Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a623366303a3a2f34342d3634203d3e20323732323138.roa
File:                     323830343a383363343a623366303a3a2f34342d3634203d3e20323732323138.roa (raw, json)
Hash identifier:          iWjeQK/3QNpJyxnxLZiSK6jeCb/Pb+2QpbyU18RqcWY=
Subject key identifier:   7B:7C:2D:71:A3:DB:F9:39:24:4F:30:38:C6:AD:9B:9F:09:2E:7F:B1
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       192B337881A95961017AABB1E43D1D15EC3D612C
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a623366303a3a2f34342d3634203d3e20323732323138.roa
Signing time:             Wed 05 Aug 2026 13:36:55 +0000
ROA not before:           Wed 05 Aug 2026 13:31:55 +0000
ROA not after:            Wed 04 Aug 2027 13:36:55 +0000
asID:                     272218
IP address blocks:        2804:83c4:b3f0::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2b:33:78:81:a9:59:61:01:7a:ab:b1:e4:3d:1d:15:ec:3d:61:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Aug  5 13:31:55 2026 GMT
            Not After : Aug  4 13:36:55 2027 GMT
        Subject: CN=7B7C2D71A3DBF939244F3038C6AD9B9F092E7FB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a0:a1:82:fa:cd:49:ce:c7:63:07:18:33:7c:
                    14:d9:34:bf:31:60:ae:1c:22:44:02:8a:b1:06:1b:
                    38:21:d1:ce:9d:02:a2:2b:27:2f:c2:c1:21:0e:1c:
                    5c:21:da:87:7a:d0:89:06:9e:b6:17:8c:4d:5c:de:
                    ea:fb:2b:8b:5a:29:06:0c:33:51:10:b0:9e:51:0a:
                    e1:8f:b0:73:eb:c3:88:4d:0d:b1:08:b4:3f:d0:05:
                    c4:f3:88:e4:4b:e4:4d:c4:1a:bf:ec:16:90:72:48:
                    4c:6e:ab:d2:d3:4a:98:d3:c9:4a:a9:7f:0f:72:a7:
                    cf:bd:cf:74:6c:ea:68:8d:c9:d7:f5:8f:85:b9:16:
                    5d:a1:5d:d3:11:d1:4a:04:a7:d2:ff:dd:04:77:08:
                    74:22:59:10:12:7c:b9:b6:ea:c8:a7:a1:6e:c4:5a:
                    f7:57:48:48:ce:21:fb:95:de:6f:c1:5b:4d:3d:35:
                    9d:2b:60:0a:a9:8b:f2:c5:2a:2c:2a:8e:95:90:30:
                    d2:10:e1:9c:20:2d:80:86:1f:b9:a1:f2:17:3c:9b:
                    c7:5e:7c:7a:1c:17:da:eb:52:07:60:34:b0:de:e6:
                    0f:8b:62:7f:08:e4:d6:de:44:f9:4e:17:de:ed:5b:
                    ff:5f:d9:2e:ee:90:7c:a6:37:82:72:7c:b9:87:68:
                    ab:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7C:2D:71:A3:DB:F9:39:24:4F:30:38:C6:AD:9B:9F:09:2E:7F:B1
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a623366303a3a2f34342d3634203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:b3f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:69:88:51:a1:11:78:95:a1:f5:85:83:fe:81:55:ee:80:9a:
         3f:fd:31:30:70:f9:6f:e7:fa:b4:25:e6:6d:7f:e9:b6:f8:e2:
         42:d8:b7:19:5b:bf:ce:73:15:08:09:d5:15:3e:08:1a:f0:a9:
         ae:45:ec:8d:32:f2:8b:99:9b:45:e6:af:35:4a:8a:57:d2:72:
         81:12:b8:4d:58:76:51:6b:51:ce:5b:46:01:55:f1:12:4e:42:
         7d:4d:8a:a3:60:1d:9a:1a:51:df:5d:66:a5:dc:d6:8b:26:67:
         de:8c:00:8a:df:c6:e9:04:f6:0c:96:7a:9d:1c:39:b5:a5:5d:
         ae:a1:b7:1a:5b:d3:ad:67:89:ef:1f:08:fa:36:86:33:cd:72:
         b9:57:83:8d:81:ae:71:47:ce:a6:60:c2:b4:2a:ff:2d:df:31:
         ad:7c:cb:2f:5d:a9:e6:2d:80:e3:81:fc:f5:02:61:38:0f:71:
         51:01:dd:3b:0e:fe:b2:f0:c0:2c:ce:28:ca:79:6d:8f:7c:b1:
         c4:be:ce:52:80:e0:74:4c:91:06:58:6e:8a:18:ad:a2:ee:da:
         2b:5d:c1:22:ef:3b:59:c1:5e:57:f9:4e:d8:98:a6:83:84:d1:
         51:6b:39:8f:23:3d:27:f7:3d:ad:81:d7:1b:20:47:97:6e:99:
         f3:2d:fa:78
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUGSszeIGpWWEBequx5D0dFew9YSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU5NDJGOUJFRkQ5ODZBMjNFODNCRjE2QTE5RUE5MjFF
NTlGMDQ2NzAeFw0yNjA4MDUxMzMxNTVaFw0yNzA4MDQxMzM2NTVaMDMxMTAvBgNV
BAMTKDdCN0MyRDcxQTNEQkY5MzkyNDRGMzAzOEM2QUQ5QjlGMDkyRTdGQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnoKGC+s1JzsdjBxgzfBTZNL8x
YK4cIkQCirEGGzgh0c6dAqIrJy/CwSEOHFwh2od60IkGnrYXjE1c3ur7K4taKQYM
M1EQsJ5RCuGPsHPrw4hNDbEItD/QBcTziORL5E3EGr/sFpBySExuq9LTSpjTyUqp
fw9yp8+9z3Rs6miNydf1j4W5Fl2hXdMR0UoEp9L/3QR3CHQiWRASfLm26sinoW7E
WvdXSEjOIfuV3m/BW009NZ0rYAqpi/LFKiwqjpWQMNIQ4ZwgLYCGH7mh8hc8m8de
fHocF9rrUgdgNLDe5g+LYn8I5NbeRPlOF97tW/9f2S7ukHymN4JyfLmHaKtpAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUe3wtcaPb+TkkTzA4xq2bnwkuf7EwHwYDVR0j
BBgwFoAULpQvm+/ZhqI+g78WoZ6pIeWfBGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG1YblVNVXF3RUdQUnJ4Wkx0VUhCSkRrUkE5Y01VZllpOFJicVJ1VHNT
eGgvMC8yRTk0MkY5QkVGRDk4NkEyM0U4M0JGMTZBMTlFQTkyMUU1OUYwNDY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFOTQyRjlCRUZEOTg2QTIz
RTgzQkYxNkExOUVBOTIxRTU5RjA0NjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRtWG5VTVVxd0VHUFJyeFpMdFVIQkpEa1JBOWNNVWZZaThSYnFSdVRzU3hoLzAv
MzIzODMwMzQzYTM4MzM2MzM0M2E2MjMzNjYzMDNhM2EyZjM0MzQyZDM2MzQyMDNk
M2UyMDMyMzczMjMyMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEg8Sz8DANBgkqhkiG9w0BAQsF
AAOCAQEAOGmIUaEReJWh9YWD/oFV7oCaP/0xMHD5b+f6tCXmbX/ptvjiQti3GVu/
znMVCAnVFT4IGvCprkXsjTLyi5mbReavNUqKV9JygRK4TVh2UWtRzltGAVXxEk5C
fU2Ko2AdmhpR311mpdzWiyZn3owAit/G6QT2DJZ6nRw5taVdrqG3GlvTrWeJ7x8I
+jaGM81yuVeDjYGucUfOpmDCtCr/Ld8xrXzLL12p5i2A44H89QJhOA9xUQHdOw7+
svDALM4oynltj3yxxL7OUoDgdEyRBlhuihitou7aK13BIu87WcFeV/lO2Jimg4TR
UWs5jyM9J/c9rYHXGyBHl26Z8y36eA==
-----END CERTIFICATE-----
Generated at Mon Aug 24 01:29:07 2026 by rpki-client