Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a3a2f33322d313238203d3e20323731343239.roa
File:                     323830343a376236343a3a2f33322d313238203d3e20323731343239.roa (raw, json)
Hash identifier:          G5WZ7LDJNqExy2muCxMUQdnW9NGN4Z1ii0OOIJH2ZhM=
Subject key identifier:   4A:BC:4A:56:D5:59:B7:55:2E:7E:18:78:97:EF:49:C8:08:E6:DF:85
Certificate issuer:       /CN=FE8B6A2F97EFEE895225A82F015A599368FECF7C
Certificate serial:       23FDABD15CE5AAF238F6660D276CC374B8F0F15C
Authority key identifier: FE:8B:6A:2F:97:EF:EE:89:52:25:A8:2F:01:5A:59:93:68:FE:CF:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE8B6A2F97EFEE895225A82F015A599368FECF7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a3a2f33322d313238203d3e20323731343239.roa
Signing time:             Fri 02 Oct 2026 12:50:07 +0000
ROA not before:           Fri 02 Oct 2026 12:45:07 +0000
ROA not after:            Fri 01 Oct 2027 12:50:07 +0000
asID:                     271429
IP address blocks:        2804:7b64::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FE8B6A2F97EFEE895225A82F015A599368FECF7C.crl
                          rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FE8B6A2F97EFEE895225A82F015A599368FECF7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE8B6A2F97EFEE895225A82F015A599368FECF7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 19:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fd:ab:d1:5c:e5:aa:f2:38:f6:66:0d:27:6c:c3:74:b8:f0:f1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE8B6A2F97EFEE895225A82F015A599368FECF7C
        Validity
            Not Before: Oct  2 12:45:07 2026 GMT
            Not After : Oct  1 12:50:07 2027 GMT
        Subject: CN=4ABC4A56D559B7552E7E187897EF49C808E6DF85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:02:01:4f:ba:fb:b8:f1:f3:7d:07:40:a2:cf:
                    34:03:98:b2:ed:24:29:72:8a:ed:a3:a3:af:7d:74:
                    c4:45:8f:e0:7c:43:9f:df:9b:2a:d6:a8:39:d5:d5:
                    29:7f:47:87:0a:06:dc:4e:b9:b0:a6:ed:b1:07:43:
                    c8:b7:d6:0a:a1:99:c3:fb:36:d8:4c:bb:d4:c6:d0:
                    63:2c:c7:71:03:67:60:10:8a:58:b6:e8:4f:d4:0e:
                    25:6b:18:f2:98:b1:c3:d1:7b:95:22:28:20:21:41:
                    0c:42:fe:eb:f0:af:7f:b3:2e:3f:28:92:55:69:26:
                    a2:81:cb:c4:9f:a8:32:82:24:0e:ab:e5:b2:54:d6:
                    70:7a:56:35:ed:8f:bd:11:7c:0d:0c:4d:22:8e:d6:
                    47:6e:30:f0:16:72:2f:6b:af:5d:c3:35:9d:14:4a:
                    9a:ce:9c:88:1b:5f:e6:a1:e3:67:aa:cd:97:55:76:
                    e4:c8:80:cf:d9:84:67:c4:59:8f:fe:62:b2:c7:6e:
                    8b:1a:ea:d9:f7:4a:f1:37:83:41:d5:03:27:fb:e5:
                    c8:87:7c:c3:a5:5e:cc:7f:af:9e:e9:b5:34:4a:f0:
                    1c:c5:53:db:1d:1a:7a:72:92:b0:50:70:61:de:8c:
                    2a:b1:46:09:83:98:ac:63:55:ef:53:15:25:f1:64:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BC:4A:56:D5:59:B7:55:2E:7E:18:78:97:EF:49:C8:08:E6:DF:85
            X509v3 Authority Key Identifier:
                keyid:FE:8B:6A:2F:97:EF:EE:89:52:25:A8:2F:01:5A:59:93:68:FE:CF:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FE8B6A2F97EFEE895225A82F015A599368FECF7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE8B6A2F97EFEE895225A82F015A599368FECF7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a3a2f33322d313238203d3e20323731343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b64::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:27:34:ce:7a:1e:7c:26:6c:0b:84:d7:1a:33:14:64:29:e8:
         aa:bf:b3:c1:fc:49:de:52:91:45:0b:28:1b:35:65:ac:3a:9d:
         a2:10:33:0f:9d:7f:f8:a1:64:71:b9:28:54:b7:64:95:cf:78:
         42:4b:94:f8:4f:ff:d8:c7:89:99:69:da:39:2e:cf:23:99:ad:
         d0:8c:49:c3:12:46:2b:fb:17:9e:17:e8:c3:9f:3a:54:37:df:
         74:83:cb:2e:22:4c:c5:4e:cf:db:75:4a:93:8e:be:0b:97:9c:
         b2:fb:4a:9e:4a:8e:e0:ff:de:ec:9a:43:55:7b:84:a8:2f:c4:
         10:59:22:c8:0c:7d:c2:91:58:61:aa:3c:e5:54:81:b9:d8:ff:
         c1:10:4f:7e:ed:b7:0d:11:d8:a1:04:ed:5a:db:9f:1f:1f:f2:
         af:50:51:fe:7b:77:ce:3a:4e:4f:0f:70:73:58:aa:ab:27:08:
         90:19:27:93:9e:05:67:7a:3a:91:ae:c0:4c:57:d7:10:90:5e:
         63:9a:42:34:2e:03:f2:31:87:da:88:94:84:d2:cf:c5:33:12:
         d2:81:28:42:1c:d3:7c:07:66:81:62:11:95:a2:1e:58:36:df:
         1b:1f:76:5d:ec:17:85:61:92:02:1f:54:97:93:5d:e6:70:dc:
         72:ad:f2:1b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUI/2r0VzlqvI49mYNJ2zDdLjw8VwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU4QjZBMkY5N0VGRUU4OTUyMjVBODJGMDE1QTU5OTM2
OEZFQ0Y3QzAeFw0yNjEwMDIxMjQ1MDdaFw0yNzEwMDExMjUwMDdaMDMxMTAvBgNV
BAMTKDRBQkM0QTU2RDU1OUI3NTUyRTdFMTg3ODk3RUY0OUM4MDhFNkRGODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrAgFPuvu48fN9B0CizzQDmLLt
JClyiu2jo699dMRFj+B8Q5/fmyrWqDnV1Sl/R4cKBtxOubCm7bEHQ8i31gqhmcP7
NthMu9TG0GMsx3EDZ2AQili26E/UDiVrGPKYscPRe5UiKCAhQQxC/uvwr3+zLj8o
klVpJqKBy8SfqDKCJA6r5bJU1nB6VjXtj70RfA0MTSKO1kduMPAWci9rr13DNZ0U
SprOnIgbX+ah42eqzZdVduTIgM/ZhGfEWY/+YrLHbosa6tn3SvE3g0HVAyf75ciH
fMOlXsx/r57ptTRK8BzFU9sdGnpykrBQcGHejCqxRgmDmKxjVe9TFSXxZCGlAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUSrxKVtVZt1Uufhh4l+9JyAjm34UwHwYDVR0j
BBgwFoAU/otqL5fv7olSJagvAVpZk2j+z3wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2FoS2tnNjRIcGgzNFNWZXBGbzZkVUxaVk1HYUNMQ3FEUDRKSlBpU0x4
eDkvMC9GRThCNkEyRjk3RUZFRTg5NTIyNUE4MkYwMTVBNTk5MzY4RkVDRjdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFOEI2QTJGOTdFRkVFODk1
MjI1QTgyRjAxNUE1OTkzNjhGRUNGN0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdhaEtrZzY0SHBoMzRTVmVwRm82ZFVMWlZNR2FDTENxRFA0SkpQaVNMeHg5LzAv
MzIzODMwMzQzYTM3NjIzNjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzNDMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHtkMA0GCSqGSIb3DQEBCwUAA4IBAQCiJzTO
eh58JmwLhNcaMxRkKeiqv7PB/EneUpFFCygbNWWsOp2iEDMPnX/4oWRxuShUt2SV
z3hCS5T4T//Yx4mZado5Ls8jma3QjEnDEkYr+xeeF+jDnzpUN990g8suIkzFTs/b
dUqTjr4Ll5yy+0qeSo7g/97smkNVe4SoL8QQWSLIDH3CkVhhqjzlVIG52P/BEE9+
7bcNEdihBO1a258fH/KvUFH+e3fOOk5PD3BzWKqrJwiQGSeTngVnejqRrsBMV9cQ
kF5jmkI0LgPyMYfaiJSE0s/FMxLSgShCHNN8B2aBYhGVoh5YNt8bH3Zd7BeFYZIC
H1SXk13mcNxyrfIb
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:57:14 2026 by rpki-client