Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/323830343a346362633a3330303a3a2f34382d3438203d3e20323637333838.roa
File:                     323830343a346362633a3330303a3a2f34382d3438203d3e20323637333838.roa (raw, json)
Hash identifier:          LKkj6JqMbFnt9vPElBNtuYrEwZxrEYiS3pF2ZFHVrTc=
Subject key identifier:   F6:E8:00:4A:2C:2D:D2:2C:97:78:21:C7:F7:8A:E4:DB:FE:9F:64:AD
Certificate issuer:       /CN=9D38422B911C6A812AD0D3598391A062B2B872FD
Certificate serial:       72FA6E47899905E6DD9F0B9E4B99E2772F1E788C
Authority key identifier: 9D:38:42:2B:91:1C:6A:81:2A:D0:D3:59:83:91:A0:62:B2:B8:72:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D38422B911C6A812AD0D3598391A062B2B872FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/323830343a346362633a3330303a3a2f34382d3438203d3e20323637333838.roa
Signing time:             Wed 05 Aug 2026 19:47:18 +0000
ROA not before:           Wed 05 Aug 2026 19:42:18 +0000
ROA not after:            Wed 04 Aug 2027 19:47:18 +0000
asID:                     267388
IP address blocks:        2804:4cbc:300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/9D38422B911C6A812AD0D3598391A062B2B872FD.crl
                          rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/9D38422B911C6A812AD0D3598391A062B2B872FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D38422B911C6A812AD0D3598391A062B2B872FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 18:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fa:6e:47:89:99:05:e6:dd:9f:0b:9e:4b:99:e2:77:2f:1e:78:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D38422B911C6A812AD0D3598391A062B2B872FD
        Validity
            Not Before: Aug  5 19:42:18 2026 GMT
            Not After : Aug  4 19:47:18 2027 GMT
        Subject: CN=F6E8004A2C2DD22C977821C7F78AE4DBFE9F64AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3b:44:90:91:84:37:8a:d8:ba:e6:e5:67:69:
                    e6:9e:6e:29:81:ec:b7:b0:0c:e3:56:9e:80:7f:46:
                    16:85:22:f1:34:48:70:fe:08:77:60:a5:ed:3a:55:
                    c2:57:71:c6:ca:21:80:3f:6f:97:e0:7d:65:af:13:
                    18:03:ed:a7:3f:18:11:51:ae:72:d8:2e:cb:49:34:
                    cb:f5:42:34:c7:69:cb:67:27:3b:06:01:52:98:40:
                    b8:54:d8:b5:6f:af:6a:a7:fe:7a:7f:8c:6c:4c:20:
                    86:46:2d:f8:42:ab:31:f3:e8:74:e5:30:07:1f:14:
                    f8:db:06:b8:35:1b:94:5c:f9:dd:f4:fe:f8:cb:ef:
                    64:30:aa:0d:50:6c:8d:9f:58:6a:9a:1a:7d:c1:e8:
                    12:67:b5:68:b6:44:60:a7:6d:89:58:4e:c6:a2:a8:
                    c6:06:c2:e3:47:07:f5:4a:ba:4a:e2:62:a5:be:8f:
                    3f:bd:72:df:ba:9b:76:15:f2:55:cd:87:1b:99:4c:
                    13:23:20:95:59:12:b8:6e:53:4b:19:d1:1f:2c:2e:
                    78:43:22:14:e4:1f:4c:d4:9b:55:27:a8:fb:8d:50:
                    31:ec:f6:14:dd:45:ba:54:57:7d:85:d6:7b:07:51:
                    cc:e8:a1:51:78:5b:db:14:d2:ea:df:42:00:b7:88:
                    75:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E8:00:4A:2C:2D:D2:2C:97:78:21:C7:F7:8A:E4:DB:FE:9F:64:AD
            X509v3 Authority Key Identifier:
