Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030303a3a2f34382d3438203d3e20323732323138.roa
File:                     323830343a383363343a383030303a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier:          IvK9Yk2pC4Qp8t1uwCZEhYjGS+o4fmEHCEfpWMudXkk=
Subject key identifier:   AD:9D:DA:50:06:EB:DF:75:A9:31:51:C2:6C:55:93:A7:6D:A6:D6:64
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       61F02383F4FC0F353D3B972C73087ABEB4EE9AAF
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030303a3a2f34382d3438203d3e20323732323138.roa
Signing time:             Mon 27 Jul 2026 20:33:23 +0000
ROA not before:           Mon 27 Jul 2026 20:28:23 +0000
ROA not after:            Mon 26 Jul 2027 20:33:23 +0000
asID:                     272218
IP address blocks:        2804:83c4:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f0:23:83:f4:fc:0f:35:3d:3b:97:2c:73:08:7a:be:b4:ee:9a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Jul 27 20:28:23 2026 GMT
            Not After : Jul 26 20:33:23 2027 GMT
        Subject: CN=AD9DDA5006EBDF75A93151C26C5593A76DA6D664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:35:c5:0c:f5:53:65:f4:7f:5c:f1:24:46:85:
                    bc:10:29:79:cd:7e:b1:24:c9:36:3a:f2:53:ad:07:
                    7c:56:16:5e:04:c1:c7:72:20:b6:81:54:06:c1:d5:
                    db:18:d8:fb:5e:2c:f9:e0:60:0f:8e:c0:27:ff:e1:
                    55:ae:6a:de:ef:5c:7c:8f:c9:a4:19:d2:c9:21:81:
                    72:41:35:08:c9:d7:1c:26:9a:ad:3b:2a:63:c9:3c:
                    dc:80:32:c3:ff:51:5d:4f:11:94:ec:f8:3f:ef:5c:
                    0c:71:26:17:ee:77:69:ed:59:66:85:c0:bf:16:52:
                    eb:8b:2c:99:8a:68:84:4f:56:cd:11:37:b6:d1:9f:
                    dd:09:ef:21:ce:65:0f:d8:f4:f6:76:78:34:dd:1b:
                    ad:e7:87:da:76:88:b9:c1:c9:c5:87:2e:8a:11:b3:
                    4b:c2:94:f0:e1:fc:47:ed:54:55:42:3b:f0:81:41:
                    51:1c:c6:0f:1d:d0:10:d5:ec:40:62:fb:10:69:d6:
                    63:74:9d:d5:06:1a:90:35:0b:db:9c:62:b6:39:f6:
                    01:c6:3d:b5:02:67:0e:70:02:62:38:c3:f6:54:3b:
                    62:8a:2f:18:b4:4c:34:ab:90:5b:52:c8:2b:c5:69:
                    f2:ee:82:d7:e6:86:9a:38:c0:28:f9:bd:bc:79:c2:
                    eb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9D:DA:50:06:EB:DF:75:A9:31:51:C2:6C:55:93:A7:6D:A6:D6:64
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030303a3a2f34382d3438203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:b6:7f:8c:45:25:3d:40:17:f4:e6:7e:19:73:11:3c:fd:5d:
         a0:89:a2:9d:c0:a1:7b:e2:21:cf:eb:49:ab:b4:c3:34:c2:43:
