Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3xnTCgPqc1DSMxWXVky5CZtpWtnx6FLibMnKLakgTXKg/0/323830343a393962383a3a2f33322d3332203d3e20323735383030.roa
File:                     323830343a393962383a3a2f33322d3332203d3e20323735383030.roa (raw, json)
Hash identifier:          3hLIFOab9+G/Ga31PgEtinZpZdFedkDwGU05k5BvHgw=
Subject key identifier:   92:7C:8D:E6:C5:B4:44:31:39:92:20:F8:C0:45:8B:07:79:BA:9F:6A
Certificate issuer:       /CN=106782108AA5A102512AEDA3AD0E86672C823139
Certificate serial:       D965BC8DAAACC5E308BAB114871A77E53C651B
Authority key identifier: 10:67:82:10:8A:A5:A1:02:51:2A:ED:A3:AD:0E:86:67:2C:82:31:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/106782108AA5A102512AEDA3AD0E86672C823139.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xnTCgPqc1DSMxWXVky5CZtpWtnx6FLibMnKLakgTXKg/0/323830343a393962383a3a2f33322d3332203d3e20323735383030.roa
Signing time:             Wed 05 Aug 2026 19:04:58 +0000
ROA not before:           Wed 05 Aug 2026 18:59:58 +0000
ROA not after:            Wed 04 Aug 2027 19:04:58 +0000
asID:                     275800
IP address blocks:        2804:99b8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3xnTCgPqc1DSMxWXVky5CZtpWtnx6FLibMnKLakgTXKg/0/106782108AA5A102512AEDA3AD0E86672C823139.crl
                          rsync://rpki-repo.registro.br/repo/3xnTCgPqc1DSMxWXVky5CZtpWtnx6FLibMnKLakgTXKg/0/106782108AA5A102512AEDA3AD0E86672C823139.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/106782108AA5A102512AEDA3AD0E86672C823139.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d9:65:bc:8d:aa:ac:c5:e3:08:ba:b1:14:87:1a:77:e5:3c:65:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106782108AA5A102512AEDA3AD0E86672C823139
        Validity
            Not Before: Aug  5 18:59:58 2026 GMT
            Not After : Aug  4 19:04:58 2027 GMT
        Subject: CN=927C8DE6C5B44431399220F8C0458B0779BA9F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:9b:11:3e:cd:6f:8e:3e:f6:eb:39:56:32:
                    b8:8b:ab:49:11:c9:23:fe:bf:82:7b:74:27:cf:6d:
                    0a:51:29:b6:91:12:b2:f2:df:81:af:73:0d:53:05:
                    55:52:98:e1:30:6e:f0:cb:5c:89:f6:fc:68:07:21:
                    6d:4b:72:33:52:4c:20:42:b9:ec:67:dd:bb:ff:4e:
                    05:2e:d4:38:dd:c1:22:ae:1e:99:85:ed:75:c9:16:
                    04:55:fa:58:f8:0f:ef:df:ba:d3:41:a7:ef:cb:88:
                    4c:95:1d:2a:9e:6f:78:af:f7:f0:49:af:b4:b5:2d:
                    26:52:32:91:c0:76:69:31:18:c6:84:10:c3:d7:69:
                    ad:64:a8:03:de:f6:5b:f8:74:60:cb:19:3d:e9:61:
                    f4:e8:60:b3:4e:20:ae:47:10:6c:43:11:7f:db:0a:
                    01:1e:dd:e6:d9:46:ea:a1:90:d7:e8:d4:f7:b5:28:
                    f3:dd:39:c8:86:ef:56:d3:eb:75:43:98:be:63:f4:
                    a4:e7:bb:b7:11:da:7e:20:79:0b:2f:80:e1:4a:55:
                    04:33:e9:b9:5a:51:87:31:a2:49:32:c3:1e:1a:69:
                    6b:4d:70:b4:55:12:ac:0e:ac:25:a3:7f:8a:42:57:
                    7c:f9:25:f0:70:49:48:36:1e:53:c2:36:a1:6b:ee:
                    db:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7C:8D:E6:C5:B4:44:31:39:92:20:F8:C0:45:8B:07:79:BA:9F:6A
            X509v3 Authority Key Identifier:
                keyid:10:67:82:10:8A:A5:A1:02:51:2A:ED:A3:AD:0E:86:67:2C:82:31:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xnTCgPqc1DSMxWXVky5CZtpWtnx6FLibMnKLakgTXKg/0/106782108AA5A102512AEDA3AD0E86672C823139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/106782108AA5A102512AEDA3AD0E86672C823139.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xnTCgPqc1DSMxWXVky5CZtpWtnx6FLibMnKLakgTXKg/0/323830343a393962383a3a2f33322d3332203d3e20323735383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:99b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:a3:8d:cf:46:da:65:03:eb:9e:73:fa:80:c1:9c:71:5a:eb:
         9e:58:0a:f2:a7:a9:2f:a8:f4:27:eb:2e:ea:1b:32:e8:49:9e:
         6b:9c:d8:ca:b0:cc:c7:3e:d9:70:11:87:7c:92:26:49:58:09:
         20:47:b3:8c:8d:a7:dc:11:51:46:5b:20:5f:fe:f5:0f:f2:8f:
         96:89:56:0a:e5:f8:39:5f:9b:24:8e:15:a1:a1:3f:e3:86:c9:
         63:75:10:ea:63:d7:49:06:d9:23:36:b6:95:16:04:27:61:53:
         d0:1f:b4:ff:05:53:af:ce:5e:70:8e:f8:81:dc:d5:d9:68:d7:
         34:b5:7a:0f:2c:ef:15:58:b6:24:a6:16:f5:78:36:70:c6:06:
         82:83:a6:26:d6:0f:99:d8:08:43:e9:74:a6:e9:6c:27:72:09:
         29:95:cd:2c:51:ac:68:41:4f:26:15:58:bd:d8:93:5b:00:d9:
         98:b6:03:0e:f6:3b:ec:4b:91:e7:ff:8b:53:ce:44:ed:ba:1a:
         34:cf:8a:33:67:ae:0f:95:37:fc:e5:f4:61:a3:66:12:25:f0:
         37:1a:82:be:92:fb:94:16:1a:f8:99:ac:cd:a7:20:d4:22:12:
         39:30:ea:aa:6c:6c:fc:e2:a8:d1:b9:d6:97:57:71:11:8b:04:
         4d:8d:0d:85
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUANllvI2qrMXjCLqxFIcad+U8ZRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2NzgyMTA4QUE1QTEwMjUxMkFFREEzQUQwRTg2Njcy
QzgyMzEzOTAeFw0yNjA4MDUxODU5NThaFw0yNzA4MDQxOTA0NThaMDMxMTAvBgNV
BAMTKDkyN0M4REU2QzVCNDQ0MzEzOTkyMjBGOEMwNDU4QjA3NzlCQTlGNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMJsRPs1vjj726zlWMriLq0kR
ySP+v4J7dCfPbQpRKbaRErLy34Gvcw1TBVVSmOEwbvDLXIn2/GgHIW1LcjNSTCBC
uexn3bv/TgUu1DjdwSKuHpmF7XXJFgRV+lj4D+/futNBp+/LiEyVHSqeb3iv9/BJ
r7S1LSZSMpHAdmkxGMaEEMPXaa1kqAPe9lv4dGDLGT3pYfToYLNOIK5HEGxDEX/b
CgEe3ebZRuqhkNfo1Pe1KPPdOciG71bT63VDmL5j9KTnu7cR2n4geQsvgOFKVQQz
6blaUYcxokkywx4aaWtNcLRVEqwOrCWjf4pCV3z5JfBwSUg2HlPCNqFr7tsXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUknyN5sW0RDE5kiD4wEWLB3m6n2owHwYDVR0j
BBgwFoAUEGeCEIqloQJRKu2jrQ6GZyyCMTkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3huVENnUHFjMURTTXhXWFZreTVDWnRwV3RueDZGTGliTW5LTGFrZ1RY
S2cvMC8xMDY3ODIxMDhBQTVBMTAyNTEyQUVEQTNBRDBFODY2NzJDODIzMTM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwNjc4MjEwOEFBNUExMDI1
MTJBRURBM0FEMEU4NjY3MkM4MjMxMzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN4blRDZ1BxYzFEU014V1hWa3k1Q1p0cFd0bng2RkxpYk1uS0xha2dUWEtnLzAv
MzIzODMwMzQzYTM5Mzk2MjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzM1
MzgzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASZuDANBgkqhkiG9w0BAQsFAAOCAQEAeKONz0ba
ZQPrnnP6gMGccVrrnlgK8qepL6j0J+su6hsy6Emea5zYyrDMxz7ZcBGHfJImSVgJ
IEezjI2n3BFRRlsgX/71D/KPlolWCuX4OV+bJI4VoaE/44bJY3UQ6mPXSQbZIza2
lRYEJ2FT0B+0/wVTr85ecI74gdzV2WjXNLV6DyzvFVi2JKYW9Xg2cMYGgoOmJtYP
mdgIQ+l0pulsJ3IJKZXNLFGsaEFPJhVYvdiTWwDZmLYDDvY77EuR5/+LU85E7boa
NM+KM2euD5U3/OX0YaNmEiXwNxqCvpL7lBYa+Jmszacg1CISOTDqqmxs/OKo0bnW
l1dxEYsETY0NhQ==
-----END CERTIFICATE-----
Generated at Sun Aug 23 05:15:32 2026 by rpki-client