Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/323830343a393764343a3a2f33322d3438203d3e20323735363438.roa
File:                     323830343a393764343a3a2f33322d3438203d3e20323735363438.roa (raw, json)
Hash identifier:          HgEifUVLQi8jQB7aVjkFJfYzmolNCJGU6p1uSG2FTuk=
Subject key identifier:   E9:80:7E:FF:95:B7:7D:4D:68:14:77:44:7A:98:2E:DE:DE:E0:8F:74
Certificate issuer:       /CN=92699DD6DF1A66EB9E05CEE569B3E731CC21AC0A
Certificate serial:       026BF66D2E3163192C7839EE65FA66506472CD78
Authority key identifier: 92:69:9D:D6:DF:1A:66:EB:9E:05:CE:E5:69:B3:E7:31:CC:21:AC:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92699DD6DF1A66EB9E05CEE569B3E731CC21AC0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/323830343a393764343a3a2f33322d3438203d3e20323735363438.roa
Signing time:             Thu 18 Jun 2026 20:50:12 +0000
ROA not before:           Thu 18 Jun 2026 20:45:12 +0000
ROA not after:            Thu 17 Jun 2027 20:50:12 +0000
asID:                     275648
IP address blocks:        2804:97d4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/92699DD6DF1A66EB9E05CEE569B3E731CC21AC0A.crl
                          rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/92699DD6DF1A66EB9E05CEE569B3E731CC21AC0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92699DD6DF1A66EB9E05CEE569B3E731CC21AC0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6b:f6:6d:2e:31:63:19:2c:78:39:ee:65:fa:66:50:64:72:cd:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92699DD6DF1A66EB9E05CEE569B3E731CC21AC0A
        Validity
            Not Before: Jun 18 20:45:12 2026 GMT
            Not After : Jun 17 20:50:12 2027 GMT
        Subject: CN=E9807EFF95B77D4D681477447A982EDEDEE08F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:ce:f8:e0:87:f3:e7:17:5a:48:cf:77:b5:
                    6b:5c:c5:d9:29:7a:af:ad:20:39:82:4d:55:e4:8d:
                    66:3e:5b:eb:b8:69:87:f9:da:d2:4d:af:63:84:b5:
                    d5:d3:6e:da:8a:7d:ca:c2:5c:14:ee:d3:d7:c4:9a:
                    f6:e5:64:38:06:0b:5d:cf:b6:c4:e9:84:09:97:21:
                    b0:3a:94:dd:cb:77:b9:9b:bc:5c:0f:9a:65:52:cd:
                    8f:29:b7:7c:d2:21:45:05:4e:fc:01:e9:3a:9e:4d:
                    de:27:d8:d5:5e:df:dc:5e:92:01:86:67:79:ae:a7:
                    6e:aa:fe:ef:a5:b7:92:9a:19:f2:3d:4d:98:42:ba:
                    24:99:12:28:8c:c6:8b:bf:56:fa:b7:da:15:4c:bf:
                    7a:90:c3:1a:0b:e4:6a:82:63:f7:b2:70:41:8b:f0:
                    2f:4e:b5:cd:d6:1e:dc:e5:41:39:d7:d0:30:b0:1e:
                    e8:99:91:8f:8e:a7:bb:09:a3:fc:1b:99:85:0b:97:
                    6b:08:bc:c5:2a:54:39:75:b2:9b:bf:c2:47:22:94:
                    31:f0:e8:5e:1e:b3:40:dc:0c:81:3c:16:89:ea:8f:
                    a5:0f:1b:63:1d:82:5d:a5:3b:0a:0c:5c:1c:c5:92:
                    81:8f:be:6c:e5:5b:20:cb:0b:5c:c9:f0:70:92:fc:
                    a6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:80:7E:FF:95:B7:7D:4D:68:14:77:44:7A:98:2E:DE:DE:E0:8F:74
            X509v3 Authority Key Identifier:
