Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9mbSL2GHGvvnNxEPSUS73Dgohfe6iiPfZCHwT9pTrJNR/0/323830343a383234343a383030303a3a2f33382d3338203d3e20323732353039.roa
File:                     323830343a383234343a383030303a3a2f33382d3338203d3e20323732353039.roa (raw, json)
Hash identifier:          tDxBrFvpCFcX3l01Nnqq6vKhoffWsCm79Zb21uNo8WU=
Subject key identifier:   22:F8:56:08:28:1B:BE:A6:BF:20:02:24:65:9B:4E:7E:6C:77:33:16
Certificate issuer:       /CN=612F3D6F815450DFE551B39116022AA577AE6B1F
Certificate serial:       06B6B2B5A8044B52B3BDE94E624BE04D1D68289D
Authority key identifier: 61:2F:3D:6F:81:54:50:DF:E5:51:B3:91:16:02:2A:A5:77:AE:6B:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612F3D6F815450DFE551B39116022AA577AE6B1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9mbSL2GHGvvnNxEPSUS73Dgohfe6iiPfZCHwT9pTrJNR/0/323830343a383234343a383030303a3a2f33382d3338203d3e20323732353039.roa
Signing time:             Sun 24 May 2026 04:06:43 +0000
ROA not before:           Sun 24 May 2026 04:01:43 +0000
ROA not after:            Sun 23 May 2027 04:06:43 +0000
asID:                     272509
IP address blocks:        2804:8244:8000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9mbSL2GHGvvnNxEPSUS73Dgohfe6iiPfZCHwT9pTrJNR/0/612F3D6F815450DFE551B39116022AA577AE6B1F.crl
                          rsync://rpki-repo.registro.br/repo/9mbSL2GHGvvnNxEPSUS73Dgohfe6iiPfZCHwT9pTrJNR/0/612F3D6F815450DFE551B39116022AA577AE6B1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612F3D6F815450DFE551B39116022AA577AE6B1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 04:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b6:b2:b5:a8:04:4b:52:b3:bd:e9:4e:62:4b:e0:4d:1d:68:28:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612F3D6F815450DFE551B39116022AA577AE6B1F
        Validity
            Not Before: May 24 04:01:43 2026 GMT
            Not After : May 23 04:06:43 2027 GMT
        Subject: CN=22F85608281BBEA6BF200224659B4E7E6C773316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:bb:76:66:c1:8c:f9:be:8c:83:01:6c:c1:
                    a5:d8:c3:ba:8a:a3:19:ed:9c:0f:14:be:0d:af:37:
                    a9:f9:d5:86:1c:74:e5:8a:3b:8c:40:14:20:cf:86:
                    a9:27:3e:65:fe:4c:45:22:41:76:70:f9:c6:18:ca:
                    8a:67:06:b5:32:ae:39:ef:36:ad:20:17:0b:2b:06:
                    c5:2f:d1:e6:55:49:f3:73:ee:02:ce:15:85:85:5c:
                    3a:41:ad:11:30:7a:fa:63:30:36:fb:96:e9:d2:ca:
                    a4:a0:6e:f9:19:97:20:13:13:cd:f1:ad:80:c7:fd:
                    3c:d0:03:f3:cd:52:ee:21:09:c1:d5:f6:c4:ec:50:
                    50:26:36:b4:9f:0d:1b:f7:1d:6c:72:15:98:6f:16:
                    9f:08:9c:13:d1:22:c7:54:6a:a5:8d:66:7e:06:b4:
                    48:50:a7:4a:89:f1:ab:25:51:e3:ea:0e:dd:aa:43:
                    d9:03:6a:c3:94:19:80:94:40:91:b0:15:13:53:e9:
                    5d:59:64:b5:21:9b:33:eb:d6:b7:d9:48:c6:90:44:
                    2b:41:c9:34:2f:61:c5:06:2a:95:96:5b:25:b0:e2:
                    ef:cf:30:9c:ac:2e:16:f7:46:b8:ce:58:46:55:ff:
                    00:c1:fd:cc:5d:11:cc:5a:e6:d6:42:7c:2c:e2:af:
                    d1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F8:56:08:28:1B:BE:A6:BF:20:02:24:65:9B:4E:7E:6C:77:33:16
            X509v3 Authority Key Identifier:
                keyid:61:2F:3D:6F:81:54:50:DF:E5:51:B3:91:16:02:2A:A5:77:AE:6B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9mbSL2GHGvvnNxEPSUS73Dgohfe6iiPfZCHwT9pTrJNR/0/612F3D6F815450DFE551B39116022AA577AE6B1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612F3D6F815450DFE551B39116022AA577AE6B1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mbSL2GHGvvnNxEPSUS73Dgohfe6iiPfZCHwT9pTrJNR/0/323830343a383234343a383030303a3a2f33382d3338203d3e20323732353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8244:8000::/38

    Signature Algorithm: sha256WithRSAEncryption
         68:03:01:19:a1:d9:c0:2e:38:36:ed:2e:6c:bc:29:17:26:5d:
         f2:b3:07:7a:7c:e8:6f:07:28:35:f7:9c:80:8e:49:e3:3c:11:
         2e:32:e4:2b:b9:fa:3d:e1:f2:5f:c1:9f:05:49:3f:aa:b4:c6:
         e8:80:16:2e:6b:25:4c:19:57:ff:72:2b:fd:0a:aa:28:c7:85:
         c7:c4:47:8e:14:4c:11:db:dd:91:7a:20:22:ac:e5:a7:36:66:
         d0:35:35:0f:2d:5e:e0:77:33:50:70:73:36:cc:b2:3a:2c:30:
         9a:7c:0d:97:10:e0:7c:fc:0b:18:11:b8:52:c1:91:d2:15:9d:
         e1:d1:d2:88:d3:9f:34:4e:75:06:24:bf:48:bb:5a:2f:18:4f:
         a8:ea:cb:f0:7e:ba:b3:04:67:81:10:64:1b:55:c5:17:c9:40:
         1e:aa:99:7b:96:bb:d8:6d:fb:c3:be:08:ff:5f:13:f4:1f:ca:
         6d:d0:fd:51:7f:a2:8d:e6:ee:25:37:d7:28:02:a1:61:ac:07:
         f4:3a:f9:f8:0a:f8:88:bb:d2:de:72:ed:13:58:a6:25:03:8f:
         3c:c2:0c:c7:55:a6:55:b6:35:b6:d2:d8:ef:7a:ba:70:22:16:
         22:6d:50:f1:99:5f:13:db:ad:cf:4c:97:4f:41:ef:71:71:bb:
         ff:bb:f3:76
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBraytagES1KzvelOYkvgTR1oKJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEyRjNENkY4MTU0NTBERkU1NTFCMzkxMTYwMjJBQTU3
N0FFNkIxRjAeFw0yNjA1MjQwNDAxNDNaFw0yNzA1MjMwNDA2NDNaMDMxMTAvBgNV
BAMTKDIyRjg1NjA4MjgxQkJFQTZCRjIwMDIyNDY1OUI0RTdFNkM3NzMzMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyqLt2ZsGM+b6MgwFswaXYw7qK
oxntnA8Uvg2vN6n51YYcdOWKO4xAFCDPhqknPmX+TEUiQXZw+cYYyopnBrUyrjnv
Nq0gFwsrBsUv0eZVSfNz7gLOFYWFXDpBrREwevpjMDb7lunSyqSgbvkZlyATE83x
rYDH/TzQA/PNUu4hCcHV9sTsUFAmNrSfDRv3HWxyFZhvFp8InBPRIsdUaqWNZn4G
tEhQp0qJ8aslUePqDt2qQ9kDasOUGYCUQJGwFRNT6V1ZZLUhmzPr1rfZSMaQRCtB
yTQvYcUGKpWWWyWw4u/PMJysLhb3RrjOWEZV/wDB/cxdEcxa5tZCfCzir9HxAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUIvhWCCgbvqa/IAIkZZtOfmx3MxYwHwYDVR0j
BBgwFoAUYS89b4FUUN/lUbORFgIqpXeuax8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW1iU0wyR0hHdnZuTnhFUFNVUzczRGdvaGZlNmlpUGZaQ0h3VDlwVHJK
TlIvMC82MTJGM0Q2RjgxNTQ1MERGRTU1MUIzOTExNjAyMkFBNTc3QUU2QjFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMkYzRDZGODE1NDUwREZF
NTUxQjM5MTE2MDIyQUE1NzdBRTZCMUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzltYlNMMkdIR3Z2bk54RVBTVVM3M0Rnb2hmZTZpaVBmWkNId1Q5cFRySk5SLzAv
MzIzODMwMzQzYTM4MzIzNDM0M2EzODMwMzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzczMjM1MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEgkSAMA0GCSqGSIb3DQEBCwUA
A4IBAQBoAwEZodnALjg27S5svCkXJl3yswd6fOhvByg195yAjknjPBEuMuQrufo9
4fJfwZ8FST+qtMbogBYuayVMGVf/civ9Cqoox4XHxEeOFEwR292ReiAirOWnNmbQ
NTUPLV7gdzNQcHM2zLI6LDCafA2XEOB8/AsYEbhSwZHSFZ3h0dKI0580TnUGJL9I
u1ovGE+o6svwfrqzBGeBEGQbVcUXyUAeqpl7lrvYbfvDvgj/XxP0H8pt0P1Rf6KN
5u4lN9coAqFhrAf0Ovn4CviIu9Lecu0TWKYlA488wgzHVaZVtjW20tjverpwIhYi
bVDxmV8T263PTJdPQe9xcbv/u/N2
-----END CERTIFICATE-----
Generated at Sun May 24 14:06:55 2026 by rpki-client