Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/323830343a326231633a3a2f33322d3438203d3e20323635313335.roa
File:                     323830343a326231633a3a2f33322d3438203d3e20323635313335.roa (raw, json)
Hash identifier:          3kwtjwOC0+sui5rZ4ESI3KArHGYi9BXjyVrg36QW9g0=
Subject key identifier:   BA:02:36:46:2F:A3:28:6F:B6:89:07:08:B9:43:49:7B:9A:B0:70:3C
Certificate issuer:       /CN=3D36604D4F0F275D1906B90B003E6D3400D8B6D6
Certificate serial:       3847724716886355825E1464E020F9D15A36CF0D
Authority key identifier: 3D:36:60:4D:4F:0F:27:5D:19:06:B9:0B:00:3E:6D:34:00:D8:B6:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D36604D4F0F275D1906B90B003E6D3400D8B6D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/323830343a326231633a3a2f33322d3438203d3e20323635313335.roa
Signing time:             Mon 17 Aug 2026 18:21:37 +0000
ROA not before:           Mon 17 Aug 2026 18:16:37 +0000
ROA not after:            Mon 16 Aug 2027 18:21:37 +0000
asID:                     265135
IP address blocks:        2804:2b1c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/3D36604D4F0F275D1906B90B003E6D3400D8B6D6.crl
                          rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/3D36604D4F0F275D1906B90B003E6D3400D8B6D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D36604D4F0F275D1906B90B003E6D3400D8B6D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 16:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:47:72:47:16:88:63:55:82:5e:14:64:e0:20:f9:d1:5a:36:cf:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D36604D4F0F275D1906B90B003E6D3400D8B6D6
        Validity
            Not Before: Aug 17 18:16:37 2026 GMT
            Not After : Aug 16 18:21:37 2027 GMT
        Subject: CN=BA0236462FA3286FB6890708B943497B9AB0703C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:28:6c:f6:4a:80:3f:a3:f1:a4:b4:71:61:ed:
                    b1:53:f1:2a:33:de:9e:34:bf:c3:1f:44:b6:13:84:
                    ed:af:0d:8e:75:c8:a9:54:92:d1:d7:ea:be:27:d7:
                    fe:d8:85:f1:72:5e:4d:ce:bf:57:43:d1:45:5a:e9:
                    23:47:5b:f3:a4:e6:c7:fb:ed:b2:72:7a:1b:f8:c3:
                    58:d4:51:d3:48:81:36:5c:63:b8:69:dc:c8:c7:86:
                    aa:7e:56:98:70:bd:fa:1c:e1:af:1a:20:c7:9b:2c:
                    c0:b4:e2:7b:99:c2:2f:9d:70:f6:71:09:0f:f8:57:
                    63:8e:92:07:fc:94:17:a3:e3:dc:dc:6e:24:7c:ca:
                    92:32:ea:c7:b9:3a:72:55:6e:24:11:34:ee:b7:87:
                    6d:68:a2:88:f9:52:88:9a:27:ed:82:27:9a:d8:45:
                    e4:be:76:c2:2a:85:3f:ef:02:63:53:7b:ee:24:e5:
                    d1:f6:5f:f9:03:0f:36:b1:b6:77:ba:15:cb:bd:91:
                    3b:93:79:4e:e1:12:cb:b5:dc:c1:09:bc:e7:fe:35:
                    39:f4:11:0b:65:6c:2d:21:2a:a8:ca:01:8f:5f:d7:
                    52:da:81:ed:a7:61:6f:0d:e0:34:51:88:f2:38:4e:
                    c1:f5:fa:97:31:12:a2:5e:c9:09:e7:5c:95:64:be:
                    5d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:02:36:46:2F:A3:28:6F:B6:89:07:08:B9:43:49:7B:9A:B0:70:3C
            X509v3 Authority Key Identifier:
