Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/323830343a336430633a3a2f33322d313238203d3e20323636323530.roa
File:                     323830343a336430633a3a2f33322d313238203d3e20323636323530.roa (raw, json)
Hash identifier:          vi82Nr8mnpFhqtzOCosNwv+LoaAEtxzSpELtfumNSTk=
Subject key identifier:   4D:95:A7:55:AE:EC:6C:3E:CC:F4:54:BF:40:E7:69:3C:E1:4B:F1:18
Certificate issuer:       /CN=D4ECBDC0F25A83C5705B2F7059AFAD85E4CEBD38
Certificate serial:       532D8FB92470FD791CFEE02EA81369960002CEC5
Authority key identifier: D4:EC:BD:C0:F2:5A:83:C5:70:5B:2F:70:59:AF:AD:85:E4:CE:BD:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4ECBDC0F25A83C5705B2F7059AFAD85E4CEBD38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/323830343a336430633a3a2f33322d313238203d3e20323636323530.roa
Signing time:             Mon 06 Jul 2026 20:39:45 +0000
ROA not before:           Mon 06 Jul 2026 20:34:45 +0000
ROA not after:            Mon 05 Jul 2027 20:39:45 +0000
asID:                     266250
IP address blocks:        2804:3d0c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/D4ECBDC0F25A83C5705B2F7059AFAD85E4CEBD38.crl
                          rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/D4ECBDC0F25A83C5705B2F7059AFAD85E4CEBD38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4ECBDC0F25A83C5705B2F7059AFAD85E4CEBD38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2d:8f:b9:24:70:fd:79:1c:fe:e0:2e:a8:13:69:96:00:02:ce:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4ECBDC0F25A83C5705B2F7059AFAD85E4CEBD38
        Validity
            Not Before: Jul  6 20:34:45 2026 GMT
            Not After : Jul  5 20:39:45 2027 GMT
        Subject: CN=4D95A755AEEC6C3ECCF454BF40E7693CE14BF118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:ac:e3:05:b0:6d:cf:63:87:8b:9d:71:e2:
                    23:d3:20:fb:4d:fe:72:f2:1b:d5:54:3a:43:a8:69:
                    5f:f7:09:b1:1c:bc:59:38:a1:ed:eb:18:e2:44:7c:
                    1a:a2:bf:fc:7d:8a:b9:5a:6b:7a:2c:c7:50:b7:b9:
                    2a:b7:b2:7d:9a:a8:2d:8a:26:01:f9:0f:48:6f:db:
                    d2:65:60:2c:d7:97:4d:bc:16:ef:f2:d5:63:38:52:
                    c2:b1:4a:f0:de:d4:ef:83:e4:9e:e1:78:24:a1:7b:
                    22:16:9c:67:2a:e6:21:45:9f:3a:2f:db:63:55:d0:
                    6a:69:60:e5:61:d5:74:fe:05:97:22:3c:07:b5:02:
                    8b:65:67:ab:6a:66:1f:c1:02:22:a7:cf:bb:f6:fa:
                    45:4d:58:c8:8d:02:5b:75:0c:53:6f:b3:95:1b:0b:
                    34:ee:9a:d0:6f:af:51:ef:40:b2:df:98:33:e5:fd:
                    b1:56:c9:c6:e4:e7:3a:98:54:67:52:20:b5:91:b5:
                    6a:3f:a5:ee:53:2d:c8:50:12:54:8c:82:b3:cc:cc:
                    96:4b:e6:2e:6e:6a:7c:91:ed:0e:59:8e:6f:93:ac:
                    0c:3f:48:af:dd:d9:56:83:17:c5:89:24:88:88:d5:
                    3c:9c:ef:21:1c:a8:71:0b:b1:3a:94:66:35:f8:3c:
                    0d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:95:A7:55:AE:EC:6C:3E:CC:F4:54:BF:40:E7:69:3C:E1:4B:F1:18
            X509v3 Authority Key Identifier:
                keyid:D4:EC:BD:C0:F2:5A:83:C5:70:5B:2F:70:59:AF:AD:85:E4:CE:BD:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/D4ECBDC0F25A83C5705B2F7059AFAD85E4CEBD38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4ECBDC0F25A83C5705B2F7059AFAD85E4CEBD38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/323830343a336430633a3a2f33322d313238203d3e20323636323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:09:cd:15:e1:a8:1c:23:29:3e:43:5e:fc:ad:63:d2:af:bd:
         8f:2c:06:aa:41:28:5b:1c:65:08:fc:c7:c9:cd:d0:3d:47:7a:
         14:29:ac:97:4f:39:68:0d:10:6e:27:49:d0:0a:c6:6d:88:1d:
         f4:68:db:b9:04:3f:c6:50:35:11:70:79:59:3d:57:9c:32:50:
         e3:1f:19:80:8b:11:a4:d0:18:04:a2:72:03:2f:c7:2e:81:bb:
         60:b9:a2:0c:9a:25:98:89:4d:8f:56:71:eb:74:4b:66:92:c7:
         bd:ee:83:0b:90:24:88:3f:b3:20:06:e9:ff:93:28:f6:15:9b:
         51:7c:64:e4:03:b3:db:e1:24:86:18:3c:71:c3:c0:24:3b:28:
         8c:4d:c7:c5:90:0b:4d:81:65:c8:11:9b:07:c9:0d:af:30:2a:
         ee:ad:8b:d8:39:1c:ba:09:59:35:27:83:33:e3:58:8a:51:ea:
         58:e2:e1:17:b9:a3:6f:ee:3c:79:9c:36:9c:db:3a:85:13:da:
         e3:24:47:47:6d:4d:b7:8e:79:2d:7f:e8:5b:c6:b9:2b:28:0a:
         85:dd:0b:17:92:d1:8a:81:58:79:f0:83:86:d1:58:ba:f4:3d:
         69:eb:11:6b:e1:b8:ad:3a:0b:53:f9:cf:c0:4c:c8:01:33:d7:
         4e:69:06:fd
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUUy2PuSRw/Xkc/uAuqBNplgACzsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRFQ0JEQzBGMjVBODNDNTcwNUIyRjcwNTlBRkFEODVF
NENFQkQzODAeFw0yNjA3MDYyMDM0NDVaFw0yNzA3MDUyMDM5NDVaMDMxMTAvBgNV
BAMTKDREOTVBNzU1QUVFQzZDM0VDQ0Y0NTRCRjQwRTc2OTNDRTE0QkYxMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sKzjBbBtz2OHi51x4iPTIPtN
/nLyG9VUOkOoaV/3CbEcvFk4oe3rGOJEfBqiv/x9irlaa3osx1C3uSq3sn2aqC2K
JgH5D0hv29JlYCzXl028Fu/y1WM4UsKxSvDe1O+D5J7heCSheyIWnGcq5iFFnzov
22NV0GppYOVh1XT+BZciPAe1AotlZ6tqZh/BAiKnz7v2+kVNWMiNAlt1DFNvs5Ub
CzTumtBvr1HvQLLfmDPl/bFWycbk5zqYVGdSILWRtWo/pe5TLchQElSMgrPMzJZL
5i5uanyR7Q5Zjm+TrAw/SK/d2VaDF8WJJIiI1Tyc7yEcqHELsTqUZjX4PA2TAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUTZWnVa7sbD7M9FS/QOdpPOFL8RgwHwYDVR0j
BBgwFoAU1Oy9wPJag8VwWy9wWa+theTOvTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmVXUjE4cmtXM2lXc2p6YVpIcnZ1RUw4N21wQnFKN0h0MmVXdHFtQzh0
NnkvMC9ENEVDQkRDMEYyNUE4M0M1NzA1QjJGNzA1OUFGQUQ4NUU0Q0VCRDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0RUNCREMwRjI1QTgzQzU3
MDVCMkY3MDU5QUZBRDg1RTRDRUJEMzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJlV1IxOHJrVzNpV3NqemFaSHJ2dUVMODdtcEJxSjdIdDJlV3RxbUM4dDZ5LzAv
MzIzODMwMzQzYTMzNjQzMDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzMjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBD0MMA0GCSqGSIb3DQEBCwUAA4IBAQAoCc0V
4agcIyk+Q178rWPSr72PLAaqQShbHGUI/MfJzdA9R3oUKayXTzloDRBuJ0nQCsZt
iB30aNu5BD/GUDURcHlZPVecMlDjHxmAixGk0BgEonIDL8cugbtguaIMmiWYiU2P
VnHrdEtmkse97oMLkCSIP7MgBun/kyj2FZtRfGTkA7Pb4SSGGDxxw8AkOyiMTcfF
kAtNgWXIEZsHyQ2vMCrurYvYORy6CVk1J4Mz41iKUepY4uEXuaNv7jx5nDac2zqF
E9rjJEdHbU23jnktf+hbxrkrKAqF3QsXktGKgVh58IOG0Vi69D1p6xFr4bitOgtT
+c/ATMgBM9dOaQb9
-----END CERTIFICATE-----
Generated at Wed Jul 8 17:10:10 2026 by rpki-client