Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2UvAVpb3ERXt4UpykU1qLBP5w7jqgfubdUYPPcXd77UG/0/323830343a393232343a3a2f33322d3438203d3e20323734363932.roa
File:                     323830343a393232343a3a2f33322d3438203d3e20323734363932.roa (raw, json)
Hash identifier:          vFPcIgCA5FK/Jxogd86Wtu5KVZPL2GrglG1o30rzaj8=
Subject key identifier:   0E:0F:83:9E:2B:4C:A4:61:3D:5B:21:96:03:C6:C5:C5:D1:4B:2A:60
Certificate issuer:       /CN=28F8E0836D41CDCFEEA51DDD67BE2F5CA56E4C53
Certificate serial:       196A4CDFACDC184C5B9634E2621FCBDCC8EB7F65
Authority key identifier: 28:F8:E0:83:6D:41:CD:CF:EE:A5:1D:DD:67:BE:2F:5C:A5:6E:4C:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F8E0836D41CDCFEEA51DDD67BE2F5CA56E4C53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UvAVpb3ERXt4UpykU1qLBP5w7jqgfubdUYPPcXd77UG/0/323830343a393232343a3a2f33322d3438203d3e20323734363932.roa
Signing time:             Wed 29 Jul 2026 23:20:52 +0000
ROA not before:           Wed 29 Jul 2026 23:15:52 +0000
ROA not after:            Wed 28 Jul 2027 23:20:52 +0000
asID:                     274692
IP address blocks:        2804:9224::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2UvAVpb3ERXt4UpykU1qLBP5w7jqgfubdUYPPcXd77UG/0/28F8E0836D41CDCFEEA51DDD67BE2F5CA56E4C53.crl
                          rsync://rpki-repo.registro.br/repo/2UvAVpb3ERXt4UpykU1qLBP5w7jqgfubdUYPPcXd77UG/0/28F8E0836D41CDCFEEA51DDD67BE2F5CA56E4C53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F8E0836D41CDCFEEA51DDD67BE2F5CA56E4C53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 00:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6a:4c:df:ac:dc:18:4c:5b:96:34:e2:62:1f:cb:dc:c8:eb:7f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F8E0836D41CDCFEEA51DDD67BE2F5CA56E4C53
        Validity
            Not Before: Jul 29 23:15:52 2026 GMT
            Not After : Jul 28 23:20:52 2027 GMT
        Subject: CN=0E0F839E2B4CA4613D5B219603C6C5C5D14B2A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:1d:4f:65:fe:f4:f5:05:69:df:a1:27:ce:
                    41:f9:8a:6f:46:bb:1d:60:8f:ec:ca:52:8d:4b:b5:
                    7d:d4:4e:6e:72:64:b1:ad:dc:dd:61:a8:22:b5:a9:
                    df:da:fc:d5:83:f5:ec:f4:b9:d6:e9:5e:b4:94:e2:
                    8d:e6:a6:22:47:9d:af:db:04:2a:38:b6:67:e6:cc:
                    01:24:7d:c5:48:eb:97:81:df:d5:bb:e1:0c:cc:94:
                    47:24:38:23:41:4e:f5:b6:34:0d:e8:19:44:5a:f7:
                    b5:54:ea:69:67:d1:74:62:98:b6:f8:88:aa:8e:29:
                    71:9b:0a:b1:1d:2d:f4:10:b4:b8:3f:94:a1:a4:ce:
                    08:03:08:1f:65:51:41:dc:74:08:13:c6:03:ce:79:
                    c2:8c:fd:01:69:d4:0c:1f:e7:50:15:07:15:cf:32:
                    86:3a:bd:28:72:1b:4f:f0:58:dd:03:10:86:d7:a7:
                    c2:70:a3:12:6c:4c:01:32:77:c2:85:01:2c:39:c5:
                    74:b0:10:8b:40:69:d7:1e:b9:5a:37:cc:de:c4:be:
                    b8:dd:a9:cc:78:da:c5:17:8b:05:8e:18:2f:ed:ee:
                    d2:d1:64:5c:e0:75:65:3e:d9:64:8a:87:64:2a:43:
                    b7:60:48:0b:0e:f3:40:2d:5b:95:e5:a2:a6:93:bc:
                    63:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0F:83:9E:2B:4C:A4:61:3D:5B:21:96:03:C6:C5:C5:D1:4B:2A:60
            X509v3 Authority Key Identifier:
                keyid:28:F8:E0:83:6D:41:CD:CF:EE:A5:1D:DD:67:BE:2F:5C:A5:6E:4C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UvAVpb3ERXt4UpykU1qLBP5w7jqgfubdUYPPcXd77UG/0/28F8E0836D41CDCFEEA51DDD67BE2F5CA56E4C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F8E0836D41CDCFEEA51DDD67BE2F5CA56E4C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UvAVpb3ERXt4UpykU1qLBP5w7jqgfubdUYPPcXd77UG/0/323830343a393232343a3a2f33322d3438203d3e20323734363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9224::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:e4:25:d0:e9:0b:5f:9c:7c:69:11:39:d1:85:22:09:9a:44:
         df:c5:2c:2d:4d:fb:42:e3:dc:bb:b0:1d:22:30:15:c8:6d:fc:
         3c:65:71:13:91:53:65:85:a8:2d:72:e7:cb:6e:4f:8b:53:ab:
         08:0d:95:42:66:91:30:b9:83:e6:64:98:0e:da:49:15:b7:b6:
         1e:5c:aa:7a:c4:ca:d6:9b:aa:3d:af:e7:25:a5:ce:89:f8:14:
         b7:b4:c0:22:e5:6e:b6:51:ab:6a:4d:d8:a5:7e:f8:86:08:f4:
         2a:9d:ef:4a:27:11:35:0e:b1:c3:41:64:6b:31:33:72:e1:29:
         70:66:8f:21:08:50:2e:49:95:b8:cb:81:59:18:f4:90:e7:c2:
         3e:24:e8:c9:dd:98:d9:03:d3:fe:4d:46:66:6e:7f:7d:10:4a:
         5b:4c:ba:92:7e:ff:c7:9c:8f:85:16:9c:d6:06:53:36:08:db:
         0f:d1:f1:be:6b:58:46:82:15:a1:1a:5f:79:4b:c7:80:4f:2e:
         75:49:88:01:22:95:fc:ff:11:77:76:fb:9b:b6:96:a8:7a:48:
         33:2e:29:31:07:ef:bf:77:a5:58:cd:d8:3b:6d:da:1a:b7:d2:
         a4:77:d3:34:2d:39:9d:61:be:a8:8d:16:9e:d1:8d:14:91:4d:
         5b:08:b9:1a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGWpM36zcGExbljTiYh/L3Mjrf2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhGOEUwODM2RDQxQ0RDRkVFQTUxRERENjdCRTJGNUNB
NTZFNEM1MzAeFw0yNjA3MjkyMzE1NTJaFw0yNzA3MjgyMzIwNTJaMDMxMTAvBgNV
BAMTKDBFMEY4MzlFMkI0Q0E0NjEzRDVCMjE5NjAzQzZDNUM1RDE0QjJBNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYx1PZf709QVp36EnzkH5im9G
ux1gj+zKUo1LtX3UTm5yZLGt3N1hqCK1qd/a/NWD9ez0udbpXrSU4o3mpiJHna/b
BCo4tmfmzAEkfcVI65eB39W74QzMlEckOCNBTvW2NA3oGURa97VU6mln0XRimLb4
iKqOKXGbCrEdLfQQtLg/lKGkzggDCB9lUUHcdAgTxgPOecKM/QFp1Awf51AVBxXP
MoY6vShyG0/wWN0DEIbXp8JwoxJsTAEyd8KFASw5xXSwEItAadceuVo3zN7Evrjd
qcx42sUXiwWOGC/t7tLRZFzgdWU+2WSKh2QqQ7dgSAsO80AtW5XloqaTvGMrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUDg+DnitMpGE9WyGWA8bFxdFLKmAwHwYDVR0j
BBgwFoAUKPjgg21Bzc/upR3dZ74vXKVuTFMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlV2QVZwYjNFUlh0NFVweWtVMXFMQlA1dzdqcWdmdWJkVVlQUGNYZDc3
VUcvMC8yOEY4RTA4MzZENDFDRENGRUVBNTFEREQ2N0JFMkY1Q0E1NkU0QzUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4RjhFMDgzNkQ0MUNEQ0ZF
RUE1MURERDY3QkUyRjVDQTU2RTRDNTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJVdkFWcGIzRVJYdDRVcHlrVTFxTEJQNXc3anFnZnViZFVZUFBjWGQ3N1VHLzAv
MzIzODMwMzQzYTM5MzIzMjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzM0
MzYzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASSJDANBgkqhkiG9w0BAQsFAAOCAQEAc+Ql0OkL
X5x8aRE50YUiCZpE38UsLU37QuPcu7AdIjAVyG38PGVxE5FTZYWoLXLny25Pi1Or
CA2VQmaRMLmD5mSYDtpJFbe2HlyqesTK1puqPa/nJaXOifgUt7TAIuVutlGrak3Y
pX74hgj0Kp3vSicRNQ6xw0FkazEzcuEpcGaPIQhQLkmVuMuBWRj0kOfCPiToyd2Y
2QPT/k1GZm5/fRBKW0y6kn7/x5yPhRac1gZTNgjbD9HxvmtYRoIVoRpfeUvHgE8u
dUmIASKV/P8Rd3b7m7aWqHpIMy4pMQfvv3elWM3YO23aGrfSpHfTNC05nWG+qI0W
ntGNFJFNWwi5Gg==
-----END CERTIFICATE-----
Generated at Mon Aug 24 02:27:14 2026 by rpki-client