                keyid:92:69:9D:D6:DF:1A:66:EB:9E:05:CE:E5:69:B3:E7:31:CC:21:AC:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/92699DD6DF1A66EB9E05CEE569B3E731CC21AC0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92699DD6DF1A66EB9E05CEE569B3E731CC21AC0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/323830343a393764343a3a2f33322d3438203d3e20323735363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:97d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:40:b5:43:37:cb:fd:da:4c:8f:72:8c:5b:43:06:92:ea:e9:
         52:85:58:e9:76:3b:7e:bf:b3:da:1c:9f:4b:65:43:73:2f:98:
         5a:82:ec:b6:53:db:0d:cd:31:a1:bd:3d:af:15:19:04:57:9e:
         33:b0:3b:3d:2f:54:44:09:4b:c1:4d:a4:a4:e3:28:1d:3b:11:
         84:39:70:47:d8:4a:6c:cf:39:07:7d:3c:85:b5:cb:24:08:16:
         50:71:cb:c8:04:6f:e5:1e:ea:98:7f:76:6a:aa:0f:e6:4b:6d:
         87:06:38:3b:ce:9e:52:d6:46:71:f0:03:0e:5e:e4:67:d2:a9:
         8e:18:a6:6e:8d:59:2a:42:6a:37:63:4e:f4:6b:f3:a6:78:32:
         7c:5d:ab:4f:a6:85:a1:61:b2:0a:23:09:23:ae:02:9d:40:de:
         3f:79:19:01:9a:61:51:a7:a9:ae:ee:24:56:c4:5f:97:95:dc:
         71:8a:bc:37:c9:e7:63:62:8d:81:20:cd:0c:81:99:25:28:7a:
         1f:a0:46:3c:da:1e:b4:8d:cf:bf:41:4d:ee:e2:12:ba:33:e2:
         a2:5c:30:39:73:fa:d7:3d:b0:7f:f1:1d:3f:f2:3c:ff:28:ef:
         d0:d3:ba:10:c3:b3:47:61:c6:6b:34:0d:df:67:8d:a1:a5:5b:
         1e:61:89:28
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUAmv2bS4xYxkseDnuZfpmUGRyzXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI2OTlERDZERjFBNjZFQjlFMDVDRUU1NjlCM0U3MzFD
QzIxQUMwQTAeFw0yNjA2MTgyMDQ1MTJaFw0yNzA2MTcyMDUwMTJaMDMxMTAvBgNV
BAMTKEU5ODA3RUZGOTVCNzdENEQ2ODE0Nzc0NDdBOTgyRURFREVFMDhGNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE8s744Ifz5xdaSM93tWtcxdkp
eq+tIDmCTVXkjWY+W+u4aYf52tJNr2OEtdXTbtqKfcrCXBTu09fEmvblZDgGC13P
tsTphAmXIbA6lN3Ld7mbvFwPmmVSzY8pt3zSIUUFTvwB6TqeTd4n2NVe39xekgGG
Z3mup26q/u+lt5KaGfI9TZhCuiSZEiiMxou/Vvq32hVMv3qQwxoL5GqCY/eycEGL
8C9Otc3WHtzlQTnX0DCwHuiZkY+Op7sJo/wbmYULl2sIvMUqVDl1spu/wkcilDHw
6F4es0DcDIE8Fonqj6UPG2Mdgl2lOwoMXBzFkoGPvmzlWyDLC1zJ8HCS/KY5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6YB+/5W3fU1oFHdEepgu3t7gj3QwHwYDVR0j
BBgwFoAUkmmd1t8aZuueBc7labPnMcwhrAowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk1UNzhZaEZMNlhKZXhVNFJiQ3dpb1JMWkdVOUR3ZVR2aHRZblhjOXNC
ZEYvMC85MjY5OURENkRGMUE2NkVCOUUwNUNFRTU2OUIzRTczMUNDMjFBQzBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyNjk5REQ2REYxQTY2RUI5
RTA1Q0VFNTY5QjNFNzMxQ0MyMUFDMEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZNVDc4WWhGTDZYSmV4VTRSYkN3aW9STFpHVTlEd2VUdmh0WW5YYzlzQmRGLzAv
MzIzODMwMzQzYTM5Mzc2NDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzM1
MzYzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASX1DANBgkqhkiG9w0BAQsFAAOCAQEAEUC1QzfL
/dpMj3KMW0MGkurpUoVY6XY7fr+z2hyfS2VDcy+YWoLstlPbDc0xob09rxUZBFee
M7A7PS9URAlLwU2kpOMoHTsRhDlwR9hKbM85B308hbXLJAgWUHHLyARv5R7qmH92
aqoP5ktthwY4O86eUtZGcfADDl7kZ9Kpjhimbo1ZKkJqN2NO9GvzpngyfF2rT6aF
oWGyCiMJI64CnUDeP3kZAZphUaepru4kVsRfl5XccYq8N8nnY2KNgSDNDIGZJSh6
H6BGPNoetI3Pv0FN7uISujPiolwwOXP61z2wf/EdP/I8/yjv0NO6EMOzR2HGazQN
32eNoaVbHmGJKA==
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:58:22 2026 by rpki-client