Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/323830343a323632303a3a2f33322d3332203d3e20323634333233.roa
File:                     323830343a323632303a3a2f33322d3332203d3e20323634333233.roa (raw, json)
Hash identifier:          aSVL3GkIttfIo5CGO2LQQxg3g4KucxY/zO5f4UF2Cdw=
Subject key identifier:   A2:D3:B2:A0:CB:F4:0F:E7:41:1D:31:48:91:B1:57:47:9C:74:4E:9C
Certificate issuer:       /CN=C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811
Certificate serial:       25245F5EEF062A24B350ADCAF217ADD0924ECFF3
Authority key identifier: C4:F9:F7:2E:86:B4:6C:3F:C5:4C:99:39:A9:FF:0C:2C:22:0F:D8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/323830343a323632303a3a2f33322d3332203d3e20323634333233.roa
Signing time:             Tue 11 Aug 2026 16:19:04 +0000
ROA not before:           Tue 11 Aug 2026 16:14:04 +0000
ROA not after:            Tue 10 Aug 2027 16:19:04 +0000
asID:                     264323
IP address blocks:        2804:2620::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.crl
                          rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 02:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:24:5f:5e:ef:06:2a:24:b3:50:ad:ca:f2:17:ad:d0:92:4e:cf:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811
        Validity
            Not Before: Aug 11 16:14:04 2026 GMT
            Not After : Aug 10 16:19:04 2027 GMT
        Subject: CN=A2D3B2A0CBF40FE7411D314891B157479C744E9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:52:93:9a:b8:c2:b3:52:4e:72:b2:1d:62:8a:
                    60:15:19:7f:53:27:0a:c3:81:fc:34:74:81:99:39:
                    eb:a6:e1:ad:86:c9:c4:75:3c:98:0f:ea:18:f1:9c:
                    60:55:88:17:43:d9:3e:85:4a:a7:5c:b3:7c:23:e7:
                    a2:2a:a3:b5:3a:89:33:44:1a:59:21:46:27:1f:b2:
                    81:14:eb:a8:64:67:5e:a9:98:be:61:bd:91:4e:21:
                    a9:e5:2d:ec:0c:3f:b9:7f:00:ff:b9:85:67:9e:8b:
                    89:5d:8d:01:ee:c9:be:dc:0c:2d:5d:fe:5d:15:89:
                    25:5d:2b:c9:55:58:d8:bd:67:3e:b0:2b:2b:98:d2:
                    d3:c8:cb:1c:3b:26:62:b8:03:4c:95:98:0a:86:61:
                    a6:3a:3a:4b:32:4d:f4:40:88:89:79:f1:52:e2:c1:
                    4a:f5:a7:68:74:b3:97:bc:57:37:68:b5:47:a9:e9:
                    da:d4:18:81:95:79:bb:e5:a0:fd:cb:44:e2:09:99:
                    d0:8b:fb:82:b3:0f:5f:52:93:0a:cf:30:ac:43:9e:
                    75:be:3d:11:0e:7e:07:84:b0:c2:32:82:f9:78:96:
                    fc:c0:00:6c:40:d9:30:31:da:27:dd:22:59:e6:bd:
                    35:d2:53:48:e2:75:b5:35:67:7c:cc:4f:d2:5a:86:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D3:B2:A0:CB:F4:0F:E7:41:1D:31:48:91:B1:57:47:9C:74:4E:9C
            X509v3 Authority Key Identifier:
                keyid:C4:F9:F7:2E:86:B4:6C:3F:C5:4C:99:39:A9:FF:0C:2C:22:0F:D8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/323830343a323632303a3a2f33322d3332203d3e20323634333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2620::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:af:6d:92:bf:51:85:5f:a6:b1:f0:fb:62:ea:70:29:f1:06:
         a5:e9:96:82:4b:27:ac:f7:3a:7f:38:ab:bc:83:0e:2f:d3:10:
         38:dd:1b:8b:a4:49:8a:a3:98:ea:d8:1e:23:8d:64:40:90:87:
         53:05:3b:fd:4b:09:f2:1c:66:42:55:88:84:04:1c:e0:6b:5b:
         0a:5e:10:e7:8c:d9:9b:ab:f8:4b:86:af:7d:a2:46:01:5a:2c:
         97:23:7a:86:a5:e6:14:1f:7e:ca:10:d2:36:10:48:b7:bc:34:
         9a:be:cb:d0:bf:d5:ee:70:a8:97:43:c0:2b:d7:79:e0:f9:c0:
         c6:b2:65:1f:ba:55:c6:5f:7a:a8:e7:0f:81:03:54:41:a4:2f:
         18:32:18:b7:cc:32:7b:5e:fd:7d:1d:c0:f1:89:e1:c7:8f:cb:
         63:b1:4d:10:f2:9b:63:d6:33:e9:1f:41:d4:be:69:4f:23:9a:
         ab:e9:20:a8:b0:f2:22:77:85:63:66:32:13:b6:f5:b5:ae:ab:
         af:de:c8:90:f1:47:a6:03:aa:63:79:0f:d0:d7:3b:2f:d8:f1:
         2b:37:4f:bb:07:56:06:65:81:89:f6:73:7a:39:0a:65:f2:d2:
         b7:fb:f2:ef:0d:4f:33:99:a4:1f:d6:ac:94:e2:f4:ff:11:b9:
         db:88:82:e6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJSRfXu8GKiSzUK3K8het0JJOz/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRGOUY3MkU4NkI0NkMzRkM1NEM5OTM5QTlGRjBDMkMy
MjBGRDgxMTAeFw0yNjA4MTExNjE0MDRaFw0yNzA4MTAxNjE5MDRaMDMxMTAvBgNV
BAMTKEEyRDNCMkEwQ0JGNDBGRTc0MTFEMzE0ODkxQjE1NzQ3OUM3NDRFOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUUpOauMKzUk5ysh1iimAVGX9T
JwrDgfw0dIGZOeum4a2GycR1PJgP6hjxnGBViBdD2T6FSqdcs3wj56Iqo7U6iTNE
GlkhRicfsoEU66hkZ16pmL5hvZFOIanlLewMP7l/AP+5hWeei4ldjQHuyb7cDC1d
/l0ViSVdK8lVWNi9Zz6wKyuY0tPIyxw7JmK4A0yVmAqGYaY6OksyTfRAiIl58VLi
wUr1p2h0s5e8VzdotUep6drUGIGVebvloP3LROIJmdCL+4KzD19SkwrPMKxDnnW+
PREOfgeEsMIygvl4lvzAAGxA2TAx2ifdIlnmvTXSU0jidbU1Z3zMT9JahjopAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUotOyoMv0D+dBHTFIkbFXR5x0TpwwHwYDVR0j
BBgwFoAUxPn3Loa0bD/FTJk5qf8MLCIP2BEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVZLcVVNc3JlbU1qTFFZZURoS3JoU2pjOTJtM1lubmtmelhCbnprZ0F6
Qk4vMC9DNEY5RjcyRTg2QjQ2QzNGQzU0Qzk5MzlBOUZGMEMyQzIyMEZEODExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0RjlGNzJFODZCNDZDM0ZD
NTRDOTkzOUE5RkYwQzJDMjIwRkQ4MTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVWS3FVTXNyZW1NakxRWWVEaEtyaFNqYzkybTNZbm5rZnpYQm56a2dBekJOLzAv
MzIzODMwMzQzYTMyMzYzMjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzMzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQmIDANBgkqhkiG9w0BAQsFAAOCAQEAMa9tkr9R
hV+msfD7YupwKfEGpemWgksnrPc6fzirvIMOL9MQON0bi6RJiqOY6tgeI41kQJCH
UwU7/UsJ8hxmQlWIhAQc4GtbCl4Q54zZm6v4S4avfaJGAVoslyN6hqXmFB9+yhDS
NhBIt7w0mr7L0L/V7nCol0PAK9d54PnAxrJlH7pVxl96qOcPgQNUQaQvGDIYt8wy
e179fR3A8Ynhx4/LY7FNEPKbY9Yz6R9B1L5pTyOaq+kgqLDyIneFY2YyE7b1ta6r
r97IkPFHpgOqY3kP0Nc7L9jxKzdPuwdWBmWBifZzejkKZfLSt/vy7w1PM5mkH9as
lOL0/xG524iC5g==
-----END CERTIFICATE-----
Generated at Sun Aug 23 09:15:45 2026 by rpki-client