Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/323830343a6237633a3a2f33332d3333203d3e203532373632.roa
File:                     323830343a6237633a3a2f33332d3333203d3e203532373632.roa (raw, json)
Hash identifier:          0bujkkMIo3RevVSE+gnc5tTXjVd148DtSX5I/Qbikpw=
Subject key identifier:   31:36:50:AB:DE:AA:27:7A:31:BC:E2:A9:68:2D:63:9F:07:1A:D1:91
Certificate issuer:       /CN=8A131171592800AE6D9AD4CFF3FC8120EAF1920B
Certificate serial:       5BC2942B2E1D93E7FC34CFB881EADF530674ACC1
Authority key identifier: 8A:13:11:71:59:28:00:AE:6D:9A:D4:CF:F3:FC:81:20:EA:F1:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/323830343a6237633a3a2f33332d3333203d3e203532373632.roa
Signing time:             Thu 06 Aug 2026 13:36:32 +0000
ROA not before:           Thu 06 Aug 2026 13:31:32 +0000
ROA not after:            Thu 05 Aug 2027 13:36:32 +0000
asID:                     52762
IP address blocks:        2804:b7c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.crl
                          rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c2:94:2b:2e:1d:93:e7:fc:34:cf:b8:81:ea:df:53:06:74:ac:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A131171592800AE6D9AD4CFF3FC8120EAF1920B
        Validity
            Not Before: Aug  6 13:31:32 2026 GMT
            Not After : Aug  5 13:36:32 2027 GMT
        Subject: CN=313650ABDEAA277A31BCE2A9682D639F071AD191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:11:8b:20:1c:f9:8d:67:74:6e:1f:da:0b:cb:
                    de:41:49:15:f5:c1:0c:8f:3b:c2:ca:fc:a2:82:3a:
                    43:52:c3:cd:70:03:4c:02:6f:aa:da:01:0d:06:f5:
                    65:64:8f:a7:6f:7a:7e:72:96:1e:f2:f6:a1:4e:2b:
                    62:e6:9a:2a:b0:ee:0b:dd:30:f6:80:44:71:0d:53:
                    89:bf:e7:d5:b0:58:da:21:d3:02:ec:c0:38:96:d1:
                    c3:89:95:a7:b3:48:fd:73:39:b5:ab:c2:fa:3f:e1:
                    4b:68:1a:84:dd:30:9e:05:5c:4f:d0:2b:86:13:ea:
                    53:04:df:20:f1:6f:b1:99:49:54:35:60:b1:8f:38:
                    fe:ad:93:91:d6:14:be:1c:56:1e:a7:f1:ac:b2:96:
                    59:a3:04:1b:73:33:2a:62:89:55:cf:13:0f:86:24:
                    eb:98:cb:45:fb:b2:36:6e:1d:83:18:de:5d:87:8b:
                    e5:d1:29:56:3e:83:84:a3:16:01:80:1f:b0:ac:ff:
                    a1:b9:e7:3f:79:ab:19:40:db:d7:4d:d4:c4:84:da:
                    6e:12:74:95:ed:37:32:7a:3f:87:27:df:a6:6a:17:
                    41:45:46:6a:89:62:c6:ff:c7:91:e2:2a:90:7c:96:
                    ab:b4:b5:c5:6f:ac:1e:28:5b:9b:36:da:29:9b:ba:
                    a4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:36:50:AB:DE:AA:27:7A:31:BC:E2:A9:68:2D:63:9F:07:1A:D1:91
            X509v3 Authority Key Identifier:
                keyid:8A:13:11:71:59:28:00:AE:6D:9A:D4:CF:F3:FC:81:20:EA:F1:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/323830343a6237633a3a2f33332d3333203d3e203532373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b7c::/33

