Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3438203d3e20323731373631.roa
File:                     323830343a383039383a3a2f33322d3438203d3e20323731373631.roa (raw, json)
Hash identifier:          LKypwlHqHMlSBk+4wOAtIhZnELT8sf5mlk/h+ZZ51i8=
Subject key identifier:   38:2D:FD:71:0E:D2:89:2C:8C:60:C8:8D:AC:A5:AB:99:53:78:DD:B0
Certificate issuer:       /CN=6EA22A57869702BB3EC504F354E3A399C57E7BF5
Certificate serial:       0C6336692F2080E1981FDD0285D0F560018173FE
Authority key identifier: 6E:A2:2A:57:86:97:02:BB:3E:C5:04:F3:54:E3:A3:99:C5:7E:7B:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA22A57869702BB3EC504F354E3A399C57E7BF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3438203d3e20323731373631.roa
Signing time:             Fri 22 May 2026 16:16:36 +0000
ROA not before:           Fri 22 May 2026 16:11:36 +0000
ROA not after:            Fri 21 May 2027 16:16:36 +0000
asID:                     271761
IP address blocks:        2804:8098::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/6EA22A57869702BB3EC504F354E3A399C57E7BF5.crl
                          rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/6EA22A57869702BB3EC504F354E3A399C57E7BF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA22A57869702BB3EC504F354E3A399C57E7BF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 07:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:63:36:69:2f:20:80:e1:98:1f:dd:02:85:d0:f5:60:01:81:73:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EA22A57869702BB3EC504F354E3A399C57E7BF5
        Validity
            Not Before: May 22 16:11:36 2026 GMT
            Not After : May 21 16:16:36 2027 GMT
        Subject: CN=382DFD710ED2892C8C60C88DACA5AB995378DDB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:9b:fd:21:9b:8d:8f:65:95:56:57:ad:07:
                    f2:df:52:61:dc:33:34:cd:67:f1:a0:1a:48:cf:a3:
                    e2:d7:aa:28:9e:8d:d5:9a:b7:e6:20:72:93:2e:e8:
                    4e:61:cd:f8:82:0c:1d:94:39:b2:61:41:c7:95:14:
                    30:b1:b8:9c:97:b4:fe:3e:a8:89:5e:bb:4b:a4:c0:
                    13:12:9e:3a:3e:c4:02:ab:0c:83:9c:4d:97:7a:6a:
                    57:20:cd:dc:6a:55:ff:43:7c:22:12:da:8d:57:16:
                    b9:25:37:32:10:1e:d2:6a:8f:d2:dc:b4:19:59:a4:
                    15:37:41:6e:4f:2f:0f:f3:31:01:94:d9:28:36:2a:
                    b1:f7:62:2b:1f:fa:b2:df:d5:f7:0d:d1:b6:6a:49:
                    89:b0:a7:94:1c:f2:87:ab:80:4a:49:76:61:be:8a:
                    e7:33:b1:49:9a:b3:c1:fa:16:42:c0:5b:33:26:0e:
                    fd:53:25:75:7e:72:ac:87:1e:be:f8:ba:6f:7f:8b:
                    07:40:c6:e0:5e:30:af:20:87:4b:cc:4f:f6:9e:78:
                    57:af:a1:61:bd:40:4c:91:1d:7c:84:24:9a:96:e1:
                    4f:26:5d:45:77:22:f7:18:ab:77:ad:1a:52:e8:d3:
                    13:c2:99:43:78:ac:90:f5:d5:f1:b7:f9:7e:4b:a7:
                    5b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2D:FD:71:0E:D2:89:2C:8C:60:C8:8D:AC:A5:AB:99:53:78:DD:B0
            X509v3 Authority Key Identifier:
                keyid:6E:A2:2A:57:86:97:02:BB:3E:C5:04:F3:54:E3:A3:99:C5:7E:7B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/6EA22A57869702BB3EC504F354E3A399C57E7BF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA22A57869702BB3EC504F354E3A399C57E7BF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3438203d3e20323731373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8098::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:c3:6b:1e:2f:b6:68:7f:64:17:22:92:9c:ef:97:19:85:c7:
         1f:bd:db:88:b9:fd:4f:24:7c:1d:b0:21:bd:5f:9b:40:d6:ab:
         0a:92:14:41:22:85:ed:77:a4:39:5b:e5:0c:4b:48:ad:0e:e9:
         8c:f3:5f:0c:48:86:4c:17:5f:6c:36:f6:64:d3:16:0c:aa:ec:
         dd:b3:81:6d:f6:8c:cb:a2:50:22:64:9f:bb:43:ae:c7:eb:aa:
         30:7d:07:ca:8a:b0:28:70:25:86:da:b8:bd:fe:60:af:33:cb:
         89:d4:a2:20:f3:8d:35:6a:32:c2:91:8b:0b:1a:c0:1c:a2:7c:
         de:59:2a:3c:2d:11:66:75:8d:c0:16:fb:8e:f7:15:5a:78:9c:
         ee:5c:e2:0b:09:c4:62:63:0b:b9:d7:47:60:cc:c8:f3:04:29:
         c9:03:ad:9b:48:0f:51:3c:35:0a:0b:69:79:18:9a:06:9c:d0:
         05:dd:aa:ff:a0:be:6f:34:0c:b0:c1:fd:f6:86:3e:bf:0c:54:
         9c:0d:cb:0f:6f:a7:77:2a:fa:87:cb:76:6a:78:68:6a:fe:7c:
         de:c0:46:31:19:f3:00:88:29:64:dc:17:61:08:17:24:9a:9d:
         cd:eb:6a:6e:15:ef:96:e9:07:98:70:35:2f:e3:fa:9e:d3:84:
         9a:bf:61:b9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDGM2aS8ggOGYH90ChdD1YAGBc/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVBMjJBNTc4Njk3MDJCQjNFQzUwNEYzNTRFM0EzOTlD
NTdFN0JGNTAeFw0yNjA1MjIxNjExMzZaFw0yNzA1MjExNjE2MzZaMDMxMTAvBgNV
BAMTKDM4MkRGRDcxMEVEMjg5MkM4QzYwQzg4REFDQTVBQjk5NTM3OEREQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAc5v9IZuNj2WVVletB/LfUmHc
MzTNZ/GgGkjPo+LXqiiejdWat+YgcpMu6E5hzfiCDB2UObJhQceVFDCxuJyXtP4+
qIleu0ukwBMSnjo+xAKrDIOcTZd6alcgzdxqVf9DfCIS2o1XFrklNzIQHtJqj9Lc
tBlZpBU3QW5PLw/zMQGU2Sg2KrH3Yisf+rLf1fcN0bZqSYmwp5Qc8oergEpJdmG+
iuczsUmas8H6FkLAWzMmDv1TJXV+cqyHHr74um9/iwdAxuBeMK8gh0vMT/aeeFev
oWG9QEyRHXyEJJqW4U8mXUV3IvcYq3etGlLo0xPCmUN4rJD11fG3+X5Lp1ujAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUOC39cQ7SiSyMYMiNrKWrmVN43bAwHwYDVR0j
BBgwFoAUbqIqV4aXArs+xQTzVOOjmcV+e/UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUc4OWdKZ1pleWhmakFOa254RHZNZGhreVhoUWY2VnJlWFJXUmVEemJB
amcvMC82RUEyMkE1Nzg2OTcwMkJCM0VDNTA0RjM1NEUzQTM5OUM1N0U3QkY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFQTIyQTU3ODY5NzAyQkIz
RUM1MDRGMzU0RTNBMzk5QzU3RTdCRjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlHODlnSmdaZXloZmpBTmtueER2TWRoa3lYaFFmNlZyZVhSV1JlRHpiQWpnLzAv
MzIzODMwMzQzYTM4MzAzOTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzczNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASAmDANBgkqhkiG9w0BAQsFAAOCAQEALcNrHi+2
aH9kFyKSnO+XGYXHH73biLn9TyR8HbAhvV+bQNarCpIUQSKF7XekOVvlDEtIrQ7p
jPNfDEiGTBdfbDb2ZNMWDKrs3bOBbfaMy6JQImSfu0Oux+uqMH0HyoqwKHAlhtq4
vf5grzPLidSiIPONNWoywpGLCxrAHKJ83lkqPC0RZnWNwBb7jvcVWnic7lziCwnE
YmMLuddHYMzI8wQpyQOtm0gPUTw1CgtpeRiaBpzQBd2q/6C+bzQMsMH99oY+vwxU
nA3LD2+ndyr6h8t2anhoav583sBGMRnzAIgpZNwXYQgXJJqdzetqbhXvlukHmHA1
L+P6ntOEmr9huQ==
-----END CERTIFICATE-----
Generated at Sun May 24 13:44:29 2026 by rpki-client