Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/323830343a323635303a3a2f33322d3438203d3e20323634333430.roa
File:                     323830343a323635303a3a2f33322d3438203d3e20323634333430.roa (raw, json)
Hash identifier:          hDS5R+BVGDxOhkhHtQtB1MnZcuvhlyRKfasPKs2uPyM=
Subject key identifier:   6F:D0:60:19:63:A9:65:1E:DA:A5:54:41:14:B6:C1:64:CB:B4:9B:B5
Certificate issuer:       /CN=6615D54DC40DA22D35937FF43916C957DADC3A9D
Certificate serial:       706760939AED38262D6C8C1DD08B7E3FAF12A8C3
Authority key identifier: 66:15:D5:4D:C4:0D:A2:2D:35:93:7F:F4:39:16:C9:57:DA:DC:3A:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6615D54DC40DA22D35937FF43916C957DADC3A9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/323830343a323635303a3a2f33322d3438203d3e20323634333430.roa
Signing time:             Thu 15 Oct 2026 14:00:44 +0000
ROA not before:           Thu 15 Oct 2026 13:55:44 +0000
ROA not after:            Thu 14 Oct 2027 14:00:44 +0000
asID:                     264340
IP address blocks:        2804:2650::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/6615D54DC40DA22D35937FF43916C957DADC3A9D.crl
                          rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/6615D54DC40DA22D35937FF43916C957DADC3A9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6615D54DC40DA22D35937FF43916C957DADC3A9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 00:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:67:60:93:9a:ed:38:26:2d:6c:8c:1d:d0:8b:7e:3f:af:12:a8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6615D54DC40DA22D35937FF43916C957DADC3A9D
        Validity
            Not Before: Oct 15 13:55:44 2026 GMT
            Not After : Oct 14 14:00:44 2027 GMT
        Subject: CN=6FD0601963A9651EDAA5544114B6C164CBB49BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:20:5d:09:56:89:f1:2c:af:99:01:3c:0f:
                    eb:29:a2:be:ce:e9:c9:91:e3:fb:8c:cc:5e:70:a4:
                    af:8d:ab:b0:32:0d:25:b1:79:74:50:99:e1:1f:15:
                    a0:1f:0c:4d:09:ea:7b:77:dc:ec:6a:b4:5a:48:27:
                    69:7a:ea:0c:00:c0:e0:88:53:d7:a5:2e:62:94:52:
                    e5:f0:04:ad:33:cb:c2:30:20:ae:4e:46:60:c1:f7:
                    2b:f8:d1:91:dd:7a:e6:77:19:eb:4f:c8:da:01:93:
                    ae:b3:76:c3:83:b7:fb:72:b1:17:05:16:1b:9c:bf:
                    bc:cd:b5:f3:f5:bb:e2:9d:e1:b3:c5:de:c1:ab:07:
                    a8:00:26:80:91:47:ea:4a:aa:2a:e1:1f:69:fa:57:
                    26:64:90:67:81:1a:fa:22:4e:74:9e:d1:d2:d1:e4:
                    91:de:77:89:2d:44:d5:1f:0b:8a:e1:12:76:50:16:
                    f1:01:17:fd:3a:7f:64:6d:cf:28:ef:03:0c:eb:c7:
                    af:7d:8f:ef:d3:07:e0:45:ff:37:3c:a3:ae:fd:91:
                    ad:41:5a:4c:a4:44:b7:a1:92:79:b5:12:ec:cf:51:
                    88:4e:15:18:c8:14:24:9f:61:56:66:6e:d2:29:7d:
                    dc:57:13:7e:db:b1:05:72:ed:7f:06:ec:23:be:e2:
                    21:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D0:60:19:63:A9:65:1E:DA:A5:54:41:14:B6:C1:64:CB:B4:9B:B5
            X509v3 Authority Key Identifier:
