Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a6330613a3a2f34382d3438203d3e20323635313735.roa
File:                     323830343a326263383a6330613a3a2f34382d3438203d3e20323635313735.roa (raw, json)
Hash identifier:          j4M3pjMZzF2cH/ZgqKHJfYkCieKaxvCh/i6MvJe2HF8=
Subject key identifier:   43:74:62:3E:9B:E7:86:89:C5:98:E5:8B:35:4E:5A:4A:39:9E:F1:84
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       2CEA2F1C33F2BD4D6AE5F08536FA870F08567D10
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a6330613a3a2f34382d3438203d3e20323635313735.roa
Signing time:             Thu 03 Sep 2026 11:20:53 +0000
ROA not before:           Thu 03 Sep 2026 11:15:53 +0000
ROA not after:            Thu 02 Sep 2027 11:20:53 +0000
asID:                     265175
IP address blocks:        2804:2bc8:c0a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 12:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ea:2f:1c:33:f2:bd:4d:6a:e5:f0:85:36:fa:87:0f:08:56:7d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Sep  3 11:15:53 2026 GMT
            Not After : Sep  2 11:20:53 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:aa:1a:b8:8f:96:41:2e:80:fc:06:b9:8d:1c:
                    3e:fe:ae:d8:b8:a3:42:a7:6c:09:b4:db:99:67:54:
                    85:2c:14:64:0d:33:cf:b6:77:f4:2c:01:f3:9e:fc:
                    2a:3f:79:ff:b9:5c:c5:4a:8d:8a:4d:65:03:9b:6c:
                    f0:b3:51:79:1d:fa:30:1e:aa:22:5a:63:b9:1f:4e:
                    5f:a2:23:fc:51:e2:5f:18:3f:be:63:fe:6d:dc:8e:
                    2e:ca:e0:8c:f3:ff:c1:96:3f:61:1b:30:6f:10:df:
                    67:ad:77:92:37:65:ac:94:8d:a1:f7:a8:98:49:8f:
                    a7:68:b1:f8:55:da:f5:17:ed:d3:3a:67:28:1a:c6:
                    1d:48:bf:0f:ac:3f:cb:f9:a2:28:b2:e0:2e:06:9e:
                    99:14:e9:b3:1b:88:5d:ec:ea:9e:56:54:7e:82:8d:
                    36:37:a5:f5:20:db:8c:53:53:24:0b:c3:fe:a3:73:
                    31:c4:3c:db:22:dc:69:60:2f:a3:a4:6c:5d:55:b0:
                    4f:eb:7f:ae:e5:01:08:84:f5:fe:4b:8c:d5:3d:68:
                    84:4d:a4:6c:7a:70:99:61:7c:b3:d9:93:82:36:17:
                    41:56:28:5c:4a:d6:80:16:a5:55:23:e1:c2:1a:cc:
                    d3:52:93:31:92:61:a4:dc:24:dc:13:12:bc:7e:b9:
                    01:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:74:62:3E:9B:E7:86:89:C5:98:E5:8B:35:4E:5A:4A:39:9E:F1:84
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a6330613a3a2f34382d3438203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:c0a::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:1f:2e:b3:b2:01:66:8e:63:26:1f:04:0a:0b:8c:8f:cd:b1:
         c6:c9:b8:5d:9b:fc:4b:f3:39:4f:ea:59:42:15:27:ed:d9:b9:
         ef:c6:81:81:0e:b9:cb:6a:62:ce:53:68:19:20:24:83:10:b1:
         1d:e3:36:44:6c:f6:19:66:b9:98:f8:36:be:06:c6:a0:78:95:
         8b:52:81:1b:a7:e8:e0:fe:07:6c:e7:04:5b:4a:04:74:b4:d9:
         fb:08:ef:3f:78:e1:b9:c2:e9:b7:76:9e:77:0e:a3:df:54:3e:
         be:b7:e7:21:13:93:8f:7b:17:67:ac:70:ab:90:ee:56:e0:66:
         52:f8:75:a8:e0:1f:c0:0a:cd:8a:85:73:85:bb:e1:be:bc:90:
         a0:a6:a5:ea:9b:90:d9:ea:10:91:3d:6e:d9:06:30:1f:c2:c2:
         7e:1a:6f:fd:f9:0b:df:89:ec:6d:53:3d:d9:0a:af:b2:8e:78:
         86:c9:7b:aa:f9:16:1f:93:55:1b:97:53:19:7b:40:15:33:d1:
         24:9e:44:e5:0d:18:9b:06:fa:5d:a6:20:5b:7b:f9:83:47:f2:
         6e:69:f7:33:2c:5e:9b:63:24:57:c9:37:5a:e7:73:c2:4d:6a:
         bc:27:46:b8:cb:16:fc:2e:fe:6a:11:3e:ef:44:b5:cf:3c:9f:
         ac:15:ec:80
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIULOovHDPyvU1q5fCFNvqHDwhWfRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMxRDhDNzk2MDNFOTZEMTMwOURGQjlCQTg4QUVCNkE2
MkM3QzY0MjAeFw0yNjA5MDMxMTE1NTNaFw0yNzA5MDIxMTIwNTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTlBQTFBQjg4Rjk2NDEyRTgw
RkMwNkI5OEQxQzNFRkVBRUQ4QjhBMzQyQTc2QzA5QjREQjk5Njc1NDg1MkMxNDY0
MEQzM0NGQjY3N0Y0MkMwMUYzOUVGQzJBM0Y3OUZGQjk1Q0M1NEE4RDhBNEQ2NTAz
OUI2Q0YwQjM1MTc5MURGQTMwMUVBQTIyNUE2M0I5MUY0RTVGQTIyM0ZDNTFFMjVG
MTgzRkJFNjNGRTZEREM4RTJFQ0FFMDhDRjNGRkMxOTYzRjYxMUIzMDZGMTBERjY3
QUQ3NzkyMzc2NUFDOTQ4REExRjdBODk4NDk4RkE3NjhCMUY4NTVEQUY1MTdFREQz
M0E2NzI4MUFDNjFENDhCRjBGQUMzRkNCRjlBMjI4QjJFMDJFMDY5RTk5MTRFOUIz
MUI4ODVERUNFQTlFNTY1NDdFODI4RDM2MzdBNUY1MjBEQjhDNTM1MzI0MEJDM0ZF
QTM3MzMxQzQzQ0RCMjJEQzY5NjAyRkEzQTQ2QzVENTVCMDRGRUI3RkFFRTUwMTA4
ODRGNUZFNEI4Q0Q1M0Q2ODg0NERBNDZDN0E3MDk5NjE3Q0IzRDk5MzgyMzYxNzQx
NTYyODVDNEFENjgwMTZBNTU1MjNFMUMyMUFDQ0QzNTI5MzMxOTI2MUE0REMyNERD
MTMxMkJDN0VCOTAxNUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmaoauI+WQS6A/Aa5jRw+/q7YuKNCp2wJtNuZZ1SFLBRkDTPPtnf0
LAHznvwqP3n/uVzFSo2KTWUDm2zws1F5HfowHqoiWmO5H05foiP8UeJfGD++Y/5t
3I4uyuCM8//Blj9hGzBvEN9nrXeSN2WslI2h96iYSY+naLH4Vdr1F+3TOmcoGsYd
SL8PrD/L+aIosuAuBp6ZFOmzG4hd7OqeVlR+go02N6X1INuMU1MkC8P+o3MxxDzb
ItxpYC+jpGxdVbBP63+u5QEIhPX+S4zVPWiETaRsenCZYXyz2ZOCNhdBVihcStaA
FqVVI+HCGszTUpMxkmGk3CTcExK8frkBXwIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FEN0Yj6b54aJxZjlizVOWko5nvGEMB8GA1UdIwQYMBaAFCMdjHlgPpbRMJ37m6iK
62pix8ZCMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzluNEpSS2pDbXk2NGE5
eVl4NUpuUm04VVA4MzFrM3VWZ3J6emJIQlI2ZzdkLzEvMjMxRDhDNzk2MDNFOTZE
MTMwOURGQjlCQTg4QUVCNkE2MkM3QzY0Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMzFEOEM3OTYwM0U5NkQxMzA5REZCOUJBODhBRUI2QTYyQzdD
NjQyLmNlcjCBtAYIKwYBBQUHAQsEgacwgaQwgaEGCCsGAQUFBzALhoGUcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85bjRKUktqQ215NjRhOXlZeDVK
blJtOFVQODMxazN1VmdyenpiSEJSNmc3ZC8xLzMyMzgzMDM0M2EzMjYyNjMzODNh
NjMzMDYxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNjM1MzEzNzM1LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKAQryAwKMA0GCSqGSIb3DQEBCwUAA4IBAQAkHy6zsgFmjmMmHwQKC4yP
zbHGybhdm/xL8zlP6llCFSft2bnvxoGBDrnLamLOU2gZICSDELEd4zZEbPYZZrmY
+Da+BsageJWLUoEbp+jg/gds5wRbSgR0tNn7CO8/eOG5wum3dp53DqPfVD6+t+ch
E5OPexdnrHCrkO5W4GZS+HWo4B/ACs2KhXOFu+G+vJCgpqXqm5DZ6hCRPW7ZBjAf
wsJ+Gm/9+QvfiextUz3ZCq+yjniGyXuq+RYfk1Ubl1MZe0AVM9EknkTlDRibBvpd
piBbe/mDR/JuafczLF6bYyRXyTda53PCTWq8J0a4yxb8Lv5qET7vRLXPPJ+sFeyA
-----END CERTIFICATE-----
Generated at Sun Nov 1 06:44:05 2026 by rpki-client