Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a376630303a3a2f34302d3430203d3e20323634303235.roa
File:                     323830343a323939633a376630303a3a2f34302d3430203d3e20323634303235.roa (raw, json)
Hash identifier:          uq2e8DyICqaZNsEEe+aFmVa9hvjBq1tKmDFtXI011+I=
Subject key identifier:   B8:07:74:70:F6:B4:3A:D2:5C:75:6F:4E:85:A2:5D:E4:0A:2E:80:6D
Certificate issuer:       /CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
Certificate serial:       3B00BE690FB090C69F7FB14CE1A53A626551CEF2
Authority key identifier: 64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a376630303a3a2f34302d3430203d3e20323634303235.roa
Signing time:             Thu 30 Jul 2026 17:59:28 +0000
ROA not before:           Thu 30 Jul 2026 17:54:28 +0000
ROA not after:            Thu 29 Jul 2027 17:59:28 +0000
asID:                     264025
IP address blocks:        2804:299c:7f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl
                          rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 22:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:00:be:69:0f:b0:90:c6:9f:7f:b1:4c:e1:a5:3a:62:65:51:ce:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
        Validity
            Not Before: Jul 30 17:54:28 2026 GMT
            Not After : Jul 29 17:59:28 2027 GMT
        Subject: CN=B8077470F6B43AD25C756F4E85A25DE40A2E806D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cd:47:2e:67:cd:8d:33:4e:e3:9b:8c:5f:28:
                    d7:32:af:e8:b7:d6:3d:66:bc:18:c0:07:e4:5a:b4:
                    ee:4f:4a:25:a7:30:31:b8:a1:94:48:7d:c4:9a:30:
                    4c:2c:e5:13:d7:e6:48:f4:e1:35:a1:2f:5f:1d:8a:
                    39:50:3f:3a:27:f2:34:f2:03:09:e4:67:32:d8:5a:
                    b8:1a:15:97:8c:c3:01:f6:e0:4c:34:32:ce:7e:92:
                    29:c0:72:a2:fa:61:d6:3d:6f:4f:0f:02:76:0d:92:
                    15:37:00:dc:03:5b:5f:fd:77:81:3a:b6:3b:6e:72:
                    54:0e:93:a1:1f:eb:28:23:8c:92:8a:64:f3:9c:65:
                    24:b1:6a:f7:4b:7e:56:2e:72:36:4b:59:18:8e:c5:
                    08:1b:5e:ca:55:e4:e8:36:f5:da:20:70:35:3f:77:
                    a5:31:45:9b:04:b7:08:94:43:3d:c3:5e:82:60:51:
                    c8:b5:4d:c1:ed:6e:0d:8f:76:58:f7:1e:fc:6b:01:
                    93:d1:d0:9e:dd:cd:30:ab:98:93:51:47:c5:3e:b9:
                    79:dd:c6:63:38:0e:d4:04:c1:5f:83:b7:48:a8:1c:
                    2e:e3:be:19:96:3a:ed:53:49:f1:6f:1d:c8:82:dc:
                    e3:d7:33:25:1a:f7:78:41:04:38:2f:f9:d2:db:a7:
                    56:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:07:74:70:F6:B4:3A:D2:5C:75:6F:4E:85:A2:5D:E4:0A:2E:80:6D
            X509v3 Authority Key Identifier:
