Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a313830303a3a2f34302d3430203d3e20323637333239.roa
File:                     323830343a346263383a313830303a3a2f34302d3430203d3e20323637333239.roa (raw, json)
Hash identifier:          8YqEEY8zbMH8COiIHYhQXoKarODsONFLaUJG6r5NGWw=
Subject key identifier:   30:8C:8A:4A:8D:E0:00:51:AE:83:97:E9:10:E4:87:6D:A5:52:B4:77
Certificate issuer:       /CN=2FA449690518010383B75A40A62E7FA858639347
Certificate serial:       579C1EBDA562A28EB397D9DA438CCBA0191F4940
Authority key identifier: 2F:A4:49:69:05:18:01:03:83:B7:5A:40:A6:2E:7F:A8:58:63:93:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA449690518010383B75A40A62E7FA858639347.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a313830303a3a2f34302d3430203d3e20323637333239.roa
Signing time:             Tue 11 Aug 2026 17:33:48 +0000
ROA not before:           Tue 11 Aug 2026 17:28:48 +0000
ROA not after:            Tue 10 Aug 2027 17:33:48 +0000
asID:                     267329
IP address blocks:        2804:4bc8:1800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/2FA449690518010383B75A40A62E7FA858639347.crl
                          rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/2FA449690518010383B75A40A62E7FA858639347.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA449690518010383B75A40A62E7FA858639347.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 00:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9c:1e:bd:a5:62:a2:8e:b3:97:d9:da:43:8c:cb:a0:19:1f:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FA449690518010383B75A40A62E7FA858639347
        Validity
            Not Before: Aug 11 17:28:48 2026 GMT
            Not After : Aug 10 17:33:48 2027 GMT
        Subject: CN=308C8A4A8DE00051AE8397E910E4876DA552B477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bc:8b:35:06:42:53:99:f0:05:91:ad:30:bf:
                    1b:90:f4:c0:49:50:8b:65:e2:0e:7f:f8:af:10:a3:
                    57:17:04:1b:0c:53:1d:b2:af:fe:d1:0f:a2:39:7f:
                    e0:b4:e8:cc:21:54:a7:46:54:12:23:9e:46:a7:9a:
                    69:c8:84:e7:8c:4b:9f:dc:d3:7e:35:eb:9c:38:cf:
                    fe:8d:2d:9d:e5:15:74:a5:c5:70:90:3a:f2:9b:35:
                    ea:81:0d:ab:89:70:aa:8b:e9:92:06:f0:f5:67:5a:
                    e9:a1:2e:c9:3f:d0:3a:2f:01:5e:42:bd:4c:04:e8:
                    5e:07:0f:f6:72:b8:0e:c7:63:ba:3a:43:50:77:48:
                    54:44:41:65:e9:88:81:b0:bc:2b:56:a0:78:21:72:
                    c7:1c:ec:8e:53:fa:97:9e:5b:ac:ba:73:f8:3a:75:
                    d2:fc:99:36:21:a9:9c:be:3f:0a:3a:0e:6b:24:ca:
                    38:0f:9c:4d:00:f0:bc:be:03:c8:07:6a:45:92:7a:
                    63:7e:59:9e:76:76:e8:77:c2:d7:cb:c2:59:45:66:
                    90:c3:39:18:b1:90:9f:07:79:ef:8b:85:12:20:b7:
                    01:5e:d8:c8:b0:cf:15:1c:6b:7c:73:fd:a8:ed:f9:
                    3f:94:a8:2f:41:15:97:7d:ca:d0:70:67:cd:2b:2b:
                    72:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8C:8A:4A:8D:E0:00:51:AE:83:97:E9:10:E4:87:6D:A5:52:B4:77
            X509v3 Authority Key Identifier:
