Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3a2f33332d3333203d3e20323634353030.roa
File:                     323830343a323039383a3a2f33332d3333203d3e20323634353030.roa (raw, json)
Hash identifier:          2y4OEIyS/g8dpXoV3ALJhCEr+USqEvOdtUC3KbPmpUM=
Subject key identifier:   72:57:28:0A:DB:53:01:CC:8F:F4:4B:8A:94:F7:EB:C1:70:55:FE:10
Certificate issuer:       /CN=5F2A722B21880E0ECEBBD1E9523AB4065AA09862
Certificate serial:       0C226C2E29A4E737518A9FD3581DDB2C6C7BCBC3
Authority key identifier: 5F:2A:72:2B:21:88:0E:0E:CE:BB:D1:E9:52:3A:B4:06:5A:A0:98:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3a2f33332d3333203d3e20323634353030.roa
Signing time:             Wed 02 Sep 2026 13:25:35 +0000
ROA not before:           Wed 02 Sep 2026 13:20:35 +0000
ROA not after:            Wed 01 Sep 2027 13:25:35 +0000
asID:                     264500
IP address blocks:        2804:2098::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.crl
                          rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 18:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:22:6c:2e:29:a4:e7:37:51:8a:9f:d3:58:1d:db:2c:6c:7b:cb:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F2A722B21880E0ECEBBD1E9523AB4065AA09862
        Validity
            Not Before: Sep  2 13:20:35 2026 GMT
            Not After : Sep  1 13:25:35 2027 GMT
        Subject: CN=7257280ADB5301CC8FF44B8A94F7EBC17055FE10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:77:a7:51:26:03:48:f8:c6:5e:29:6d:cc:
                    f3:f5:76:5e:56:e0:03:27:fd:dd:12:99:15:c4:07:
                    6b:90:a8:eb:7a:9a:39:69:4a:fb:8b:36:25:bc:e1:
                    4c:bd:69:5a:21:27:1a:f4:85:74:30:41:05:98:9d:
                    67:9b:51:96:f4:c2:f0:e0:9a:85:35:dd:0a:57:ed:
                    48:e6:bf:72:d5:27:fe:cc:08:a3:7f:fa:7e:6c:e3:
                    ab:f1:37:f5:79:b0:ee:c2:98:83:60:1d:97:70:4d:
                    51:cc:19:26:20:e5:8d:bb:b6:a1:a6:dc:0f:c1:4c:
                    91:38:c7:29:41:27:7e:62:09:53:a8:e1:ed:10:7f:
                    54:e9:2c:58:46:f9:22:70:9d:99:58:95:0b:49:f1:
                    6a:13:a0:fc:8c:8a:2c:2a:46:73:cc:fe:f1:5d:56:
                    13:e6:12:f3:39:80:69:b9:a9:26:6a:44:af:7a:96:
                    b8:ba:31:51:80:9e:ba:2d:05:07:25:31:36:40:a7:
                    ea:f8:62:c3:fc:21:f7:de:04:b6:5d:1c:23:c9:a5:
                    92:c6:4a:77:89:ba:44:62:d1:2f:fd:dd:56:ad:80:
                    e1:0c:d2:69:e6:de:58:9b:cd:3d:e0:3e:2b:5d:e1:
                    91:88:ab:4e:ed:91:07:45:89:b6:5a:2f:e1:48:ef:
                    9a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:57:28:0A:DB:53:01:CC:8F:F4:4B:8A:94:F7:EB:C1:70:55:FE:10
            X509v3 Authority Key Identifier:
                keyid:5F:2A:72:2B:21:88:0E:0E:CE:BB:D1:E9:52:3A:B4:06:5A:A0:98:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3a2f33332d3333203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098::/33

