Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a343030303a3a2f33342d3334203d3e20323732313832.roa
File:                     323830343a383333303a343030303a3a2f33342d3334203d3e20323732313832.roa (raw, json)
Hash identifier:          1eSqGGpXnKF9U1ExnFcE9+qq0RXM0Ju8Bn6aKqjrXZM=
Subject key identifier:   03:CC:EB:86:10:29:A4:BE:DA:2C:44:4B:23:A6:89:25:64:6F:07:77
Certificate issuer:       /CN=E5E7689F4C91E9921A604490C3CDA10A32E83B10
Certificate serial:       25DD1A757762567ECC9668DB6BECFD83B09F026B
Authority key identifier: E5:E7:68:9F:4C:91:E9:92:1A:60:44:90:C3:CD:A1:0A:32:E8:3B:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5E7689F4C91E9921A604490C3CDA10A32E83B10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a343030303a3a2f33342d3334203d3e20323732313832.roa
Signing time:             Mon 14 Sep 2026 23:15:10 +0000
ROA not before:           Mon 14 Sep 2026 23:10:10 +0000
ROA not after:            Mon 13 Sep 2027 23:15:10 +0000
asID:                     272182
IP address blocks:        2804:8330:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/E5E7689F4C91E9921A604490C3CDA10A32E83B10.crl
                          rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/E5E7689F4C91E9921A604490C3CDA10A32E83B10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5E7689F4C91E9921A604490C3CDA10A32E83B10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 00:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:dd:1a:75:77:62:56:7e:cc:96:68:db:6b:ec:fd:83:b0:9f:02:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E7689F4C91E9921A604490C3CDA10A32E83B10
        Validity
            Not Before: Sep 14 23:10:10 2026 GMT
            Not After : Sep 13 23:15:10 2027 GMT
        Subject: CN=03CCEB861029A4BEDA2C444B23A68925646F0777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fd:c7:a4:07:77:52:65:c7:3d:14:35:f1:03:
                    e6:d4:be:f0:c6:73:2b:07:81:61:68:c0:53:f9:85:
                    ab:e5:9b:69:3e:20:e0:7b:c5:ee:6b:9d:b4:6f:60:
                    0c:31:c3:b3:b9:01:17:6b:b8:e6:43:e4:51:fc:20:
                    5f:5e:95:5f:72:a9:c7:d1:a8:6d:ff:cd:33:8f:88:
                    ca:b7:d8:d2:c6:7c:ee:98:2f:8a:35:86:af:6d:f5:
                    91:e2:ba:6f:2d:49:5b:ac:01:61:3f:84:34:ad:a7:
                    78:50:8e:48:74:21:40:73:99:be:4e:87:1c:0c:74:
                    fc:26:32:96:22:01:6d:21:cc:46:d5:1c:45:53:04:
                    99:d5:2b:b7:6d:76:1c:61:fc:0c:ca:84:5f:c1:6a:
                    1f:be:4e:cd:59:d4:93:bf:1b:57:46:f9:ce:7e:95:
                    29:94:25:04:1b:89:9d:83:23:0d:b1:e0:f3:c4:45:
                    42:e8:02:62:a4:70:7e:5a:63:2f:58:ee:cd:54:37:
                    d6:20:cc:93:67:bd:0e:3d:ab:82:a1:c5:88:b5:a8:
                    bd:47:4e:c7:2d:cd:00:e5:fc:61:51:0b:01:1f:ef:
                    ef:9d:58:71:27:ec:fc:0c:10:32:ee:3f:f5:90:be:
                    81:cc:5b:c9:24:39:06:fa:7d:36:4f:49:8c:19:75:
                    6f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CC:EB:86:10:29:A4:BE:DA:2C:44:4B:23:A6:89:25:64:6F:07:77
            X509v3 Authority Key Identifier:
                keyid:E5:E7:68:9F:4C:91:E9:92:1A:60:44:90:C3:CD:A1:0A:32:E8:3B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/E5E7689F4C91E9921A604490C3CDA10A32E83B10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5E7689F4C91E9921A604490C3CDA10A32E83B10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a343030303a3a2f33342d3334203d3e20323732313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8330:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         21:04:f0:de:3e:4c:07:8a:8e:86:60:53:e8:0d:b0:f1:97:04:
         53:38:4f:11:0a:df:61:64:06:bf:35:c6:b4:49:f9:96:c9:df:
         ad:ff:2e:bc:1f:03:6d:ab:ac:f6:10:de:78:03:4e:92:3c:9b:
         1c:fb:dc:26:da:05:18:06:7c:4d:fa:73:9f:66:bb:27:b0:66:
         51:bd:09:68:c6:2d:b1:81:96:29:55:51:01:cb:90:eb:a1:c9:
         25:77:a6:a3:12:da:dd:99:ff:85:09:58:74:8e:57:96:e9:11:
         e9:7c:5a:ae:e0:75:96:90:f9:59:23:ef:3e:e8:a9:4d:c8:d0:
         ec:bf:e9:19:bb:86:40:25:69:cd:f9:55:7e:e8:0b:7f:3a:33:
         2f:e1:22:9b:f2:e8:62:0b:fd:10:17:02:6c:ca:8c:7a:81:80:
         55:34:bd:f9:53:03:f8:65:ab:a3:c7:aa:b4:d3:75:26:5f:e2:
         3d:19:ec:33:d4:87:3b:1b:b4:7f:b6:3d:4d:d6:c1:11:84:69:
         a3:89:0c:aa:db:48:dc:a1:ad:61:76:60:46:0e:e0:3b:c3:d1:
         c5:e4:ba:13:86:53:c1:07:77:ad:09:57:14:f6:47:36:bf:d8:
         04:de:b5:d1:28:dd:9b:4e:a8:b8:f2:bd:bd:7f:eb:42:66:b8:
         2c:52:61:76
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJd0adXdiVn7Mlmjba+z9g7CfAmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVFNzY4OUY0QzkxRTk5MjFBNjA0NDkwQzNDREExMEEz
MkU4M0IxMDAeFw0yNjA5MTQyMzEwMTBaFw0yNzA5MTMyMzE1MTBaMDMxMTAvBgNV
BAMTKDAzQ0NFQjg2MTAyOUE0QkVEQTJDNDQ0QjIzQTY4OTI1NjQ2RjA3NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb/cekB3dSZcc9FDXxA+bUvvDG
cysHgWFowFP5havlm2k+IOB7xe5rnbRvYAwxw7O5ARdruOZD5FH8IF9elV9yqcfR
qG3/zTOPiMq32NLGfO6YL4o1hq9t9ZHium8tSVusAWE/hDStp3hQjkh0IUBzmb5O
hxwMdPwmMpYiAW0hzEbVHEVTBJnVK7dtdhxh/AzKhF/Bah++Ts1Z1JO/G1dG+c5+
lSmUJQQbiZ2DIw2x4PPERULoAmKkcH5aYy9Y7s1UN9YgzJNnvQ49q4KhxYi1qL1H
TsctzQDl/GFRCwEf7++dWHEn7PwMEDLuP/WQvoHMW8kkOQb6fTZPSYwZdW+BAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUA8zrhhAppL7aLERLI6aJJWRvB3cwHwYDVR0j
BBgwFoAU5edon0yR6ZIaYESQw82hCjLoOxAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFR6ZEdLVVNaOXZCdktYdko1MWd4VnI5Y1dQR01BUEtYRjNIYWJvY2tG
UGcvMC9FNUU3Njg5RjRDOTFFOTkyMUE2MDQ0OTBDM0NEQTEwQTMyRTgzQjEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1RTc2ODlGNEM5MUU5OTIx
QTYwNDQ5MEMzQ0RBMTBBMzJFODNCMTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhUemRHS1VTWjl2QnZLWHZKNTFneFZyOWNXUEdNQVBLWEYzSGFib2NrRlBnLzAv
MzIzODMwMzQzYTM4MzMzMzMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjMxMzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEgzBAMA0GCSqGSIb3DQEBCwUA
A4IBAQAhBPDePkwHio6GYFPoDbDxlwRTOE8RCt9hZAa/Nca0SfmWyd+t/y68HwNt
q6z2EN54A06SPJsc+9wm2gUYBnxN+nOfZrsnsGZRvQloxi2xgZYpVVEBy5Drockl
d6ajEtrdmf+FCVh0jleW6RHpfFqu4HWWkPlZI+8+6KlNyNDsv+kZu4ZAJWnN+VV+
6At/OjMv4SKb8uhiC/0QFwJsyox6gYBVNL35UwP4Zaujx6q003UmX+I9Gewz1Ic7
G7R/tj1N1sERhGmjiQyq20jcoa1hdmBGDuA7w9HF5LoThlPBB3etCVcU9kc2v9gE
3rXRKN2bTqi48r29f+tCZrgsUmF2
-----END CERTIFICATE-----
Generated at Sun Nov 1 05:46:18 2026 by rpki-client