Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/323830343a3233633a383530303a3a2f34302d3430203d3e20323632373937.roa
File:                     323830343a3233633a383530303a3a2f34302d3430203d3e20323632373937.roa (raw, json)
Hash identifier:          DSVN8yt43PUALjPl4AuoxmD3siwhYY80amz/kC5dp5c=
Subject key identifier:   13:BB:1C:29:69:B2:3D:C6:2B:77:38:6C:B2:CF:1A:34:E7:9B:96:50
Certificate issuer:       /CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
Certificate serial:       6ECBCABA8A6BAD6463397A4730AAFD5D7F8D98E4
Authority key identifier: 36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/323830343a3233633a383530303a3a2f34302d3430203d3e20323632373937.roa
Signing time:             Thu 27 Aug 2026 20:19:02 +0000
ROA not before:           Thu 27 Aug 2026 20:14:02 +0000
ROA not after:            Thu 26 Aug 2027 20:19:02 +0000
asID:                     262797
IP address blocks:        2804:23c:8500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 21:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cb:ca:ba:8a:6b:ad:64:63:39:7a:47:30:aa:fd:5d:7f:8d:98:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
        Validity
            Not Before: Aug 27 20:14:02 2026 GMT
            Not After : Aug 26 20:19:02 2027 GMT
        Subject: CN=13BB1C2969B23DC62B77386CB2CF1A34E79B9650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:df:aa:1d:cd:24:6b:9f:68:83:94:4a:0f:
                    36:07:95:54:7a:cc:59:bb:7e:05:fd:50:ba:dc:95:
                    03:df:e9:c4:db:b2:b5:30:e9:cd:7c:37:e2:9f:af:
                    2f:5a:9b:ff:a1:02:44:91:08:e0:66:20:35:f6:be:
                    4b:94:63:42:18:6f:74:de:35:8b:d0:26:ad:45:ce:
                    79:64:db:67:5e:a2:59:ff:1d:1c:a7:51:85:a4:08:
                    54:3a:13:c6:bc:7e:18:a3:f1:33:a8:77:aa:7c:26:
                    04:a2:b8:d6:b9:18:c0:41:c1:25:3d:1e:9a:7e:6b:
                    34:59:6d:99:46:d4:d0:eb:20:bf:5a:9a:7b:12:f4:
                    8e:14:8d:92:29:cd:ff:71:e0:5a:76:ef:f5:7e:68:
                    f5:58:42:8a:19:c5:4c:5c:6b:e4:2f:90:42:0f:99:
                    4d:d8:22:84:cb:c7:0b:3f:e8:96:5d:d9:50:78:8f:
                    06:08:5d:5d:04:1d:02:a8:66:af:20:37:32:d3:44:
                    cc:b6:a9:f9:99:e3:0b:52:51:a6:91:85:fb:8e:35:
                    53:b1:5b:1d:95:97:05:fb:65:dd:4c:8f:c5:24:4a:
                    94:c2:17:74:9c:68:49:1a:2a:39:7a:b3:1f:55:c2:
                    24:89:9c:d0:00:ac:95:72:b9:72:76:eb:32:d2:20:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BB:1C:29:69:B2:3D:C6:2B:77:38:6C:B2:CF:1A:34:E7:9B:96:50
            X509v3 Authority Key Identifier:
                keyid:36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/323830343a3233633a383530303a3a2f34302d3430203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23c:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:f4:a7:a9:01:f2:e5:53:cd:44:38:65:87:47:cd:31:c2:25:
         72:28:64:af:3c:f8:b9:a8:60:42:b3:34:5f:c4:fc:14:54:5f:
         e1:69:7f:15:1e:ce:4b:86:18:0d:5e:8f:ac:e9:a7:4b:c0:3f:
         c5:59:c9:34:c8:b1:fa:49:b6:e3:c6:df:ad:73:f1:9f:94:ff:
         7e:b7:43:38:9e:dd:d5:46:78:fa:f0:d4:6d:d6:ff:4e:d8:65:
         46:d0:07:80:5c:1a:aa:7f:4f:48:df:1e:44:0d:69:3d:1e:8d:
         cf:17:57:bb:b3:65:cd:37:ac:d8:a8:14:86:07:73:df:29:ae:
         e8:03:94:b7:6d:40:c6:0e:c9:96:03:a6:2e:b3:fb:32:99:2d:
         cb:91:93:10:5a:f2:25:05:64:89:f9:53:d1:1a:0e:19:c6:aa:
         f7:ec:f2:7a:fe:3e:19:b7:3e:ac:92:aa:ac:16:ea:c9:2e:8d:
         ad:eb:30:95:69:de:55:48:ca:4b:64:b0:ee:24:fa:d9:87:23:
         ad:ed:00:a6:0f:b0:f6:6f:5a:02:a8:5b:13:67:01:d7:0b:28:
         05:15:e8:71:46:15:6d:a8:55:31:d6:0a:07:83:6a:88:aa:7c:
         f2:eb:46:cb:18:06:b1:b0:f9:25:40:2a:20:24:b9:4b:bd:de:
         cb:ca:eb:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbsvKuoprrWRjOXpHMKr9XX+NmOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZDOUE5QURDRTUzMkIzRDRERTM2Nzc4QUNGREMzQjNB
RjVGRDBDNjAeFw0yNjA4MjcyMDE0MDJaFw0yNzA4MjYyMDE5MDJaMDMxMTAvBgNV
BAMTKDEzQkIxQzI5NjlCMjNEQzYyQjc3Mzg2Q0IyQ0YxQTM0RTc5Qjk2NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGct+qHc0ka59og5RKDzYHlVR6
zFm7fgX9ULrclQPf6cTbsrUw6c18N+Kfry9am/+hAkSRCOBmIDX2vkuUY0IYb3Te
NYvQJq1Fznlk22deoln/HRynUYWkCFQ6E8a8fhij8TOod6p8JgSiuNa5GMBBwSU9
Hpp+azRZbZlG1NDrIL9amnsS9I4UjZIpzf9x4Fp27/V+aPVYQooZxUxca+QvkEIP
mU3YIoTLxws/6JZd2VB4jwYIXV0EHQKoZq8gNzLTRMy2qfmZ4wtSUaaRhfuONVOx
Wx2VlwX7Zd1Mj8UkSpTCF3ScaEkaKjl6sx9VwiSJnNAArJVyuXJ26zLSIPDVAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUE7scKWmyPcYrdzhsss8aNOebllAwHwYDVR0j
BBgwFoAUNsmprc5TKz1N42d4rP3Ds69f0MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1lwUHNCdEV0YTlKTDhTMlNnb1Ruejl2Mnk0QzU2Rkg4OWJXZ1ZCRlRO
UFMvMC8zNkM5QTlBRENFNTMyQjNENERFMzY3NzhBQ0ZEQzNCM0FGNUZEMEM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2QzlBOUFEQ0U1MzJCM0Q0
REUzNjc3OEFDRkRDM0IzQUY1RkQwQzYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NZcFBzQnRFdGE5Skw4UzJTZ29Ubno5djJ5NEM1NkZIODliV2dWQkZUTlBTLzAv
MzIzODMwMzQzYTMyMzM2MzNhMzgzNTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzIzNzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBAI8hTANBgkqhkiG9w0BAQsFAAOC
AQEAc/SnqQHy5VPNRDhlh0fNMcIlcihkrzz4uahgQrM0X8T8FFRf4Wl/FR7OS4YY
DV6PrOmnS8A/xVnJNMix+km248bfrXPxn5T/frdDOJ7d1UZ4+vDUbdb/TthlRtAH
gFwaqn9PSN8eRA1pPR6NzxdXu7NlzTes2KgUhgdz3ymu6AOUt21Axg7JlgOmLrP7
Mpkty5GTEFryJQVkiflT0RoOGcaq9+zyev4+Gbc+rJKqrBbqyS6NreswlWneVUjK
S2Sw7iT62Ycjre0Apg+w9m9aAqhbE2cB1wsoBRXocUYVbahVMdYKB4NqiKp88utG
yxgGsbD5JUAqICS5S73ey8rrEA==
-----END CERTIFICATE-----
Generated at Fri Sep 4 10:45:15 2026 by rpki-client