    Signature Algorithm: sha256WithRSAEncryption
         8a:5a:4c:80:ff:ee:4f:49:49:ae:7b:be:fe:6a:f8:2e:14:ff:
         6f:3a:98:db:0a:35:47:85:27:26:90:62:b5:fb:9d:d0:7b:4e:
         27:c0:37:6f:c3:f7:b9:6a:04:63:52:02:18:4c:7f:04:1a:79:
         e5:53:ce:aa:d9:09:23:2a:45:e9:6a:c8:14:66:53:7d:02:fa:
         93:da:4a:e3:80:b2:ae:23:aa:f6:05:24:cf:57:5e:31:0e:eb:
         ef:3b:f4:ee:82:cd:a9:c4:b7:6e:b6:31:6e:c9:f3:d5:9e:dd:
         a7:f8:93:49:15:35:76:18:e2:9b:d5:b0:53:78:a6:42:db:0f:
         0d:ef:d3:56:aa:1f:79:69:89:4d:c3:76:f5:7c:67:e7:56:26:
         d0:ca:42:2d:77:63:40:b3:08:a1:36:22:df:7b:c7:c0:a1:b4:
         79:b4:b3:b8:eb:a0:ac:22:97:77:d6:43:c3:a4:c1:ea:dc:0f:
         99:7b:8b:09:e9:8c:38:da:f9:2e:18:42:15:d9:d8:59:df:5b:
         3d:1d:1b:3b:78:74:9b:a5:ec:70:90:d8:70:61:11:85:7a:17:
         d4:a5:d1:73:f2:27:30:f0:96:2d:cc:a9:de:b1:47:9a:99:71:
         69:92:0e:ba:a2:4c:11:fe:68:dd:09:e3:8f:62:55:bc:14:3d:
         51:16:23:e7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDCJsLimk5zdRip/TWB3bLGx7y8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYyQTcyMkIyMTg4MEUwRUNFQkJEMUU5NTIzQUI0MDY1
QUEwOTg2MjAeFw0yNjA5MDIxMzIwMzVaFw0yNzA5MDExMzI1MzVaMDMxMTAvBgNV
BAMTKDcyNTcyODBBREI1MzAxQ0M4RkY0NEI4QTk0RjdFQkMxNzA1NUZFMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEU3enUSYDSPjGXiltzPP1dl5W
4AMn/d0SmRXEB2uQqOt6mjlpSvuLNiW84Uy9aVohJxr0hXQwQQWYnWebUZb0wvDg
moU13QpX7Ujmv3LVJ/7MCKN/+n5s46vxN/V5sO7CmINgHZdwTVHMGSYg5Y27tqGm
3A/BTJE4xylBJ35iCVOo4e0Qf1TpLFhG+SJwnZlYlQtJ8WoToPyMiiwqRnPM/vFd
VhPmEvM5gGm5qSZqRK96lri6MVGAnrotBQclMTZAp+r4YsP8IffeBLZdHCPJpZLG
SneJukRi0S/93VatgOEM0mnm3libzT3gPitd4ZGIq07tkQdFibZaL+FI75q5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUclcoCttTAcyP9EuKlPfrwXBV/hAwHwYDVR0j
BBgwFoAUXypyKyGIDg7Ou9HpUjq0BlqgmGIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFBqZXM0UHZmUmFCRHE2dTR0cUFYU3E5djNRUmc3YUxXQlg5VWRZZGg3
SkcvMC81RjJBNzIyQjIxODgwRTBFQ0VCQkQxRTk1MjNBQjQwNjVBQTA5ODYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGMkE3MjJCMjE4ODBFMEVD
RUJCRDFFOTUyM0FCNDA2NUFBMDk4NjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RQamVzNFB2ZlJhQkRxNnU0dHFBWFNxOXYzUVJnN2FMV0JYOVVkWWRoN0pHLzAv
MzIzODMwMzQzYTMyMzAzOTM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM0
MzUzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQgmAAwDQYJKoZIhvcNAQELBQADggEBAIpaTID/
7k9JSa57vv5q+C4U/286mNsKNUeFJyaQYrX7ndB7TifAN2/D97lqBGNSAhhMfwQa
eeVTzqrZCSMqRelqyBRmU30C+pPaSuOAsq4jqvYFJM9XXjEO6+879O6CzanEt262
MW7J89We3af4k0kVNXYY4pvVsFN4pkLbDw3v01aqH3lpiU3DdvV8Z+dWJtDKQi13
Y0CzCKE2It97x8ChtHm0s7jroKwil3fWQ8OkwercD5l7iwnpjDja+S4YQhXZ2Fnf
Wz0dGzt4dJul7HCQ2HBhEYV6F9Sl0XPyJzDwli3Mqd6xR5qZcWmSDrqiTBH+aN0J
449iVbwUPVEWI+c=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:21:06 2026 by rpki-client