    Signature Algorithm: sha256WithRSAEncryption
         2b:b8:0a:8e:d0:43:9c:30:3f:36:13:07:1e:3f:0c:08:fa:c8:
         e6:6d:9f:39:dd:a9:f9:48:87:ee:be:54:6b:bc:dd:69:8a:09:
         bf:fa:65:74:c9:2a:11:7f:3d:38:13:46:5e:9b:2d:e8:f8:88:
         fc:95:ce:4a:f9:c4:b8:05:26:e5:b8:70:ed:65:8b:c6:d0:f1:
         05:59:97:e4:80:60:84:8d:f6:ad:ea:93:e2:89:6e:ac:38:5e:
         db:d3:fc:d1:f5:25:0c:3a:cb:f2:c5:87:24:af:68:61:b3:7a:
         a9:83:06:79:75:a3:23:53:1c:ce:a7:ee:3d:0a:41:e2:e8:dd:
         43:de:42:f3:e4:a4:4a:b1:29:2b:40:ea:14:3a:36:6e:7c:3c:
         56:16:1c:e7:cf:9b:23:9c:6e:2e:3e:92:37:80:a0:57:f1:f5:
         64:18:2e:1d:99:18:a6:46:49:95:3c:e8:1d:99:ea:c3:ca:1c:
         08:58:d5:40:04:f6:29:cd:b6:66:f8:93:9a:f4:c2:d6:e6:c0:
         d4:0e:3b:61:04:2c:6b:4f:b1:05:82:76:6a:ce:27:2e:5f:d6:
         ef:e1:67:0e:b0:90:23:da:9a:d5:b7:e5:91:72:79:37:5d:95:
         6e:e0:26:42:0f:cd:18:c4:86:b5:53:5b:85:af:04:f9:26:ba:
         b0:c0:a9:db
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUW8KUKy4dk+f8NM+4gerfUwZ0rMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEExMzExNzE1OTI4MDBBRTZEOUFENENGRjNGQzgxMjBF
QUYxOTIwQjAeFw0yNjA4MDYxMzMxMzJaFw0yNzA4MDUxMzM2MzJaMDMxMTAvBgNV
BAMTKDMxMzY1MEFCREVBQTI3N0EzMUJDRTJBOTY4MkQ2MzlGMDcxQUQxOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIEYsgHPmNZ3RuH9oLy95BSRX1
wQyPO8LK/KKCOkNSw81wA0wCb6raAQ0G9WVkj6dven5ylh7y9qFOK2Lmmiqw7gvd
MPaARHENU4m/59WwWNoh0wLswDiW0cOJlaezSP1zObWrwvo/4UtoGoTdMJ4FXE/Q
K4YT6lME3yDxb7GZSVQ1YLGPOP6tk5HWFL4cVh6n8ayyllmjBBtzMypiiVXPEw+G
JOuYy0X7sjZuHYMY3l2Hi+XRKVY+g4SjFgGAH7Cs/6G55z95qxlA29dN1MSE2m4S
dJXtNzJ6P4cn36ZqF0FFRmqJYsb/x5HiKpB8lqu0tcVvrB4oW5s22imbuqSHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUMTZQq96qJ3oxvOKpaC1jnwca0ZEwHwYDVR0j
BBgwFoAUihMRcVkoAK5tmtTP8/yBIOrxkgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlFlYVFlWWp1YUFDU0F1TXl4Z2JNVzlFOGkxQ0E5TldHQkp3MnNyc244
MjYvMC84QTEzMTE3MTU5MjgwMEFFNkQ5QUQ0Q0ZGM0ZDODEyMEVBRjE5MjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBMTMxMTcxNTkyODAwQUU2
RDlBRDRDRkYzRkM4MTIwRUFGMTkyMEIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZRZWFRZVlqdWFBQ1NBdU15eGdiTVc5RThpMUNBOU5XR0JKdzJzcnNuODI2LzAv
MzIzODMwMzQzYTYyMzc2MzNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDM1MzIzNzM2
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgcoBAt8ADANBgkqhkiG9w0BAQsFAAOCAQEAK7gKjtBDnDA/
NhMHHj8MCPrI5m2fOd2p+UiH7r5Ua7zdaYoJv/pldMkqEX89OBNGXpst6PiI/JXO
SvnEuAUm5bhw7WWLxtDxBVmX5IBghI32reqT4olurDhe29P80fUlDDrL8sWHJK9o
YbN6qYMGeXWjI1MczqfuPQpB4ujdQ95C8+SkSrEpK0DqFDo2bnw8VhYc58+bI5xu
Lj6SN4CgV/H1ZBguHZkYpkZJlTzoHZnqw8ocCFjVQAT2Kc22ZviTmvTC1ubA1A47
YQQsa0+xBYJ2as4nLl/W7+FnDrCQI9qa1bflkXJ5N12VbuAmQg/NGMSGtVNbha8E
+Sa6sMCp2w==
-----END CERTIFICATE-----
Generated at Sun Aug 23 12:44:46 2026 by rpki-client