Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/323830343a386135633a3a2f33332d3333203d3e20323733363634.roa
File:                     323830343a386135633a3a2f33332d3333203d3e20323733363634.roa (raw, json)
Hash identifier:          eKWYfSB9wpG54AhryvXKxR/Bb/QpmgioJ0ph2Mfech4=
Subject key identifier:   A0:32:39:7D:5C:BE:5A:2E:65:DC:6D:6C:66:39:41:DD:6F:70:45:74
Certificate issuer:       /CN=62877F2B1F6C47CB9BE968F819C94EFC7AA528B9
Certificate serial:       3432A2ECD3B0A9F0772B96197CF856ACF818AB50
Authority key identifier: 62:87:7F:2B:1F:6C:47:CB:9B:E9:68:F8:19:C9:4E:FC:7A:A5:28:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/323830343a386135633a3a2f33332d3333203d3e20323733363634.roa
Signing time:             Thu 20 Aug 2026 01:32:41 +0000
ROA not before:           Thu 20 Aug 2026 01:27:41 +0000
ROA not after:            Thu 19 Aug 2027 01:32:41 +0000
asID:                     273664
IP address blocks:        2804:8a5c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.crl
                          rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 23:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:32:a2:ec:d3:b0:a9:f0:77:2b:96:19:7c:f8:56:ac:f8:18:ab:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62877F2B1F6C47CB9BE968F819C94EFC7AA528B9
        Validity
            Not Before: Aug 20 01:27:41 2026 GMT
            Not After : Aug 19 01:32:41 2027 GMT
        Subject: CN=A032397D5CBE5A2E65DC6D6C663941DD6F704574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:af:ed:1c:9e:2c:be:6e:c0:79:78:ec:54:
                    ed:f8:d3:cc:69:38:0c:f5:9d:e8:40:bc:65:02:49:
                    b9:c6:6a:1e:c3:5e:15:83:21:37:10:fa:a7:8c:1f:
                    8b:c8:3a:2a:06:11:5e:72:d2:8c:c2:44:f4:54:2f:
                    4c:88:86:87:86:7d:ff:1f:cd:e2:0f:e5:75:c7:57:
                    d4:ad:41:a5:6c:33:e3:52:86:44:ab:8c:2c:7f:7e:
                    bf:19:f8:74:f9:f4:45:88:47:0d:be:f6:55:57:f5:
                    aa:4f:29:34:fa:fc:f9:37:ab:32:39:a1:9a:b6:c9:
                    f6:3d:4e:35:f9:04:47:88:fe:82:35:70:8d:86:bd:
                    59:0a:71:be:66:65:97:8f:5a:ee:22:56:94:22:08:
                    81:29:bc:c6:00:14:91:c6:e6:73:b5:94:a8:45:ee:
                    19:3a:01:62:68:04:27:54:a9:96:29:fb:b7:cd:6a:
                    3f:d1:fb:d5:ce:f5:9b:2c:02:7a:a4:04:c7:49:67:
                    a0:6f:c8:5c:b4:73:a4:4d:12:1f:81:17:6f:5a:7a:
                    17:9f:eb:96:ad:11:e3:ff:3d:90:b9:ea:a4:0d:b8:
                    17:c3:ad:2e:d2:3c:fc:c8:43:46:d2:e5:b0:2e:af:
                    50:73:bb:62:3c:ac:29:32:12:d9:b4:f1:4a:69:14:
                    4f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:32:39:7D:5C:BE:5A:2E:65:DC:6D:6C:66:39:41:DD:6F:70:45:74
            X509v3 Authority Key Identifier:
                keyid:62:87:7F:2B:1F:6C:47:CB:9B:E9:68:F8:19:C9:4E:FC:7A:A5:28:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/323830343a386135633a3a2f33332d3333203d3e20323733363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a5c::/33

    Signature Algorithm: sha256WithRSAEncryption
         77:61:18:d1:70:10:34:e6:c7:dd:75:a3:c7:e0:58:22:3d:73:
         c0:69:bf:f9:7e:85:47:6e:70:98:f1:7b:09:00:4b:af:3b:6a:
         a5:fb:1d:19:47:44:4f:c0:7b:f7:6c:7c:14:8a:6b:70:9e:b9:
         74:6a:d6:48:ec:72:77:b9:07:fd:cf:af:dc:06:56:8b:7d:92:
         99:2f:45:d5:38:f9:f7:e1:0e:f8:4e:2c:d7:19:18:04:2f:c2:
         a5:51:c3:b3:5b:8a:aa:eb:1e:ed:bb:7a:cd:c4:c0:66:00:e7:
         23:1e:a1:94:1e:86:a3:a9:8e:e3:cd:a4:1b:3f:23:af:88:15:
         94:62:0b:ee:6d:33:8d:07:af:9b:6e:46:9f:f7:fe:83:5f:be:
         e9:67:04:5d:05:5a:09:71:70:38:54:83:d8:49:6a:15:15:ab:
         cd:60:c5:65:ea:19:93:de:76:31:be:34:91:dc:8a:fa:48:4c:
         56:4a:43:cb:2b:6c:32:7f:04:5a:76:d0:d1:89:da:a1:a5:f9:
         39:56:22:b4:d7:68:a5:82:4b:6d:fe:b2:52:ef:da:87:0f:58:
         45:b3:1a:1e:ae:c3:28:80:93:14:1c:a2:a6:88:cb:c9:8a:54:
         60:20:5a:12:eb:03:67:b7:3d:d9:81:9b:ad:38:e6:66:03:e2:
         0b:39:f9:1f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNDKi7NOwqfB3K5YZfPhWrPgYq1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI4NzdGMkIxRjZDNDdDQjlCRTk2OEY4MTlDOTRFRkM3
QUE1MjhCOTAeFw0yNjA4MjAwMTI3NDFaFw0yNzA4MTkwMTMyNDFaMDMxMTAvBgNV
BAMTKEEwMzIzOTdENUNCRTVBMkU2NURDNkQ2QzY2Mzk0MURENkY3MDQ1NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmbK/tHJ4svm7AeXjsVO3408xp
OAz1nehAvGUCSbnGah7DXhWDITcQ+qeMH4vIOioGEV5y0ozCRPRUL0yIhoeGff8f
zeIP5XXHV9StQaVsM+NShkSrjCx/fr8Z+HT59EWIRw2+9lVX9apPKTT6/Pk3qzI5
oZq2yfY9TjX5BEeI/oI1cI2GvVkKcb5mZZePWu4iVpQiCIEpvMYAFJHG5nO1lKhF
7hk6AWJoBCdUqZYp+7fNaj/R+9XO9ZssAnqkBMdJZ6BvyFy0c6RNEh+BF29aehef
65atEeP/PZC56qQNuBfDrS7SPPzIQ0bS5bAur1Bzu2I8rCkyEtm08UppFE/1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoDI5fVy+Wi5l3G1sZjlB3W9wRXQwHwYDVR0j
BBgwFoAUYod/Kx9sR8ub6Wj4GclO/HqlKLkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWVMZnlYdzExNENlQTk5V0dSaHJhaThlMUc0NzdHV2FHUHdOOVJkOFFz
RnIvMC82Mjg3N0YyQjFGNkM0N0NCOUJFOTY4RjgxOUM5NEVGQzdBQTUyOEI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyODc3RjJCMUY2QzQ3Q0I5
QkU5NjhGODE5Qzk0RUZDN0FBNTI4QjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzllTGZ5WHcxMTRDZUE5OVdHUmhyYWk4ZTFHNDc3R1dhR1B3TjlSZDhRc0ZyLzAv
MzIzODMwMzQzYTM4NjEzNTYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMz
MzYzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASKXAAwDQYJKoZIhvcNAQELBQADggEBAHdhGNFw
EDTmx911o8fgWCI9c8Bpv/l+hUducJjxewkAS687aqX7HRlHRE/Ae/dsfBSKa3Ce
uXRq1kjscne5B/3Pr9wGVot9kpkvRdU4+ffhDvhOLNcZGAQvwqVRw7NbiqrrHu27
es3EwGYA5yMeoZQehqOpjuPNpBs/I6+IFZRiC+5tM40Hr5tuRp/3/oNfvulnBF0F
WglxcDhUg9hJahUVq81gxWXqGZPedjG+NJHcivpITFZKQ8srbDJ/BFp20NGJ2qGl
+TlWIrTXaKWCS23+slLv2ocPWEWzGh6uwyiAkxQcoqaIy8mKVGAgWhLrA2e3PdmB
m6045mYD4gs5+R8=
-----END CERTIFICATE-----
Generated at Mon Aug 24 06:52:54 2026 by rpki-client