Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/323830343a313632343a3a2f33322d3336203d3e20323633323730.roa
File:                     323830343a313632343a3a2f33322d3336203d3e20323633323730.roa (raw, json)
Hash identifier:          cjb4YAUZ04PBtJTVnHaWZ1kdB0sITjkudk1qJBIzmII=
Subject key identifier:   DA:5B:C9:9E:77:81:09:4D:D3:C4:A3:4B:7E:E9:D2:91:E2:0A:B5:82
Certificate issuer:       /CN=A9061DAE4F9D53D61D68F94D57460E43FB3C39D6
Certificate serial:       198FBF0353A66D09DE7B5D71F2E83232AD6605
Authority key identifier: A9:06:1D:AE:4F:9D:53:D6:1D:68:F9:4D:57:46:0E:43:FB:3C:39:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9061DAE4F9D53D61D68F94D57460E43FB3C39D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/323830343a313632343a3a2f33322d3336203d3e20323633323730.roa
Signing time:             Wed 01 Jul 2026 13:11:33 +0000
ROA not before:           Wed 01 Jul 2026 13:06:33 +0000
ROA not after:            Wed 30 Jun 2027 13:11:33 +0000
asID:                     263270
IP address blocks:        2804:1624::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/A9061DAE4F9D53D61D68F94D57460E43FB3C39D6.crl
                          rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/A9061DAE4F9D53D61D68F94D57460E43FB3C39D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9061DAE4F9D53D61D68F94D57460E43FB3C39D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 13:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8f:bf:03:53:a6:6d:09:de:7b:5d:71:f2:e8:32:32:ad:66:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9061DAE4F9D53D61D68F94D57460E43FB3C39D6
        Validity
            Not Before: Jul  1 13:06:33 2026 GMT
            Not After : Jun 30 13:11:33 2027 GMT
        Subject: CN=DA5BC99E7781094DD3C4A34B7EE9D291E20AB582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:92:08:50:f2:e7:56:3b:09:3a:69:8d:42:45:
                    4e:9a:22:da:ac:ae:7b:f8:2a:5c:7c:bd:dd:66:00:
                    e6:99:59:2f:21:68:d1:15:4c:17:78:cb:e3:b1:8f:
                    26:5d:56:89:d4:d4:88:46:88:11:5a:67:88:1d:e8:
                    c4:6b:e3:13:dd:5c:0c:89:ce:57:63:25:6e:db:c1:
                    ab:ef:80:98:9d:68:a6:ee:77:05:21:76:fb:78:66:
                    2e:c2:27:1a:17:3c:ba:16:21:63:20:99:cf:fb:93:
                    74:f8:ee:5b:4e:92:84:80:f6:e8:f6:e6:46:d1:9e:
                    68:5c:32:50:3f:72:05:e7:62:3e:a8:a8:df:4e:e1:
                    c3:4c:4a:f3:13:cb:5b:70:e6:67:ed:28:35:4c:72:
                    e1:59:a2:a3:6c:b7:4e:04:cd:e5:78:18:e0:24:bd:
                    5b:f7:68:12:cb:9b:7c:72:4a:ed:cf:61:e1:12:5d:
                    04:03:6e:c7:74:4f:57:c0:80:a9:f0:c3:1c:9b:06:
                    70:0e:54:83:30:8e:14:3a:d5:20:2a:e2:8b:8c:6a:
                    09:36:67:7c:1a:ef:c0:6e:16:de:29:59:d5:b7:ba:
                    43:d5:7e:08:50:78:a0:02:da:15:b7:b9:7a:96:62:
                    62:39:f5:f7:42:83:08:b3:c2:ea:53:2c:1f:71:e8:
                    8e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5B:C9:9E:77:81:09:4D:D3:C4:A3:4B:7E:E9:D2:91:E2:0A:B5:82
            X509v3 Authority Key Identifier:
