Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6HsUFLjPNhw58NdRHgKFqDem7ua7S24ZsmcHAEkjSVhJ/0/323830343a383032383a3a2f33322d3430203d3e20323731373333.roa
File:                     323830343a383032383a3a2f33322d3430203d3e20323731373333.roa (raw, json)
Hash identifier:          u4YGukre5IfJiG5UZ2VMAajHiS94stiM79rzscaKULM=
Subject key identifier:   FA:35:8C:8D:2A:CE:B6:B4:83:4B:7F:9F:75:E5:EF:45:AF:D9:17:80
Certificate issuer:       /CN=3E667233DB5473F14C03EA77D641BD05CE47CF64
Certificate serial:       24A82E28CF0E8551EDF391C8C3945AEBD490D9C5
Authority key identifier: 3E:66:72:33:DB:54:73:F1:4C:03:EA:77:D6:41:BD:05:CE:47:CF:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E667233DB5473F14C03EA77D641BD05CE47CF64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HsUFLjPNhw58NdRHgKFqDem7ua7S24ZsmcHAEkjSVhJ/0/323830343a383032383a3a2f33322d3430203d3e20323731373333.roa
Signing time:             Thu 17 Sep 2026 18:59:35 +0000
ROA not before:           Thu 17 Sep 2026 18:54:35 +0000
ROA not after:            Thu 16 Sep 2027 18:59:35 +0000
asID:                     271733
IP address blocks:        2804:8028::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6HsUFLjPNhw58NdRHgKFqDem7ua7S24ZsmcHAEkjSVhJ/0/3E667233DB5473F14C03EA77D641BD05CE47CF64.crl
                          rsync://rpki-repo.registro.br/repo/6HsUFLjPNhw58NdRHgKFqDem7ua7S24ZsmcHAEkjSVhJ/0/3E667233DB5473F14C03EA77D641BD05CE47CF64.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E667233DB5473F14C03EA77D641BD05CE47CF64.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a8:2e:28:cf:0e:85:51:ed:f3:91:c8:c3:94:5a:eb:d4:90:d9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E667233DB5473F14C03EA77D641BD05CE47CF64
        Validity
            Not Before: Sep 17 18:54:35 2026 GMT
            Not After : Sep 16 18:59:35 2027 GMT
        Subject: CN=FA358C8D2ACEB6B4834B7F9F75E5EF45AFD91780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:28:cb:67:1b:d8:0d:84:6a:98:1a:9e:35:
                    4d:be:de:65:de:2a:6c:6b:dc:13:da:08:b8:b5:a3:
                    de:fe:97:17:4d:de:ff:c6:e2:c5:5e:ff:05:ac:b3:
                    6f:a1:64:64:c2:0c:ec:33:72:9e:a3:10:28:42:88:
                    1f:e3:7c:b4:4a:5e:34:ce:9b:da:a0:27:ef:e3:62:
                    0b:bd:a0:ba:6d:e3:23:6d:72:8b:c3:39:3c:a0:74:
                    76:fa:ca:5a:61:59:32:b7:10:13:b4:c5:d8:48:ba:
                    82:7b:a0:35:85:60:97:97:54:ff:18:92:de:fe:c1:
                    16:93:44:c9:61:6b:81:f1:ee:66:44:e2:7a:08:d5:
                    d4:1f:01:c5:7c:f8:44:4e:fd:69:de:c7:e7:8a:fb:
                    66:45:65:38:3c:91:a7:14:f6:eb:49:ec:ee:09:a8:
                    6a:ed:0e:bf:8c:85:14:6f:65:50:75:2c:ea:b4:1d:
                    d1:74:c9:8d:40:5d:e6:bd:02:fc:9e:ce:39:c7:a9:
                    4e:27:75:27:3f:32:14:49:e8:3c:e1:40:86:60:e3:
                    25:cb:61:ca:06:20:f8:04:b4:89:59:bb:cc:08:ad:
                    2c:8a:81:e0:1f:c2:77:ed:f0:04:ec:49:49:5b:72:
                    9b:24:cf:7b:bc:81:4c:ce:6a:79:18:b5:33:d8:f3:
                    71:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:35:8C:8D:2A:CE:B6:B4:83:4B:7F:9F:75:E5:EF:45:AF:D9:17:80
            X509v3 Authority Key Identifier:
                keyid:3E:66:72:33:DB:54:73:F1:4C:03:EA:77:D6:41:BD:05:CE:47:CF:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HsUFLjPNhw58NdRHgKFqDem7ua7S24ZsmcHAEkjSVhJ/0/3E667233DB5473F14C03EA77D641BD05CE47CF64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E667233DB5473F14C03EA77D641BD05CE47CF64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HsUFLjPNhw58NdRHgKFqDem7ua7S24ZsmcHAEkjSVhJ/0/323830343a383032383a3a2f33322d3430203d3e20323731373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8028::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:07:d4:90:13:20:7d:ac:4f:35:6b:c7:5f:1e:12:6b:6e:23:
         50:8d:f5:00:83:c1:5d:ff:f3:31:bb:5e:dc:01:a5:f2:f9:8c:
         83:53:6b:1e:29:de:7a:9b:5e:35:65:5d:c1:80:02:78:f1:e5:
         29:78:00:a2:4b:ce:97:aa:a9:6b:51:be:6c:87:4c:89:bc:52:
         5f:31:31:b7:70:2d:95:ae:36:ca:41:97:48:b0:72:ef:7c:33:
         19:93:c6:0b:c9:68:27:fd:6e:6b:71:0e:35:da:73:01:29:b0:
         36:25:4f:54:95:d3:e9:fc:4c:87:43:df:44:e7:2c:62:3f:25:
         b9:7f:f2:97:0f:c0:bc:da:38:d5:2d:a6:e4:44:3b:8f:31:0c:
         c1:b7:7f:dd:df:30:02:0f:d6:a8:83:12:ed:e9:0f:fe:b2:a3:
         e8:0a:86:32:da:ca:4a:54:15:e9:5b:c1:3f:a1:3c:12:81:6e:
         5d:55:e2:51:ff:44:32:51:25:80:63:c1:70:78:dc:eb:9b:cd:
         93:dc:73:65:86:a9:8f:5a:f4:33:70:2d:97:8f:5e:a0:e8:45:
         f7:f2:19:81:03:c6:60:93:52:0f:87:b0:c6:88:d4:cb:8a:b1:
         05:ba:d5:61:5d:db:b1:49:c0:a1:27:6c:47:3f:b7:a5:61:08:
         e8:63:09:bc
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJKguKM8OhVHt85HIw5Ra69SQ2cUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U2NjcyMzNEQjU0NzNGMTRDMDNFQTc3RDY0MUJEMDVD
RTQ3Q0Y2NDAeFw0yNjA5MTcxODU0MzVaFw0yNzA5MTYxODU5MzVaMDMxMTAvBgNV
BAMTKEZBMzU4QzhEMkFDRUI2QjQ4MzRCN0Y5Rjc1RTVFRjQ1QUZEOTE3ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JCjLZxvYDYRqmBqeNU2+3mXe
Kmxr3BPaCLi1o97+lxdN3v/G4sVe/wWss2+hZGTCDOwzcp6jEChCiB/jfLRKXjTO
m9qgJ+/jYgu9oLpt4yNtcovDOTygdHb6ylphWTK3EBO0xdhIuoJ7oDWFYJeXVP8Y
kt7+wRaTRMlha4Hx7mZE4noI1dQfAcV8+ERO/Wnex+eK+2ZFZTg8kacU9utJ7O4J
qGrtDr+MhRRvZVB1LOq0HdF0yY1AXea9AvyezjnHqU4ndSc/MhRJ6DzhQIZg4yXL
YcoGIPgEtIlZu8wIrSyKgeAfwnft8ATsSUlbcpskz3u8gUzOankYtTPY83FpAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU+jWMjSrOtrSDS3+fdeXvRa/ZF4AwHwYDVR0j
BBgwFoAUPmZyM9tUc/FMA+p31kG9Bc5Hz2QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkhzVUZMalBOaHc1OE5kUkhnS0ZxRGVtN3VhN1MyNFpzbWNIQUVralNW
aEovMC8zRTY2NzIzM0RCNTQ3M0YxNEMwM0VBNzdENjQxQkQwNUNFNDdDRjY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFNjY3MjMzREI1NDczRjE0
QzAzRUE3N0Q2NDFCRDA1Q0U0N0NGNjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZIc1VGTGpQTmh3NThOZFJIZ0tGcURlbTd1YTdTMjRac21jSEFFa2pTVmhKLzAv
MzIzODMwMzQzYTM4MzAzMjM4M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNzMx
MzczMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASAKDANBgkqhkiG9w0BAQsFAAOCAQEAiAfUkBMg
faxPNWvHXx4Sa24jUI31AIPBXf/zMbte3AGl8vmMg1NrHineepteNWVdwYACePHl
KXgAokvOl6qpa1G+bIdMibxSXzExt3Atla42ykGXSLBy73wzGZPGC8loJ/1ua3EO
NdpzASmwNiVPVJXT6fxMh0PfROcsYj8luX/ylw/AvNo41S2m5EQ7jzEMwbd/3d8w
Ag/WqIMS7ekP/rKj6AqGMtrKSlQV6VvBP6E8EoFuXVXiUf9EMlElgGPBcHjc65vN
k9xzZYapj1r0M3Atl49eoOhF9/IZgQPGYJNSD4ewxojUy4qxBbrVYV3bsUnAoSds
Rz+3pWEI6GMJvA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 06:31:30 2026 by rpki-client