Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/323830343a363432343a3a2f33342d3334203d3e20323639343039.roa
File:                     323830343a363432343a3a2f33342d3334203d3e20323639343039.roa (raw, json)
Hash identifier:          sf5SXhnLU4Nw6eKPl0d1hf1rN7Rp9gXfzp+xC38e2Pg=
Subject key identifier:   59:FE:49:3B:75:11:FC:0E:FA:AF:AD:67:8F:54:43:44:F4:71:A8:C6
Certificate issuer:       /CN=FF962D3BC2259181BF6817D40CC381E0150C9740
Certificate serial:       4F93FE80E1FD3C9143496C801F44BE931FC2D2AC
Authority key identifier: FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/323830343a363432343a3a2f33342d3334203d3e20323639343039.roa
Signing time:             Fri 31 Jul 2026 15:35:07 +0000
ROA not before:           Fri 31 Jul 2026 15:30:07 +0000
ROA not after:            Fri 30 Jul 2027 15:35:07 +0000
asID:                     269409
IP address blocks:        2804:6424::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl
                          rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:93:fe:80:e1:fd:3c:91:43:49:6c:80:1f:44:be:93:1f:c2:d2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF962D3BC2259181BF6817D40CC381E0150C9740
        Validity
            Not Before: Jul 31 15:30:07 2026 GMT
            Not After : Jul 30 15:35:07 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:fd:00:99:ae:8f:1e:53:33:d3:80:8a:1b:
                    c8:f4:2a:57:b9:6b:60:e1:a4:4e:48:94:3e:f2:cf:
                    50:eb:49:2a:1f:72:c7:71:27:11:39:a1:f4:60:42:
                    0c:34:55:32:61:10:c8:56:0d:d5:ef:80:bd:89:6a:
                    bd:0e:9a:67:d1:ba:a9:0a:7c:a8:af:d9:c2:54:a5:
                    f9:79:cc:e7:09:65:b6:3b:fe:53:ac:a1:98:0c:03:
                    78:c2:5c:76:3b:12:57:36:2b:1e:2d:e7:7b:16:ac:
                    17:99:e4:6b:b0:c9:a9:fd:27:02:24:02:d5:3a:ae:
                    3c:4f:19:0d:03:e6:9c:4f:25:fc:e1:ac:ca:ad:8d:
                    be:ca:5b:7c:cc:4c:06:24:c9:58:6a:85:a7:57:58:
                    95:18:de:c5:88:36:d2:50:01:07:95:d0:24:d0:58:
                    cc:32:64:2f:45:04:63:ea:4e:0c:34:6b:32:bb:65:
                    4a:a7:e0:92:1f:72:66:87:38:72:ee:e8:1a:76:c8:
                    41:1f:48:63:5e:ba:c7:3e:1a:d0:73:7f:8d:7d:5c:
                    5f:e4:af:64:dd:68:90:48:62:16:b7:86:2f:e4:3a:
                    d7:e5:77:a6:c6:36:d7:ee:91:e7:20:be:93:86:7d:
                    ef:0d:88:72:aa:41:4a:fb:21:c6:99:e0:d7:d8:e3:
                    26:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FE:49:3B:75:11:FC:0E:FA:AF:AD:67:8F:54:43:44:F4:71:A8:C6
            X509v3 Authority Key Identifier:
                keyid:FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/323830343a363432343a3a2f33342d3334203d3e20323639343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6424::/34

    Signature Algorithm: sha256WithRSAEncryption
         5a:75:2a:d2:49:1d:f7:17:ba:fe:d8:83:55:7d:ec:eb:9c:5d:
         93:e0:c6:fc:67:e0:93:19:87:1f:97:51:51:2d:6c:51:0c:02:
         4d:2b:d3:88:cd:b9:6b:3f:a6:ee:05:d5:f4:f9:6f:dd:3f:ab:
         7f:47:22:45:e2:1e:8c:bb:33:0e:8d:37:df:83:e8:58:c4:6f:
         4d:53:d5:c2:47:a6:66:94:a4:11:0e:d2:90:28:4a:32:2f:13:
         e7:4b:b1:37:b6:9f:6e:f5:0e:cf:43:d9:0a:f3:89:64:ef:6a:
         5b:da:d6:cb:50:27:89:c4:68:8d:c2:d5:bc:c0:5d:8f:09:fe:
         86:2c:7f:38:34:62:c2:7b:8d:f0:6c:ed:96:bd:fe:c7:a9:4e:
         f9:44:4c:f3:d9:e1:06:fe:e5:96:7e:d8:4c:94:94:30:c9:9e:
         a6:29:46:d5:f5:c9:e0:8b:15:7e:c3:20:a5:4b:62:a2:37:5f:
         d0:fb:04:85:0e:d7:81:ea:bb:2a:49:09:da:0c:64:cd:86:f6:
         2c:7d:6f:bc:b6:33:95:5c:75:3d:de:64:69:7e:2c:c9:f8:cf:
         07:48:fb:f3:3b:a7:97:13:0c:51:4a:80:c2:8d:61:3b:99:1f:
         43:d5:fd:6c:9d:65:1f:d7:ca:50:de:70:7c:07:73:b3:8b:45:
         dd:81:0f:56
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUT5P+gOH9PJFDSWyAH0S+kx/C0qwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY5NjJEM0JDMjI1OTE4MUJGNjgxN0Q0MENDMzgxRTAx
NTBDOTc0MDAeFw0yNjA3MzExNTMwMDdaFw0yNzA3MzAxNTM1MDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjdGMUZEMDA5OUFFOEYxRTUz
MzNEMzgwOEExQkM4RjQyQTU3Qjk2QjYwRTFBNDRFNDg5NDNFRjJDRjUwRUI0OTJB
MUY3MkM3NzEyNzExMzlBMUY0NjA0MjBDMzQ1NTMyNjExMEM4NTYwREQ1RUY4MEJE
ODk2QUJEMEU5QTY3RDFCQUE5MEE3Q0E4QUZEOUMyNTRBNUY5NzlDQ0U3MDk2NUI2
M0JGRTUzQUNBMTk4MEMwMzc4QzI1Qzc2M0IxMjU3MzYyQjFFMkRFNzdCMTZBQzE3
OTlFNDZCQjBDOUE5RkQyNzAyMjQwMkQ1M0FBRTNDNEYxOTBEMDNFNjlDNEYyNUZD
RTFBQ0NBQUQ4REJFQ0E1QjdDQ0M0QzA2MjRDOTU4NkE4NUE3NTc1ODk1MThERUM1
ODgzNkQyNTAwMTA3OTVEMDI0RDA1OENDMzI2NDJGNDUwNDYzRUE0RTBDMzQ2QjMy
QkI2NTRBQTdFMDkyMUY3MjY2ODczODcyRUVFODFBNzZDODQxMUY0ODYzNUVCQUM3
M0UxQUQwNzM3RjhEN0Q1QzVGRTRBRjY0REQ2ODkwNDg2MjE2Qjc4NjJGRTQzQUQ3
RTU3N0E2QzYzNkQ3RUU5MUU3MjBCRTkzODY3REVGMEQ4ODcyQUE0MTRBRkIyMUM2
OTlFMEQ3RDhFMzI2Q0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt/H9AJmujx5TM9OAihvI9CpXuWtg4aROSJQ+8s9Q60kqH3LHcScR
OaH0YEIMNFUyYRDIVg3V74C9iWq9Dppn0bqpCnyor9nCVKX5ecznCWW2O/5TrKGY
DAN4wlx2OxJXNiseLed7FqwXmeRrsMmp/ScCJALVOq48TxkNA+acTyX84azKrY2+
ylt8zEwGJMlYaoWnV1iVGN7FiDbSUAEHldAk0FjMMmQvRQRj6k4MNGsyu2VKp+CS
H3Jmhzhy7ugadshBH0hjXrrHPhrQc3+NfVxf5K9k3WiQSGIWt4Yv5DrX5XemxjbX
7pHnIL6Thn3vDYhyqkFK+yHGmeDX2OMmywIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FFn+STt1EfwO+q+tZ49UQ0T0cajGMB8GA1UdIwQYMBaAFP+WLTvCJZGBv2gX1AzD
geAVDJdAMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzh1M0ozUTlkTXlKWW9x
VkhXQmtrVGNYcXBuTUdkRktoN1RaR1FwTXQ4U2NILzAvRkY5NjJEM0JDMjI1OTE4
MUJGNjgxN0Q0MENDMzgxRTAxNTBDOTc0MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GRjk2MkQzQkMyMjU5MTgxQkY2ODE3RDQwQ0MzODFFMDE1MEM5
NzQwLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84dTNKM1E5ZE15SllvcVZIV0Jr
a1RjWHFwbk1HZEZLaDdUWkdRcE10OFNjSC8wLzMyMzgzMDM0M2EzNjM0MzIzNDNh
M2EyZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzYzOTM0MzAzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigE
ZCQAMA0GCSqGSIb3DQEBCwUAA4IBAQBadSrSSR33F7r+2INVfezrnF2T4Mb8Z+CT
GYcfl1FRLWxRDAJNK9OIzblrP6buBdX0+W/dP6t/RyJF4h6MuzMOjTffg+hYxG9N
U9XCR6ZmlKQRDtKQKEoyLxPnS7E3tp9u9Q7PQ9kK84lk72pb2tbLUCeJxGiNwtW8
wF2PCf6GLH84NGLCe43wbO2Wvf7HqU75REzz2eEG/uWWfthMlJQwyZ6mKUbV9cng
ixV+wyClS2KiN1/Q+wSFDteB6rsqSQnaDGTNhvYsfW+8tjOVXHU93mRpfizJ+M8H
SPvzO6eXEwxRSoDCjWE7mR9D1f1snWUf18pQ3nB8B3Ozi0XdgQ9W
-----END CERTIFICATE-----