Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/323830343a376338343a3a2f33322d3333203d3e20323731353031.roa
File:                     323830343a376338343a3a2f33322d3333203d3e20323731353031.roa (raw, json)
Hash identifier:          ANRWcRNrIIb+nrZM8HH2nQZoapAP9/YLaiuf4UKsxnc=
Subject key identifier:   7C:83:34:32:3E:D9:2E:56:F2:5E:89:00:B9:70:67:34:19:B5:44:C5
Certificate issuer:       /CN=0AA17F2230977253BF0527CEFDC2DDCBEEEBC06B
Certificate serial:       4504E9BEB0FF6D5780E4DCC5D9BC894A20894283
Authority key identifier: 0A:A1:7F:22:30:97:72:53:BF:05:27:CE:FD:C2:DD:CB:EE:EB:C0:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA17F2230977253BF0527CEFDC2DDCBEEEBC06B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/323830343a376338343a3a2f33322d3333203d3e20323731353031.roa
Signing time:             Sat 04 Jul 2026 01:39:24 +0000
ROA not before:           Sat 04 Jul 2026 01:34:24 +0000
ROA not after:            Sat 03 Jul 2027 01:39:24 +0000
asID:                     271501
IP address blocks:        2804:7c84::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/0AA17F2230977253BF0527CEFDC2DDCBEEEBC06B.crl
                          rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/0AA17F2230977253BF0527CEFDC2DDCBEEEBC06B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA17F2230977253BF0527CEFDC2DDCBEEEBC06B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 03:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:04:e9:be:b0:ff:6d:57:80:e4:dc:c5:d9:bc:89:4a:20:89:42:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AA17F2230977253BF0527CEFDC2DDCBEEEBC06B
        Validity
            Not Before: Jul  4 01:34:24 2026 GMT
            Not After : Jul  3 01:39:24 2027 GMT
        Subject: CN=7C8334323ED92E56F25E8900B970673419B544C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:63:71:1a:4d:8f:3d:f9:61:27:67:fd:55:d2:
                    a1:33:89:0c:ef:0a:33:58:12:80:fc:e0:b3:da:7c:
                    36:f9:28:34:50:a2:d9:64:ba:38:8d:fe:2b:af:b6:
                    62:5e:32:d5:80:2d:a6:cb:a7:82:7e:22:c0:04:e0:
                    e0:31:88:5b:c0:36:0b:05:8a:53:ad:af:ae:81:d2:
                    6d:c4:b9:38:28:8e:4e:91:a9:8f:48:1b:ed:91:86:
                    3c:f1:17:cc:f6:43:a0:d7:76:d8:e0:7b:ac:46:1f:
                    2a:05:a6:6b:54:02:46:73:1f:d0:32:53:ba:82:bc:
                    80:63:9f:16:33:3b:15:f2:0c:f4:e9:d8:58:0c:eb:
                    2b:e7:2c:28:03:a4:33:fe:70:c4:2e:3e:ff:eb:82:
                    37:14:0a:8b:13:69:ea:2f:2b:80:a4:f9:59:b8:6c:
                    30:7c:17:fe:b8:0c:e4:56:18:bd:e0:4b:90:c1:77:
                    2d:84:7e:4a:da:eb:ff:cd:44:c1:f3:63:12:9a:69:
                    35:dc:2b:3e:97:bc:00:23:90:8b:b1:58:5a:cd:1c:
                    c1:5b:f6:46:5c:5d:a9:ac:57:c7:fa:c7:31:b4:fe:
                    e2:85:2f:01:ca:46:cf:d9:2a:38:0e:09:af:0c:eb:
                    9c:7b:ae:d1:3f:46:6d:bc:26:d9:46:b2:06:f7:ef:
                    1d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:83:34:32:3E:D9:2E:56:F2:5E:89:00:B9:70:67:34:19:B5:44:C5
            X509v3 Authority Key Identifier:
                keyid:0A:A1:7F:22:30:97:72:53:BF:05:27:CE:FD:C2:DD:CB:EE:EB:C0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/0AA17F2230977253BF0527CEFDC2DDCBEEEBC06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA17F2230977253BF0527CEFDC2DDCBEEEBC06B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pPPnrhgtjut4Wtvh4ry4VRHdWM4ef4V4izswuk6JWwX/0/323830343a376338343a3a2f33322d3333203d3e20323731353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c84::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:5c:a1:9b:ef:4c:6d:40:9f:8a:d1:90:29:9c:79:fb:bf:9e:
         00:d5:4d:57:53:15:2a:61:81:72:a6:b4:b8:e4:8f:ed:78:9c:
         5a:81:bb:d1:ea:6c:ab:e2:a6:d3:fb:6f:a5:f8:8e:d1:7b:d0:
         14:6d:bd:39:04:f6:a1:8b:ef:64:60:cf:11:2d:1a:05:55:02:
         52:e8:21:a5:dc:42:dd:56:4d:f8:23:d4:41:13:b3:4f:d3:1c:
         02:61:18:1b:9d:4d:92:a7:3c:d3:a8:d3:56:4f:d9:c6:49:c7:
         c0:fa:8e:18:7d:1e:6b:58:72:97:6c:e8:40:bf:65:e5:a2:64:
         01:56:7c:a5:8c:60:45:e4:50:20:fa:ab:02:d7:70:d8:0f:8a:
         92:64:f3:3f:a2:39:6c:4d:81:9e:ac:6a:2b:b4:8e:da:16:57:
         13:f5:0c:14:57:3c:cc:ea:39:cb:7f:5d:e6:4e:13:1b:32:95:
         1d:8a:81:19:f6:1b:9c:05:d3:a0:14:ce:57:69:dc:79:38:f4:
         e0:34:fb:40:18:f3:46:93:a1:2a:d0:60:23:9f:36:3f:37:23:
         15:ad:47:43:50:aa:bb:57:db:06:49:8a:27:3a:93:e3:62:40:
         fd:ef:e4:0d:1b:84:f8:4b:f2:63:7c:6d:61:4e:99:86:be:1d:
         51:96:90:b8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURQTpvrD/bVeA5NzF2byJSiCJQoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBMTdGMjIzMDk3NzI1M0JGMDUyN0NFRkRDMkREQ0JF
RUVCQzA2QjAeFw0yNjA3MDQwMTM0MjRaFw0yNzA3MDMwMTM5MjRaMDMxMTAvBgNV
BAMTKDdDODMzNDMyM0VEOTJFNTZGMjVFODkwMEI5NzA2NzM0MTlCNTQ0QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgY3EaTY89+WEnZ/1V0qEziQzv
CjNYEoD84LPafDb5KDRQotlkujiN/iuvtmJeMtWALabLp4J+IsAE4OAxiFvANgsF
ilOtr66B0m3EuTgojk6RqY9IG+2RhjzxF8z2Q6DXdtjge6xGHyoFpmtUAkZzH9Ay
U7qCvIBjnxYzOxXyDPTp2FgM6yvnLCgDpDP+cMQuPv/rgjcUCosTaeovK4Ck+Vm4
bDB8F/64DORWGL3gS5DBdy2Efkra6//NRMHzYxKaaTXcKz6XvAAjkIuxWFrNHMFb
9kZcXamsV8f6xzG0/uKFLwHKRs/ZKjgOCa8M65x7rtE/Rm28JtlGsgb37x2tAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUfIM0Mj7ZLlbyXokAuXBnNBm1RMUwHwYDVR0j
BBgwFoAUCqF/IjCXclO/BSfO/cLdy+7rwGswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHBQUG5yaGd0anV0NFd0dmg0cnk0VlJIZFdNNGVmNFY0aXpzd3VrNkpX
d1gvMC8wQUExN0YyMjMwOTc3MjUzQkYwNTI3Q0VGREMyRERDQkVFRUJDMDZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBQTE3RjIyMzA5NzcyNTNC
RjA1MjdDRUZEQzJERENCRUVFQkMwNkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRwUFBucmhndGp1dDRXdHZoNHJ5NFZSSGRXTTRlZjRWNGl6c3d1azZKV3dYLzAv
MzIzODMwMzQzYTM3NjMzODM0M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNzMx
MzUzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR8hDANBgkqhkiG9w0BAQsFAAOCAQEAnVyhm+9M
bUCfitGQKZx5+7+eANVNV1MVKmGBcqa0uOSP7XicWoG70epsq+Km0/tvpfiO0XvQ
FG29OQT2oYvvZGDPES0aBVUCUughpdxC3VZN+CPUQROzT9McAmEYG51Nkqc806jT
Vk/ZxknHwPqOGH0ea1hyl2zoQL9l5aJkAVZ8pYxgReRQIPqrAtdw2A+KkmTzP6I5
bE2BnqxqK7SO2hZXE/UMFFc8zOo5y39d5k4TGzKVHYqBGfYbnAXToBTOV2nceTj0
4DT7QBjzRpOhKtBgI582PzcjFa1HQ1Cqu1fbBkmKJzqT42JA/e/kDRuE+EvyY3xt
YU6Zhr4dUZaQuA==
-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:20 2026 by rpki-client