Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/323830343a313463383a3a2f33322d313238203d3e20323633333530.roa
File:                     323830343a313463383a3a2f33322d313238203d3e20323633333530.roa (raw, json)
Hash identifier:          8yqbSb8FnG+GuhiQ02XdpCTp+/R80SvJGDRLBQanWcc=
Subject key identifier:   AE:BA:4C:0D:95:ED:FB:AB:D8:E4:E6:D1:66:B6:1A:62:5F:00:59:BD
Certificate issuer:       /CN=658FD2C4C8A5DA079AC1307D531512B7C57240AA
Certificate serial:       12782587F23527835CD6B849D3C5FE319F88CE53
Authority key identifier: 65:8F:D2:C4:C8:A5:DA:07:9A:C1:30:7D:53:15:12:B7:C5:72:40:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/323830343a313463383a3a2f33322d313238203d3e20323633333530.roa
Signing time:             Wed 19 Aug 2026 18:48:56 +0000
ROA not before:           Wed 19 Aug 2026 18:43:56 +0000
ROA not after:            Wed 18 Aug 2027 18:48:56 +0000
asID:                     263350
IP address blocks:        2804:14c8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.crl
                          rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 13:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:78:25:87:f2:35:27:83:5c:d6:b8:49:d3:c5:fe:31:9f:88:ce:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658FD2C4C8A5DA079AC1307D531512B7C57240AA
        Validity
            Not Before: Aug 19 18:43:56 2026 GMT
            Not After : Aug 18 18:48:56 2027 GMT
        Subject: CN=AEBA4C0D95EDFBABD8E4E6D166B61A625F0059BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:85:16:88:cf:0a:6f:91:fb:29:8f:31:e9:
                    30:27:b6:ec:47:b7:e6:4f:9c:96:a1:c6:ca:7f:22:
                    8c:59:ed:e2:f0:9b:ff:17:12:8b:69:cf:0c:27:eb:
                    ec:a0:ef:aa:5f:6a:43:73:6e:57:46:c3:a4:48:61:
                    c7:95:e2:6a:f7:d5:3b:4a:ec:de:f7:dc:ec:15:1f:
                    b9:aa:01:da:bd:b8:6a:82:28:a5:2a:81:2d:91:7a:
                    f0:09:05:77:4b:70:27:24:81:ee:41:96:55:10:5c:
                    8a:06:7e:ef:e1:61:4f:bf:03:c8:30:ea:48:d5:29:
                    2c:21:d8:a4:93:71:dc:34:db:be:68:fd:35:41:5e:
                    8c:48:b1:0c:5d:f2:53:b1:3e:4c:a2:f5:2d:b1:8e:
                    19:91:23:a2:fb:f9:d8:19:08:34:b1:69:77:63:4a:
                    2f:f2:7a:f3:eb:3d:42:4f:b0:a9:cc:4e:24:74:f8:
                    c2:fd:aa:f7:92:63:51:01:3e:14:20:96:e1:cb:69:
                    4a:23:d0:b3:61:dc:be:98:dd:63:24:bd:59:d7:5c:
                    73:be:fd:a5:c8:32:f5:05:bb:c0:9a:44:b3:e9:ec:
                    28:78:61:e9:9c:c9:ba:97:61:23:dc:ed:24:7f:24:
                    a0:80:e0:49:2c:6c:9b:9d:4a:ed:12:16:65:13:63:
                    f9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BA:4C:0D:95:ED:FB:AB:D8:E4:E6:D1:66:B6:1A:62:5F:00:59:BD
            X509v3 Authority Key Identifier:
                keyid:65:8F:D2:C4:C8:A5:DA:07:9A:C1:30:7D:53:15:12:B7:C5:72:40:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/323830343a313463383a3a2f33322d313238203d3e20323633333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:36:61:29:fc:6a:a0:19:ae:3e:87:ea:50:d7:32:5d:e1:e5:
         2e:70:42:fc:47:c4:a0:00:51:8f:2e:48:3f:24:10:4f:92:9f:
         1f:26:58:81:1a:e0:ac:8e:f4:76:d8:8f:cf:85:23:74:26:ed:
         73:0b:a2:6b:73:0e:ec:bf:1c:e9:70:30:db:da:6f:36:88:ec:
         8a:1f:83:74:5a:67:2e:2e:19:f1:3f:26:35:8d:a4:e2:46:04:
         05:89:9b:be:52:31:8f:c4:b9:36:f4:ae:c3:1e:a2:0c:56:07:
         ec:50:8a:84:66:46:81:95:cd:42:3b:dc:34:8a:20:9f:6b:15:
         b2:22:9d:1a:df:63:05:bb:12:50:19:46:4a:da:1d:ae:4f:55:
         7a:e0:9a:dd:c9:22:c9:ff:cc:08:e0:5d:28:c0:35:f1:dc:4b:
         29:2f:c6:53:d0:e4:81:69:53:ab:fe:14:59:af:df:da:86:51:
         1e:a1:3b:36:3d:ed:16:05:ed:ee:6a:33:09:ff:cd:11:cb:76:
         b3:91:46:e6:5b:96:aa:f6:d6:64:f8:9e:b4:f1:dd:56:e4:b5:
         bc:ab:2f:15:83:26:0f:b4:b2:81:6c:db:36:8e:88:f8:2f:f8:
         ce:5f:46:96:ca:ab:f0:3d:1d:ae:fb:bb:f1:e2:e1:63:5a:91:
         c5:ad:e2:3e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUEnglh/I1J4Nc1rhJ08X+MZ+IzlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU4RkQyQzRDOEE1REEwNzlBQzEzMDdENTMxNTEyQjdD
NTcyNDBBQTAeFw0yNjA4MTkxODQzNTZaFw0yNzA4MTgxODQ4NTZaMDMxMTAvBgNV
BAMTKEFFQkE0QzBEOTVFREZCQUJEOEU0RTZEMTY2QjYxQTYyNUYwMDU5QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv1YUWiM8Kb5H7KY8x6TAntuxH
t+ZPnJahxsp/IoxZ7eLwm/8XEotpzwwn6+yg76pfakNzbldGw6RIYceV4mr31TtK
7N733OwVH7mqAdq9uGqCKKUqgS2RevAJBXdLcCckge5BllUQXIoGfu/hYU+/A8gw
6kjVKSwh2KSTcdw0275o/TVBXoxIsQxd8lOxPkyi9S2xjhmRI6L7+dgZCDSxaXdj
Si/yevPrPUJPsKnMTiR0+ML9qveSY1EBPhQgluHLaUoj0LNh3L6Y3WMkvVnXXHO+
/aXIMvUFu8CaRLPp7Ch4YemcybqXYSPc7SR/JKCA4EksbJudSu0SFmUTY/lrAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUrrpMDZXt+6vY5ObRZrYaYl8AWb0wHwYDVR0j
BBgwFoAUZY/SxMil2geawTB9UxUSt8VyQKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkRZTlZMTEpHRkZlSFZ3UWUzQ3NSYUVWZ3B5TmVSMW9rZGZVN2EzcFFS
S2YvMC82NThGRDJDNEM4QTVEQTA3OUFDMTMwN0Q1MzE1MTJCN0M1NzI0MEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1OEZEMkM0QzhBNURBMDc5
QUMxMzA3RDUzMTUxMkI3QzU3MjQwQUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZEWU5WTExKR0ZGZUhWd1FlM0NzUmFFVmdweU5lUjFva2RmVTdhM3BRUktmLzAv
MzIzODMwMzQzYTMxMzQ2MzM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzMzM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBBTIMA0GCSqGSIb3DQEBCwUAA4IBAQCxNmEp
/GqgGa4+h+pQ1zJd4eUucEL8R8SgAFGPLkg/JBBPkp8fJliBGuCsjvR22I/PhSN0
Ju1zC6Jrcw7svxzpcDDb2m82iOyKH4N0WmcuLhnxPyY1jaTiRgQFiZu+UjGPxLk2
9K7DHqIMVgfsUIqEZkaBlc1CO9w0iiCfaxWyIp0a32MFuxJQGUZK2h2uT1V64Jrd
ySLJ/8wI4F0owDXx3EspL8ZT0OSBaVOr/hRZr9/ahlEeoTs2Pe0WBe3uajMJ/80R
y3azkUbmW5aq9tZk+J608d1W5LW8qy8VgyYPtLKBbNs2joj4L/jOX0aWyqvwPR2u
+7vx4uFjWpHFreI+
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:07:23 2026 by rpki-client