                keyid:3D:36:60:4D:4F:0F:27:5D:19:06:B9:0B:00:3E:6D:34:00:D8:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/3D36604D4F0F275D1906B90B003E6D3400D8B6D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D36604D4F0F275D1906B90B003E6D3400D8B6D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/323830343a326231633a3a2f33322d3438203d3e20323635313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:7d:a7:4e:01:d7:09:ee:59:1d:b6:b0:26:2b:1b:a3:b6:33:
         64:26:39:13:c2:77:46:0e:ce:59:97:f9:c8:2d:ec:82:2d:88:
         ea:1d:74:66:63:83:b6:2e:67:f8:2c:74:34:fc:11:83:58:7c:
         93:73:6c:ee:f6:a6:60:a1:c9:d9:ac:d4:13:4f:5d:24:0f:91:
         e3:f0:11:e1:a5:9f:06:25:b6:6d:95:6b:a3:e4:e9:b7:78:a0:
         9a:d9:4f:b8:f1:5f:d5:b6:2b:61:4b:2a:79:d4:dc:32:8b:8a:
         0c:db:86:68:99:99:8b:57:91:db:6d:aa:33:89:73:b9:9d:0f:
         b5:96:9a:f6:70:e1:a5:c7:2a:9a:1e:07:04:aa:35:ed:6d:6a:
         e9:9a:72:3a:89:34:0f:75:80:a2:ba:4b:dd:4f:19:f5:2a:26:
         7c:91:dc:a5:7b:d0:b0:50:ff:97:39:87:1d:1c:a2:df:93:1a:
         b5:0b:c9:0a:8f:84:55:b2:2b:07:8c:e2:a2:46:a9:b9:62:36:
         ba:26:4b:ff:76:af:83:0b:ad:d5:95:a2:44:ee:de:07:a6:8a:
         48:24:a1:f9:6d:06:2f:64:82:b6:8d:1c:05:2b:48:16:c6:41:
         2f:94:23:26:c8:69:d1:80:0e:5d:a7:e1:db:58:3f:90:b6:dc:
         56:d5:f6:47
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOEdyRxaIY1WCXhRk4CD50Vo2zw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QzNjYwNEQ0RjBGMjc1RDE5MDZCOTBCMDAzRTZEMzQw
MEQ4QjZENjAeFw0yNjA4MTcxODE2MzdaFw0yNzA4MTYxODIxMzdaMDMxMTAvBgNV
BAMTKEJBMDIzNjQ2MkZBMzI4NkZCNjg5MDcwOEI5NDM0OTdCOUFCMDcwM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMKGz2SoA/o/GktHFh7bFT8Soz
3p40v8MfRLYThO2vDY51yKlUktHX6r4n1/7YhfFyXk3Ov1dD0UVa6SNHW/Ok5sf7
7bJyehv4w1jUUdNIgTZcY7hp3MjHhqp+Vphwvfoc4a8aIMebLMC04nuZwi+dcPZx
CQ/4V2OOkgf8lBej49zcbiR8ypIy6se5OnJVbiQRNO63h21oooj5UoiaJ+2CJ5rY
ReS+dsIqhT/vAmNTe+4k5dH2X/kDDzaxtne6Fcu9kTuTeU7hEsu13MEJvOf+NTn0
EQtlbC0hKqjKAY9f11Lage2nYW8N4DRRiPI4TsH1+pcxEqJeyQnnXJVkvl17AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUugI2Ri+jKG+2iQcIuUNJe5qwcDwwHwYDVR0j
BBgwFoAUPTZgTU8PJ10ZBrkLAD5tNADYttYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0Nkamo5U2ttWVVWZHV1TFNkZjlRblNXcE5kYW0zdEJXNmVwYjNMaTJ6
aGYvMC8zRDM2NjA0RDRGMEYyNzVEMTkwNkI5MEIwMDNFNkQzNDAwRDhCNkQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEMzY2MDRENEYwRjI3NUQx
OTA2QjkwQjAwM0U2RDM0MDBEOEI2RDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdDZGpqOVNrbVlVVmR1dUxTZGY5UW5TV3BOZGFtM3RCVzZlcGIzTGkyemhmLzAv
MzIzODMwMzQzYTMyNjIzMTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzEzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQrHDANBgkqhkiG9w0BAQsFAAOCAQEAKH2nTgHX
Ce5ZHbawJisbo7YzZCY5E8J3Rg7OWZf5yC3sgi2I6h10ZmODti5n+Cx0NPwRg1h8
k3Ns7vamYKHJ2azUE09dJA+R4/AR4aWfBiW2bZVro+Tpt3igmtlPuPFf1bYrYUsq
edTcMouKDNuGaJmZi1eR222qM4lzuZ0PtZaa9nDhpccqmh4HBKo17W1q6ZpyOok0
D3WAorpL3U8Z9SomfJHcpXvQsFD/lzmHHRyi35MatQvJCo+EVbIrB4ziokapuWI2
uiZL/3avgwut1ZWiRO7eB6aKSCSh+W0GL2SCto0cBStIFsZBL5QjJshp0YAOXafh
21g/kLbcVtX2Rw==
-----END CERTIFICATE-----
Generated at Sun Aug 23 07:25:22 2026 by rpki-client