Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/323830343a326438343a3a2f33322d3334203d3e20323635323837.roa
File:                     323830343a326438343a3a2f33322d3334203d3e20323635323837.roa (raw, json)
Hash identifier:          5NYdrFbpntJ46M8kP8/uGj7PCI9wKN1gxQkG1Dwbh34=
Subject key identifier:   49:01:4F:13:65:A8:37:19:32:3D:A4:DB:2E:DD:D9:90:53:44:A9:C3
Certificate issuer:       /CN=B13AB9B350577E0B11786B5653C71517FBFBD2E3
Certificate serial:       51F5D325A9ED82FACCB5C79AF43510F6EBDDDB07
Authority key identifier: B1:3A:B9:B3:50:57:7E:0B:11:78:6B:56:53:C7:15:17:FB:FB:D2:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B13AB9B350577E0B11786B5653C71517FBFBD2E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/323830343a326438343a3a2f33322d3334203d3e20323635323837.roa
Signing time:             Mon 28 Sep 2026 14:46:41 +0000
ROA not before:           Mon 28 Sep 2026 14:41:41 +0000
ROA not after:            Mon 27 Sep 2027 14:46:41 +0000
asID:                     265287
IP address blocks:        2804:2d84::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/B13AB9B350577E0B11786B5653C71517FBFBD2E3.crl
                          rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/B13AB9B350577E0B11786B5653C71517FBFBD2E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B13AB9B350577E0B11786B5653C71517FBFBD2E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 24 Oct 2026 17:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f5:d3:25:a9:ed:82:fa:cc:b5:c7:9a:f4:35:10:f6:eb:dd:db:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B13AB9B350577E0B11786B5653C71517FBFBD2E3
        Validity
            Not Before: Sep 28 14:41:41 2026 GMT
            Not After : Sep 27 14:46:41 2027 GMT
        Subject: CN=49014F1365A83719323DA4DB2EDDD9905344A9C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:18:00:a6:cd:54:2c:14:4b:08:51:5f:b3:dc:
                    bd:95:9b:39:e9:63:38:68:ed:9d:36:ab:3b:57:9b:
                    fe:fa:ed:87:a9:8e:f7:d7:b6:52:31:e6:e2:6b:0a:
                    61:ac:b4:39:47:76:05:49:15:64:05:ed:bc:a8:b0:
                    a3:d9:8b:cf:8d:78:04:bc:66:e2:61:aa:05:b6:72:
                    ab:63:46:16:1e:ab:e7:06:ff:8c:00:96:6b:cc:c6:
                    6a:21:0d:1a:88:b7:e6:84:70:81:12:cd:a0:42:2b:
                    3c:33:9f:59:98:f0:e1:b0:3d:3e:a1:c2:47:3d:1c:
                    bd:76:ec:f6:a8:7f:f1:46:cd:e0:b1:9f:16:2d:7d:
                    10:ff:52:62:3a:ce:76:c4:21:38:e9:67:59:1c:18:
                    61:b6:b1:8d:96:53:1a:b8:fb:cd:dc:b4:be:06:93:
                    49:0b:54:95:06:25:6e:3c:06:f8:f0:75:75:d6:2f:
                    1b:55:be:6d:bf:67:10:ba:0c:b1:00:7a:8d:22:c7:
                    e1:5d:43:d3:9f:b4:29:30:e8:cb:3a:c4:2d:8e:ca:
                    65:56:64:13:85:ba:b6:57:1e:e7:f8:d6:b1:74:99:
                    ea:0a:17:2f:5a:e8:4d:26:22:c0:33:e8:74:5d:aa:
                    d0:93:69:c0:72:0e:3d:b6:6d:e0:6a:cb:df:27:c2:
                    1e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:01:4F:13:65:A8:37:19:32:3D:A4:DB:2E:DD:D9:90:53:44:A9:C3
            X509v3 Authority Key Identifier:
                keyid:B1:3A:B9:B3:50:57:7E:0B:11:78:6B:56:53:C7:15:17:FB:FB:D2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/B13AB9B350577E0B11786B5653C71517FBFBD2E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B13AB9B350577E0B11786B5653C71517FBFBD2E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/323830343a326438343a3a2f33322d3334203d3e20323635323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d84::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:b9:fb:a3:1f:7a:71:f9:ed:e6:86:7a:e6:c6:c0:a9:84:a0:
         70:19:7b:8f:78:c0:5f:1a:6f:3b:d2:3d:ac:45:9f:8b:a6:3d:
         f3:a9:f1:00:7b:d9:2b:66:ab:0f:ae:04:39:c6:fd:95:75:0e:
         e9:b1:1e:6d:b8:86:0f:e6:6a:25:19:f3:5c:4b:e2:fb:ec:5e:
         5c:49:21:cb:f6:22:70:dc:2f:c4:99:49:66:ad:6a:f8:9c:17:
         51:e1:b8:d1:b1:45:bf:f3:7d:52:d2:31:8f:cc:8a:9a:09:60:
         d7:cd:d8:1f:ef:31:4a:f7:73:cf:7c:fb:09:02:05:07:95:97:
         9c:6b:16:b1:3b:d2:92:da:78:72:d8:d6:06:f9:3f:0c:4d:4f:
         e2:7b:cc:6b:6f:a5:05:1d:46:18:40:58:12:aa:e1:4f:14:39:
         3b:ae:77:35:c1:e9:4b:fc:c6:42:02:76:14:70:d2:2d:3f:d8:
         07:bb:30:8b:e8:4a:06:8a:f0:ea:8f:0d:eb:24:f3:8e:33:3e:
         ef:06:ec:a0:e8:9b:00:1a:aa:5d:69:f2:f1:c1:87:93:55:56:
         58:ba:c4:2c:3c:10:d0:a6:bf:bf:e9:05:36:2d:65:81:cd:b6:
         b8:db:08:30:a3:20:52:de:5d:94:af:eb:f2:d3:62:a4:c5:11:
         d9:ca:66:7a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUfXTJantgvrMtcea9DUQ9uvd2wcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEzQUI5QjM1MDU3N0UwQjExNzg2QjU2NTNDNzE1MTdG
QkZCRDJFMzAeFw0yNjA5MjgxNDQxNDFaFw0yNzA5MjcxNDQ2NDFaMDMxMTAvBgNV
BAMTKDQ5MDE0RjEzNjVBODM3MTkzMjNEQTREQjJFREREOTkwNTM0NEE5QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GACmzVQsFEsIUV+z3L2Vmznp
Yzho7Z02qztXm/767YepjvfXtlIx5uJrCmGstDlHdgVJFWQF7byosKPZi8+NeAS8
ZuJhqgW2cqtjRhYeq+cG/4wAlmvMxmohDRqIt+aEcIESzaBCKzwzn1mY8OGwPT6h
wkc9HL127Paof/FGzeCxnxYtfRD/UmI6znbEITjpZ1kcGGG2sY2WUxq4+83ctL4G
k0kLVJUGJW48BvjwdXXWLxtVvm2/ZxC6DLEAeo0ix+FdQ9OftCkw6Ms6xC2OymVW
ZBOFurZXHuf41rF0meoKFy9a6E0mIsAz6HRdqtCTacByDj22beBqy98nwh6NAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUSQFPE2WoNxkyPaTbLt3ZkFNEqcMwHwYDVR0j
BBgwFoAUsTq5s1BXfgsReGtWU8cVF/v70uMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1FiRkFMQm01RFk1anhYSmNKa3FYNVdYR0dqeEdkYkJSbW9UQ2hOU2s0
Z3QvMC9CMTNBQjlCMzUwNTc3RTBCMTE3ODZCNTY1M0M3MTUxN0ZCRkJEMkUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxM0FCOUIzNTA1NzdFMEIx
MTc4NkI1NjUzQzcxNTE3RkJGQkQyRTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdRYkZBTEJtNURZNWp4WEpjSmtxWDVXWEdHanhHZGJCUm1vVENoTlNrNGd0LzAv
MzIzODMwMzQzYTMyNjQzODM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM1
MzIzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQthDANBgkqhkiG9w0BAQsFAAOCAQEAT7n7ox96
cfnt5oZ65sbAqYSgcBl7j3jAXxpvO9I9rEWfi6Y986nxAHvZK2arD64EOcb9lXUO
6bEebbiGD+ZqJRnzXEvi++xeXEkhy/YicNwvxJlJZq1q+JwXUeG40bFFv/N9UtIx
j8yKmglg183YH+8xSvdzz3z7CQIFB5WXnGsWsTvSktp4ctjWBvk/DE1P4nvMa2+l
BR1GGEBYEqrhTxQ5O653NcHpS/zGQgJ2FHDSLT/YB7swi+hKBorw6o8N6yTzjjM+
7wbsoOibABqqXWny8cGHk1VWWLrELDwQ0Ka/v+kFNi1lgc22uNsIMKMgUt5dlK/r
8tNipMUR2cpmeg==
-----END CERTIFICATE-----
Generated at Sat Oct 24 11:07:03 2026 by rpki-client