         c9:29:f7:17:f6:76:4a:a4:d9:52:57:34:69:3d:90:d0:50:9e:
         23:5f:96:82:4e:a9:82:2f:2e:16:9f:29:31:d7:f5:24:79:64:
         35:26:ec:e2:0a:0f:d9:b5:64:bd:7a:8a:77:3a:15:8d:48:71:
         1d:0f:c9:53:92:ad:63:6f:4c:a9:6a:9e:fd:8d:d1:6d:0a:ab:
         ad:f1:26:53:51:b4:b5:82:da:f4:22:ba:bf:9b:78:a2:51:68:
         4a:52:34:42:04:dc:22:25:c1:da:1f:48:d9:51:b5:a1:e1:62:
         9f:95:e9:b2:49:52:26:2c:92:9d:d1:93:f0:cf:21:9b:35:1a:
         ab:1d:b4:6a:8b:76:96:7d:9d:6e:c9:b3:39:57:43:72:9f:33:
         a4:3f:7e:a2:8b:7a:68:97:7e:8b:ae:94:77:73:34:e1:d1:a2:
         16:08:81:2c:41:81:df:8d:3f:1f:01:2e:36:d5:16:b9:7a:99:
         3d:e0:fb:d9:e8:9e:7e:33:2c:f6:76:45:16:fb:45:12:96:2c:
         41:a1:f7:a6:9f:f1:5d:ef:79:67:db:83:8d:d2:d0:87:2c:91:
         e7:05:82:a7
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUYfAjg/T8DzU9O5cscwh6vrTumq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU5NDJGOUJFRkQ5ODZBMjNFODNCRjE2QTE5RUE5MjFF
NTlGMDQ2NzAeFw0yNjA3MjcyMDI4MjNaFw0yNzA3MjYyMDMzMjNaMDMxMTAvBgNV
BAMTKEFEOUREQTUwMDZFQkRGNzVBOTMxNTFDMjZDNTU5M0E3NkRBNkQ2NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINcUM9VNl9H9c8SRGhbwQKXnN
frEkyTY68lOtB3xWFl4EwcdyILaBVAbB1dsY2PteLPngYA+OwCf/4VWuat7vXHyP
yaQZ0skhgXJBNQjJ1xwmmq07KmPJPNyAMsP/UV1PEZTs+D/vXAxxJhfud2ntWWaF
wL8WUuuLLJmKaIRPVs0RN7bRn90J7yHOZQ/Y9PZ2eDTdG63nh9p2iLnBycWHLooR
s0vClPDh/EftVFVCO/CBQVEcxg8d0BDV7EBi+xBp1mN0ndUGGpA1C9ucYrY59gHG
PbUCZw5wAmI4w/ZUO2KKLxi0TDSrkFtSyCvFafLugtfmhpo4wCj5vbx5wuutAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUrZ3aUAbr33WpMVHCbFWTp22m1mQwHwYDVR0j
BBgwFoAULpQvm+/ZhqI+g78WoZ6pIeWfBGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG1YblVNVXF3RUdQUnJ4Wkx0VUhCSkRrUkE5Y01VZllpOFJicVJ1VHNT
eGgvMC8yRTk0MkY5QkVGRDk4NkEyM0U4M0JGMTZBMTlFQTkyMUU1OUYwNDY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFOTQyRjlCRUZEOTg2QTIz
RTgzQkYxNkExOUVBOTIxRTU5RjA0NjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRtWG5VTVVxd0VHUFJyeFpMdFVIQkpEa1JBOWNNVWZZaThSYnFSdVRzU3hoLzAv
MzIzODMwMzQzYTM4MzM2MzM0M2EzODMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMjMyMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEg8SAADANBgkqhkiG9w0BAQsF
AAOCAQEAIrZ/jEUlPUAX9OZ+GXMRPP1doImincChe+Ihz+tJq7TDNMJDySn3F/Z2
SqTZUlc0aT2Q0FCeI1+Wgk6pgi8uFp8pMdf1JHlkNSbs4goP2bVkvXqKdzoVjUhx
HQ/JU5KtY29MqWqe/Y3RbQqrrfEmU1G0tYLa9CK6v5t4olFoSlI0QgTcIiXB2h9I
2VG1oeFin5XpsklSJiySndGT8M8hmzUaqx20aot2ln2dbsmzOVdDcp8zpD9+oot6
aJd+i66Ud3M04dGiFgiBLEGB340/HwEuNtUWuXqZPeD72eiefjMs9nZFFvtFEpYs
QaH3pp/xXe95Z9uDjdLQhyyR5wWCpw==
-----END CERTIFICATE-----
Generated at Sun Aug 23 18:28:07 2026 by rpki-client