                     323830343a326339383a3a2f33322d3334203d3e20323635323239.roa (raw, json)
Hash identifier:          S1yDE/xG2Afdx4y2tlBO/powsyWzRzhDDyx68Yvk+FE=
Subject key identifier:   92:E2:F4:75:65:2C:20:9E:EA:CD:BD:82:3E:AA:19:E1:9D:E3:33:D2
Certificate issuer:       /CN=62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A
Certificate serial:       67A34F25A0C9D1A75EA6C5A53DE2B813EE989A2B
Authority key identifier: 62:E3:DA:F2:BA:0A:F8:8F:13:E6:D8:B8:A6:B4:6A:31:82:26:65:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/323830343a326339383a3a2f33322d3334203d3e20323635323239.roa
Signing time:             Fri 01 May 2026 22:34:56 +0000
ROA not before:           Fri 01 May 2026 22:29:56 +0000
ROA not after:            Fri 30 Apr 2027 22:34:56 +0000
asID:                     265229
IP address blocks:        2804:2c98::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.crl
                          rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 20:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a3:4f:25:a0:c9:d1:a7:5e:a6:c5:a5:3d:e2:b8:13:ee:98:9a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A
        Validity
            Not Before: May  1 22:29:56 2026 GMT
            Not After : Apr 30 22:34:56 2027 GMT
        Subject: CN=92E2F475652C209EEACDBD823EAA19E19DE333D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fe:4b:91:9f:85:12:00:37:5d:a7:32:1e:17:
                    27:b9:c9:d0:f2:c3:95:b8:99:d2:ac:e4:78:99:ae:
                    28:39:a2:24:cc:4b:8c:7d:ae:62:fd:84:e5:62:03:
                    0c:9e:4c:29:e0:d0:1c:d9:0a:b6:ae:c9:03:4c:7f:
                    30:2b:f1:04:84:08:e5:92:df:3c:ca:19:ec:90:a4:
                    cc:91:a9:cb:77:6a:80:7c:dc:7c:3b:58:80:f8:be:
                    17:80:ae:2c:78:a6:e6:93:bf:3d:93:f1:3d:d6:70:
                    49:eb:5a:cf:fb:d1:c5:11:7b:86:41:cb:33:ae:e1:
                    d5:66:d5:d7:37:50:d0:99:05:91:5a:77:22:f1:ba:
                    47:3c:80:bd:28:a5:45:25:23:38:ac:be:91:5e:f2:
                    20:3d:d2:9b:d3:6a:43:f3:2a:73:52:34:3d:c0:82:
                    49:85:c8:47:85:ea:8b:b0:94:5f:9c:f9:c2:0a:8b:
                    c8:23:dc:3a:97:8d:6b:45:14:12:53:3d:1e:c4:15:
                    49:06:d7:fa:42:0e:bf:f7:75:42:d5:14:4a:80:7b:
                    00:66:a4:bc:11:77:07:35:9d:af:1f:16:05:12:28:
                    8c:8a:b7:e7:f3:43:90:91:d3:c2:f2:b2:b9:20:31:
                    4b:3b:7e:dc:61:8f:6d:66:e8:38:85:98:e1:3d:9b:
                    df:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E2:F4:75:65:2C:20:9E:EA:CD:BD:82:3E:AA:19:E1:9D:E3:33:D2
            X509v3 Authority Key Identifier:
                keyid:62:E3:DA:F2:BA:0A:F8:8F:13:E6:D8:B8:A6:B4:6A:31:82:26:65:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/323830343a326339383a3a2f33322d3334203d3e20323635323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c98::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:98:36:d9:84:ff:53:26:16:79:82:81:19:13:98:27:0d:28:
         3f:93:3d:0b:ff:6f:51:85:d8:da:a1:b1:04:8b:01:9b:d3:64:
         61:79:40:9f:56:c9:d6:0c:52:e3:3c:ca:de:8b:2a:6b:80:2b:
         33:b3:1b:35:e8:48:51:73:c6:ec:00:f4:9b:62:93:7a:f3:86:
         73:b3:a9:89:de:4c:f1:b1:f9:0b:b7:66:1a:4c:2a:a8:52:b0:
         bb:34:d6:c2:45:64:3e:38:84:04:75:c6:66:82:7e:cf:0c:26:
         61:e3:bc:30:8d:7a:ca:8b:55:0e:7f:6b:55:5e:9e:f5:03:98:
         08:0b:fd:37:87:08:0f:3b:5b:75:84:06:d0:fa:5b:24:9d:51:
         a9:82:0d:b6:ad:e6:dc:c8:ff:25:33:00:54:02:c4:d3:a4:17:
         dc:7f:ea:8f:ed:0e:94:5a:43:77:ff:1c:cd:8c:41:e1:08:8f:
         e2:11:3a:0b:f4:a7:96:21:d0:d4:46:fe:7c:9b:dc:f7:d3:77:
         ef:31:ac:14:5d:b5:63:f9:b4:e2:52:f4:ff:fd:64:92:01:76:
         d3:80:40:14:e5:fa:44:f1:2c:10:ac:fc:47:8b:f1:ab:e2:6d:
         4e:52:18:53:ca:b2:a1:43:f0:bb:da:a4:58:95:33:11:73:99:
         7e:5f:23:9d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZ6NPJaDJ0adepsWlPeK4E+6YmiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJFM0RBRjJCQTBBRjg4RjEzRTZEOEI4QTZCNDZBMzE4
MjI2NjU2QTAeFw0yNjA1MDEyMjI5NTZaFw0yNzA0MzAyMjM0NTZaMDMxMTAvBgNV
BAMTKDkyRTJGNDc1NjUyQzIwOUVFQUNEQkQ4MjNFQUExOUUxOURFMzMzRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh/kuRn4USADddpzIeFye5ydDy
w5W4mdKs5HiZrig5oiTMS4x9rmL9hOViAwyeTCng0BzZCrauyQNMfzAr8QSECOWS
3zzKGeyQpMyRqct3aoB83Hw7WID4vheArix4puaTvz2T8T3WcEnrWs/70cURe4ZB
yzOu4dVm1dc3UNCZBZFadyLxukc8gL0opUUlIzisvpFe8iA90pvTakPzKnNSND3A
gkmFyEeF6ouwlF+c+cIKi8gj3DqXjWtFFBJTPR7EFUkG1/pCDr/3dULVFEqAewBm
pLwRdwc1na8fFgUSKIyKt+fzQ5CR08LysrkgMUs7ftxhj21m6DiFmOE9m9+tAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUkuL0dWUsIJ7qzb2CPqoZ4Z3jM9IwHwYDVR0j
BBgwFoAUYuPa8roK+I8T5ti4prRqMYImZWowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rQTZiaUpkb0p5cUJ3UU5ydWJYZ1Y0Z1oyMmZGQnhrR1V0Ykw5eE54aDRV
LzAvNjJFM0RBRjJCQTBBRjg4RjEzRTZEOEI4QTZCNDZBMzE4MjI2NjU2QS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82MkUzREFGMkJBMEFGODhGMTNF
NkQ4QjhBNkI0NkEzMTgyMjY2NTZBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
QTZiaUpkb0p5cUJ3UU5ydWJYZ1Y0Z1oyMmZGQnhrR1V0Ykw5eE54aDRVLzAvMzIz
ODMwMzQzYTMyNjMzOTM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM1MzIz
MjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQsmDANBgkqhkiG9w0BAQsFAAOCAQEAFZg22YT/UyYW
eYKBGROYJw0oP5M9C/9vUYXY2qGxBIsBm9NkYXlAn1bJ1gxS4zzK3osqa4ArM7Mb
NehIUXPG7AD0m2KTevOGc7Opid5M8bH5C7dmGkwqqFKwuzTWwkVkPjiEBHXGZoJ+
zwwmYeO8MI16yotVDn9rVV6e9QOYCAv9N4cIDztbdYQG0PpbJJ1RqYINtq3m3Mj/
JTMAVALE06QX3H/qj+0OlFpDd/8czYxB4QiP4hE6C/SnliHQ1Eb+fJvc99N37zGs
FF21Y/m04lL0//1kkgF204BAFOX6RPEsEKz8R4vxq+JtTlIYU8qyoUPwu9qkWJUz
EXOZfl8jnQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 22:27:53 2026 by rpki-client