Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/323830343a3833303a3a2f33322d3430203d3e203532383532.roa
File:                     323830343a3833303a3a2f33322d3430203d3e203532383532.roa (raw, json)
Hash identifier:          pRgOUHaxx08zph2oI/HQ79pah+jOs2rhXTPZgl+fHJg=
Subject key identifier:   0F:BF:4D:A9:3F:64:DD:59:2A:94:28:D9:1C:BE:DB:9C:77:B3:3B:CD
Certificate issuer:       /CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
Certificate serial:       5D42112A29AB24D414BD9060C715191B8D502CBE
Authority key identifier: 0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/323830343a3833303a3a2f33322d3430203d3e203532383532.roa
Signing time:             Fri 31 Jul 2026 18:25:18 +0000
ROA not before:           Fri 31 Jul 2026 18:20:18 +0000
ROA not after:            Fri 30 Jul 2027 18:25:18 +0000
asID:                     52852
IP address blocks:        2804:830::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl
                          rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 00:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:42:11:2a:29:ab:24:d4:14:bd:90:60:c7:15:19:1b:8d:50:2c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
        Validity
            Not Before: Jul 31 18:20:18 2026 GMT
            Not After : Jul 30 18:25:18 2027 GMT
        Subject: CN=0FBF4DA93F64DD592A9428D91CBEDB9C77B33BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ee:19:11:02:04:96:9c:71:94:d4:bd:6b:d2:
                    4c:c9:e5:0a:e2:6b:fd:e6:9b:4c:5f:fa:de:4b:16:
                    e0:67:32:67:86:8a:00:c5:d1:f6:c3:b1:48:0e:89:
                    14:3d:fe:7d:97:4e:6b:78:9e:a3:1c:44:08:b6:ae:
                    fe:33:de:e0:c9:ec:c0:dd:0d:57:9c:16:ad:b7:e2:
                    06:c5:0c:21:19:82:4b:64:67:87:73:f4:b7:7a:ff:
                    b5:32:93:29:25:a9:91:13:10:ce:d5:fa:06:a8:c0:
                    01:80:d1:6e:77:f6:34:9c:54:69:32:94:18:26:c7:
                    73:0e:32:f7:e2:c8:02:dd:18:47:77:48:62:ba:f3:
                    49:92:ed:7f:82:26:06:04:a2:0d:e1:61:22:35:4c:
                    b9:bf:85:bf:5b:36:8e:1f:0b:74:9d:94:9e:ce:47:
                    84:66:56:c5:98:c6:d3:eb:88:10:6e:f7:0f:31:12:
                    d6:be:02:66:58:29:51:9e:34:71:ce:c7:d8:b2:40:
                    b2:41:3c:2a:22:90:b4:85:83:ad:1a:e3:f7:87:34:
                    1a:54:64:8c:f3:89:ed:3e:3c:d1:42:da:79:4e:68:
                    44:9b:f4:59:cf:de:05:0f:e2:65:85:26:c2:7b:57:
                    2d:05:6f:24:16:8a:4e:88:7e:54:07:38:bb:9f:ed:
                    bf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BF:4D:A9:3F:64:DD:59:2A:94:28:D9:1C:BE:DB:9C:77:B3:3B:CD
            X509v3 Authority Key Identifier:
                keyid:0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/323830343a3833303a3a2f33322d3430203d3e203532383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:830::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:62:ab:fe:74:b8:dc:ad:eb:eb:5b:47:e1:2b:20:a5:6f:5b:
         12:76:9d:cf:f7:88:52:91:15:3b:d0:ea:ca:de:81:e7:13:63:
         30:79:78:10:48:8d:b0:03:cc:b1:f2:3d:59:2c:82:5c:1f:fc:
         70:81:0d:50:e1:d9:d1:1b:93:22:87:da:de:d1:b1:71:07:9f:
         cc:fa:0a:a5:f7:79:6b:99:33:be:3d:df:83:b6:b2:65:aa:16:
         0d:1a:a5:cf:74:e8:73:48:cc:f8:30:c7:e7:1c:3b:5f:69:28:
         5d:0b:c4:2c:9e:74:69:36:1f:94:48:33:76:98:da:a4:38:0e:
         26:b3:ea:c1:7f:e5:d2:b4:af:f8:15:c7:4c:d1:4c:f2:b8:ce:
         06:a2:c6:4e:71:f0:b2:d5:24:c9:e0:fb:be:f4:90:9d:f4:fd:
         fb:88:c0:e8:09:c1:91:1c:a8:8e:04:53:9e:f9:30:de:25:59:
         23:d7:e4:59:f1:27:ba:a0:aa:09:a6:d5:da:c4:62:c8:23:1f:
         71:03:76:0b:37:a4:9d:b0:13:e7:3f:61:af:1e:c7:dd:9e:88:
         66:3e:14:8d:1f:df:7f:a2:6f:a1:42:65:27:47:be:f1:1b:fa:
         67:4e:af:15:8e:28:5f:ac:31:1e:e3:23:2e:10:12:28:ac:39:
         3c:8a:9f:7f
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUXUIRKimrJNQUvZBgxxUZG41QLL4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ0ODNCMDgyNUIzRTg4QzY0Mzc2OTNGQjlFQzI2RTQ1
RUFBQ0YyMTAeFw0yNjA3MzExODIwMThaFw0yNzA3MzAxODI1MThaMDMxMTAvBgNV
BAMTKDBGQkY0REE5M0Y2NERENTkyQTk0MjhEOTFDQkVEQjlDNzdCMzNCQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt7hkRAgSWnHGU1L1r0kzJ5Qri
a/3mm0xf+t5LFuBnMmeGigDF0fbDsUgOiRQ9/n2XTmt4nqMcRAi2rv4z3uDJ7MDd
DVecFq234gbFDCEZgktkZ4dz9Ld6/7UykyklqZETEM7V+gaowAGA0W539jScVGky
lBgmx3MOMvfiyALdGEd3SGK680mS7X+CJgYEog3hYSI1TLm/hb9bNo4fC3SdlJ7O
R4RmVsWYxtPriBBu9w8xEta+AmZYKVGeNHHOx9iyQLJBPCoikLSFg60a4/eHNBpU
ZIzzie0+PNFC2nlOaESb9FnP3gUP4mWFJsJ7Vy0FbyQWik6IflQHOLuf7b9tAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUD79NqT9k3VkqlCjZHL7bnHezO80wHwYDVR0j
BBgwFoAUDUg7CCWz6IxkN2k/uewm5F6qzyEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk1jTWkyR3RKaWY2SmlDVGNoczNEdzJ3ekRyUXZDY0FDMXJiMkI1OVh2
UE4vMS8wRDQ4M0IwODI1QjNFODhDNjQzNzY5M0ZCOUVDMjZFNDVFQUFDRjIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENDgzQjA4MjVCM0U4OEM2
NDM3NjkzRkI5RUMyNkU0NUVBQUNGMjEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZNY01pMkd0SmlmNkppQ1RjaHMzRHcyd3pEclF2Q2NBQzFyYjJCNTlYdlBOLzEv
MzIzODMwMzQzYTM4MzMzMDNhM2EyZjMzMzIyZDM0MzAyMDNkM2UyMDM1MzIzODM1
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAgwMA0GCSqGSIb3DQEBCwUAA4IBAQCLYqv+dLjcrevr
W0fhKyClb1sSdp3P94hSkRU70OrK3oHnE2MweXgQSI2wA8yx8j1ZLIJcH/xwgQ1Q
4dnRG5Mih9re0bFxB5/M+gql93lrmTO+Pd+DtrJlqhYNGqXPdOhzSMz4MMfnHDtf
aShdC8QsnnRpNh+USDN2mNqkOA4ms+rBf+XStK/4FcdM0UzyuM4GosZOcfCy1STJ
4Pu+9JCd9P37iMDoCcGRHKiOBFOe+TDeJVkj1+RZ8Se6oKoJptXaxGLIIx9xA3YL
N6SdsBPnP2GvHsfdnohmPhSNH99/om+hQmUnR77xG/pnTq8VjihfrDEe4yMuEBIo
rDk8ip9/
-----END CERTIFICATE-----
Generated at Wed Aug 26 09:35:32 2026 by rpki-client