Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a35303a3a2f34342d3434203d3e20323730323835.roa
File:                     323830343a363962303a35303a3a2f34342d3434203d3e20323730323835.roa (raw, json)
Hash identifier:          7YLv+x6Z5zs4sex7G9092SGDPPlY8dMvKo1MgK1UVP4=
Subject key identifier:   19:7E:09:A5:35:A0:B6:5F:B5:01:15:0B:9B:C5:D0:D8:D7:FA:70:5F
Certificate issuer:       /CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2
Certificate serial:       4C7EEE3ABBDA214C6A8EB2B8705507EA6936267C
Authority key identifier: 68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a35303a3a2f34342d3434203d3e20323730323835.roa
Signing time:             Mon 10 Aug 2026 19:08:07 +0000
ROA not before:           Mon 10 Aug 2026 19:03:07 +0000
ROA not after:            Mon 09 Aug 2027 19:08:07 +0000
asID:                     270285
IP address blocks:        2804:69b0:50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl
                          rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 04:45:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7e:ee:3a:bb:da:21:4c:6a:8e:b2:b8:70:55:07:ea:69:36:26:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2
        Validity
            Not Before: Aug 10 19:03:07 2026 GMT
            Not After : Aug  9 19:08:07 2027 GMT
        Subject: CN=197E09A535A0B65FB501150B9BC5D0D8D7FA705F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:92:70:54:92:56:24:7f:ef:56:e5:c5:af:82:
                    f7:c6:43:ba:e6:b4:0f:b9:b2:7e:79:75:e0:2a:ed:
                    bf:5d:de:6c:bf:cd:e6:f2:f7:26:6f:49:70:79:19:
                    4a:bc:3d:67:f9:a8:aa:10:07:73:57:8f:d5:10:88:
                    ae:48:aa:01:9d:b5:69:fb:37:52:1a:18:0c:7b:61:
                    a5:c5:ff:25:c9:b3:24:98:0a:87:2b:bd:80:69:dc:
                    5d:96:f4:26:6a:48:80:b7:71:c7:fe:82:91:30:6d:
                    0a:20:65:91:0f:69:34:d0:8d:6f:17:27:84:3b:9f:
                    2a:2b:b2:29:e3:3f:7a:9a:32:7e:72:c3:e3:88:68:
                    72:16:3f:59:d4:6d:dd:c5:03:63:4c:65:fd:48:55:
                    8b:08:97:b9:63:c1:82:7d:2f:69:d6:6e:6f:99:c3:
                    9d:fe:e7:b7:a7:ed:70:c4:ae:f6:ca:ba:28:73:36:
                    4c:d9:de:2a:ff:d4:df:51:63:32:1d:53:58:f5:da:
                    ec:ee:bf:d8:a2:5a:92:9b:e1:85:64:24:bc:74:97:
                    4c:94:db:ec:a3:0a:1b:14:c7:af:4c:4c:44:ef:0f:
                    63:2b:e0:1c:85:f3:d5:d5:f1:d8:60:61:97:2c:d5:
                    54:c7:35:78:af:4d:32:66:24:8e:5e:e1:ab:a9:8d:
                    25:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7E:09:A5:35:A0:B6:5F:B5:01:15:0B:9B:C5:D0:D8:D7:FA:70:5F
            X509v3 Authority Key Identifier:
