Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/323830343a3836633a3a2f33332d3333203d3e20323632333639.roa
File:                     323830343a3836633a3a2f33332d3333203d3e20323632333639.roa (raw, json)
Hash identifier:          mkVUO1elhDZvcvGSaQ1k5De/BjjlEJuilqUNhFRGkMg=
Subject key identifier:   4C:6C:D9:C1:E1:95:DD:EE:AF:A5:CD:AC:AE:47:2D:A6:11:25:A3:C0
Certificate issuer:       /CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
Certificate serial:       2E5CCBD9ABC76F5ED4B1981747FCD0465759E091
Authority key identifier: 87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/323830343a3836633a3a2f33332d3333203d3e20323632333639.roa
Signing time:             Fri 28 Aug 2026 19:06:26 +0000
ROA not before:           Fri 28 Aug 2026 19:01:26 +0000
ROA not after:            Fri 27 Aug 2027 19:06:26 +0000
asID:                     262369
IP address blocks:        2804:86c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5c:cb:d9:ab:c7:6f:5e:d4:b1:98:17:47:fc:d0:46:57:59:e0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
        Validity
            Not Before: Aug 28 19:01:26 2026 GMT
            Not After : Aug 27 19:06:26 2027 GMT
        Subject: CN=4C6CD9C1E195DDEEAFA5CDACAE472DA61125A3C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0e:0b:14:ec:1a:91:16:93:16:e8:11:19:b2:
                    29:70:96:a7:6d:59:1e:1a:f0:d3:4e:97:e3:6b:b8:
                    eb:12:ec:30:a3:85:d2:ee:ad:25:3c:05:dc:84:b3:
                    b5:9d:ca:51:71:27:5c:72:07:7d:e2:86:d0:6d:f3:
                    b1:40:77:65:24:85:d9:a9:b1:11:e1:50:6a:1f:ad:
                    b9:ae:81:d5:b2:2e:c8:96:24:f1:5a:ca:8c:c3:b4:
                    1c:54:15:9e:54:24:c9:55:8c:3f:02:64:e8:57:05:
                    cb:b9:fb:4c:35:fd:51:d5:56:65:0b:b3:18:42:eb:
                    80:45:78:71:23:ad:4b:14:f8:72:39:c8:85:3f:43:
                    62:82:01:d6:68:a9:fc:61:16:5c:6a:47:ce:e5:b5:
                    60:5b:f0:5e:c6:20:43:2f:2f:11:36:5d:0a:6b:db:
                    4d:ab:88:2c:20:f5:ad:6a:43:b7:f0:e9:cf:97:48:
                    75:20:da:4f:19:59:64:c2:ef:cf:56:ee:3f:77:52:
                    c8:60:1c:d5:7c:75:bf:f7:20:9b:4f:aa:6c:8d:6e:
                    97:5b:8d:b1:88:09:5d:8b:74:27:d2:0f:57:17:17:
                    cd:da:e5:92:dc:af:bc:26:d9:9f:33:97:de:73:03:
                    5c:f4:c8:91:67:ea:22:00:96:ef:b5:98:20:9a:2c:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6C:D9:C1:E1:95:DD:EE:AF:A5:CD:AC:AE:47:2D:A6:11:25:A3:C0
            X509v3 Authority Key Identifier:
                keyid:87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/323830343a3836633a3a2f33332d3333203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86c::/33

    Signature Algorithm: sha256WithRSAEncryption