                keyid:64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a376630303a3a2f34302d3430203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:299c:7f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:12:94:0c:ca:6a:98:3e:63:7c:c1:6e:0d:01:97:b0:3f:db:
         fd:97:c1:9d:da:2a:eb:92:70:8e:1b:16:89:b5:19:0a:d2:33:
         06:50:dd:7f:a1:36:d1:1d:88:df:b0:74:37:aa:18:52:b0:ab:
         76:d3:47:66:42:3f:20:66:ee:48:91:7f:8e:0e:13:93:53:ce:
         2f:c9:7e:0e:eb:2d:75:05:8b:06:ec:dd:a6:06:a5:86:f0:4e:
         48:f3:96:7a:c5:53:26:cb:75:c5:77:97:90:df:57:c2:0b:c4:
         a3:40:9d:fd:8a:ef:ca:92:81:74:81:d3:b8:52:60:15:70:f5:
         80:88:87:ed:82:e1:a7:3d:57:50:a3:ff:78:fb:40:22:38:90:
         b8:8d:7a:40:d0:ae:3e:b1:50:22:2c:85:1d:20:d4:da:ce:48:
         14:0c:bb:94:9c:28:e9:04:c2:d1:af:d3:39:95:c2:83:3d:94:
         98:e5:75:4b:c4:f0:02:99:00:25:ed:25:70:d7:92:9e:9d:1e:
         3a:1a:a4:ab:c6:95:23:ca:da:05:0b:3e:10:69:73:e0:2b:d6:
         4b:7a:08:db:51:52:61:37:1e:56:24:ee:55:fe:b1:1c:90:50:
         fe:39:bc:4f:4d:66:00:2a:c4:f6:ac:69:01:7b:9f:ad:03:03:
         0d:8e:6c:bc
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOwC+aQ+wkMaff7FM4aU6YmVRzvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRFRjRBODg0QUI5RTQwRUQ2QTA5QUUxQzNGNDdEN0M5
MTkzMDU3MjAeFw0yNjA3MzAxNzU0MjhaFw0yNzA3MjkxNzU5MjhaMDMxMTAvBgNV
BAMTKEI4MDc3NDcwRjZCNDNBRDI1Qzc1NkY0RTg1QTI1REU0MEEyRTgwNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqzUcuZ82NM07jm4xfKNcyr+i3
1j1mvBjAB+RatO5PSiWnMDG4oZRIfcSaMEws5RPX5kj04TWhL18dijlQPzon8jTy
AwnkZzLYWrgaFZeMwwH24Ew0Ms5+kinAcqL6YdY9b08PAnYNkhU3ANwDW1/9d4E6
tjtuclQOk6Ef6ygjjJKKZPOcZSSxavdLflYucjZLWRiOxQgbXspV5Og29dogcDU/
d6UxRZsEtwiUQz3DXoJgUci1TcHtbg2Pdlj3HvxrAZPR0J7dzTCrmJNRR8U+uXnd
xmM4DtQEwV+Dt0ioHC7jvhmWOu1TSfFvHciC3OPXMyUa93hBBDgv+dLbp1b1AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUuAd0cPa0OtJcdW9OhaJd5AougG0wHwYDVR0j
BBgwFoAUZO9KiEq55A7WoJrhw/R9fJGTBXIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtLbXBMcjFkWUIyZGFnNTR4a1VNcjNueHZDZ3pSNVJETkNDVWp3QVdW
b3gvMC82NEVGNEE4ODRBQjlFNDBFRDZBMDlBRTFDM0Y0N0Q3QzkxOTMwNTcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0RUY0QTg4NEFCOUU0MEVE
NkEwOUFFMUMzRjQ3RDdDOTE5MzA1NzIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrS21wTHIxZFlCMmRhZzU0eGtVTXIzbnh2Q2d6UjVSRE5DQ1Vqd0FXVm94LzAv
MzIzODMwMzQzYTMyMzkzOTYzM2EzNzY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEKZx/MA0GCSqGSIb3DQEBCwUA
A4IBAQBVEpQMymqYPmN8wW4NAZewP9v9l8Gd2irrknCOGxaJtRkK0jMGUN1/oTbR
HYjfsHQ3qhhSsKt200dmQj8gZu5IkX+ODhOTU84vyX4O6y11BYsG7N2mBqWG8E5I
85Z6xVMmy3XFd5eQ31fCC8SjQJ39iu/KkoF0gdO4UmAVcPWAiIftguGnPVdQo/94
+0AiOJC4jXpA0K4+sVAiLIUdINTazkgUDLuUnCjpBMLRr9M5lcKDPZSY5XVLxPAC
mQAl7SVw15KenR46GqSrxpUjytoFCz4QaXPgK9ZLegjbUVJhNx5WJO5V/rEckFD+
ObxPTWYAKsT2rGkBe5+tAwMNjmy8
-----END CERTIFICATE-----
Generated at Sun Aug 23 14:54:41 2026 by rpki-client