Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/323830343a346536303a3a2f33322d3332203d3e20323638323537.roa
File:                     323830343a346536303a3a2f33322d3332203d3e20323638323537.roa (raw, json)
Hash identifier:          OZM7iWOQ3Qp/K0YAC6lXxQys4hq1czUgtqgZYxDC/k8=
Subject key identifier:   CA:75:72:BF:ED:8E:E8:CA:F9:0F:9C:8E:3B:E4:EC:42:D0:19:80:D8
Certificate issuer:       /CN=EB4D38BE240D3EA13D9DE02E2618D2553EFA773E
Certificate serial:       27BBDAAB04D5F9103044B86A09F0429B52CBB6F0
Authority key identifier: EB:4D:38:BE:24:0D:3E:A1:3D:9D:E0:2E:26:18:D2:55:3E:FA:77:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/323830343a346536303a3a2f33322d3332203d3e20323638323537.roa
Signing time:             Wed 05 Aug 2026 23:43:47 +0000
ROA not before:           Wed 05 Aug 2026 23:38:47 +0000
ROA not after:            Wed 04 Aug 2027 23:43:47 +0000
asID:                     268257
IP address blocks:        2804:4e60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.crl
                          rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bb:da:ab:04:d5:f9:10:30:44:b8:6a:09:f0:42:9b:52:cb:b6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB4D38BE240D3EA13D9DE02E2618D2553EFA773E
        Validity
            Not Before: Aug  5 23:38:47 2026 GMT
            Not After : Aug  4 23:43:47 2027 GMT
        Subject: CN=CA7572BFED8EE8CAF90F9C8E3BE4EC42D01980D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:85:66:9d:b2:c2:96:98:bd:03:26:ca:38:
                    c1:25:f2:86:1f:e3:ac:fb:e0:92:e9:2f:75:df:80:
                    65:f1:a4:c5:be:3e:ae:f6:8d:36:6d:4f:df:45:31:
                    66:ea:97:33:0c:b8:5b:48:66:d6:fc:a1:df:fd:ea:
                    a3:6f:a5:3d:30:d7:c4:b5:ab:9b:6d:35:3f:02:5c:
                    a8:25:d1:7d:d4:d6:1a:ca:d8:42:b9:04:b7:27:c3:
                    d1:87:1a:98:6d:cb:15:60:34:40:98:bd:03:8a:98:
                    72:36:95:a0:17:b3:86:51:71:21:b8:df:1a:7a:54:
                    38:09:eb:ed:57:89:c2:80:d1:f4:08:dc:90:aa:67:
                    c9:a6:0b:ec:39:79:b0:e3:da:23:7f:e4:b4:3f:92:
                    6b:4c:4d:ef:d2:f0:54:f0:ae:eb:dd:9b:13:03:b9:
                    4f:f4:94:97:01:e7:ba:98:8b:48:0c:19:35:6c:23:
                    ec:32:6a:83:99:54:b2:e5:94:a8:6f:1e:44:c2:72:
                    a4:08:a1:dc:44:64:6f:12:77:92:9f:df:d7:02:6c:
                    63:3f:69:0a:aa:f2:b1:50:ef:76:fa:94:a2:ee:e0:
                    0d:f8:c3:3c:9e:2a:2c:98:de:1d:1d:a2:66:4f:6f:
                    f4:1b:86:a4:61:f5:00:44:88:4e:65:90:a2:2b:30:
                    bb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:75:72:BF:ED:8E:E8:CA:F9:0F:9C:8E:3B:E4:EC:42:D0:19:80:D8
            X509v3 Authority Key Identifier:
                keyid:EB:4D:38:BE:24:0D:3E:A1:3D:9D:E0:2E:26:18:D2:55:3E:FA:77:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB4D38BE240D3EA13D9DE02E2618D2553EFA773E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/323830343a346536303a3a2f33322d3332203d3e20323638323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:5f:d0:cf:28:20:33:aa:6b:a7:2f:c7:02:5e:11:16:d9:23:
         e1:2a:8f:a4:0c:27:0b:9e:92:c9:41:e6:39:ce:43:67:89:e6:
         58:96:35:d3:c3:45:0d:a3:e3:fd:53:04:71:c3:95:1b:a4:1e:
         b7:66:26:74:53:77:bb:95:b6:ab:e3:36:6c:9a:08:f1:ee:88:
         29:76:86:2c:93:ce:c3:51:53:c5:cd:c3:40:7c:e4:8c:99:2b:
         84:51:c2:36:f1:34:47:5e:e5:f0:68:22:e9:59:3b:2f:8b:b0:
         72:da:75:d5:72:cf:a3:9d:19:ed:37:4b:b9:79:92:b0:f3:39:
         65:41:b3:12:e5:db:bd:5a:be:72:21:10:c6:67:fd:31:00:50:
         e9:fc:3c:4c:9b:f5:c3:0c:12:41:51:54:25:26:94:a5:16:c8:
         a5:27:0f:96:56:9b:f3:31:13:f9:ef:a0:27:fd:c2:80:55:e8:
         e9:82:7a:4c:80:7e:80:2c:d2:5f:49:a9:1a:eb:2e:c3:d0:4c:
         d0:1a:54:0b:0a:63:a1:87:b0:ea:d7:4b:f2:df:eb:82:99:64:
         7e:fc:d4:42:c0:d2:26:c3:61:2a:ed:46:05:5a:a3:96:15:44:
         42:4e:af:71:f5:4a:4b:b9:eb:e4:8b:2a:24:18:99:07:6e:a5:
         b6:e8:bf:93
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJ7vaqwTV+RAwRLhqCfBCm1LLtvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI0RDM4QkUyNDBEM0VBMTNEOURFMDJFMjYxOEQyNTUz
RUZBNzczRTAeFw0yNjA4MDUyMzM4NDdaFw0yNzA4MDQyMzQzNDdaMDMxMTAvBgNV
BAMTKENBNzU3MkJGRUQ4RUU4Q0FGOTBGOUM4RTNCRTRFQzQyRDAxOTgwRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFUIVmnbLClpi9AybKOMEl8oYf
46z74JLpL3XfgGXxpMW+Pq72jTZtT99FMWbqlzMMuFtIZtb8od/96qNvpT0w18S1
q5ttNT8CXKgl0X3U1hrK2EK5BLcnw9GHGphtyxVgNECYvQOKmHI2laAXs4ZRcSG4
3xp6VDgJ6+1XicKA0fQI3JCqZ8mmC+w5ebDj2iN/5LQ/kmtMTe/S8FTwruvdmxMD
uU/0lJcB57qYi0gMGTVsI+wyaoOZVLLllKhvHkTCcqQIodxEZG8Sd5Kf39cCbGM/
aQqq8rFQ73b6lKLu4A34wzyeKiyY3h0domZPb/QbhqRh9QBEiE5lkKIrMLsfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUynVyv+2O6Mr5D5yOO+TsQtAZgNgwHwYDVR0j
BBgwFoAU6004viQNPqE9neAuJhjSVT76dz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTFlNEtiRmJtVHpwRTNkNEhWU0sxRjloVzlwOXpTMjhTd2ppVGd1MkxR
blgvMC9FQjREMzhCRTI0MEQzRUExM0Q5REUwMkUyNjE4RDI1NTNFRkE3NzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCNEQzOEJFMjQwRDNFQTEz
RDlERTAyRTI2MThEMjU1M0VGQTc3M0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUxZTRLYkZibVR6cEUzZDRIVlNLMUY5aFc5cDl6UzI4U3dqaVRndTJMUW5YLzAv
MzIzODMwMzQzYTM0NjUzNjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzIzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAROYDANBgkqhkiG9w0BAQsFAAOCAQEAPl/Qzygg
M6prpy/HAl4RFtkj4SqPpAwnC56SyUHmOc5DZ4nmWJY108NFDaPj/VMEccOVG6Qe
t2YmdFN3u5W2q+M2bJoI8e6IKXaGLJPOw1FTxc3DQHzkjJkrhFHCNvE0R17l8Ggi
6Vk7L4uwctp11XLPo50Z7TdLuXmSsPM5ZUGzEuXbvVq+ciEQxmf9MQBQ6fw8TJv1
wwwSQVFUJSaUpRbIpScPllab8zET+e+gJ/3CgFXo6YJ6TIB+gCzSX0mpGusuw9BM
0BpUCwpjoYew6tdL8t/rgplkfvzUQsDSJsNhKu1GBVqjlhVEQk6vcfVKS7nr5Isq
JBiZB26ltui/kw==
-----END CERTIFICATE-----
Generated at Sun Aug 23 10:07:38 2026 by rpki-client