Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a3a2f33322d3332203d3e20323633363134.roa
File:                     323830343a313030343a3a2f33322d3332203d3e20323633363134.roa (raw, json)
Hash identifier:          IK28Mc0I3+78KplY+gRH2ZxhBqQJAvn8EvEOLqeDhyM=
Subject key identifier:   3D:40:85:8D:8A:19:EA:C1:F4:F7:3E:B4:75:A6:1B:2D:0C:63:F3:18
Certificate issuer:       /CN=9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667
Certificate serial:       081EBA1C52C06790AA70F7F2D38040222C190416
Authority key identifier: 9D:0F:DE:C9:F8:EE:23:DE:9A:1C:B1:F2:47:C0:DD:9D:67:05:56:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a3a2f33322d3332203d3e20323633363134.roa
Signing time:             Tue 25 Aug 2026 15:29:38 +0000
ROA not before:           Tue 25 Aug 2026 15:24:38 +0000
ROA not after:            Tue 24 Aug 2027 15:29:38 +0000
asID:                     263614
IP address blocks:        2804:1004::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.crl
                          rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 10:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1e:ba:1c:52:c0:67:90:aa:70:f7:f2:d3:80:40:22:2c:19:04:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667
        Validity
            Not Before: Aug 25 15:24:38 2026 GMT
            Not After : Aug 24 15:29:38 2027 GMT
        Subject: CN=3D40858D8A19EAC1F4F73EB475A61B2D0C63F318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:f1:54:23:0c:6b:e6:c7:74:e3:e3:b5:dc:
                    1e:a9:82:6b:3a:b3:36:26:59:85:7f:03:2b:f8:74:
                    10:fb:8c:25:9d:2b:3c:a6:b1:98:74:22:60:6f:52:
                    fe:d0:59:62:b3:7d:ab:e4:e4:ab:b6:d5:2d:cf:fe:
                    32:2d:b5:9d:4a:8b:e2:cc:16:ca:2c:fb:84:b6:fa:
                    57:59:d5:a3:ed:e7:e9:90:55:e5:9a:a9:05:c5:70:
                    01:b4:e7:b6:52:25:45:94:27:3a:f5:c4:e2:75:03:
                    56:80:60:fb:ba:2e:77:0a:2e:f3:50:99:3b:77:7a:
                    eb:3f:48:6b:1c:33:3b:36:b5:c0:4e:60:15:af:99:
                    9f:12:7b:40:4b:73:ee:21:1a:7b:f8:a4:9c:26:27:
                    c1:03:de:8e:6e:85:75:93:e2:b2:41:07:fa:05:9c:
                    31:cc:51:8e:87:d1:79:c7:a9:89:6c:5a:40:ec:78:
                    18:f2:d1:9a:45:ce:b7:d8:ef:d2:2c:18:5e:e6:23:
                    c8:79:f2:04:8e:6b:3f:f5:2a:01:5c:02:5c:c0:02:
                    f0:73:28:fb:4e:da:0b:e0:a6:03:c3:a5:62:7b:ac:
                    47:83:09:8e:35:5d:52:f5:c3:a2:9a:cc:17:6b:8f:
                    11:5b:5a:b9:09:63:22:9a:b8:a4:ee:fe:f3:59:a0:
                    f5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:40:85:8D:8A:19:EA:C1:F4:F7:3E:B4:75:A6:1B:2D:0C:63:F3:18
            X509v3 Authority Key Identifier:
                keyid:9D:0F:DE:C9:F8:EE:23:DE:9A:1C:B1:F2:47:C0:DD:9D:67:05:56:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a3a2f33322d3332203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1004::/32

