Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/323830343a313639383a343030303a3a2f33342d3334203d3e20323633323935.roa
File:                     323830343a313639383a343030303a3a2f33342d3334203d3e20323633323935.roa (raw, json)
Hash identifier:          rRZp7UBfVKPeOup7rkj+bMrhhXKVvk5V8AU2qYU0cWQ=
Subject key identifier:   65:2F:D8:49:75:2B:30:29:C9:F9:17:57:A1:C9:0F:7A:C4:76:50:1B
Certificate issuer:       /CN=4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC
Certificate serial:       77E72055964B91EE56C5CDA2CAAF26169DB87DF3
Authority key identifier: 4F:A8:AB:A4:F3:F2:5A:2D:D6:D1:94:26:2C:47:FE:40:FE:E1:81:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/323830343a313639383a343030303a3a2f33342d3334203d3e20323633323935.roa
Signing time:             Tue 07 Apr 2026 16:23:52 +0000
ROA not before:           Tue 07 Apr 2026 16:18:52 +0000
ROA not after:            Tue 06 Apr 2027 16:23:52 +0000
asID:                     263295
IP address blocks:        2804:1698:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.crl
                          rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 06:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e7:20:55:96:4b:91:ee:56:c5:cd:a2:ca:af:26:16:9d:b8:7d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC
        Validity
            Not Before: Apr  7 16:18:52 2026 GMT
            Not After : Apr  6 16:23:52 2027 GMT
        Subject: CN=652FD849752B3029C9F91757A1C90F7AC476501B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:ec:11:8a:36:a1:74:78:cd:88:8d:13:2f:
                    8c:e3:dd:c7:2a:55:99:a0:0c:d1:c8:36:93:c4:cd:
                    32:49:0f:e2:90:7c:ee:e2:93:60:b8:74:34:71:f4:
                    c4:9d:52:c1:3e:d9:f1:86:3e:a6:83:20:ee:5e:88:
                    f4:5a:a7:8c:bf:24:e3:6d:71:b0:8e:8b:4d:70:e9:
                    2c:41:df:68:39:04:84:2e:70:bc:33:74:70:c6:ae:
                    03:cb:07:88:80:35:85:28:c4:19:60:b7:e5:da:72:
                    99:49:0b:cc:9c:c7:4e:6f:23:b9:f2:5b:f2:82:3b:
                    34:07:9d:6d:9a:ec:42:a3:b8:d4:ea:ad:9d:e8:f6:
                    d8:d7:d9:f5:03:5e:79:1a:26:04:7f:7e:84:55:7d:
                    b5:5b:82:4f:e3:29:e1:c9:46:5e:f4:77:3d:44:42:
                    4a:c8:ed:21:e3:98:60:54:1f:c9:d1:09:cf:bc:dd:
                    f7:8f:99:72:8f:ff:cc:a8:72:39:db:32:92:6d:b3:
                    de:5b:6e:a6:88:5d:aa:ba:c4:62:7f:ef:ef:d4:c9:
                    b4:7a:31:5c:30:a4:5f:bb:b9:1b:64:af:4c:79:29:
                    20:81:bf:32:1c:9e:85:16:92:5b:d1:68:be:f8:fd:
                    cb:c4:0e:a2:42:9d:61:7c:06:ce:a6:40:18:53:c7:
                    fb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2F:D8:49:75:2B:30:29:C9:F9:17:57:A1:C9:0F:7A:C4:76:50:1B
            X509v3 Authority Key Identifier:
                keyid:4F:A8:AB:A4:F3:F2:5A:2D:D6:D1:94:26:2C:47:FE:40:FE:E1:81:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/323830343a313639383a343030303a3a2f33342d3334203d3e20323633323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1698:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7c:99:da:28:83:18:d9:be:0b:77:ae:6c:23:b5:87:dd:88:0e:
         b8:8e:84:20:8c:7f:59:2a:0c:0d:f2:a5:04:cd:ad:45:af:93:
         83:39:dc:69:9a:83:d8:15:ad:82:1f:0b:1a:db:06:7a:7a:ac:
         b3:3e:d6:2f:2c:00:87:25:ee:86:24:ab:ea:fb:61:5b:03:e6:
         a5:e1:b7:3f:ab:60:a1:6f:c5:82:8a:ca:0c:fb:e7:74:3a:70:
         ae:0d:1b:a5:69:3b:a5:10:eb:f2:be:2a:84:4e:0c:7d:e4:b8:
         7a:45:89:9d:4d:b1:ef:d4:bb:78:2c:2f:51:9d:40:58:37:36:
         4c:54:34:50:44:41:da:b4:d6:49:c2:82:2e:d2:d4:aa:6e:0a:
         66:f7:97:8e:da:e0:ad:bf:03:c7:1d:10:f4:bd:bc:35:4c:46:
         15:00:ca:82:da:9b:ca:8f:3d:2c:3e:5f:7a:6f:20:ee:91:ba:
         b1:36:c0:69:6e:25:a3:ca:1d:cc:a8:6b:c4:d8:3f:d1:75:1d:
         9d:76:81:8b:a8:65:87:7d:eb:ec:65:51:13:79:e6:5e:87:5f:
         78:db:df:99:ba:df:4b:19:48:a5:13:3c:4f:e1:74:b2:3c:82:
         37:1c:20:e8:fe:a4:a4:dc:0f:ec:b5:76:1e:17:b0:c6:e2:01:
         47:b5:ff:39
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUd+cgVZZLke5Wxc2iyq8mFp24ffMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZBOEFCQTRGM0YyNUEyREQ2RDE5NDI2MkM0N0ZFNDBG
RUUxODFGQzAeFw0yNjA0MDcxNjE4NTJaFw0yNzA0MDYxNjIzNTJaMDMxMTAvBgNV
BAMTKDY1MkZEODQ5NzUyQjMwMjlDOUY5MTc1N0ExQzkwRjdBQzQ3NjUwMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCru+wRijahdHjNiI0TL4zj3ccq
VZmgDNHINpPEzTJJD+KQfO7ik2C4dDRx9MSdUsE+2fGGPqaDIO5eiPRap4y/JONt
cbCOi01w6SxB32g5BIQucLwzdHDGrgPLB4iANYUoxBlgt+XacplJC8ycx05vI7ny
W/KCOzQHnW2a7EKjuNTqrZ3o9tjX2fUDXnkaJgR/foRVfbVbgk/jKeHJRl70dz1E
QkrI7SHjmGBUH8nRCc+83fePmXKP/8yocjnbMpJts95bbqaIXaq6xGJ/7+/UybR6
MVwwpF+7uRtkr0x5KSCBvzIcnoUWklvRaL74/cvEDqJCnWF8Bs6mQBhTx/v5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUZS/YSXUrMCnJ+RdXockPesR2UBswHwYDVR0j
BBgwFoAUT6irpPPyWi3W0ZQmLEf+QP7hgfwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEIzNEZiekRjRkpXemVaOUVDWDlRSHhmNzdtTDlITU1tZDliQXBodlV0
ZE4vMC80RkE4QUJBNEYzRjI1QTJERDZEMTk0MjYyQzQ3RkU0MEZFRTE4MUZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGQThBQkE0RjNGMjVBMkRE
NkQxOTQyNjJDNDdGRTQwRkVFMTgxRkMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCMzRGYnpEY0ZKV3plWjlFQ1g5UUh4Zjc3bUw5SE1NbWQ5YkFwaHZVdGROLzAv
MzIzODMwMzQzYTMxMzYzOTM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzMyMzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEFphAMA0GCSqGSIb3DQEBCwUA
A4IBAQB8mdoogxjZvgt3rmwjtYfdiA64joQgjH9ZKgwN8qUEza1Fr5ODOdxpmoPY
Fa2CHwsa2wZ6eqyzPtYvLACHJe6GJKvq+2FbA+al4bc/q2Chb8WCisoM++d0OnCu
DRulaTulEOvyviqETgx95Lh6RYmdTbHv1Lt4LC9RnUBYNzZMVDRQREHatNZJwoIu
0tSqbgpm95eO2uCtvwPHHRD0vbw1TEYVAMqC2pvKjz0sPl96byDukbqxNsBpbiWj
yh3MqGvE2D/RdR2ddoGLqGWHfevsZVETeeZeh19429+Zut9LGUilEzxP4XSyPII3
HCDo/qSk3A/stXYeF7DG4gFHtf85
-----END CERTIFICATE-----
Generated at Thu Apr 9 19:03:26 2026 by rpki-client