Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/323830343a363164383a3a2f33332d3333203d3e20323639323630.roa
File:                     323830343a363164383a3a2f33332d3333203d3e20323639323630.roa (raw, json)
Hash identifier:          XK8tpKnlDTW94UdM4s0LEhL50rBDPBaytMI56Nq2wkQ=
Subject key identifier:   36:D0:A6:D8:E1:A1:2E:88:B5:B5:59:8A:00:77:3B:6A:DA:B7:BA:DF
Certificate issuer:       /CN=C0E122946327FEE7B6C863D65951CF364128033D
Certificate serial:       3B263D78DC818E1C1325F3A6478D35F9AE01DD82
Authority key identifier: C0:E1:22:94:63:27:FE:E7:B6:C8:63:D6:59:51:CF:36:41:28:03:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E122946327FEE7B6C863D65951CF364128033D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/323830343a363164383a3a2f33332d3333203d3e20323639323630.roa
Signing time:             Thu 25 Jun 2026 14:34:25 +0000
ROA not before:           Thu 25 Jun 2026 14:29:25 +0000
ROA not after:            Thu 24 Jun 2027 14:34:25 +0000
asID:                     269260
IP address blocks:        2804:61d8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/C0E122946327FEE7B6C863D65951CF364128033D.crl
                          rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/C0E122946327FEE7B6C863D65951CF364128033D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E122946327FEE7B6C863D65951CF364128033D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 02:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:26:3d:78:dc:81:8e:1c:13:25:f3:a6:47:8d:35:f9:ae:01:dd:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0E122946327FEE7B6C863D65951CF364128033D
        Validity
            Not Before: Jun 25 14:29:25 2026 GMT
            Not After : Jun 24 14:34:25 2027 GMT
        Subject: CN=36D0A6D8E1A12E88B5B5598A00773B6ADAB7BADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:20:8b:4d:5d:79:51:01:09:08:ca:6f:38:27:
                    e8:40:ab:6c:0d:7e:f8:ef:49:15:2b:a6:a2:24:c8:
                    e5:bb:43:fb:ff:b1:c4:a8:8b:61:fd:0e:c0:77:ea:
                    ce:58:17:4f:69:0c:fb:3f:52:15:90:d8:9f:ec:2f:
                    63:04:47:6a:92:37:9f:60:98:f9:c7:bd:18:cb:b7:
                    9f:3b:b6:6c:a0:9d:3b:59:8a:2c:48:02:65:9e:3d:
                    72:c1:22:76:20:29:32:2f:dd:d3:57:fd:ad:a1:0e:
                    a9:55:00:76:97:34:4e:34:2d:74:3b:04:1e:30:28:
                    ba:9d:14:b0:fe:06:64:17:34:1e:49:fa:b4:d9:07:
                    6f:f3:e6:75:ed:f6:ab:53:e1:0a:f9:ba:fd:2b:c5:
                    99:56:26:14:4a:c0:37:f7:83:df:2b:94:43:6e:d9:
                    94:40:5b:44:88:d5:81:5c:60:70:da:80:ca:6d:87:
                    84:7d:78:66:02:36:07:4e:e4:f2:5f:cc:15:61:d2:
                    61:75:53:58:cc:af:5d:0c:82:81:df:8a:2a:80:30:
                    a5:e1:02:52:c5:41:b2:59:72:be:c9:5b:70:ac:f7:
                    8d:f9:53:41:47:b9:0c:7e:61:a0:24:fa:5c:7a:34:
                    1f:09:d2:d4:55:a1:67:60:b7:f4:31:66:52:cf:f9:
                    c9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D0:A6:D8:E1:A1:2E:88:B5:B5:59:8A:00:77:3B:6A:DA:B7:BA:DF
            X509v3 Authority Key Identifier:
                keyid:C0:E1:22:94:63:27:FE:E7:B6:C8:63:D6:59:51:CF:36:41:28:03:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/C0E122946327FEE7B6C863D65951CF364128033D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E122946327FEE7B6C863D65951CF364128033D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/323830343a363164383a3a2f33332d3333203d3e20323639323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61d8::/33

    Signature Algorithm: sha256WithRSAEncryption
         b7:91:38:6e:41:b0:54:bb:3e:50:8e:5e:23:eb:ad:88:68:b3:
         00:19:81:8b:22:f5:c5:d9:95:c8:06:a2:bf:35:ae:a6:c7:27:
         10:f4:2f:9a:88:f4:16:bf:05:5a:5d:47:ab:f8:fe:68:02:d4:
         51:c7:21:6c:cb:76:d8:76:1e:af:40:f0:54:86:75:36:37:ca:
         e3:30:18:f7:4f:b2:78:00:ef:83:de:80:b5:de:10:11:21:9c:
         1b:0c:b9:fb:1a:2c:67:ac:53:bf:15:0b:ca:2c:a0:c5:3a:e9:
         8c:c3:da:f1:f8:3d:77:46:38:b1:c8:a2:54:82:6d:10:77:f1:
         e5:78:5e:48:6e:4d:33:74:f3:aa:1c:b6:9f:34:cd:2e:8f:bf:
         b6:78:3d:04:c7:a0:08:22:45:e2:80:8b:fc:1a:f5:bb:46:e6:
         41:81:ad:a8:fd:21:cd:dd:08:4d:78:58:8e:24:ce:00:26:d8:
         3c:3f:8c:41:a4:bc:fd:ea:5e:88:35:39:e9:85:0f:02:ba:ee:
         51:ed:73:e5:c4:15:b4:79:4e:19:19:fd:79:eb:5f:1a:2e:91:
         df:e9:21:7c:3e:b9:7b:9b:3e:ef:01:b7:55:19:5e:ca:97:ce:
         0a:14:21:09:45:f8:0b:8e:6a:9b:34:5b:bf:1f:49:a9:32:a7:
         03:7d:df:30
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOyY9eNyBjhwTJfOmR401+a4B3YIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBFMTIyOTQ2MzI3RkVFN0I2Qzg2M0Q2NTk1MUNGMzY0
MTI4MDMzRDAeFw0yNjA2MjUxNDI5MjVaFw0yNzA2MjQxNDM0MjVaMDMxMTAvBgNV
BAMTKDM2RDBBNkQ4RTFBMTJFODhCNUI1NTk4QTAwNzczQjZBREFCN0JBREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvIItNXXlRAQkIym84J+hAq2wN
fvjvSRUrpqIkyOW7Q/v/scSoi2H9DsB36s5YF09pDPs/UhWQ2J/sL2MER2qSN59g
mPnHvRjLt587tmygnTtZiixIAmWePXLBInYgKTIv3dNX/a2hDqlVAHaXNE40LXQ7
BB4wKLqdFLD+BmQXNB5J+rTZB2/z5nXt9qtT4Qr5uv0rxZlWJhRKwDf3g98rlENu
2ZRAW0SI1YFcYHDagMpth4R9eGYCNgdO5PJfzBVh0mF1U1jMr10MgoHfiiqAMKXh
AlLFQbJZcr7JW3Cs9435U0FHuQx+YaAk+lx6NB8J0tRVoWdgt/QxZlLP+cn1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNtCm2OGhLoi1tVmKAHc7atq3ut8wHwYDVR0j
BBgwFoAUwOEilGMn/ue2yGPWWVHPNkEoAz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1VxUXdhOHlEVGg4emJLTnNBTnlkNnhWd2V1TEs3YVl2S3JKYWppREpz
MXUvMC9DMEUxMjI5NDYzMjdGRUU3QjZDODYzRDY1OTUxQ0YzNjQxMjgwMzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwRTEyMjk0NjMyN0ZFRTdC
NkM4NjNENjU5NTFDRjM2NDEyODAzM0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdVcVF3YTh5RFRoOHpiS05zQU55ZDZ4VndldUxLN2FZdktySmFqaURKczF1LzAv
MzIzODMwMzQzYTM2MzE2NDM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM5
MzIzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARh2AAwDQYJKoZIhvcNAQELBQADggEBALeROG5B
sFS7PlCOXiPrrYhoswAZgYsi9cXZlcgGor81rqbHJxD0L5qI9Ba/BVpdR6v4/mgC
1FHHIWzLdth2Hq9A8FSGdTY3yuMwGPdPsngA74PegLXeEBEhnBsMufsaLGesU78V
C8osoMU66YzD2vH4PXdGOLHIolSCbRB38eV4XkhuTTN086octp80zS6Pv7Z4PQTH
oAgiReKAi/wa9btG5kGBraj9Ic3dCE14WI4kzgAm2Dw/jEGkvP3qXog1OemFDwK6
7lHtc+XEFbR5ThkZ/XnrXxoukd/pIXw+uXubPu8Bt1UZXsqXzgoUIQlF+AuOaps0
W78fSakypwN93zA=
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:02:24 2026 by rpki-client