Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/323830343a313431633a3a2f33322d3438203d3e203533313330.roa
File:                     323830343a313431633a3a2f33322d3438203d3e203533313330.roa (raw, json)
Hash identifier:          fiuZ+RgXscdTdJgcoFCkjegWXzWeSnuLRV3tvHOX2vY=
Subject key identifier:   10:EF:B1:01:E0:30:0C:12:C1:23:63:DD:43:15:EA:99:80:F2:59:7C
Certificate issuer:       /CN=ABB03970ECCAC2E5328B35156EE5CF7622F18696
Certificate serial:       6C583211961E08E39E67FB710E369B2BFB66D713
Authority key identifier: AB:B0:39:70:EC:CA:C2:E5:32:8B:35:15:6E:E5:CF:76:22:F1:86:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB03970ECCAC2E5328B35156EE5CF7622F18696.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/323830343a313431633a3a2f33322d3438203d3e203533313330.roa
Signing time:             Thu 03 Sep 2026 16:12:33 +0000
ROA not before:           Thu 03 Sep 2026 16:07:33 +0000
ROA not after:            Thu 02 Sep 2027 16:12:33 +0000
asID:                     53130
IP address blocks:        2804:141c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/ABB03970ECCAC2E5328B35156EE5CF7622F18696.crl
                          rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/ABB03970ECCAC2E5328B35156EE5CF7622F18696.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB03970ECCAC2E5328B35156EE5CF7622F18696.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:58:32:11:96:1e:08:e3:9e:67:fb:71:0e:36:9b:2b:fb:66:d7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABB03970ECCAC2E5328B35156EE5CF7622F18696
        Validity
            Not Before: Sep  3 16:07:33 2026 GMT
            Not After : Sep  2 16:12:33 2027 GMT
        Subject: CN=10EFB101E0300C12C12363DD4315EA9980F2597C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:96:07:c4:b9:f4:73:8b:84:2f:cd:cc:a8:8d:
                    a6:3a:87:0e:84:85:77:2a:a1:f8:68:cd:cb:c3:99:
                    e2:52:46:4d:ce:e9:fc:42:72:86:a7:44:b5:aa:aa:
                    b3:df:99:4c:65:33:ac:9b:f6:4e:90:13:69:6a:33:
                    62:0e:56:ce:a0:6d:9f:92:ab:77:c1:42:3c:08:49:
                    df:c4:15:bf:3b:0e:e3:d6:40:fd:30:c6:48:05:51:
                    87:80:cd:ce:ed:fd:3e:77:e1:b4:80:e0:5b:61:dc:
                    b1:42:b3:2d:74:6f:95:91:dd:3f:f3:3f:7e:1a:f4:
                    5b:f2:9d:d6:50:2b:a5:a8:69:57:b0:c8:f3:ea:5f:
                    cc:c9:5d:87:b3:03:a1:75:36:10:b9:73:b7:b9:be:
                    61:3c:c4:e2:db:30:79:9b:57:15:53:28:cc:19:d8:
                    28:89:91:23:e1:5d:a1:dc:82:fd:29:cd:16:b9:8e:
                    25:7d:e7:17:1a:ad:c3:bf:15:ce:cd:16:b4:7e:9e:
                    fa:5d:40:0b:58:b9:ff:d1:91:c5:41:e3:d5:ce:1c:
                    66:3f:02:a2:03:b6:19:86:c4:d5:4c:9e:50:22:3f:
                    d9:69:a0:e7:61:db:b4:c8:f1:93:9d:14:63:eb:92:
                    e5:74:89:a5:8c:6e:09:24:3f:92:dc:26:3b:16:0a:
                    c7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EF:B1:01:E0:30:0C:12:C1:23:63:DD:43:15:EA:99:80:F2:59:7C
            X509v3 Authority Key Identifier:
                keyid:AB:B0:39:70:EC:CA:C2:E5:32:8B:35:15:6E:E5:CF:76:22:F1:86:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/ABB03970ECCAC2E5328B35156EE5CF7622F18696.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB03970ECCAC2E5328B35156EE5CF7622F18696.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/323830343a313431633a3a2f33322d3438203d3e203533313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:141c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:c5:35:d4:29:2f:36:b4:d3:05:f9:cc:34:4a:0a:47:32:05:
         3a:63:2e:4c:1c:ea:bf:91:67:01:34:16:19:8f:a9:0f:e6:bd:
         b9:83:a2:d8:9c:f3:d1:4a:d4:2f:3a:84:d3:e3:29:0c:b6:3c:
         3e:3d:81:e2:37:8f:10:4c:cc:43:b0:39:1a:6a:09:3d:28:bc:
         ff:61:e9:fc:6d:7b:a9:a9:db:56:8e:b4:79:ef:9b:0c:cc:f9:
         11:64:65:98:b4:a2:ad:62:18:5e:5e:c0:c1:f2:49:b0:1c:a8:
         e7:22:97:b3:89:ae:e1:43:0c:67:7d:63:d0:e7:32:bc:48:56:
         ef:11:ec:5b:5d:da:af:80:99:a0:87:56:2b:3e:09:3f:59:68:
         8b:35:1e:8b:b2:f7:4a:a3:60:0d:71:f0:d2:9f:83:e5:42:ed:
         cb:2a:a4:90:0a:11:ce:07:3d:c0:51:fd:3a:a0:12:03:4b:ea:
         23:68:80:1e:96:1a:33:99:6c:cc:23:33:00:45:e2:76:ef:5a:
         8a:9a:7a:83:4b:94:31:5f:46:e1:95:97:57:ef:a5:d8:38:c2:
         03:b3:16:8e:c4:d3:45:bd:d0:db:72:09:cc:16:36:5a:b1:4d:
         d4:30:81:e1:3a:ba:b4:e6:a9:5c:b8:73:92:1c:ee:94:32:0c:
         4d:22:e5:22
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUbFgyEZYeCOOeZ/txDjabK/tm1xMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJCMDM5NzBFQ0NBQzJFNTMyOEIzNTE1NkVFNUNGNzYy
MkYxODY5NjAeFw0yNjA5MDMxNjA3MzNaFw0yNzA5MDIxNjEyMzNaMDMxMTAvBgNV
BAMTKDEwRUZCMTAxRTAzMDBDMTJDMTIzNjNERDQzMTVFQTk5ODBGMjU5N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDElgfEufRzi4QvzcyojaY6hw6E
hXcqofhozcvDmeJSRk3O6fxCcoanRLWqqrPfmUxlM6yb9k6QE2lqM2IOVs6gbZ+S
q3fBQjwISd/EFb87DuPWQP0wxkgFUYeAzc7t/T534bSA4Fth3LFCsy10b5WR3T/z
P34a9FvyndZQK6WoaVewyPPqX8zJXYezA6F1NhC5c7e5vmE8xOLbMHmbVxVTKMwZ
2CiJkSPhXaHcgv0pzRa5jiV95xcarcO/Fc7NFrR+nvpdQAtYuf/RkcVB49XOHGY/
AqIDthmGxNVMnlAiP9lpoOdh27TI8ZOdFGPrkuV0iaWMbgkkP5LcJjsWCsd9AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUEO+xAeAwDBLBI2PdQxXqmYDyWXwwHwYDVR0j
BBgwFoAUq7A5cOzKwuUyizUVbuXPdiLxhpYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtM
NlovMC9BQkIwMzk3MEVDQ0FDMkU1MzI4QjM1MTU2RUU1Q0Y3NjIyRjE4Njk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCQjAzOTcwRUNDQUMyRTUz
MjhCMzUxNTZFRTVDRjc2MjJGMTg2OTYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RSOEdRNUJVZEJINGtxYUFDY1pZUWJqblVFUktnUFlDazJOSmk3SjRLTDZaLzAv
MzIzODMwMzQzYTMxMzQzMTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMzMx
MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEFBwwDQYJKoZIhvcNAQELBQADggEBAF3FNdQpLza0
0wX5zDRKCkcyBTpjLkwc6r+RZwE0FhmPqQ/mvbmDotic89FK1C86hNPjKQy2PD49
geI3jxBMzEOwORpqCT0ovP9h6fxte6mp21aOtHnvmwzM+RFkZZi0oq1iGF5ewMHy
SbAcqOcil7OJruFDDGd9Y9DnMrxIVu8R7Ftd2q+AmaCHVis+CT9ZaIs1Houy90qj
YA1x8NKfg+VC7csqpJAKEc4HPcBR/TqgEgNL6iNogB6WGjOZbMwjMwBF4nbvWoqa
eoNLlDFfRuGVl1fvpdg4wgOzFo7E00W90NtyCcwWNlqxTdQwgeE6urTmqVy4c5Ic
7pQyDE0i5SI=
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:46:58 2026 by rpki-client