                keyid:A9:06:1D:AE:4F:9D:53:D6:1D:68:F9:4D:57:46:0E:43:FB:3C:39:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/A9061DAE4F9D53D61D68F94D57460E43FB3C39D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9061DAE4F9D53D61D68F94D57460E43FB3C39D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WndLXrptYD6i9q5shMbyBLNm5VVNPRS1sg5PV3ubQVu/0/323830343a313632343a3a2f33322d3336203d3e20323633323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1624::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:34:39:9d:b1:e7:46:d5:52:ba:b8:5f:8b:32:c4:5d:52:03:
         5e:d9:08:09:eb:93:f3:57:64:d3:c9:e1:4e:fc:6d:9d:ad:c4:
         cd:2a:f4:84:81:29:03:63:20:9a:9d:02:c2:c9:2d:91:f8:36:
         31:01:91:b8:fd:9d:64:dd:bb:bb:6d:22:de:be:90:4e:1b:a5:
         03:ad:51:a1:42:ad:45:73:94:45:92:a7:db:9b:26:2a:65:99:
         e7:47:24:bc:81:f3:d1:15:a9:3e:46:36:15:c3:b3:f2:37:ae:
         d3:26:72:fd:9f:59:b6:2f:90:a4:43:18:63:b9:33:11:35:cd:
         a9:7e:3d:5d:9f:a5:55:35:43:15:33:93:49:1f:be:9b:c5:3c:
         73:66:89:fc:22:08:08:89:17:7c:1b:00:50:db:a0:85:00:c2:
         38:48:3d:31:86:1c:b1:6f:c4:19:68:28:70:44:44:0f:8d:20:
         2b:57:3c:4b:5f:cb:ab:1b:e0:bc:5c:50:25:fc:ff:43:95:38:
         0d:44:f8:0c:ea:5a:e3:9a:2e:90:05:e7:f3:41:bc:9c:a0:8b:
         2d:2a:30:3b:8b:b4:36:fe:56:6e:88:a6:1e:3b:f3:24:82:06:
         d8:13:7a:8f:a3:95:bb:a7:3d:04:65:a2:01:df:36:d6:06:2f:
         67:a5:b9:61
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgITGY+/A1OmbQnee11x8ugyMq1mBTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhBOTA2MURBRTRGOUQ1M0Q2MUQ2OEY5NEQ1NzQ2MEU0M0ZC
M0MzOUQ2MB4XDTI2MDcwMTEzMDYzM1oXDTI3MDYzMDEzMTEzM1owMzExMC8GA1UE
AxMoREE1QkM5OUU3NzgxMDk0REQzQzRBMzRCN0VFOUQyOTFFMjBBQjU4MjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKaSCFDy51Y7CTppjUJFTpoi2qyu
e/gqXHy93WYA5plZLyFo0RVMF3jL47GPJl1WidTUiEaIEVpniB3oxGvjE91cDInO
V2MlbtvBq++AmJ1opu53BSF2+3hmLsInGhc8uhYhYyCZz/uTdPjuW06ShID26Pbm
RtGeaFwyUD9yBediPqio307hw0xK8xPLW3DmZ+0oNUxy4Vmio2y3TgTN5XgY4CS9
W/doEsubfHJK7c9h4RJdBANux3RPV8CAqfDDHJsGcA5UgzCOFDrVICrii4xqCTZn
fBrvwG4W3ilZ1be6Q9V+CFB4oALaFbe5epZiYjn190KDCLPC6lMsH3HojiUCAwEA
AaOCAlAwggJMMB0GA1UdDgQWBBTaW8med4EJTdPEo0t+6dKR4gq1gjAfBgNVHSME
GDAWgBSpBh2uT51T1h1o+U1XRg5D+zw51jAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby84V25kTFhycHRZRDZpOXE1c2hNYnlCTE5tNVZWTlBSUzFzZzVQVjN1YlFW
dS8wL0E5MDYxREFFNEY5RDUzRDYxRDY4Rjk0RDU3NDYwRTQzRkIzQzM5RDYuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvQTkwNjFEQUU0RjlENTNENjFE
NjhGOTRENTc0NjBFNDNGQjNDMzlENi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZ
BggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OFduZExYcnB0WUQ2aTlxNXNoTWJ5QkxObTVWVk5QUlMxc2c1UFYzdWJRVnUvMC8z
MjM4MzAzNDNhMzEzNjMyMzQzYTNhMmYzMzMyMmQzMzM2MjAzZDNlMjAzMjM2MzMz
MjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBBYkMA0GCSqGSIb3DQEBCwUAA4IBAQAHNDmdsedG
1VK6uF+LMsRdUgNe2QgJ65PzV2TTyeFO/G2drcTNKvSEgSkDYyCanQLCyS2R+DYx
AZG4/Z1k3bu7bSLevpBOG6UDrVGhQq1Fc5RFkqfbmyYqZZnnRyS8gfPRFak+RjYV
w7PyN67TJnL9n1m2L5CkQxhjuTMRNc2pfj1dn6VVNUMVM5NJH76bxTxzZon8IggI
iRd8GwBQ26CFAMI4SD0xhhyxb8QZaChwREQPjSArVzxLX8urG+C8XFAl/P9DlTgN
RPgM6lrjmi6QBefzQbycoIstKjA7i7Q2/lZuiKYeO/MkggbYE3qPo5W7pz0EZaIB
3zbWBi9npblh
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:59:58 2026 by rpki-client