                keyid:9D:38:42:2B:91:1C:6A:81:2A:D0:D3:59:83:91:A0:62:B2:B8:72:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/9D38422B911C6A812AD0D3598391A062B2B872FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D38422B911C6A812AD0D3598391A062B2B872FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/323830343a346362633a3330303a3a2f34382d3438203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cbc:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:83:5f:e7:d3:a9:2d:bc:10:d1:8f:43:72:75:d1:8c:06:42:
         12:6e:c4:ad:68:9e:85:f5:e0:27:79:65:26:c3:8b:f0:6e:27:
         e9:84:d9:b9:0c:ce:30:b5:91:d3:51:18:48:90:0d:47:fb:9b:
         19:10:79:88:c2:84:96:ca:1a:3e:48:27:cd:53:e5:95:da:ec:
         44:2c:29:2f:51:67:7b:a5:62:f5:5d:5a:a8:49:72:3a:f7:cb:
         1e:d5:4b:a1:32:b9:21:65:af:c5:ba:7a:38:bc:77:c0:7d:4b:
         ac:2e:d6:56:5d:7f:79:fc:3f:f5:ac:49:08:2b:8e:70:13:5d:
         b6:64:09:43:0c:e5:ce:56:20:00:d1:7e:aa:f8:32:fa:56:ba:
         d2:c9:51:3d:33:13:98:44:1f:2d:a4:33:67:09:8f:82:38:d2:
         83:2a:95:5b:b6:34:6f:8d:cf:58:9a:49:83:37:f4:bf:c4:32:
         a0:1e:c8:ec:d6:de:6f:59:98:90:76:18:07:5c:7e:d2:de:37:
         b3:9b:21:19:82:b7:78:1b:a4:6c:6b:7a:c9:69:01:d3:d2:45:
         c4:5e:95:b3:12:cd:5e:52:2e:38:cf:c3:29:ce:2d:81:df:58:
         e4:28:a2:e9:b9:c6:1f:b9:36:78:91:f2:6c:e5:c9:49:d3:17:
         3f:e1:f8:f4
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUcvpuR4mZBebdnwueS5nidy8eeIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQzODQyMkI5MTFDNkE4MTJBRDBEMzU5ODM5MUEwNjJC
MkI4NzJGRDAeFw0yNjA4MDUxOTQyMThaFw0yNzA4MDQxOTQ3MThaMDMxMTAvBgNV
BAMTKEY2RTgwMDRBMkMyREQyMkM5Nzc4MjFDN0Y3OEFFNERCRkU5RjY0QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbO0SQkYQ3iti65uVnaeaebimB
7LewDONWnoB/RhaFIvE0SHD+CHdgpe06VcJXccbKIYA/b5fgfWWvExgD7ac/GBFR
rnLYLstJNMv1QjTHactnJzsGAVKYQLhU2LVvr2qn/np/jGxMIIZGLfhCqzHz6HTl
MAcfFPjbBrg1G5Rc+d30/vjL72Qwqg1QbI2fWGqaGn3B6BJntWi2RGCnbYlYTsai
qMYGwuNHB/VKukriYqW+jz+9ct+6m3YV8lXNhxuZTBMjIJVZErhuU0sZ0R8sLnhD
IhTkH0zUm1UnqPuNUDHs9hTdRbpUV32F1nsHUczooVF4W9sU0urfQgC3iHV3AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU9ugASiwt0iyXeCHH94rk2/6fZK0wHwYDVR0j
BBgwFoAUnThCK5EcaoEq0NNZg5GgYrK4cv0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODRjUEI2S2t4Y1I5WFpvaUw4cGhvM2FZcEoxZHVyS0VzR0hEanBIYnRH
N2MvMC85RDM4NDIyQjkxMUM2QTgxMkFEMEQzNTk4MzkxQTA2MkIyQjg3MkZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEMzg0MjJCOTExQzZBODEy
QUQwRDM1OTgzOTFBMDYyQjJCODcyRkQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg0Y1BCNktreGNSOVhab2lMOHBobzNhWXBKMWR1cktFc0dIRGpwSGJ0RzdjLzAv
MzIzODMwMzQzYTM0NjM2MjYzM2EzMzMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzczMzM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBEy8AwAwDQYJKoZIhvcNAQELBQAD
ggEBAC2DX+fTqS28ENGPQ3J10YwGQhJuxK1onoX14Cd5ZSbDi/BuJ+mE2bkMzjC1
kdNRGEiQDUf7mxkQeYjChJbKGj5IJ81T5ZXa7EQsKS9RZ3ulYvVdWqhJcjr3yx7V
S6EyuSFlr8W6eji8d8B9S6wu1lZdf3n8P/WsSQgrjnATXbZkCUMM5c5WIADRfqr4
MvpWutLJUT0zE5hEHy2kM2cJj4I40oMqlVu2NG+Nz1iaSYM39L/EMqAeyOzW3m9Z
mJB2GAdcftLeN7ObIRmCt3gbpGxreslpAdPSRcRelbMSzV5SLjjPwynOLYHfWOQo
oum5xh+5NniR8mzlyUnTFz/h+PQ=
-----END CERTIFICATE-----
Generated at Mon Aug 24 04:33:38 2026 by rpki-client