                keyid:2F:A4:49:69:05:18:01:03:83:B7:5A:40:A6:2E:7F:A8:58:63:93:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/2FA449690518010383B75A40A62E7FA858639347.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA449690518010383B75A40A62E7FA858639347.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a313830303a3a2f34302d3430203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc8:1800::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:3f:b5:b3:c1:12:76:c5:9b:6b:c2:69:ed:d0:b1:2c:10:92:
         18:dc:aa:a8:e5:1a:6f:d3:da:74:e5:18:39:54:a1:9d:c9:9d:
         39:35:fe:32:26:6e:10:55:c0:c3:ac:68:55:53:71:29:81:08:
         59:20:be:4a:8b:1b:e1:91:0c:5a:45:a6:e8:f7:6d:21:cd:86:
         1f:7d:5c:cd:66:cd:45:cc:db:89:99:a2:cf:4e:eb:6c:46:7a:
         cd:ab:9b:d5:dd:f3:60:6c:89:93:e6:cd:ef:64:22:f1:9d:8e:
         01:bc:55:db:ed:33:11:95:1c:e8:11:0d:7f:9d:17:19:b7:75:
         17:21:ca:bf:cd:56:0e:27:72:90:07:88:92:f8:34:30:b4:de:
         8f:5e:eb:ae:0e:ba:32:1f:86:d0:a3:f2:cf:6f:ec:ab:13:ce:
         28:29:6a:56:bf:85:cc:cb:e6:3a:37:8e:f8:62:f7:32:d0:dd:
         91:45:78:85:8f:da:f2:f9:e1:6f:6b:7f:6f:50:b9:b3:68:8f:
         76:cd:94:92:b5:71:44:f3:af:c5:f7:83:ed:f1:0f:3d:5a:bd:
         ab:07:c5:1c:48:4d:f3:93:67:58:cd:c3:68:08:89:ca:d0:70:
         b9:53:0b:5c:a3:6d:24:62:6b:cf:eb:ec:ff:d9:b1:3b:76:fb:
         6d:16:e9:5c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUV5wevaVioo6zl9naQ4zLoBkfSUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZBNDQ5NjkwNTE4MDEwMzgzQjc1QTQwQTYyRTdGQTg1
ODYzOTM0NzAeFw0yNjA4MTExNzI4NDhaFw0yNzA4MTAxNzMzNDhaMDMxMTAvBgNV
BAMTKDMwOEM4QTRBOERFMDAwNTFBRTgzOTdFOTEwRTQ4NzZEQTU1MkI0NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOvIs1BkJTmfAFka0wvxuQ9MBJ
UItl4g5/+K8Qo1cXBBsMUx2yr/7RD6I5f+C06MwhVKdGVBIjnkanmmnIhOeMS5/c
034165w4z/6NLZ3lFXSlxXCQOvKbNeqBDauJcKqL6ZIG8PVnWumhLsk/0DovAV5C
vUwE6F4HD/ZyuA7HY7o6Q1B3SFREQWXpiIGwvCtWoHghcscc7I5T+peeW6y6c/g6
ddL8mTYhqZy+Pwo6DmskyjgPnE0A8Ly+A8gHakWSemN+WZ52duh3wtfLwllFZpDD
ORixkJ8Hee+LhRIgtwFe2MiwzxUca3xz/ajt+T+UqC9BFZd9ytBwZ80rK3KTAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUMIyKSo3gAFGug5fpEOSHbaVStHcwHwYDVR0j
BBgwFoAUL6RJaQUYAQODt1pApi5/qFhjk0cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0VTRmlBSGh2WTd5aTFDZjlGNXFxc1I0RnluUTRuVHlXS3duUURudEEy
Y1AvMC8yRkE0NDk2OTA1MTgwMTAzODNCNzVBNDBBNjJFN0ZBODU4NjM5MzQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGQTQ0OTY5MDUxODAxMDM4
M0I3NUE0MEE2MkU3RkE4NTg2MzkzNDcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFU0ZpQUhodlk3eWkxQ2Y5RjVxcXNSNEZ5blE0blR5V0t3blFEbnRBMmNQLzAv
MzIzODMwMzQzYTM0NjI2MzM4M2EzMTM4MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNzMzMzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgES8gYMA0GCSqGSIb3DQEBCwUA
A4IBAQA0P7WzwRJ2xZtrwmnt0LEsEJIY3Kqo5Rpv09p05Rg5VKGdyZ05Nf4yJm4Q
VcDDrGhVU3EpgQhZIL5KixvhkQxaRabo920hzYYffVzNZs1FzNuJmaLPTutsRnrN
q5vV3fNgbImT5s3vZCLxnY4BvFXb7TMRlRzoEQ1/nRcZt3UXIcq/zVYOJ3KQB4iS
+DQwtN6PXuuuDroyH4bQo/LPb+yrE84oKWpWv4XMy+Y6N474Yvcy0N2RRXiFj9ry
+eFva39vULmzaI92zZSStXFE86/F94Pt8Q89Wr2rB8UcSE3zk2dYzcNoCInK0HC5
Uwtco20kYmvP6+z/2bE7dvttFulc
-----END CERTIFICATE-----
Generated at Tue Aug 25 11:06:40 2026 by rpki-client