Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a3a2f33322d3333203d3e20323731353536.roa
File:                     323830343a376435633a3a2f33322d3333203d3e20323731353536.roa (raw, json)
Hash identifier:          FAI8yCgD4ONKDMj7cEmreP3JeDtAwfZdSGxy+WM4HFs=
Subject key identifier:   38:69:EF:CE:6F:99:71:E4:7E:4F:7E:59:4E:19:2E:6D:DC:B9:18:FF
Certificate issuer:       /CN=735141A4993B884A90AA91046F802625E5FCE89A
Certificate serial:       3B956D308252B2081085FF80C75C0D34D50DA176
Authority key identifier: 73:51:41:A4:99:3B:88:4A:90:AA:91:04:6F:80:26:25:E5:FC:E8:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/735141A4993B884A90AA91046F802625E5FCE89A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a3a2f33322d3333203d3e20323731353536.roa
Signing time:             Wed 29 Jul 2026 18:17:20 +0000
ROA not before:           Wed 29 Jul 2026 18:12:20 +0000
ROA not after:            Wed 28 Jul 2027 18:17:20 +0000
asID:                     271556
IP address blocks:        2804:7d5c::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/735141A4993B884A90AA91046F802625E5FCE89A.crl
                          rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/735141A4993B884A90AA91046F802625E5FCE89A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/735141A4993B884A90AA91046F802625E5FCE89A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:95:6d:30:82:52:b2:08:10:85:ff:80:c7:5c:0d:34:d5:0d:a1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735141A4993B884A90AA91046F802625E5FCE89A
        Validity
            Not Before: Jul 29 18:12:20 2026 GMT
            Not After : Jul 28 18:17:20 2027 GMT
        Subject: CN=3869EFCE6F9971E47E4F7E594E192E6DDCB918FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:82:de:36:ba:b8:01:94:6f:0f:50:83:77:
                    41:d7:38:2d:a9:f4:30:33:66:c4:ae:c9:82:e4:21:
                    66:4a:06:e5:db:9c:0c:0d:cc:2d:b9:ca:b4:59:1f:
                    84:da:45:42:d6:7b:73:cf:c4:9b:a7:57:f7:b0:cd:
                    92:33:8b:19:62:dc:c0:fa:c8:7e:e2:0d:02:86:58:
                    fe:27:3c:c2:87:c4:cb:cc:94:7b:e3:d5:8b:6e:b4:
                    bb:a9:d6:19:d2:ab:b8:83:43:da:76:96:c8:bc:7d:
                    27:d1:df:86:ed:aa:77:56:0c:fc:c2:1d:c3:7c:ff:
                    43:68:c6:16:6c:70:6b:8d:de:e2:e1:7d:66:b9:fa:
                    54:38:ff:d3:88:88:8f:7b:ab:20:da:09:db:e7:d1:
                    78:a5:c9:80:fc:0d:11:f1:9e:11:2a:d4:75:50:cf:
                    f2:8d:3e:18:71:75:51:d1:24:09:30:6a:73:6a:71:
                    91:8e:37:6b:7f:cc:61:40:93:2e:a2:0a:52:62:fd:
                    f4:ea:7b:86:b5:1c:cf:7c:b6:a5:d1:21:51:7d:17:
                    2b:0c:5a:b6:c2:c7:f8:83:f3:78:8f:4d:eb:bd:b3:
                    c9:6e:17:a3:37:34:c8:bb:8f:1c:d8:d2:07:4e:3e:
                    7c:7b:35:5b:b8:84:f9:84:60:b4:06:77:f4:e5:b9:
                    4e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:69:EF:CE:6F:99:71:E4:7E:4F:7E:59:4E:19:2E:6D:DC:B9:18:FF
            X509v3 Authority Key Identifier:
                keyid:73:51:41:A4:99:3B:88:4A:90:AA:91:04:6F:80:26:25:E5:FC:E8:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/735141A4993B884A90AA91046F802625E5FCE89A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/735141A4993B884A90AA91046F802625E5FCE89A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/323830343a376435633a3a2f33322d3333203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:8b:02:21:01:35:fa:f2:a0:f4:07:24:80:68:08:c2:22:42:
         9e:5f:98:e1:9a:2e:f6:24:06:65:3f:dd:48:f6:90:74:28:33:
         87:ef:e6:9b:32:a3:74:2e:48:c7:28:ae:c9:14:04:bb:e7:b2:
         8b:af:91:81:7a:b2:72:59:5b:b5:89:3b:d8:7f:fb:37:bc:3a:
         98:5b:1f:03:ae:df:50:fd:fe:9e:0d:61:bd:e1:cb:78:e6:e1:
         83:4c:d9:00:c7:20:29:1f:62:cb:40:62:f6:b4:d9:11:30:db:
         2d:a6:f6:62:f7:02:2b:b6:df:c6:68:bb:03:f0:42:e5:a3:a7:
         a3:26:b8:4c:bd:36:4d:87:6c:42:be:bd:24:d3:54:42:de:87:
         fc:a0:ce:73:32:2e:ad:42:69:5b:47:e2:3e:5a:8b:18:17:09:
         70:25:47:24:0a:61:c2:57:97:4a:03:21:6b:72:da:98:cd:14:
         07:63:fe:f1:9d:e9:bf:ef:80:13:29:d6:10:70:06:56:c8:36:
         d3:b5:a9:30:e9:f4:d3:8c:97:64:df:a7:cd:e5:39:62:ee:0d:
         be:dd:05:a6:cd:83:95:63:70:0c:53:97:9c:fe:46:c0:a5:ec:
         b0:be:aa:da:e5:38:36:55:86:aa:f4:18:ba:af:4e:b6:6b:7c:
         4c:05:11:30
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUO5VtMIJSsggQhf+Ax1wNNNUNoXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM1MTQxQTQ5OTNCODg0QTkwQUE5MTA0NkY4MDI2MjVF
NUZDRTg5QTAeFw0yNjA3MjkxODEyMjBaFw0yNzA3MjgxODE3MjBaMDMxMTAvBgNV
BAMTKDM4NjlFRkNFNkY5OTcxRTQ3RTRGN0U1OTRFMTkyRTZERENCOTE4RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh2ILeNrq4AZRvD1CDd0HXOC2p
9DAzZsSuyYLkIWZKBuXbnAwNzC25yrRZH4TaRULWe3PPxJunV/ewzZIzixli3MD6
yH7iDQKGWP4nPMKHxMvMlHvj1YtutLup1hnSq7iDQ9p2lsi8fSfR34btqndWDPzC
HcN8/0NoxhZscGuN3uLhfWa5+lQ4/9OIiI97qyDaCdvn0XilyYD8DRHxnhEq1HVQ
z/KNPhhxdVHRJAkwanNqcZGON2t/zGFAky6iClJi/fTqe4a1HM98tqXRIVF9FysM
WrbCx/iD83iPTeu9s8luF6M3NMi7jxzY0gdOPnx7NVu4hPmEYLQGd/TluU6fAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUOGnvzm+ZceR+T35ZThkubdy5GP8wHwYDVR0j
BBgwFoAUc1FBpJk7iEqQqpEEb4AmJeX86JowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm91WkFaZEF0UTNZTGFqRjU2NndoWDdMZGplUEJkdldLZFM1YXJjWXB0
ZFgvMC83MzUxNDFBNDk5M0I4ODRBOTBBQTkxMDQ2RjgwMjYyNUU1RkNFODlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczNTE0MUE0OTkzQjg4NEE5
MEFBOTEwNDZGODAyNjI1RTVGQ0U4OUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZvdVpBWmRBdFEzWUxhakY1NjZ3aFg3TGRqZVBCZHZXS2RTNWFyY1lwdGRYLzAv
MzIzODMwMzQzYTM3NjQzNTYzM2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNzMx
MzUzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR9XDANBgkqhkiG9w0BAQsFAAOCAQEAAYsCIQE1
+vKg9AckgGgIwiJCnl+Y4Zou9iQGZT/dSPaQdCgzh+/mmzKjdC5IxyiuyRQEu+ey
i6+RgXqycllbtYk72H/7N7w6mFsfA67fUP3+ng1hveHLeObhg0zZAMcgKR9iy0Bi
9rTZETDbLab2YvcCK7bfxmi7A/BC5aOnoya4TL02TYdsQr69JNNUQt6H/KDOczIu
rUJpW0fiPlqLGBcJcCVHJAphwleXSgMha3LamM0UB2P+8Z3pv++AEynWEHAGVsg2
07WpMOn004yXZN+nzeU5Yu4Nvt0Fps2DlWNwDFOXnP5GwKXssL6q2uU4NlWGqvQY
uq9Otmt8TAURMA==
-----END CERTIFICATE-----
Generated at Mon Aug 24 13:25:47 2026 by rpki-client