Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/323830343a313934383a3a2f33322d313238203d3e203631373834.roa
File:                     323830343a313934383a3a2f33322d313238203d3e203631373834.roa (raw, json)
Hash identifier:          FLAegkpt7994/Nd5OxXCw3RqcoLwU+x5nynF9ivVWW4=
Subject key identifier:   3B:DE:32:BD:FD:87:27:41:25:9D:3F:24:D6:7A:00:85:78:13:DE:45
Certificate issuer:       /CN=340AD042C748E444BC9CE7CC90AE14015B6E3BAE
Certificate serial:       4834176C29A7337561CAAB9C2379E0ABE4A90BB2
Authority key identifier: 34:0A:D0:42:C7:48:E4:44:BC:9C:E7:CC:90:AE:14:01:5B:6E:3B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/323830343a313934383a3a2f33322d313238203d3e203631373834.roa
Signing time:             Fri 04 Sep 2026 11:56:46 +0000
ROA not before:           Fri 04 Sep 2026 11:51:46 +0000
ROA not after:            Fri 03 Sep 2027 11:56:46 +0000
asID:                     61784
IP address blocks:        2804:1948::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.crl
                          rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 12:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:34:17:6c:29:a7:33:75:61:ca:ab:9c:23:79:e0:ab:e4:a9:0b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340AD042C748E444BC9CE7CC90AE14015B6E3BAE
        Validity
            Not Before: Sep  4 11:51:46 2026 GMT
            Not After : Sep  3 11:56:46 2027 GMT
        Subject: CN=3BDE32BDFD872741259D3F24D67A00857813DE45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8a:c9:23:69:24:eb:a8:2f:09:17:1c:ce:95:
                    c5:ca:45:98:96:96:d1:3c:f9:5d:95:30:0c:9d:9b:
                    48:bb:9b:e6:3d:9c:c7:40:bf:97:ce:fb:15:60:ad:
                    c3:06:7a:a8:38:8d:b3:9e:fb:c9:e4:47:1f:23:d7:
                    4e:1f:bf:81:7b:07:35:af:b8:61:14:a2:5c:62:1a:
                    aa:19:82:45:83:82:10:2f:bd:eb:26:59:96:f8:3a:
                    06:e8:93:90:17:23:ab:41:c4:55:1b:b4:80:b1:28:
                    3e:24:0f:fd:57:a1:bd:98:4b:ae:20:10:3b:53:dc:
                    9c:d7:eb:12:30:87:8a:c4:51:19:95:ef:14:ce:26:
                    f0:1b:22:2d:d0:5e:b4:5e:77:ce:ac:9e:e4:df:fa:
                    f8:19:e3:b9:09:4f:7c:16:4a:6f:08:ca:f0:b0:15:
                    82:27:82:f7:d6:1d:ed:e3:a1:fd:b2:e6:7d:06:fb:
                    d4:58:34:43:7e:e7:11:04:48:4d:86:47:13:9e:55:
                    c8:98:78:de:81:aa:fa:f2:5d:8b:9f:51:6f:1c:a9:
                    6c:1e:d1:60:b3:a4:6d:b2:c9:d7:73:17:94:d8:3f:
                    a0:27:26:4e:6a:18:bc:78:a2:14:ec:40:f0:e8:5e:
                    42:ff:80:d8:f6:f6:c5:63:a1:b9:71:a0:50:86:92:
                    89:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DE:32:BD:FD:87:27:41:25:9D:3F:24:D6:7A:00:85:78:13:DE:45
            X509v3 Authority Key Identifier:
