Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a623030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a623030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          7VUadhU6KzxXHrNge+QMUpMNiCPtbhNoo8fQ4yiMTSo=
Subject key identifier:   F9:8C:08:5F:B4:4E:1F:16:0B:4B:5E:D5:93:19:FC:93:5F:2A:0A:9E
Certificate issuer:       /CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
Certificate serial:       72BE929F75F23D068FD31D95B79A896123C9CD02
Authority key identifier: 01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a623030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Mon 28 Sep 2026 15:07:45 +0000
ROA not before:           Mon 28 Sep 2026 15:02:45 +0000
ROA not after:            Mon 27 Sep 2027 15:07:45 +0000
asID:                     268296
IP address blocks:        2804:4efc:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:be:92:9f:75:f2:3d:06:8f:d3:1d:95:b7:9a:89:61:23:c9:cd:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
        Validity
            Not Before: Sep 28 15:02:45 2026 GMT
            Not After : Sep 27 15:07:45 2027 GMT
        Subject: CN=F98C085FB44E1F160B4B5ED59319FC935F2A0A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a7:9e:f7:ee:47:a7:21:f8:46:77:90:48:e1:
                    bf:dd:6d:6b:16:d2:9b:47:2b:62:ec:97:e2:75:20:
                    48:47:a5:20:6a:dd:a8:3d:0d:67:1b:27:06:89:75:
                    60:8d:97:d8:a3:54:e1:0c:4f:0d:89:d7:99:fb:d0:
                    4f:a4:cf:5c:4b:48:0e:a1:e5:d5:83:5e:69:9c:8c:
                    78:aa:ee:59:a7:bd:9a:35:fc:b3:41:ce:b5:84:48:
                    e8:47:e5:ee:80:c1:ec:b7:f8:95:28:7b:a4:ba:a6:
                    e1:c5:68:ff:a9:ce:80:f5:12:47:95:70:5b:57:d0:
                    f0:15:e4:30:4f:f4:34:2a:36:9c:81:08:0d:73:1a:
                    81:40:f0:d0:ee:fa:47:da:9e:63:49:31:5b:fb:d5:
                    56:a5:39:13:30:0b:b9:16:df:c1:f6:60:ab:22:32:
                    ca:c5:28:b6:ea:0b:0a:c5:62:29:fc:22:d8:a0:fd:
                    a4:a7:d6:75:45:7b:df:c2:0c:83:a7:3e:f3:69:c0:
                    a4:d0:c4:42:89:d1:64:12:04:41:e5:6e:bd:79:5a:
                    89:72:b9:74:08:8b:e4:fc:62:f2:ab:88:89:43:eb:
                    18:df:e6:ab:d0:e1:0e:78:21:bb:78:a0:2c:6c:c6:
                    6a:1d:cf:bf:e8:d6:e1:0b:78:65:61:e1:30:48:c4:
                    c9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8C:08:5F:B4:4E:1F:16:0B:4B:5E:D5:93:19:FC:93:5F:2A:0A:9E
            X509v3 Authority Key Identifier:
                keyid:01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a623030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         66:e9:6a:40:10:37:17:41:84:a2:a4:19:19:83:66:0a:2e:84:
         bd:34:5b:87:83:f8:55:5e:38:55:0c:c5:11:6c:a8:86:c1:ce:
         3b:a3:84:02:d7:83:34:33:70:00:bf:d8:35:f3:84:07:c1:a0:
         48:e7:6a:14:a2:89:5c:af:57:ac:bc:c4:ce:0f:c8:ab:c2:7c:
         47:01:f8:cc:36:a8:42:2b:8a:91:6b:ce:50:a2:44:8f:c3:29:
         a0:81:03:8e:07:4f:ac:81:6e:80:11:55:e9:34:85:e6:e8:88:
         9d:82:a3:8c:dd:dd:8f:c6:c0:28:f4:47:12:16:54:43:71:a9:
         40:5e:d2:05:02:2e:39:bd:90:15:cb:ac:52:12:4b:e9:06:00:
         6e:7d:d4:85:bb:3b:07:50:e2:e4:34:f2:53:cc:cf:61:5e:89:
         46:f4:22:3f:1e:5e:83:3b:36:d6:1d:01:c5:b5:d4:1c:93:ee:
         f2:c3:c0:3b:fd:7b:45:fa:99:ec:9f:b4:cf:7c:76:8b:41:63:
         fd:c0:54:8a:d9:0b:5f:db:df:30:d9:46:06:bc:bf:79:00:59:
         6c:bd:29:de:55:a8:81:c3:4b:4a:8a:20:88:ba:06:20:4d:e6:
         54:3e:6f:40:63:ec:33:81:c4:c2:4f:31:bd:6d:52:ca:67:e8:
         ea:49:37:cd
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUcr6Sn3XyPQaP0x2Vt5qJYSPJzQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE0QjE5OTBFOTk3M0ZBMEI2RkE4RENBNzdDRDhBMDcx
MUJCMEQ4RjAeFw0yNjA5MjgxNTAyNDVaFw0yNzA5MjcxNTA3NDVaMDMxMTAvBgNV
BAMTKEY5OEMwODVGQjQ0RTFGMTYwQjRCNUVENTkzMTlGQzkzNUYyQTBBOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCop5737kenIfhGd5BI4b/dbWsW
0ptHK2Lsl+J1IEhHpSBq3ag9DWcbJwaJdWCNl9ijVOEMTw2J15n70E+kz1xLSA6h
5dWDXmmcjHiq7lmnvZo1/LNBzrWESOhH5e6Awey3+JUoe6S6puHFaP+pzoD1EkeV
cFtX0PAV5DBP9DQqNpyBCA1zGoFA8NDu+kfanmNJMVv71ValORMwC7kW38H2YKsi
MsrFKLbqCwrFYin8Itig/aSn1nVFe9/CDIOnPvNpwKTQxEKJ0WQSBEHlbr15Woly
uXQIi+T8YvKriIlD6xjf5qvQ4Q54Ibt4oCxsxmodz7/o1uELeGVh4TBIxMnlAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU+YwIX7ROHxYLS17Vkxn8k18qCp4wHwYDVR0j
BBgwFoAUAUsZkOmXP6C2+o3Kd82KBxG7DY8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ
SnIvMC8wMTRCMTk5MEU5OTczRkEwQjZGQThEQ0E3N0NEOEEwNzExQkIwRDhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxNEIxOTkwRTk5NzNGQTBC
NkZBOERDQTc3Q0Q4QTA3MTFCQjBEOEYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv
MzIzODMwMzQzYTM0NjU2NjYzM2E2MjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgETvywMA0GCSqGSIb3DQEBCwUA
A4IBAQBm6WpAEDcXQYSipBkZg2YKLoS9NFuHg/hVXjhVDMURbKiGwc47o4QC14M0
M3AAv9g184QHwaBI52oUoolcr1esvMTOD8irwnxHAfjMNqhCK4qRa85QokSPwymg
gQOOB0+sgW6AEVXpNIXm6IidgqOM3d2PxsAo9EcSFlRDcalAXtIFAi45vZAVy6xS
EkvpBgBufdSFuzsHUOLkNPJTzM9hXolG9CI/Hl6DOzbWHQHFtdQck+7yw8A7/XtF
+pnsn7TPfHaLQWP9wFSK2Qtf298w2UYGvL95AFlsvSneVaiBw0tKiiCIugYgTeZU
Pm9AY+wzgcTCTzG9bVLKZ+jqSTfN
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:48:22 2026 by rpki-client