                keyid:68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a35303a3a2f34342d3434203d3e20323730323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69b0:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         6a:1b:6e:17:8f:17:47:69:fc:23:d1:0c:5d:e1:a6:7f:2e:3c:
         78:03:b2:fb:dc:ff:4b:b1:a0:c9:df:84:8e:ea:b3:30:e7:02:
         34:be:77:39:8c:c2:d8:b8:a8:2d:88:4f:e7:b3:e9:4b:e8:64:
         41:c6:fd:96:7c:6d:57:b4:d7:56:23:cb:0f:9f:51:ea:51:06:
         c8:f7:d0:0a:fe:17:e4:44:f4:6c:62:69:84:62:52:43:61:ba:
         06:37:f0:05:3f:22:b5:b1:43:ac:a6:f4:23:9e:22:7f:ba:6a:
         9f:6d:a3:de:87:9c:23:06:c0:1e:2e:8f:cb:88:81:43:93:77:
         5c:de:39:d8:58:f8:7f:04:0e:b7:aa:ba:06:fc:4a:2c:cb:59:
         e4:c3:02:e7:9d:98:56:31:c0:82:a3:38:df:35:d0:be:e2:fa:
         87:56:f0:5c:a9:c6:2b:24:d0:2e:23:81:2c:bf:6a:96:03:06:
         72:e2:28:f1:cc:c5:4d:f6:1d:9d:c7:90:3e:f2:be:9b:a0:c1:
         fd:97:82:a5:f3:5f:e3:e5:5b:16:ee:a1:df:a1:71:0d:47:1f:
         0a:5d:fa:a3:7b:a0:f0:23:72:19:d3:08:9b:bd:60:a8:f1:a4:
         20:ea:67:b4:27:50:47:40:1d:22:35:4f:31:bb:55:e1:92:d4:
         b9:04:f1:a4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUTH7uOrvaIUxqjrK4cFUH6mk2JnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhDQTNBMzZDOEVCMDRCMzY3QjYzMzIxRkU1RURFODdG
M0M4RDNDMjAeFw0yNjA4MTAxOTAzMDdaFw0yNzA4MDkxOTA4MDdaMDMxMTAvBgNV
BAMTKDE5N0UwOUE1MzVBMEI2NUZCNTAxMTUwQjlCQzVEMEQ4RDdGQTcwNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTknBUklYkf+9W5cWvgvfGQ7rm
tA+5sn55deAq7b9d3my/zeby9yZvSXB5GUq8PWf5qKoQB3NXj9UQiK5IqgGdtWn7
N1IaGAx7YaXF/yXJsySYCocrvYBp3F2W9CZqSIC3ccf+gpEwbQogZZEPaTTQjW8X
J4Q7nyorsinjP3qaMn5yw+OIaHIWP1nUbd3FA2NMZf1IVYsIl7ljwYJ9L2nWbm+Z
w53+57en7XDErvbKuihzNkzZ3ir/1N9RYzIdU1j12uzuv9iiWpKb4YVkJLx0l0yU
2+yjChsUx69MTETvD2Mr4ByF89XV8dhgYZcs1VTHNXivTTJmJI5e4aupjSUlAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUGX4JpTWgtl+1ARULm8XQ2Nf6cF8wHwYDVR0j
BBgwFoAUaMo6NsjrBLNntjMh/l7eh/PI08IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGlGRTNrZ0ZNNTc3OUd2N1ZramY4NEpUeHZRVlBrcU5Za0xvQm5MQjh3
V1UvMC82OENBM0EzNkM4RUIwNEIzNjdCNjMzMjFGRTVFREU4N0YzQzhEM0MyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4Q0EzQTM2QzhFQjA0QjM2
N0I2MzMyMUZFNUVERTg3RjNDOEQzQzIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpRkUza2dGTTU3NzlHdjdWa2pmODRKVHh2UVZQa3FOWWtMb0JuTEI4d1dVLzAv
MzIzODMwMzQzYTM2Mzk2MjMwM2EzNTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIw
MzIzNzMwMzIzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKARpsABQMA0GCSqGSIb3DQEBCwUAA4IB
AQBqG24XjxdHafwj0Qxd4aZ/Ljx4A7L73P9LsaDJ34SO6rMw5wI0vnc5jMLYuKgt
iE/ns+lL6GRBxv2WfG1XtNdWI8sPn1HqUQbI99AK/hfkRPRsYmmEYlJDYboGN/AF
PyK1sUOspvQjniJ/umqfbaPeh5wjBsAeLo/LiIFDk3dc3jnYWPh/BA63qroG/Eos
y1nkwwLnnZhWMcCCozjfNdC+4vqHVvBcqcYrJNAuI4Esv2qWAwZy4ijxzMVN9h2d
x5A+8r6boMH9l4Kl81/j5VsW7qHfoXENRx8KXfqje6DwI3IZ0wibvWCo8aQg6me0
J1BHQB0iNU8xu1XhktS5BPGk
-----END CERTIFICATE-----
Generated at Mon Aug 24 05:28:51 2026 by rpki-client