Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a31303a3a2f34342d3434203d3e20323730323835.roa
File:                     323830343a363962303a31303a3a2f34342d3434203d3e20323730323835.roa (raw, json)
Hash identifier:          AxRKtnBhEIlT1Rf0a6Pk4leVWq7zZw6Fiv0BUBrHHCU=
Subject key identifier:   34:B5:59:68:46:AB:91:48:54:2D:80:28:E3:65:58:09:26:AA:99:27
Certificate issuer:       /CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2
Certificate serial:       584D3FC37149F4AD45FD4ECE031E0B473672B911
Authority key identifier: 68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a31303a3a2f34342d3434203d3e20323730323835.roa
Signing time:             Mon 10 Aug 2026 19:08:08 +0000
ROA not before:           Mon 10 Aug 2026 19:03:08 +0000
ROA not after:            Mon 09 Aug 2027 19:08:08 +0000
asID:                     270285
IP address blocks:        2804:69b0:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl
                          rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:38:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4d:3f:c3:71:49:f4:ad:45:fd:4e:ce:03:1e:0b:47:36:72:b9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2
        Validity
            Not Before: Aug 10 19:03:08 2026 GMT
            Not After : Aug  9 19:08:08 2027 GMT
        Subject: CN=34B5596846AB9148542D8028E365580926AA9927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:dd:0c:1c:5f:55:0e:7c:06:3b:04:08:00:
                    9c:8d:00:13:c4:42:fc:68:f2:ec:5e:a9:43:ba:c8:
                    b2:d9:44:a1:62:5c:99:eb:ed:e5:f2:ec:af:a6:5f:
                    01:10:9f:64:d6:aa:79:96:a9:95:f4:95:ba:47:3f:
                    22:65:74:47:06:8f:1a:31:98:d8:ed:9d:b1:af:cf:
                    90:fd:77:34:a0:62:94:7a:79:33:21:90:bc:14:1e:
                    1c:8f:c2:72:9e:0d:51:1c:6e:da:4c:96:a4:33:ff:
                    84:d6:a4:9c:10:98:fe:be:8f:10:ac:76:c2:61:f0:
                    c5:9a:a1:10:13:9e:e6:67:55:7d:19:51:6d:4c:8c:
                    32:27:2a:b0:62:d5:8f:c2:59:a9:37:e6:f0:7a:9a:
                    4c:b3:a6:22:b0:5b:71:cb:6c:44:69:4e:bd:63:b9:
                    da:e5:dc:d1:39:13:25:d8:8e:0d:99:2b:19:58:72:
                    6b:67:1a:67:a8:f2:69:a8:c7:f9:f5:12:01:85:e3:
                    9e:b0:08:59:a2:e2:e8:d9:b5:ff:c5:1a:16:e3:69:
                    11:28:4b:c5:ab:c6:45:13:7f:4f:c5:46:3e:99:5d:
                    06:8e:d7:83:9e:02:94:70:ac:44:2f:81:d9:68:a3:
                    88:04:31:ee:5c:5b:a2:eb:20:03:4c:40:14:4e:6a:
                    c7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B5:59:68:46:AB:91:48:54:2D:80:28:E3:65:58:09:26:AA:99:27
            X509v3 Authority Key Identifier:
                keyid:68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a31303a3a2f34342d3434203d3e20323730323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69b0:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         2e:e9:fe:15:12:99:3d:71:d1:fd:0b:6f:22:6c:ff:7b:10:bd:
         34:ac:7e:91:c8:3a:78:83:60:24:b1:cc:ca:f5:66:00:27:37:
         d7:a3:da:2a:6c:61:ef:f0:5e:d5:e0:d2:22:ee:55:74:ff:23:
         92:b8:ed:af:6c:17:c5:e8:35:fa:9b:df:c2:d7:71:37:17:d8:
         d9:9e:5c:12:23:46:c8:bc:2a:b0:1a:27:e1:2d:fe:4b:40:e5:
         cc:da:8e:8d:b5:d6:76:8b:86:72:dc:ec:ae:73:d7:15:4c:92:
         23:01:96:0a:e8:cf:8c:fc:87:05:11:1c:b7:41:76:3f:0a:97:
         67:cd:85:ed:3a:1b:e6:ab:60:9c:ec:7b:b9:7e:7d:df:35:4d:
         b0:8a:cd:e6:94:fe:68:1e:50:db:cf:61:26:17:6b:99:dd:d8:
         cf:51:e5:94:3b:9c:0e:3f:a7:fd:37:89:17:cc:fe:d7:f4:bf:
         2b:5d:65:56:a0:77:a0:0b:3e:a8:58:fe:d5:8d:98:b1:a2:af:
         2a:38:d7:fa:78:5b:c4:7d:94:33:fa:12:6d:79:25:ac:22:ab:
         f9:29:49:72:82:59:63:46:d2:80:b0:75:47:24:78:71:8c:72:
         47:4f:72:88:1f:af:7c:99:71:d3:37:b9:91:0f:f8:19:b3:1c:
         18:8f:43:bd
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUWE0/w3FJ9K1F/U7OAx4LRzZyuREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhDQTNBMzZDOEVCMDRCMzY3QjYzMzIxRkU1RURFODdG
M0M4RDNDMjAeFw0yNjA4MTAxOTAzMDhaFw0yNzA4MDkxOTA4MDhaMDMxMTAvBgNV
BAMTKDM0QjU1OTY4NDZBQjkxNDg1NDJEODAyOEUzNjU1ODA5MjZBQTk5MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVW90MHF9VDnwGOwQIAJyNABPE
Qvxo8uxeqUO6yLLZRKFiXJnr7eXy7K+mXwEQn2TWqnmWqZX0lbpHPyJldEcGjxox
mNjtnbGvz5D9dzSgYpR6eTMhkLwUHhyPwnKeDVEcbtpMlqQz/4TWpJwQmP6+jxCs
dsJh8MWaoRATnuZnVX0ZUW1MjDInKrBi1Y/CWak35vB6mkyzpiKwW3HLbERpTr1j
udrl3NE5EyXYjg2ZKxlYcmtnGmeo8mmox/n1EgGF456wCFmi4ujZtf/FGhbjaREo
S8WrxkUTf0/FRj6ZXQaO14OeApRwrEQvgdloo4gEMe5cW6LrIANMQBROasdHAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUNLVZaEarkUhULYAo42VYCSaqmScwHwYDVR0j
BBgwFoAUaMo6NsjrBLNntjMh/l7eh/PI08IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGlGRTNrZ0ZNNTc3OUd2N1ZramY4NEpUeHZRVlBrcU5Za0xvQm5MQjh3
V1UvMC82OENBM0EzNkM4RUIwNEIzNjdCNjMzMjFGRTVFREU4N0YzQzhEM0MyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4Q0EzQTM2QzhFQjA0QjM2
N0I2MzMyMUZFNUVERTg3RjNDOEQzQzIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpRkUza2dGTTU3NzlHdjdWa2pmODRKVHh2UVZQa3FOWWtMb0JuTEI4d1dVLzAv
MzIzODMwMzQzYTM2Mzk2MjMwM2EzMTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIw
MzIzNzMwMzIzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKARpsAAQMA0GCSqGSIb3DQEBCwUAA4IB
AQAu6f4VEpk9cdH9C28ibP97EL00rH6RyDp4g2AksczK9WYAJzfXo9oqbGHv8F7V
4NIi7lV0/yOSuO2vbBfF6DX6m9/C13E3F9jZnlwSI0bIvCqwGifhLf5LQOXM2o6N
tdZ2i4Zy3Oyuc9cVTJIjAZYK6M+M/IcFERy3QXY/CpdnzYXtOhvmq2Cc7Hu5fn3f
NU2wis3mlP5oHlDbz2EmF2uZ3djPUeWUO5wOP6f9N4kXzP7X9L8rXWVWoHegCz6o
WP7VjZixoq8qONf6eFvEfZQz+hJteSWsIqv5KUlyglljRtKAsHVHJHhxjHJHT3KI
H698mXHTN7mRD/gZsxwYj0O9
-----END CERTIFICATE-----
Generated at Sun Aug 23 08:47:27 2026 by rpki-client