Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/323830343a363735343a3a2f33322d3332203d3e20323639363230.roa
File:                     323830343a363735343a3a2f33322d3332203d3e20323639363230.roa (raw, json)
Hash identifier:          Hq1BPJyHsmno6M93fOnnMWAlkWaZLmkHwAo+Tm9o2Q0=
Subject key identifier:   81:38:27:87:1E:F2:82:41:EA:98:63:6D:9A:E8:DB:F8:F9:6D:AF:77
Certificate issuer:       /CN=398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47
Certificate serial:       077FB324FB33611AABE55F0B82685D7E6A9628AA
Authority key identifier: 39:87:31:60:6E:B4:C0:DD:0D:FA:C2:B4:73:FC:2F:70:FF:DB:9D:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/323830343a363735343a3a2f33322d3332203d3e20323639363230.roa
Signing time:             Thu 10 Sep 2026 16:25:08 +0000
ROA not before:           Thu 10 Sep 2026 16:20:08 +0000
ROA not after:            Thu 09 Sep 2027 16:25:08 +0000
asID:                     269620
IP address blocks:        2804:6754::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.crl
                          rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 20:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7f:b3:24:fb:33:61:1a:ab:e5:5f:0b:82:68:5d:7e:6a:96:28:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47
        Validity
            Not Before: Sep 10 16:20:08 2026 GMT
            Not After : Sep  9 16:25:08 2027 GMT
        Subject: CN=813827871EF28241EA98636D9AE8DBF8F96DAF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:a2:e2:cf:57:eb:61:78:83:d9:5b:ac:47:
                    ba:b5:43:87:fa:52:0f:09:9e:f1:43:5a:75:83:e6:
                    c2:16:21:8a:5b:0a:9c:1d:1b:6b:d2:6e:23:41:e7:
                    0a:53:6a:a9:de:95:9e:e9:d8:75:ed:4e:e6:df:fd:
                    4d:73:d9:96:38:59:ba:ec:66:b4:8f:62:69:91:c6:
                    c6:46:35:75:48:d8:9b:bf:8c:bd:10:f1:ce:49:24:
                    83:d8:4a:b5:23:40:38:13:23:2c:8e:cb:a2:fc:ec:
                    b4:1b:76:a9:e6:08:07:90:5f:61:b3:76:29:74:53:
                    f8:5b:73:09:8b:4d:ec:11:bb:98:16:8e:10:82:1e:
                    98:ef:12:e9:bf:52:c4:61:e3:8e:81:87:f2:57:b8:
                    f1:99:d0:6d:20:69:6a:6c:c8:2e:7e:77:57:6e:7b:
                    82:3b:35:f1:93:e7:70:86:5e:47:b7:d1:75:72:97:
                    77:54:e5:83:03:ef:1f:21:09:01:6b:23:61:21:15:
                    dd:e6:45:65:61:87:a5:de:35:66:ef:54:66:ec:39:
                    0b:84:93:fd:ee:69:d2:6f:b6:5c:64:a6:17:8a:1b:
                    0e:44:cb:ce:a1:ed:a9:85:68:92:e7:6b:cf:2c:c3:
                    a1:35:e2:19:46:cb:a6:c3:3d:ee:ef:c0:ce:d6:55:
                    13:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:38:27:87:1E:F2:82:41:EA:98:63:6D:9A:E8:DB:F8:F9:6D:AF:77
            X509v3 Authority Key Identifier:
