Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/323830343a376238383a313a3a2f34382d3438203d3e203533313037.roa
File:                     323830343a376238383a313a3a2f34382d3438203d3e203533313037.roa (raw, json)
Hash identifier:          byslF1KNnEcFm3jwQf5EiWvUo3RVqSS2PxDc6tnagHY=
Subject key identifier:   0C:9F:D5:33:F1:0C:66:82:8E:4E:3E:49:42:6F:FA:D4:20:CF:6A:B3
Certificate issuer:       /CN=53A5B699AFED13BD0E022CA41D2E6E4F14DCF934
Certificate serial:       18A99C6DD74585B2317F9778E10B924AFB97AABB
Authority key identifier: 53:A5:B6:99:AF:ED:13:BD:0E:02:2C:A4:1D:2E:6E:4F:14:DC:F9:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/323830343a376238383a313a3a2f34382d3438203d3e203533313037.roa
Signing time:             Sat 23 May 2026 12:17:54 +0000
ROA not before:           Sat 23 May 2026 12:12:54 +0000
ROA not after:            Sat 22 May 2027 12:17:54 +0000
asID:                     53107
IP address blocks:        2804:7b88:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.crl
                          rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 08:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a9:9c:6d:d7:45:85:b2:31:7f:97:78:e1:0b:92:4a:fb:97:aa:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53A5B699AFED13BD0E022CA41D2E6E4F14DCF934
        Validity
            Not Before: May 23 12:12:54 2026 GMT
            Not After : May 22 12:17:54 2027 GMT
        Subject: CN=0C9FD533F10C66828E4E3E49426FFAD420CF6AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1f:5d:f9:a7:5c:a2:d3:a0:a9:f9:8c:d3:b0:
                    9b:56:ea:f8:c2:49:a5:57:48:85:2e:bd:5e:34:d5:
                    b4:6f:f9:05:a2:a1:9c:41:7c:b4:46:97:63:c3:ea:
                    84:4e:2f:cd:ac:0c:0a:59:0d:7f:10:bd:22:f5:dd:
                    4a:40:ec:5f:11:f0:07:a0:0f:c9:eb:ea:37:50:d0:
                    e6:67:06:d1:17:ca:e8:07:81:23:3c:e7:b0:5e:2d:
                    10:e8:76:16:06:99:65:2e:e5:70:33:75:94:04:b0:
                    f2:c9:a2:45:61:5b:2f:bc:63:63:af:b3:21:9a:73:
                    fb:da:30:a7:a2:ea:12:27:5f:63:82:29:a3:92:56:
                    bb:82:92:a3:dc:69:14:d1:35:f5:54:24:36:cc:92:
                    c1:61:dd:43:d1:73:ad:16:9a:fb:6e:a8:1f:98:12:
                    ba:6f:12:78:b2:91:46:13:17:68:0c:d9:45:cc:16:
                    1b:94:a0:58:a8:f7:3b:7f:a5:a0:e3:88:5b:34:dd:
                    ed:5d:05:44:21:a2:b0:39:7d:6f:85:3a:c3:61:4f:
                    db:eb:91:65:60:f6:16:0f:5d:6c:d8:f5:70:8a:ff:
                    2d:ab:32:55:97:8c:06:a0:46:ef:d3:60:9c:43:20:
                    18:ca:07:d1:8e:c9:14:13:d2:1c:04:ea:16:1e:b0:
                    3b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9F:D5:33:F1:0C:66:82:8E:4E:3E:49:42:6F:FA:D4:20:CF:6A:B3
            X509v3 Authority Key Identifier:
                keyid:53:A5:B6:99:AF:ED:13:BD:0E:02:2C:A4:1D:2E:6E:4F:14:DC:F9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53A5B699AFED13BD0E022CA41D2E6E4F14DCF934.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/323830343a376238383a313a3a2f34382d3438203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b88:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:7c:a3:89:5b:42:b9:b3:64:5e:3c:81:99:62:85:75:14:61:
         25:b9:4e:b5:70:48:b9:0c:cb:ba:41:8a:cb:7a:9a:8f:38:1a:
         72:f1:b8:b8:d3:fc:3e:90:d0:89:2a:a2:de:f0:f3:17:ac:53:
         8f:c6:83:fc:86:82:e9:eb:7e:c9:7a:92:3f:5f:62:f0:65:89:
         28:0f:c3:bb:31:9d:51:0f:2d:07:79:13:39:2b:1f:d7:06:99:
         73:86:19:1f:2d:ad:97:7f:09:d4:a3:68:f4:8d:2a:6c:3f:e6:
         01:58:cf:6a:65:f7:8d:7d:55:ee:a0:0d:ec:66:26:20:bd:d3:
         c3:56:e8:52:76:a0:b8:d5:39:c5:3a:54:12:4b:a1:69:9a:83:
         2b:92:9b:d2:50:13:7e:9a:96:08:fa:84:a4:c8:f9:e2:38:fd:
         54:7e:1f:ea:46:42:a4:68:8d:e1:7f:f9:05:bf:82:7f:59:80:
         17:24:f1:95:8f:86:a0:cd:ac:5f:09:4b:90:3e:82:48:06:79:
         88:11:c9:83:44:82:20:a3:1e:b6:d6:c4:fe:c1:cc:79:29:51:
         d7:d0:7d:61:26:e0:5a:43:73:41:66:52:41:c8:54:66:ba:88:
         92:c4:1a:47:0e:d7:a6:ad:f1:e7:ba:36:68:fd:9e:07:48:ea:
         e0:5b:5c:aa
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUGKmcbddFhbIxf5d44QuSSvuXqrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNBNUI2OTlBRkVEMTNCRDBFMDIyQ0E0MUQyRTZFNEYx
NERDRjkzNDAeFw0yNjA1MjMxMjEyNTRaFw0yNzA1MjIxMjE3NTRaMDMxMTAvBgNV
BAMTKDBDOUZENTMzRjEwQzY2ODI4RTRFM0U0OTQyNkZGQUQ0MjBDRjZBQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeH135p1yi06Cp+YzTsJtW6vjC
SaVXSIUuvV401bRv+QWioZxBfLRGl2PD6oROL82sDApZDX8QvSL13UpA7F8R8Aeg
D8nr6jdQ0OZnBtEXyugHgSM857BeLRDodhYGmWUu5XAzdZQEsPLJokVhWy+8Y2Ov
syGac/vaMKei6hInX2OCKaOSVruCkqPcaRTRNfVUJDbMksFh3UPRc60WmvtuqB+Y
ErpvEniykUYTF2gM2UXMFhuUoFio9zt/paDjiFs03e1dBUQhorA5fW+FOsNhT9vr
kWVg9hYPXWzY9XCK/y2rMlWXjAagRu/TYJxDIBjKB9GOyRQT0hwE6hYesDvPAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUDJ/VM/EMZoKOTj5JQm/61CDParMwHwYDVR0j
BBgwFoAUU6W2ma/tE70OAiykHS5uTxTc+TQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHdWTWdMWUNReGhIQXR2bmk2TlhzQm5iUzZQa1FwUTdvWkhhYUM5d3Ix
WXkvMC81M0E1QjY5OUFGRUQxM0JEMEUwMjJDQTQxRDJFNkU0RjE0RENGOTM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzQTVCNjk5QUZFRDEzQkQw
RTAyMkNBNDFEMkU2RTRGMTREQ0Y5MzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh3Vk1nTFlDUXhoSEF0dm5pNk5Yc0JuYlM2UGtRcFE3b1pIYWFDOXdyMVl5LzAv
MzIzODMwMzQzYTM3NjIzODM4M2EzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1
MzMzMTMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBHuIAAEwDQYJKoZIhvcNAQELBQADggEBABl8
o4lbQrmzZF48gZlihXUUYSW5TrVwSLkMy7pBist6mo84GnLxuLjT/D6Q0Ikqot7w
8xesU4/Gg/yGgunrfsl6kj9fYvBliSgPw7sxnVEPLQd5EzkrH9cGmXOGGR8trZd/
CdSjaPSNKmw/5gFYz2pl9419Ve6gDexmJiC908NW6FJ2oLjVOcU6VBJLoWmagyuS
m9JQE36algj6hKTI+eI4/VR+H+pGQqRojeF/+QW/gn9ZgBck8ZWPhqDNrF8JS5A+
gkgGeYgRyYNEgiCjHrbWxP7BzHkpUdfQfWEm4FpDc0FmUkHIVGa6iJLEGkcO16at
8ee6Nmj9ngdI6uBbXKo=
-----END CERTIFICATE-----
Generated at Sun May 24 17:59:23 2026 by rpki-client