Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3a2f33322d313238203d3e20323636353332.roa
File:                     323830343a336437343a3a2f33322d313238203d3e20323636353332.roa (raw, json)
Hash identifier:          jc6zZtOcfeWoWacinLsvMPh6bz3exA1uEY/iF+/h5kk=
Subject key identifier:   E7:8D:A2:AD:E2:18:EE:2B:5F:80:91:07:E5:6A:89:37:2D:09:CE:BC
Certificate issuer:       /CN=C1CB366144D597E5C1773B22449337BACEB7A019
Certificate serial:       75591580D6D524430666A195BD46ECD16BEEFDB4
Authority key identifier: C1:CB:36:61:44:D5:97:E5:C1:77:3B:22:44:93:37:BA:CE:B7:A0:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1CB366144D597E5C1773B22449337BACEB7A019.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3a2f33322d313238203d3e20323636353332.roa
Signing time:             Thu 18 Jun 2026 00:10:13 +0000
ROA not before:           Thu 18 Jun 2026 00:05:13 +0000
ROA not after:            Thu 17 Jun 2027 00:10:13 +0000
asID:                     266532
IP address blocks:        2804:3d74::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/C1CB366144D597E5C1773B22449337BACEB7A019.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/C1CB366144D597E5C1773B22449337BACEB7A019.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1CB366144D597E5C1773B22449337BACEB7A019.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 00:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:59:15:80:d6:d5:24:43:06:66:a1:95:bd:46:ec:d1:6b:ee:fd:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1CB366144D597E5C1773B22449337BACEB7A019
        Validity
            Not Before: Jun 18 00:05:13 2026 GMT
            Not After : Jun 17 00:10:13 2027 GMT
        Subject: CN=E78DA2ADE218EE2B5F809107E56A89372D09CEBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:49:f2:5a:1a:1e:7b:71:3e:ec:ff:76:fe:
                    7e:4c:ef:cb:6f:08:57:d7:4a:ad:4e:80:45:75:57:
                    2d:29:99:01:81:26:20:36:73:a6:04:eb:e7:86:20:
                    cf:ad:52:06:ce:8c:2d:55:b7:a5:f6:90:c6:83:c1:
                    4b:46:e7:56:75:64:78:34:b5:d6:62:81:16:75:e6:
                    d7:36:40:ff:48:18:48:a4:b5:76:7d:84:0d:c2:2d:
                    d9:c7:ef:de:7b:6f:40:41:cb:3d:16:ab:f7:1e:1f:
                    60:01:0f:90:79:28:a7:90:72:fb:85:40:70:f0:ae:
                    dd:90:8b:4f:28:6a:3b:4a:58:af:53:3b:c1:cc:58:
                    aa:4f:02:2b:e7:75:90:06:47:93:a1:85:75:46:18:
                    07:db:bb:97:84:5b:92:dd:f4:21:07:cc:a7:4a:63:
                    b9:26:9b:6f:e5:46:55:5f:70:f0:05:0c:bc:f2:ea:
                    9f:19:45:f8:cd:0b:12:12:01:7a:64:92:6f:f5:0b:
                    6c:50:36:b2:bb:bc:8f:fd:7c:cb:85:34:0e:22:d1:
                    92:c5:53:be:84:63:b3:02:ff:8c:71:42:31:87:72:
                    eb:9d:8b:26:cc:8c:c9:0d:14:07:6f:60:7f:43:b1:
                    61:6e:0c:63:ee:39:ed:a2:2e:b3:cd:aa:cb:b2:aa:
                    50:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8D:A2:AD:E2:18:EE:2B:5F:80:91:07:E5:6A:89:37:2D:09:CE:BC
            X509v3 Authority Key Identifier:
                keyid:C1:CB:36:61:44:D5:97:E5:C1:77:3B:22:44:93:37:BA:CE:B7:A0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/C1CB366144D597E5C1773B22449337BACEB7A019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1CB366144D597E5C1773B22449337BACEB7A019.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3a2f33322d313238203d3e20323636353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:88:51:29:32:97:8e:4e:3f:a4:81:09:e7:35:4a:c2:e4:a8:
         88:5c:36:72:17:6b:ec:23:a7:d1:54:6b:42:16:35:c7:1b:fe:
         6e:c2:38:d5:d1:95:58:e6:e9:ea:a4:e2:e2:99:64:55:d3:30:
         c3:45:34:fd:14:fb:a3:c7:6f:35:b1:62:bd:8f:be:bb:49:66:
         45:4d:af:74:28:14:cf:b6:d2:dd:6d:14:01:c1:b1:9e:b4:ea:
         77:f9:3a:99:e2:16:77:3a:e4:b0:dc:0b:bd:7b:cc:c3:da:ba:
         05:b7:35:ed:66:a5:ca:30:b4:27:dc:35:b3:d8:4e:a1:b8:d1:
         59:42:13:4d:30:84:aa:67:21:95:5d:1c:af:c7:c2:97:f7:c8:
         e9:e3:b6:e0:ea:50:fb:74:05:ad:4c:a1:77:df:c6:46:b5:19:
         67:1d:6c:ff:9a:16:6d:0d:1d:fe:57:ba:6f:d5:b8:c8:53:88:
         9f:71:6b:47:ad:04:7f:ed:ac:65:48:62:55:03:03:6c:be:6d:
         4d:5b:38:f8:53:59:5e:81:4b:69:c9:89:83:8c:7e:07:6f:1c:
         0e:18:25:02:84:58:96:b6:d9:61:37:84:c7:36:44:71:e4:08:
         c5:77:65:de:7f:3d:a4:02:61:5c:a0:c8:d3:14:fe:89:1d:4b:
         d2:b6:02:76
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUdVkVgNbVJEMGZqGVvUbs0Wvu/bQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFDQjM2NjE0NEQ1OTdFNUMxNzczQjIyNDQ5MzM3QkFD
RUI3QTAxOTAeFw0yNjA2MTgwMDA1MTNaFw0yNzA2MTcwMDEwMTNaMDMxMTAvBgNV
BAMTKEU3OERBMkFERTIxOEVFMkI1RjgwOTEwN0U1NkE4OTM3MkQwOUNFQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/EnyWhoee3E+7P92/n5M78tv
CFfXSq1OgEV1Vy0pmQGBJiA2c6YE6+eGIM+tUgbOjC1Vt6X2kMaDwUtG51Z1ZHg0
tdZigRZ15tc2QP9IGEiktXZ9hA3CLdnH7957b0BByz0Wq/ceH2ABD5B5KKeQcvuF
QHDwrt2Qi08oajtKWK9TO8HMWKpPAivndZAGR5OhhXVGGAfbu5eEW5Ld9CEHzKdK
Y7kmm2/lRlVfcPAFDLzy6p8ZRfjNCxISAXpkkm/1C2xQNrK7vI/9fMuFNA4i0ZLF
U76EY7MC/4xxQjGHcuudiybMjMkNFAdvYH9DsWFuDGPuOe2iLrPNqsuyqlCTAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU542ireIY7itfgJEH5WqJNy0JzrwwHwYDVR0j
BBgwFoAUwcs2YUTVl+XBdzsiRJM3us63oBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJodzNGSzNXUlJZTUF6cW56S2ZZUnNQY2pBWXI1dTNtalA0TnpuNkp2
dEwvMC9DMUNCMzY2MTQ0RDU5N0U1QzE3NzNCMjI0NDkzMzdCQUNFQjdBMDE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxQ0IzNjYxNDRENTk3RTVD
MTc3M0IyMjQ0OTMzN0JBQ0VCN0EwMTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliaHczRkszV1JSWU1BenFuektmWVJzUGNqQVlyNXUzbWpQNE56bjZKdnRMLzAv
MzIzODMwMzQzYTMzNjQzNzM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzNTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBD10MA0GCSqGSIb3DQEBCwUAA4IBAQBEiFEp
MpeOTj+kgQnnNUrC5KiIXDZyF2vsI6fRVGtCFjXHG/5uwjjV0ZVY5unqpOLimWRV
0zDDRTT9FPujx281sWK9j767SWZFTa90KBTPttLdbRQBwbGetOp3+TqZ4hZ3OuSw
3Au9e8zD2roFtzXtZqXKMLQn3DWz2E6huNFZQhNNMISqZyGVXRyvx8KX98jp47bg
6lD7dAWtTKF338ZGtRlnHWz/mhZtDR3+V7pv1bjIU4ifcWtHrQR/7axlSGJVAwNs
vm1NWzj4U1legUtpyYmDjH4HbxwOGCUChFiWttlhN4THNkRx5AjFd2Xefz2kAmFc
oMjTFP6JHUvStgJ2
-----END CERTIFICATE-----
Generated at Sat Jun 27 13:10:51 2026 by rpki-client