                keyid:39:87:31:60:6E:B4:C0:DD:0D:FA:C2:B4:73:FC:2F:70:FF:DB:9D:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/398731606EB4C0DD0DFAC2B473FC2F70FFDB9D47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jUmU1n8DP8y2GLMzoGMb9oo4QxMxNcjHiNJ9c2LWQhR/0/323830343a363735343a3a2f33322d3332203d3e20323639363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6754::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:18:b1:7c:3e:d9:fd:17:19:d0:a3:b1:be:43:a2:c4:d1:4a:
         cd:d3:58:10:cb:58:49:57:52:77:8c:55:8f:66:15:8a:20:f2:
         9e:8c:82:91:19:0c:09:56:b5:35:cb:c5:ae:b1:16:da:6e:77:
         cb:dc:bc:01:d7:3d:81:f7:45:ea:1c:90:b1:ef:0a:91:97:74:
         02:15:1d:ec:e4:1d:61:1f:a5:b9:44:53:92:6d:18:c4:38:08:
         95:78:90:fb:bb:15:11:da:38:a0:e9:f9:41:7c:19:98:b4:a9:
         92:c0:2c:7d:aa:21:4c:bc:eb:b8:5a:3a:64:d9:d0:8a:a9:a9:
         7e:65:25:11:07:8c:aa:52:46:5e:f8:97:8d:b4:89:c0:6c:36:
         85:65:c2:0d:4f:89:9b:b0:8d:e7:27:c8:e3:4f:05:b6:56:70:
         c4:44:96:86:c2:6c:12:2d:c2:dc:02:c2:9e:b8:85:70:54:f2:
         6f:fc:0a:6a:48:25:9a:10:f2:42:35:df:4d:21:1e:91:02:a2:
         24:0d:13:a5:ec:ae:2b:19:78:d4:50:f6:8b:f8:85:e7:1c:a6:
         5d:fb:a4:9f:93:f0:38:8c:fc:39:f9:71:79:cd:cc:d6:08:9e:
         bd:8b:f6:20:cc:12:b6:f8:24:d0:35:ed:31:7c:35:6b:2d:23:
         bd:1c:4b:7b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUB3+zJPszYRqr5V8LgmhdfmqWKKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk4NzMxNjA2RUI0QzBERDBERkFDMkI0NzNGQzJGNzBG
RkRCOUQ0NzAeFw0yNjA5MTAxNjIwMDhaFw0yNzA5MDkxNjI1MDhaMDMxMTAvBgNV
BAMTKDgxMzgyNzg3MUVGMjgyNDFFQTk4NjM2RDlBRThEQkY4Rjk2REFGNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKKLiz1frYXiD2VusR7q1Q4f6
Ug8JnvFDWnWD5sIWIYpbCpwdG2vSbiNB5wpTaqnelZ7p2HXtTubf/U1z2ZY4Wbrs
ZrSPYmmRxsZGNXVI2Ju/jL0Q8c5JJIPYSrUjQDgTIyyOy6L87LQbdqnmCAeQX2Gz
dil0U/hbcwmLTewRu5gWjhCCHpjvEum/UsRh446Bh/JXuPGZ0G0gaWpsyC5+d1du
e4I7NfGT53CGXke30XVyl3dU5YMD7x8hCQFrI2EhFd3mRWVhh6XeNWbvVGbsOQuE
k/3uadJvtlxkpheKGw5Ey86h7amFaJLna88sw6E14hlGy6bDPe7vwM7WVRP9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUgTgnhx7ygkHqmGNtmujb+Pltr3cwHwYDVR0j
BBgwFoAUOYcxYG60wN0N+sK0c/wvcP/bnUcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWpVbVUxbjhEUDh5MkdMTXpvR01iOW9vNFF4TXhOY2pIaU5KOWMyTFdR
aFIvMC8zOTg3MzE2MDZFQjRDMEREMERGQUMyQjQ3M0ZDMkY3MEZGREI5RDQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5ODczMTYwNkVCNEMwREQw
REZBQzJCNDczRkMyRjcwRkZEQjlENDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqVW1VMW44RFA4eTJHTE16b0dNYjlvbzRReE14TmNqSGlOSjljMkxXUWhSLzAv
MzIzODMwMzQzYTM2MzczNTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzYzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARnVDANBgkqhkiG9w0BAQsFAAOCAQEAFBixfD7Z
/RcZ0KOxvkOixNFKzdNYEMtYSVdSd4xVj2YViiDynoyCkRkMCVa1NcvFrrEW2m53
y9y8Adc9gfdF6hyQse8KkZd0AhUd7OQdYR+luURTkm0YxDgIlXiQ+7sVEdo4oOn5
QXwZmLSpksAsfaohTLzruFo6ZNnQiqmpfmUlEQeMqlJGXviXjbSJwGw2hWXCDU+J
m7CN5yfI408FtlZwxESWhsJsEi3C3ALCnriFcFTyb/wKakglmhDyQjXfTSEekQKi
JA0TpeyuKxl41FD2i/iF5xymXfukn5PwOIz8Oflxec3M1gievYv2IMwStvgk0DXt
MXw1ay0jvRxLew==
-----END CERTIFICATE-----