Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/323830343a323064633a3a2f33322d3438203d3e20323634353137.roa
File:                     323830343a323064633a3a2f33322d3438203d3e20323634353137.roa (raw, json)
Hash identifier:          csMQFNEL9b4SfyavTShogP9Qmi/oOULAbfbp+0HpWnw=
Subject key identifier:   D6:C1:B6:9F:2D:69:2F:F5:EC:D5:C9:58:B1:65:9F:CB:F5:5C:7D:12
Certificate issuer:       /CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
Certificate serial:       69AB117BB6AA337B9913364FFE665254EBF64E62
Authority key identifier: 06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/323830343a323064633a3a2f33322d3438203d3e20323634353137.roa
Signing time:             Thu 20 Aug 2026 21:06:22 +0000
ROA not before:           Thu 20 Aug 2026 21:01:22 +0000
ROA not after:            Thu 19 Aug 2027 21:06:22 +0000
asID:                     264517
IP address blocks:        2804:20dc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl
                          rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 12:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ab:11:7b:b6:aa:33:7b:99:13:36:4f:fe:66:52:54:eb:f6:4e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
        Validity
            Not Before: Aug 20 21:01:22 2026 GMT
            Not After : Aug 19 21:06:22 2027 GMT
        Subject: CN=D6C1B69F2D692FF5ECD5C958B1659FCBF55C7D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:43:6e:7c:eb:6f:a1:0a:eb:0f:9f:1c:7c:
                    a3:5e:32:3b:ac:a7:bc:34:34:0d:f8:f1:71:d1:ca:
                    2c:a9:a1:10:1c:ce:3d:9c:6e:7b:50:28:a8:62:9f:
                    9e:8b:51:b2:68:34:43:41:b9:9c:5e:bd:ac:a9:2b:
                    ba:fe:99:c7:e7:78:e8:b9:bc:db:02:08:7b:f1:c3:
                    26:e8:3e:98:46:cb:45:b6:61:8b:f2:e2:34:50:ac:
                    8b:ba:2f:18:42:c2:05:1e:c6:31:0b:af:ff:42:7d:
                    61:d3:46:41:9e:0b:12:09:ae:ad:32:21:21:53:29:
                    f2:d4:c7:fe:87:de:3f:7f:80:a9:35:df:fe:5a:52:
                    57:20:2c:55:8b:18:40:64:5c:0f:66:8b:b1:25:94:
                    d1:e0:39:98:3b:ef:48:e2:43:86:d1:69:f8:e7:88:
                    c8:40:33:c0:ee:24:37:f1:2c:d9:9e:dd:3e:33:4e:
                    11:65:b7:0b:ac:93:ee:8f:d6:b6:58:49:c1:b3:d9:
                    6b:f2:3b:39:83:e3:5a:92:61:f2:ef:ea:c7:d8:39:
                    9b:08:ae:f6:21:25:ec:d8:c0:4a:8f:74:e5:5b:e4:
                    8a:eb:1c:44:4d:75:1d:6c:44:2c:e0:53:f5:d5:d3:
                    03:d4:04:a1:5f:aa:cb:e3:30:b6:33:1b:02:4d:bd:
                    9c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C1:B6:9F:2D:69:2F:F5:EC:D5:C9:58:B1:65:9F:CB:F5:5C:7D:12
            X509v3 Authority Key Identifier:
                keyid:06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/323830343a323064633a3a2f33322d3438203d3e20323634353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:6d:cd:a7:e0:44:fa:cd:ba:d5:13:37:d7:78:b5:d0:68:56:
         21:7d:17:f7:20:74:71:c6:ec:4c:36:c3:f7:55:c8:28:91:2b:
         9f:84:d5:ff:76:ab:fd:a4:bf:ab:34:01:4d:5e:a9:89:09:19:
         f3:09:bf:0f:9e:c0:ca:ba:59:89:3f:06:a8:17:bd:8c:ec:28:
         70:e3:8e:9a:d3:ec:83:e1:61:b3:c1:21:1a:f4:5d:2d:f6:0e:
         7e:cc:ac:9a:78:bf:60:62:ab:0d:ef:df:6c:6e:58:b9:f1:0f:
         e1:8e:d3:f2:a5:90:27:66:66:dc:d8:e4:0a:a0:64:5a:2d:c7:
         1b:6e:d2:1d:ba:a9:cd:f4:9b:3e:74:b5:f5:ee:b3:c9:84:4c:
         42:b2:cb:9e:b8:23:4f:6e:9c:46:92:d3:5e:29:84:40:e9:d4:
         75:20:28:5b:52:c3:2c:3f:0a:a4:4a:c2:ca:f8:43:e1:71:ab:
         d5:7c:85:9d:39:0f:cf:9e:f6:34:a2:e8:1c:f6:bf:42:89:f3:
         47:dd:72:e3:1d:f1:ef:44:c8:18:94:bc:04:2a:3d:5d:ab:41:
         05:4c:f6:a0:7c:09:fd:e4:af:39:1a:a6:fb:cf:d2:cb:51:e1:
         1d:5f:f5:7f:c3:1e:ea:02:ca:35:cd:11:8d:b1:f5:f3:65:65:
         c9:42:26:e8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUaasRe7aqM3uZEzZP/mZSVOv2TmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZEQkQzMkU4NjVEOUQwOEZBNUM5ODJBQjdDQkRBNEZD
QjIyNjJFODAeFw0yNjA4MjAyMTAxMjJaFw0yNzA4MTkyMTA2MjJaMDMxMTAvBgNV
BAMTKEQ2QzFCNjlGMkQ2OTJGRjVFQ0Q1Qzk1OEIxNjU5RkNCRjU1QzdEMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqS0NufOtvoQrrD58cfKNeMjus
p7w0NA348XHRyiypoRAczj2cbntQKKhin56LUbJoNENBuZxevaypK7r+mcfneOi5
vNsCCHvxwyboPphGy0W2YYvy4jRQrIu6LxhCwgUexjELr/9CfWHTRkGeCxIJrq0y
ISFTKfLUx/6H3j9/gKk13/5aUlcgLFWLGEBkXA9mi7EllNHgOZg770jiQ4bRafjn
iMhAM8DuJDfxLNme3T4zThFltwusk+6P1rZYScGz2WvyOzmD41qSYfLv6sfYOZsI
rvYhJezYwEqPdOVb5IrrHERNdR1sRCzgU/XV0wPUBKFfqsvjMLYzGwJNvZztAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1sG2ny1pL/Xs1clYsWWfy/VcfRIwHwYDVR0j
BBgwFoAUBtvTLoZdnQj6XJgqt8vaT8siYugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdud1gybUFndFlZM1lvcmFkc0Ztb1NWWDRuamZ6bzVkVHFobzhtZzhl
UkwvMC8wNkRCRDMyRTg2NUQ5RDA4RkE1Qzk4MkFCN0NCREE0RkNCMjI2MkU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2REJEMzJFODY1RDlEMDhG
QTVDOTgyQUI3Q0JEQTRGQ0IyMjYyRTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHbndYMm1BZ3RZWTNZb3JhZHNGbW9TVlg0bmpmem81ZFRxaG84bWc4ZVJMLzAv
MzIzODMwMzQzYTMyMzA2NDYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzUzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQg3DANBgkqhkiG9w0BAQsFAAOCAQEAOm3Np+BE
+s261RM313i10GhWIX0X9yB0ccbsTDbD91XIKJErn4TV/3ar/aS/qzQBTV6piQkZ
8wm/D57AyrpZiT8GqBe9jOwocOOOmtPsg+Fhs8EhGvRdLfYOfsysmni/YGKrDe/f
bG5YufEP4Y7T8qWQJ2Zm3NjkCqBkWi3HG27SHbqpzfSbPnS19e6zyYRMQrLLnrgj
T26cRpLTXimEQOnUdSAoW1LDLD8KpErCyvhD4XGr1XyFnTkPz572NKLoHPa/Qonz
R91y4x3x70TIGJS8BCo9XatBBUz2oHwJ/eSvORqm+8/Sy1HhHV/1f8Me6gLKNc0R
jbH182VlyUIm6A==
-----END CERTIFICATE-----
Generated at Mon Aug 24 14:49:27 2026 by rpki-client