Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/323830343a363936343a3a2f33322d3438203d3e20323730323637.roa
File:                     323830343a363936343a3a2f33322d3438203d3e20323730323637.roa (raw, json)
Hash identifier:          zl5tBDu9uRTTYTfJnSSAP53mc6pCVBQUPfiznW+bs5g=
Subject key identifier:   69:15:28:7A:D2:FD:22:B7:28:FA:22:A4:E8:64:CF:AF:BF:72:4D:9D
Certificate issuer:       /CN=0373584565E63D1D56C669714F3938AC5E5F8CCC
Certificate serial:       476F50E5B36F8791A120C6C5D4F36E59ECE3CACE
Authority key identifier: 03:73:58:45:65:E6:3D:1D:56:C6:69:71:4F:39:38:AC:5E:5F:8C:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0373584565E63D1D56C669714F3938AC5E5F8CCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/323830343a363936343a3a2f33322d3438203d3e20323730323637.roa
Signing time:             Wed 23 Sep 2026 17:08:56 +0000
ROA not before:           Wed 23 Sep 2026 17:03:56 +0000
ROA not after:            Wed 22 Sep 2027 17:08:56 +0000
asID:                     270267
IP address blocks:        2804:6964::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/0373584565E63D1D56C669714F3938AC5E5F8CCC.crl
                          rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/0373584565E63D1D56C669714F3938AC5E5F8CCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0373584565E63D1D56C669714F3938AC5E5F8CCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 05:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6f:50:e5:b3:6f:87:91:a1:20:c6:c5:d4:f3:6e:59:ec:e3:ca:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0373584565E63D1D56C669714F3938AC5E5F8CCC
        Validity
            Not Before: Sep 23 17:03:56 2026 GMT
            Not After : Sep 22 17:08:56 2027 GMT
        Subject: CN=6915287AD2FD22B728FA22A4E864CFAFBF724D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:b0:c9:e7:96:01:d6:b5:af:6c:76:16:1e:
                    87:d6:5f:2c:f0:ea:49:32:60:52:9d:c9:e1:2d:bf:
                    37:7e:39:79:c8:a2:cf:1a:aa:b1:6b:99:e5:0c:ec:
                    98:e6:12:71:d5:8a:a3:c1:17:d0:4a:12:00:c4:c6:
                    20:c0:1f:e3:2b:a1:a8:f4:3c:c0:06:28:a7:b0:d3:
                    64:b6:a5:bd:f3:c3:58:21:3e:df:9b:ca:0b:9e:2e:
                    5d:4f:eb:bb:c7:33:9f:a9:40:73:c6:6c:2d:05:aa:
                    8a:30:6a:3b:d3:da:71:48:db:93:26:20:95:70:ab:
                    9a:7e:06:c5:31:09:15:c2:f0:3a:55:ea:3c:fa:e9:
                    04:f3:3d:9c:60:fa:ca:dd:3c:65:e3:2d:26:8e:84:
                    89:6d:05:e4:4c:b2:f8:31:84:d3:d9:bb:f5:88:ec:
                    ae:99:e1:0b:ab:07:d8:a7:db:db:fa:5a:44:67:13:
                    d8:c4:b2:60:2f:91:6f:99:3b:d5:92:36:bf:41:72:
                    b9:c3:d0:be:57:46:0e:8a:5f:26:7f:7b:63:6a:58:
                    81:e3:ae:54:20:c3:23:4f:8d:35:ae:22:1f:f8:56:
                    02:1c:67:d7:64:39:1e:18:7f:e1:74:ab:bb:91:58:
                    a3:05:07:b5:95:fe:dc:51:ff:7b:73:7c:ed:6b:9d:
                    06:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:15:28:7A:D2:FD:22:B7:28:FA:22:A4:E8:64:CF:AF:BF:72:4D:9D
            X509v3 Authority Key Identifier:
                keyid:03:73:58:45:65:E6:3D:1D:56:C6:69:71:4F:39:38:AC:5E:5F:8C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/0373584565E63D1D56C669714F3938AC5E5F8CCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0373584565E63D1D56C669714F3938AC5E5F8CCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/323830343a363936343a3a2f33322d3438203d3e20323730323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6964::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:7d:8d:88:45:e3:7a:ca:68:13:98:8d:42:57:ca:99:ef:74:
         62:63:40:94:7b:57:c2:f2:33:58:57:c6:bb:39:da:4c:02:56:
         1b:7e:3e:86:d6:a2:02:9a:c9:91:f0:f6:f9:0d:33:7f:c0:ea:
         fa:9f:97:e1:c7:16:e2:21:f3:47:dd:25:f3:9c:a8:03:91:58:
         b2:89:a7:7c:66:7e:58:71:88:97:47:a3:1e:f3:5f:9f:10:d7:
         8c:58:46:b2:b2:b7:68:f0:a6:72:b0:a3:99:73:29:2b:1c:5b:
         48:d8:ed:a6:49:49:f2:dd:a2:33:54:ec:c7:39:69:67:ac:9c:
         1d:45:6b:ed:3e:60:d2:ec:80:59:50:a1:44:d9:56:34:d8:21:
         e7:65:c1:cf:e7:33:d7:71:94:ea:98:23:bd:b9:2a:98:cd:a7:
         52:3d:79:c8:22:40:69:dc:16:39:ec:52:6c:df:41:4b:23:6e:
         5d:24:2b:62:9c:00:1d:89:52:f0:50:b3:17:31:e8:76:fb:76:
         68:03:60:60:63:ce:82:66:9b:5d:00:45:81:e0:67:3b:e8:25:
         70:45:4b:06:06:e8:db:82:fe:a0:f7:08:d6:d3:df:1f:87:b9:
         97:a0:4b:19:bc:3b:5e:bc:56:f0:81:10:75:86:2d:86:4d:07:
         4b:9e:47:ff
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUR29Q5bNvh5GhIMbF1PNuWezjys4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3MzU4NDU2NUU2M0QxRDU2QzY2OTcxNEYzOTM4QUM1
RTVGOENDQzAeFw0yNjA5MjMxNzAzNTZaFw0yNzA5MjIxNzA4NTZaMDMxMTAvBgNV
BAMTKDY5MTUyODdBRDJGRDIyQjcyOEZBMjJBNEU4NjRDRkFGQkY3MjREOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCewbDJ55YB1rWvbHYWHofWXyzw
6kkyYFKdyeEtvzd+OXnIos8aqrFrmeUM7JjmEnHViqPBF9BKEgDExiDAH+Mroaj0
PMAGKKew02S2pb3zw1ghPt+bygueLl1P67vHM5+pQHPGbC0FqoowajvT2nFI25Mm
IJVwq5p+BsUxCRXC8DpV6jz66QTzPZxg+srdPGXjLSaOhIltBeRMsvgxhNPZu/WI
7K6Z4QurB9in29v6WkRnE9jEsmAvkW+ZO9WSNr9BcrnD0L5XRg6KXyZ/e2NqWIHj
rlQgwyNPjTWuIh/4VgIcZ9dkOR4Yf+F0q7uRWKMFB7WV/txR/3tzfO1rnQZVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUaRUoetL9Irco+iKk6GTPr79yTZ0wHwYDVR0j
BBgwFoAUA3NYRWXmPR1WxmlxTzk4rF5fjMwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlU3c1FiNFdveFNkTWZOeHF1OXNCUVJGWVZNd2tUalpqQ0diZTNLcHBr
VWkvMC8wMzczNTg0NTY1RTYzRDFENTZDNjY5NzE0RjM5MzhBQzVFNUY4Q0NDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzM1ODQ1NjVFNjNEMUQ1
NkM2Njk3MTRGMzkzOEFDNUU1RjhDQ0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZVN3NRYjRXb3hTZE1mTnhxdTlzQlFSRllWTXdrVGpaakNHYmUzS3Bwa1VpLzAv
MzIzODMwMzQzYTM2MzkzNjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzIzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARpZDANBgkqhkiG9w0BAQsFAAOCAQEAiX2NiEXj
espoE5iNQlfKme90YmNAlHtXwvIzWFfGuznaTAJWG34+htaiAprJkfD2+Q0zf8Dq
+p+X4ccW4iHzR90l85yoA5FYsomnfGZ+WHGIl0ejHvNfnxDXjFhGsrK3aPCmcrCj
mXMpKxxbSNjtpklJ8t2iM1TsxzlpZ6ycHUVr7T5g0uyAWVChRNlWNNgh52XBz+cz
13GU6pgjvbkqmM2nUj15yCJAadwWOexSbN9BSyNuXSQrYpwAHYlS8FCzFzHodvt2
aANgYGPOgmabXQBFgeBnO+glcEVLBgbo24L+oPcI1tPfH4e5l6BLGbw7XrxW8IEQ
dYYthk0HS55H/w==
-----END CERTIFICATE-----
Generated at Wed Oct 14 16:15:28 2026 by rpki-client