                keyid:66:15:D5:4D:C4:0D:A2:2D:35:93:7F:F4:39:16:C9:57:DA:DC:3A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/6615D54DC40DA22D35937FF43916C957DADC3A9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6615D54DC40DA22D35937FF43916C957DADC3A9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/323830343a323635303a3a2f33322d3438203d3e20323634333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2650::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:fe:2d:5a:b9:1f:29:73:88:0d:fb:31:6b:f0:e5:e7:07:b6:
         ca:49:5b:8c:c1:04:d6:2f:a6:4f:7f:8d:d2:26:b2:d4:42:43:
         5e:f9:5a:7e:71:88:f3:9d:30:8b:95:73:f4:a7:d4:8f:c5:fc:
         fb:7c:13:1e:c9:30:11:ee:f5:60:bb:49:a4:de:04:d1:5d:d7:
         57:3d:a7:a0:f2:84:35:b3:d2:f1:84:a9:94:41:a3:4f:d3:4a:
         51:d0:ee:02:02:05:65:16:24:5d:36:34:06:db:63:1b:ff:a3:
         dc:41:fd:2a:40:e2:37:30:13:ea:ae:13:0d:57:17:03:8e:fa:
         ab:49:c5:31:49:6f:63:01:c9:77:5e:3c:c4:5f:99:dc:51:8f:
         d0:f9:1e:cd:1d:01:4a:d4:98:f1:67:44:41:bb:41:11:c2:62:
         ea:3c:ce:95:6a:10:08:22:ec:50:17:0b:d1:aa:31:a1:10:8b:
         f0:40:9c:03:47:4d:5c:e2:f6:eb:d0:ee:b3:b0:d6:98:63:dd:
         cc:84:d6:ce:9a:6b:f9:cf:59:54:6e:3c:99:a7:ee:af:39:87:
         c0:57:41:73:26:1a:96:5e:ad:ba:16:47:a5:5d:1f:cc:52:e3:
         3d:3a:4c:c1:6c:a9:84:7a:44:9e:17:e6:a7:ce:f3:09:a8:01:
         a6:78:6a:5a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcGdgk5rtOCYtbIwd0It+P68SqMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYxNUQ1NERDNDBEQTIyRDM1OTM3RkY0MzkxNkM5NTdE
QURDM0E5RDAeFw0yNjEwMTUxMzU1NDRaFw0yNzEwMTQxNDAwNDRaMDMxMTAvBgNV
BAMTKDZGRDA2MDE5NjNBOTY1MUVEQUE1NTQ0MTE0QjZDMTY0Q0JCNDlCQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr5CBdCVaJ8SyvmQE8D+spor7O
6cmR4/uMzF5wpK+Nq7AyDSWxeXRQmeEfFaAfDE0J6nt33OxqtFpIJ2l66gwAwOCI
U9elLmKUUuXwBK0zy8IwIK5ORmDB9yv40ZHdeuZ3GetPyNoBk66zdsODt/tysRcF
Fhucv7zNtfP1u+Kd4bPF3sGrB6gAJoCRR+pKqirhH2n6VyZkkGeBGvoiTnSe0dLR
5JHed4ktRNUfC4rhEnZQFvEBF/06f2RtzyjvAwzrx699j+/TB+BF/zc8o679ka1B
WkykRLehknm1EuzPUYhOFRjIFCSfYVZmbtIpfdxXE37bsQVy7X8G7CO+4iEtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUb9BgGWOpZR7apVRBFLbBZMu0m7UwHwYDVR0j
BBgwFoAUZhXVTcQNoi01k3/0ORbJV9rcOp0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkpaUThuckM4UkhTQURnWkNnZDNyZnJDUHp1bXh5ZnlWUlRFSmgxV1d3
V2YvMC82NjE1RDU0REM0MERBMjJEMzU5MzdGRjQzOTE2Qzk1N0RBREMzQTlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2MTVENTREQzQwREEyMkQz
NTkzN0ZGNDM5MTZDOTU3REFEQzNBOUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJKWlE4bnJDOFJIU0FEZ1pDZ2QzcmZyQ1B6dW14eWZ5VlJURUpoMVdXd1dmLzAv
MzIzODMwMzQzYTMyMzYzNTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzMzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQmUDANBgkqhkiG9w0BAQsFAAOCAQEApP4tWrkf
KXOIDfsxa/Dl5we2yklbjMEE1i+mT3+N0iay1EJDXvlafnGI850wi5Vz9KfUj8X8
+3wTHskwEe71YLtJpN4E0V3XVz2noPKENbPS8YSplEGjT9NKUdDuAgIFZRYkXTY0
BttjG/+j3EH9KkDiNzAT6q4TDVcXA476q0nFMUlvYwHJd148xF+Z3FGP0PkezR0B
StSY8WdEQbtBEcJi6jzOlWoQCCLsUBcL0aoxoRCL8ECcA0dNXOL269Dus7DWmGPd
zITWzppr+c9ZVG48mafurzmHwFdBcyYall6tuhZHpV0fzFLjPTpMwWyphHpEnhfm
p87zCagBpnhqWg==
-----END CERTIFICATE-----
Generated at Tue Nov 3 04:05:04 2026 by rpki-client