                keyid:34:0A:D0:42:C7:48:E4:44:BC:9C:E7:CC:90:AE:14:01:5B:6E:3B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/340AD042C748E444BC9CE7CC90AE14015B6E3BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/323830343a313934383a3a2f33322d313238203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1948::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:0f:78:81:a8:49:88:a3:db:37:46:6e:83:fb:f2:af:e7:b6:
         35:7d:c3:80:27:59:63:27:18:0b:44:e3:80:67:01:55:45:4b:
         d9:95:40:45:47:7d:2a:60:44:a6:46:0f:42:f6:8d:76:82:52:
         5e:47:6e:9d:1a:11:4d:67:4d:52:5d:a0:04:07:d5:b7:6c:d0:
         24:78:69:04:cb:4f:75:92:f4:87:e0:3e:be:29:81:34:29:0e:
         2f:f4:b1:32:19:2a:03:a7:1c:2f:6c:a0:c8:03:22:bc:e9:cf:
         20:e2:25:2a:83:42:fa:44:4a:b0:df:9a:fb:4b:1a:8c:f5:aa:
         5e:74:0d:22:ac:44:81:4f:a2:9e:80:62:ba:ce:87:d9:05:be:
         d3:52:26:e3:76:1f:9e:15:d2:d9:47:f5:f0:fe:04:5c:19:75:
         ba:0a:21:8c:30:0e:b0:96:d1:b7:d2:cb:72:19:33:05:69:29:
         3e:44:e2:91:67:f3:b3:66:c7:38:2a:fa:1f:db:c4:04:c7:99:
         35:4c:1a:2f:64:49:30:fb:30:d9:f1:62:60:d5:4e:8c:77:c4:
         96:08:4a:87:1e:41:ad:f9:cb:ec:3f:3f:b2:4d:bf:44:5e:08:
         49:28:15:7c:bc:0d:66:89:4b:43:11:bf:60:38:b6:c0:3f:c4:
         1c:20:ae:20
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSDQXbCmnM3VhyqucI3ngq+SpC7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwQUQwNDJDNzQ4RTQ0NEJDOUNFN0NDOTBBRTE0MDE1
QjZFM0JBRTAeFw0yNjA5MDQxMTUxNDZaFw0yNzA5MDMxMTU2NDZaMDMxMTAvBgNV
BAMTKDNCREUzMkJERkQ4NzI3NDEyNTlEM0YyNEQ2N0EwMDg1NzgxM0RFNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFiskjaSTrqC8JFxzOlcXKRZiW
ltE8+V2VMAydm0i7m+Y9nMdAv5fO+xVgrcMGeqg4jbOe+8nkRx8j104fv4F7BzWv
uGEUolxiGqoZgkWDghAvvesmWZb4Ogbok5AXI6tBxFUbtICxKD4kD/1Xob2YS64g
EDtT3JzX6xIwh4rEURmV7xTOJvAbIi3QXrRed86snuTf+vgZ47kJT3wWSm8IyvCw
FYIngvfWHe3jof2y5n0G+9RYNEN+5xEESE2GRxOeVciYeN6BqvryXYufUW8cqWwe
0WCzpG2yyddzF5TYP6AnJk5qGLx4ohTsQPDoXkL/gNj29sVjoblxoFCGkomNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUO94yvf2HJ0ElnT8k1noAhXgT3kUwHwYDVR0j
BBgwFoAUNArQQsdI5ES8nOfMkK4UAVtuO64wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDRFV1RYWEdVaW9CcGFTMzhiV1VHUDMxdzFwR2hFVkxxRGRSYlViWjJU
VVIvMC8zNDBBRDA0MkM3NDhFNDQ0QkM5Q0U3Q0M5MEFFMTQwMTVCNkUzQkFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0MEFEMDQyQzc0OEU0NDRC
QzlDRTdDQzkwQUUxNDAxNUI2RTNCQUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q0RVdUWFhHVWlvQnBhUzM4YldVR1AzMXcxcEdoRVZMcURkUmJVYloyVFVSLzAv
MzIzODMwMzQzYTMxMzkzNDM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNjMx
MzczODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQZSDANBgkqhkiG9w0BAQsFAAOCAQEASA94gahJ
iKPbN0Zug/vyr+e2NX3DgCdZYycYC0TjgGcBVUVL2ZVARUd9KmBEpkYPQvaNdoJS
XkdunRoRTWdNUl2gBAfVt2zQJHhpBMtPdZL0h+A+vimBNCkOL/SxMhkqA6ccL2yg
yAMivOnPIOIlKoNC+kRKsN+a+0sajPWqXnQNIqxEgU+inoBius6H2QW+01Im43Yf
nhXS2Uf18P4EXBl1ugohjDAOsJbRt9LLchkzBWkpPkTikWfzs2bHOCr6H9vEBMeZ
NUwaL2RJMPsw2fFiYNVOjHfElghKhx5BrfnL7D8/sk2/RF4ISSgVfLwNZolLQxG/
YDi2wD/EHCCuIA==
-----END CERTIFICATE-----
Generated at Fri Sep 4 15:14:48 2026 by rpki-client