    Signature Algorithm: sha256WithRSAEncryption
         d6:5d:e2:03:dd:18:82:0b:d9:8d:1a:10:7a:8b:e2:89:73:0d:
         77:68:5e:ca:74:05:dc:b8:bc:bb:e8:64:3a:64:c1:93:94:aa:
         64:8b:de:be:39:71:57:88:0e:70:75:8c:1e:47:4a:1d:59:53:
         65:38:c7:84:65:0b:0a:de:d7:b1:27:c0:f1:8e:d1:f4:eb:73:
         9c:00:c3:94:43:b8:97:25:7a:c4:22:ae:47:91:f1:de:b9:19:
         48:2b:26:67:ae:62:a2:ef:0b:dc:37:79:24:69:a3:87:75:f4:
         6d:12:9c:a1:f0:cd:81:ed:53:62:05:16:23:53:45:50:d5:7c:
         dc:23:77:8f:8c:fc:80:d2:aa:01:1f:0f:69:de:5b:c1:83:eb:
         34:70:a8:cf:ab:ba:a0:2c:c6:b3:b6:a5:75:12:81:97:04:38:
         f1:3d:47:c5:6c:3d:4b:21:63:9f:09:f7:91:10:87:61:1d:f8:
         a6:5e:9d:4f:d2:fd:af:93:09:04:36:bb:5e:e7:93:ac:92:23:
         99:9f:9a:08:05:f6:4c:a8:a0:f2:a0:91:37:70:e6:a2:a7:65:
         20:c7:04:bf:75:fd:8a:d5:16:6c:29:61:a3:58:77:56:24:92:
         8f:34:b2:03:ea:94:17:f5:ae:00:d3:67:dd:4a:1e:51:fe:73:
         38:c2:67:38
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCB66HFLAZ5CqcPfy04BAIiwZBBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQwRkRFQzlGOEVFMjNERTlBMUNCMUYyNDdDMEREOUQ2
NzA1NTY2NzAeFw0yNjA4MjUxNTI0MzhaFw0yNzA4MjQxNTI5MzhaMDMxMTAvBgNV
BAMTKDNENDA4NThEOEExOUVBQzFGNEY3M0VCNDc1QTYxQjJEMEM2M0YzMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx1fFUIwxr5sd04+O13B6pgms6
szYmWYV/Ayv4dBD7jCWdKzymsZh0ImBvUv7QWWKzfavk5Ku21S3P/jIttZ1Ki+LM
Fsos+4S2+ldZ1aPt5+mQVeWaqQXFcAG057ZSJUWUJzr1xOJ1A1aAYPu6LncKLvNQ
mTt3eus/SGscMzs2tcBOYBWvmZ8Se0BLc+4hGnv4pJwmJ8ED3o5uhXWT4rJBB/oF
nDHMUY6H0XnHqYlsWkDseBjy0ZpFzrfY79IsGF7mI8h58gSOaz/1KgFcAlzAAvBz
KPtO2gvgpgPDpWJ7rEeDCY41XVL1w6KazBdrjxFbWrkJYyKauKTu/vNZoPUzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPUCFjYoZ6sH09z60daYbLQxj8xgwHwYDVR0j
BBgwFoAUnQ/eyfjuI96aHLHyR8DdnWcFVmcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlo0UGpqUHVnMmRick5hbWI1Zm0xTGdONUxpUFE5QllhUDVVdTNuWUpq
OHUvMC85RDBGREVDOUY4RUUyM0RFOUExQ0IxRjI0N0MwREQ5RDY3MDU1NjY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEMEZERUM5RjhFRTIzREU5
QTFDQjFGMjQ3QzBERDlENjcwNTU2NjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZaNFBqalB1ZzJkYnJOYW1iNWZtMUxnTjVMaVBROUJZYVA1VXUzbllKajh1LzAv
MzIzODMwMzQzYTMxMzAzMDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzYzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQQBDANBgkqhkiG9w0BAQsFAAOCAQEA1l3iA90Y
ggvZjRoQeoviiXMNd2heynQF3Li8u+hkOmTBk5SqZIvevjlxV4gOcHWMHkdKHVlT
ZTjHhGULCt7XsSfA8Y7R9OtznADDlEO4lyV6xCKuR5Hx3rkZSCsmZ65iou8L3Dd5
JGmjh3X0bRKcofDNge1TYgUWI1NFUNV83CN3j4z8gNKqAR8Pad5bwYPrNHCoz6u6
oCzGs7aldRKBlwQ48T1HxWw9SyFjnwn3kRCHYR34pl6dT9L9r5MJBDa7XueTrJIj
mZ+aCAX2TKig8qCRN3DmoqdlIMcEv3X9itUWbClho1h3ViSSjzSyA+qUF/WuANNn
3UoeUf5zOMJnOA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 18:38:01 2026 by rpki-client