Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3330303a3a2f34302d3430203d3e20323731363132.roa
File:                     323830343a376534303a3330303a3a2f34302d3430203d3e20323731363132.roa (raw, json)
Hash identifier:          sJ9LhSbz/bYVLzaff0kdmSlfF+DC+69ycel0bW1nAh4=
Subject key identifier:   6F:D7:50:B1:FC:A2:56:FB:93:69:9B:F0:60:E3:00:6A:79:41:D9:DB
Certificate issuer:       /CN=9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569
Certificate serial:       77B37BB7440AA2A0525743004D8287B60884DA4E
Authority key identifier: 9A:2E:3E:99:D0:BC:E7:93:A2:AC:7A:E6:8A:EB:44:6A:78:F5:B5:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3330303a3a2f34302d3430203d3e20323731363132.roa
Signing time:             Tue 27 Oct 2026 01:33:38 +0000
ROA not before:           Tue 27 Oct 2026 01:28:38 +0000
ROA not after:            Tue 26 Oct 2027 01:33:38 +0000
asID:                     271612
IP address blocks:        2804:7e40:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 12:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b3:7b:b7:44:0a:a2:a0:52:57:43:00:4d:82:87:b6:08:84:da:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569
        Validity
            Not Before: Oct 27 01:28:38 2026 GMT
            Not After : Oct 26 01:33:38 2027 GMT
        Subject: CN=6FD750B1FCA256FB93699BF060E3006A7941D9DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:72:3b:48:32:32:74:05:34:51:55:d3:e0:59:
                    71:09:58:2a:27:3d:e6:08:84:bb:5c:30:ee:53:6a:
                    65:95:36:85:43:97:a9:92:b6:e3:82:25:81:67:1c:
                    70:ac:56:a3:78:cb:da:74:4b:28:6a:44:11:41:a7:
                    d0:2c:a3:f2:a8:4d:e2:9e:4c:74:d1:ef:0f:fa:95:
                    93:f4:92:16:70:12:2b:4d:67:d1:4e:a6:9c:8f:1d:
                    7b:0f:ab:21:fd:e4:51:01:4c:88:60:8b:52:86:2c:
                    f1:40:4a:b6:fc:27:5e:0f:8e:5b:fc:eb:9a:e0:31:
                    8e:f1:6f:f1:95:ea:cd:1c:58:98:87:af:08:86:6f:
                    e4:59:a3:5a:9e:63:80:2f:a2:5f:07:bf:3c:f8:72:
                    19:11:f3:98:5a:48:6a:15:34:6f:4a:ad:b5:5c:d1:
                    f4:37:34:0c:a7:b6:d0:5a:0f:9e:6e:ed:f8:6f:17:
                    37:03:7f:d9:44:b9:f6:b2:c2:9e:16:9a:83:b3:2b:
                    69:40:d8:75:6e:7d:56:5f:67:0f:fa:e8:90:72:da:
                    9e:2a:af:13:d2:d8:0b:a0:27:2e:f5:f3:11:b1:13:
                    90:1e:97:d2:e5:c8:c5:12:64:4a:7d:29:20:dc:82:
                    98:e3:46:fe:f5:8e:0d:44:22:4a:a1:5c:5b:b3:61:
                    2f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D7:50:B1:FC:A2:56:FB:93:69:9B:F0:60:E3:00:6A:79:41:D9:DB
            X509v3 Authority Key Identifier:
                keyid:9A:2E:3E:99:D0:BC:E7:93:A2:AC:7A:E6:8A:EB:44:6A:78:F5:B5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3330303a3a2f34302d3430203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:f8:49:83:45:87:c8:8c:14:8a:ab:79:3c:5f:ac:50:f8:9e:
         c1:97:0e:11:c1:0a:bc:2c:a0:b8:81:42:1c:fe:1c:79:86:f9:
         94:a9:9d:f8:7e:d2:d0:a0:fa:b7:c5:91:50:b2:99:7e:71:27:
         76:b1:dd:b8:7c:ad:36:b2:de:c7:ad:68:61:24:a0:f5:f0:64:
         42:3f:7f:4b:8d:6d:9c:50:11:ef:45:82:61:a5:bc:14:39:07:
         49:cc:5c:f3:a0:1c:67:e9:0f:9e:32:bf:f8:57:c8:c5:8a:da:
         11:1d:65:09:2e:19:92:87:44:41:37:34:6f:24:16:1d:4e:7c:
         b3:58:37:f0:6f:47:1c:fb:4e:47:19:2f:06:79:a3:66:a7:cf:
         08:bd:09:db:48:38:e5:c2:09:23:70:56:99:f4:01:1c:f9:8e:
         f5:ae:de:10:d2:c6:c9:92:95:e7:79:fb:91:d0:b5:b6:2b:d3:
         77:c0:dc:66:98:40:16:06:f5:db:55:4f:2c:72:69:c4:65:dc:
         38:0f:17:88:89:5d:87:c1:ff:e8:33:7e:20:10:87:ef:26:67:
         73:6d:12:a9:0a:6e:f5:97:b6:e1:53:d3:37:7e:12:29:bd:6e:
         53:27:cf:58:ee:da:de:d2:a2:c3:f6:b8:f6:54:18:b3:24:21:
         2b:2f:de:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUd7N7t0QKoqBSV0MATYKHtgiE2k4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUEyRTNFOTlEMEJDRTc5M0EyQUM3QUU2OEFFQjQ0NkE3
OEY1QjU2OTAeFw0yNjEwMjcwMTI4MzhaFw0yNzEwMjYwMTMzMzhaMDMxMTAvBgNV
BAMTKDZGRDc1MEIxRkNBMjU2RkI5MzY5OUJGMDYwRTMwMDZBNzk0MUQ5REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDccjtIMjJ0BTRRVdPgWXEJWCon
PeYIhLtcMO5TamWVNoVDl6mStuOCJYFnHHCsVqN4y9p0SyhqRBFBp9Aso/KoTeKe
THTR7w/6lZP0khZwEitNZ9FOppyPHXsPqyH95FEBTIhgi1KGLPFASrb8J14Pjlv8
65rgMY7xb/GV6s0cWJiHrwiGb+RZo1qeY4Avol8Hvzz4chkR85haSGoVNG9KrbVc
0fQ3NAynttBaD55u7fhvFzcDf9lEufaywp4WmoOzK2lA2HVufVZfZw/66JBy2p4q
rxPS2AugJy718xGxE5Ael9LlyMUSZEp9KSDcgpjjRv71jg1EIkqhXFuzYS99AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUb9dQsfyiVvuTaZvwYOMAanlB2dswHwYDVR0j
BBgwFoAUmi4+mdC855OirHrmiutEanj1tWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMno1OEZldVpiOVV0R3dTNVJaQnBiY1BoMm9hcE14ZW5UVmRiTGNoOUxM
bjUvMC85QTJFM0U5OUQwQkNFNzkzQTJBQzdBRTY4QUVCNDQ2QTc4RjVCNTY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBMkUzRTk5RDBCQ0U3OTNB
MkFDN0FFNjhBRUI0NDZBNzhGNUI1NjkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ6NThGZXVaYjlVdEd3UzVSWkJwYmNQaDJvYXBNeGVuVFZkYkxjaDlMTG41LzAv
MzIzODMwMzQzYTM3NjUzNDMwM2EzMzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM3MzEzNjMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBH5AAzANBgkqhkiG9w0BAQsFAAOC
AQEAJfhJg0WHyIwUiqt5PF+sUPiewZcOEcEKvCyguIFCHP4ceYb5lKmd+H7S0KD6
t8WRULKZfnEndrHduHytNrLex61oYSSg9fBkQj9/S41tnFAR70WCYaW8FDkHScxc
86AcZ+kPnjK/+FfIxYraER1lCS4ZkodEQTc0byQWHU58s1g38G9HHPtORxkvBnmj
ZqfPCL0J20g45cIJI3BWmfQBHPmO9a7eENLGyZKV53n7kdC1tivTd8DcZphAFgb1
21VPLHJpxGXcOA8XiIldh8H/6DN+IBCH7yZnc20SqQpu9Ze24VPTN34SKb1uUyfP
WO7a3tKiw/a49lQYsyQhKy/exg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 21:25:46 2026 by rpki-client