Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316538303a3a2f34312d3431203d3e20323638333030.roa
File:                     323830343a383363343a316538303a3a2f34312d3431203d3e20323638333030.roa (raw, json)
Hash identifier:          EWvVOaRYAok9bsyO2SakCMtyo65Ai8c+VyTK/iDOoHs=
Subject key identifier:   2A:79:A3:CF:4F:73:26:9D:1A:5C:EB:8A:67:25:5D:6C:AC:AA:2F:AC
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       496790A1906573E55377F782961B155F7ED96D4F
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316538303a3a2f34312d3431203d3e20323638333030.roa
Signing time:             Wed 05 Aug 2026 13:36:54 +0000
ROA not before:           Wed 05 Aug 2026 13:31:54 +0000
ROA not after:            Wed 04 Aug 2027 13:36:54 +0000
asID:                     268300
IP address blocks:        2804:83c4:1e80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 04:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:67:90:a1:90:65:73:e5:53:77:f7:82:96:1b:15:5f:7e:d9:6d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Aug  5 13:31:54 2026 GMT
            Not After : Aug  4 13:36:54 2027 GMT
        Subject: CN=2A79A3CF4F73269D1A5CEB8A67255D6CACAA2FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:81:c3:9e:e6:ab:04:73:47:f4:bf:43:c3:
                    52:2c:b8:37:05:4c:45:f3:11:18:17:2b:70:92:77:
                    8d:0b:b0:a6:26:57:a9:3d:14:63:9a:e3:5e:c3:aa:
                    ec:b9:4d:23:77:22:9f:7a:4b:ea:a1:6b:8c:e2:66:
                    4e:ca:b6:52:11:1b:43:95:5f:9f:d9:d3:00:00:0d:
                    7b:99:d8:94:aa:29:84:95:36:e3:a9:6c:ff:74:63:
                    5c:45:97:b0:43:fe:59:f0:ed:bd:63:d4:92:59:43:
                    6f:ae:07:c6:39:81:0c:1c:d8:5f:8b:4f:51:f5:a0:
                    38:d3:9b:54:9d:52:b5:ff:68:6d:44:ab:69:51:3f:
                    f0:86:44:0b:62:96:8e:9c:23:d2:3e:f3:36:92:2b:
                    57:13:70:a1:38:cf:37:05:c8:8b:7c:c3:cd:c1:9f:
                    de:d3:e5:af:18:6a:55:b0:ee:13:0b:c8:21:26:26:
                    b0:26:16:88:ff:60:96:a8:9b:56:d5:93:d9:9b:63:
                    21:46:16:e0:17:c7:d6:35:c9:37:27:49:91:27:3f:
                    e6:e4:6d:30:0a:a2:b5:c2:a1:53:8f:dc:8e:00:d4:
                    e7:f9:ac:3f:62:11:be:70:b0:3b:8f:fd:16:46:60:
                    a1:62:0e:c6:82:67:8a:66:6f:ea:d4:a2:72:34:86:
                    cd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:79:A3:CF:4F:73:26:9D:1A:5C:EB:8A:67:25:5D:6C:AC:AA:2F:AC
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316538303a3a2f34312d3431203d3e20323638333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:1e80::/41

    Signature Algorithm: sha256WithRSAEncryption
         34:13:32:db:a4:aa:28:83:b3:b8:39:9d:11:db:84:25:72:73:
         fc:2b:d6:1a:61:85:90:84:fc:b1:4f:d7:70:09:c2:56:50:94:
         14:6e:39:bb:b8:92:75:d5:71:5b:da:81:5b:31:f7:fc:b9:53:
         04:a2:7d:97:4d:f6:91:9b:73:3f:17:d5:08:e3:a7:5d:e7:8f:
         c7:70:9e:a1:83:7c:14:ee:fe:ff:88:86:7c:77:82:6c:e4:5e:
         9c:5c:a4:a9:ef:d0:7f:f4:d8:04:e6:3b:bb:ba:f1:0e:b2:06:
         41:c0:ba:36:30:dc:d3:56:e9:c2:53:7e:24:16:b9:60:9b:84:
         d0:9c:b3:39:d5:3a:2f:31:49:4e:d8:73:c4:54:25:f6:b7:30:
         b7:8d:e3:87:71:1e:61:1a:bb:d1:2d:e8:4f:1a:f5:95:0a:53:
         b0:68:d4:fc:90:16:ac:ac:14:37:ec:f5:d5:bf:ed:d4:5b:bb:
         69:d2:2b:81:c9:ef:44:16:17:b4:95:49:2d:9d:f0:66:cc:d4:
         61:41:4f:1b:08:c9:70:c7:80:07:f3:17:4d:26:85:50:ba:3a:
         71:dd:3f:21:0c:41:e8:fe:f3:e7:45:73:7c:ea:9c:b7:b0:2f:
         0f:35:a2:e5:a6:95:17:00:e3:71:d5:74:51:f5:7e:3a:47:1a:
         6f:a5:ac:3f
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUSWeQoZBlc+VTd/eClhsVX37ZbU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU5NDJGOUJFRkQ5ODZBMjNFODNCRjE2QTE5RUE5MjFF
NTlGMDQ2NzAeFw0yNjA4MDUxMzMxNTRaFw0yNzA4MDQxMzM2NTRaMDMxMTAvBgNV
BAMTKDJBNzlBM0NGNEY3MzI2OUQxQTVDRUI4QTY3MjU1RDZDQUNBQTJGQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79YHDnuarBHNH9L9Dw1IsuDcF
TEXzERgXK3CSd40LsKYmV6k9FGOa417Dquy5TSN3Ip96S+qha4ziZk7KtlIRG0OV
X5/Z0wAADXuZ2JSqKYSVNuOpbP90Y1xFl7BD/lnw7b1j1JJZQ2+uB8Y5gQwc2F+L
T1H1oDjTm1SdUrX/aG1Eq2lRP/CGRAtilo6cI9I+8zaSK1cTcKE4zzcFyIt8w83B
n97T5a8YalWw7hMLyCEmJrAmFoj/YJaom1bVk9mbYyFGFuAXx9Y1yTcnSZEnP+bk
bTAKorXCoVOP3I4A1Of5rD9iEb5wsDuP/RZGYKFiDsaCZ4pmb+rUonI0hs0NAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUKnmjz09zJp0aXOuKZyVdbKyqL6wwHwYDVR0j
BBgwFoAULpQvm+/ZhqI+g78WoZ6pIeWfBGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG1YblVNVXF3RUdQUnJ4Wkx0VUhCSkRrUkE5Y01VZllpOFJicVJ1VHNT
eGgvMC8yRTk0MkY5QkVGRDk4NkEyM0U4M0JGMTZBMTlFQTkyMUU1OUYwNDY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFOTQyRjlCRUZEOTg2QTIz
RTgzQkYxNkExOUVBOTIxRTU5RjA0NjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRtWG5VTVVxd0VHUFJyeFpMdFVIQkpEa1JBOWNNVWZZaThSYnFSdVRzU3hoLzAv
MzIzODMwMzQzYTM4MzM2MzM0M2EzMTY1MzgzMDNhM2EyZjM0MzEyZDM0MzEyMDNk
M2UyMDMyMzYzODMzMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBygEg8QegDANBgkqhkiG9w0BAQsF
AAOCAQEANBMy26SqKIOzuDmdEduEJXJz/CvWGmGFkIT8sU/XcAnCVlCUFG45u7iS
ddVxW9qBWzH3/LlTBKJ9l032kZtzPxfVCOOnXeePx3CeoYN8FO7+/4iGfHeCbORe
nFykqe/Qf/TYBOY7u7rxDrIGQcC6NjDc01bpwlN+JBa5YJuE0JyzOdU6LzFJTthz
xFQl9rcwt43jh3EeYRq70S3oTxr1lQpTsGjU/JAWrKwUN+z11b/t1Fu7adIrgcnv
RBYXtJVJLZ3wZszUYUFPGwjJcMeAB/MXTSaFULo6cd0/IQxB6P7z50VzfOqct7Av
DzWi5aaVFwDjcdV0UfV+Okcab6WsPw==
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:22:54 2026 by rpki-client