         70:0a:d9:9e:3d:5e:a1:b4:ef:5a:db:5c:e8:ce:0d:a1:63:b4:
         f8:cc:56:c2:dc:c2:08:82:4d:b3:f4:86:a3:14:85:9d:68:d5:
         4c:73:b9:a8:33:d6:ef:f8:0e:6c:20:3a:61:ec:e1:c5:d6:82:
         c9:04:7d:76:ec:9c:0f:1c:d7:2a:cd:34:25:29:c2:cd:d0:cd:
         b0:6c:5a:5d:66:a2:13:cf:dc:bb:4c:be:46:83:83:ae:23:26:
         37:fd:72:1e:e5:0d:f7:01:83:d5:08:8a:f7:49:63:d7:ab:2d:
         ce:dc:82:47:48:69:52:c6:0a:d4:47:e6:eb:d4:30:98:0c:d8:
         62:a2:8f:29:9c:7d:eb:27:d2:3f:7b:91:36:c7:82:e1:ef:6c:
         eb:63:fe:08:60:ed:37:8d:98:f2:54:4b:cb:bb:fc:d9:40:05:
         ab:d1:79:3a:71:43:fe:d9:c9:fd:4a:6e:3b:63:ee:e0:96:e2:
         a6:22:f5:ae:d1:02:91:c3:f7:82:ac:4b:91:da:11:ba:c7:dc:
         58:44:25:e5:76:b1:08:a6:dd:5e:88:68:5b:d1:64:65:90:83:
         f4:48:3d:35:5d:ec:48:4d:e3:69:41:9f:b8:d3:f2:a8:e7:9c:
         31:50:81:c7:47:09:33:61:ba:4a:7b:7e:58:fb:cd:0e:2a:57:
         01:89:f3:62
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULlzL2avHb17UsZgXR/zQRldZ4JEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcwQkVBMDU5QUJFRUJDMUY1NDRFQTFGM0ZBNjM1Q0Y3
MkE4NDY1NzAeFw0yNjA4MjgxOTAxMjZaFw0yNzA4MjcxOTA2MjZaMDMxMTAvBgNV
BAMTKDRDNkNEOUMxRTE5NURERUVBRkE1Q0RBQ0FFNDcyREE2MTEyNUEzQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKDgsU7BqRFpMW6BEZsilwlqdt
WR4a8NNOl+NruOsS7DCjhdLurSU8BdyEs7WdylFxJ1xyB33ihtBt87FAd2Ukhdmp
sRHhUGofrbmugdWyLsiWJPFayozDtBxUFZ5UJMlVjD8CZOhXBcu5+0w1/VHVVmUL
sxhC64BFeHEjrUsU+HI5yIU/Q2KCAdZoqfxhFlxqR87ltWBb8F7GIEMvLxE2XQpr
202riCwg9a1qQ7fw6c+XSHUg2k8ZWWTC789W7j93UshgHNV8db/3IJtPqmyNbpdb
jbGICV2LdCfSD1cXF83a5ZLcr7wm2Z8zl95zA1z0yJFn6iIAlu+1mCCaLOTfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTGzZweGV3e6vpc2srkctphElo8AwHwYDVR0j
BBgwFoAUhwvqBZq+68H1ROofP6Y1z3KoRlcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWFyYWZGZ25SYVk1TGlhWE5HYVZpdWlGU3RWd0dvS1dqMUs1N3I1dzJ3
dXIvMC84NzBCRUEwNTlBQkVFQkMxRjU0NEVBMUYzRkE2MzVDRjcyQTg0NjU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3MEJFQTA1OUFCRUVCQzFG
NTQ0RUExRjNGQTYzNUNGNzJBODQ2NTcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VhcmFmRmduUmFZNUxpYVhOR2FWaXVpRlN0VndHb0tXajFLNTdyNXcyd3VyLzAv
MzIzODMwMzQzYTM4MzY2MzNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzMjMz
MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygECGwAMA0GCSqGSIb3DQEBCwUAA4IBAQBwCtmePV6h
tO9a21zozg2hY7T4zFbC3MIIgk2z9IajFIWdaNVMc7moM9bv+A5sIDph7OHF1oLJ
BH127JwPHNcqzTQlKcLN0M2wbFpdZqITz9y7TL5Gg4OuIyY3/XIe5Q33AYPVCIr3
SWPXqy3O3IJHSGlSxgrUR+br1DCYDNhioo8pnH3rJ9I/e5E2x4Lh72zrY/4IYO03
jZjyVEvLu/zZQAWr0Xk6cUP+2cn9Sm47Y+7gluKmIvWu0QKRw/eCrEuR2hG6x9xY
RCXldrEIpt1eiGhb0WRlkIP0SD01XexITeNpQZ+40/Ko55wxUIHHRwkzYbpKe35Y
+80OKlcBifNi
-----END CERTIFICATE-----
Generated at Fri Sep 4 05:17:28 2026 by rpki-client