Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a313330303a3a2f34302d3430203d3e203631393031.roa
File:                     323830343a313337303a313330303a3a2f34302d3430203d3e203631393031.roa (raw, json)
Hash identifier:          lEzzxfq87YDM1AE60CwxnN8f3jlYEmHGJX0W1cnLdMA=
Subject key identifier:   61:10:86:B0:26:5B:4C:CA:5E:74:8F:DC:39:B2:BA:CD:16:DA:A7:D4
Certificate issuer:       /CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
Certificate serial:       2043CE5DA2F73E7489ADA9C6877A918E6DE45E
Authority key identifier: 78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a313330303a3a2f34302d3430203d3e203631393031.roa
Signing time:             Wed 12 Aug 2026 16:18:28 +0000
ROA not before:           Wed 12 Aug 2026 16:13:28 +0000
ROA not after:            Wed 11 Aug 2027 16:18:28 +0000
asID:                     61901
IP address blocks:        2804:1370:1300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:43:ce:5d:a2:f7:3e:74:89:ad:a9:c6:87:7a:91:8e:6d:e4:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
        Validity
            Not Before: Aug 12 16:13:28 2026 GMT
            Not After : Aug 11 16:18:28 2027 GMT
        Subject: CN=611086B0265B4CCA5E748FDC39B2BACD16DAA7D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:68:8e:c0:5a:1e:1e:72:a6:bb:05:32:f2:
                    45:d5:fd:39:19:ae:27:b4:76:88:63:00:f6:39:ed:
                    97:e8:f0:e6:0c:ec:fb:bc:b7:c3:1c:20:3c:e0:d6:
                    cb:0e:f0:b1:6b:29:be:ee:de:f9:62:aa:8b:f2:7b:
                    c2:04:d7:a5:9f:51:1a:a1:4f:8e:f1:e9:3e:a4:18:
                    63:21:92:a0:6f:7c:2d:47:95:7f:45:31:19:dc:51:
                    7e:44:cc:69:a2:6c:bc:d1:8c:aa:91:cf:95:43:9f:
                    e3:36:48:c7:81:d5:5f:72:36:b8:4f:6a:4d:f5:84:
                    26:58:4a:29:86:72:ce:22:a4:da:c8:d0:27:8f:3e:
                    d2:a0:0f:d5:28:9b:33:00:97:d8:b8:d7:8d:e8:58:
                    b9:3c:15:c0:24:d3:21:87:40:b2:44:ff:7e:b2:22:
                    ea:1e:43:ba:08:2d:5b:f7:d5:38:61:57:02:ce:88:
                    a1:d3:24:02:6e:7f:c4:9c:1f:67:a1:11:4f:84:da:
                    67:d5:6a:2d:e5:1f:31:77:11:5a:2b:17:28:c4:f9:
                    98:17:e3:cf:f9:30:82:80:81:e5:cb:a6:81:4e:c5:
                    a8:23:17:9e:e8:0b:50:7c:96:a7:34:00:18:e6:d6:
                    dd:bf:26:8a:c8:5e:4b:1a:ee:b0:16:18:10:bc:fe:
                    a3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:10:86:B0:26:5B:4C:CA:5E:74:8F:DC:39:B2:BA:CD:16:DA:A7:D4
            X509v3 Authority Key Identifier:
                keyid:78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a313330303a3a2f34302d3430203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1370:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:bd:bc:0d:8b:7d:9c:d3:2e:e6:8a:f2:97:a0:9d:d0:d9:96:
         ee:3e:b7:ea:55:b7:d6:d4:da:50:9c:00:bd:7b:2b:8a:04:e3:
         c6:27:fd:c2:e0:5f:52:a1:18:e9:f3:ea:10:13:6b:4f:e6:06:
         4b:bd:ea:44:44:59:14:dd:41:32:b4:f5:02:da:9f:65:e9:8e:
         7a:81:47:9d:e3:70:10:6b:86:b6:e5:6b:c0:a9:59:c5:da:ac:
         2a:0f:76:47:b8:c4:3f:54:f9:23:db:66:1e:04:e5:42:03:f7:
         36:94:87:f7:fd:15:1f:5c:2b:be:cf:96:99:78:4b:04:db:8a:
         33:0b:4e:c0:e5:91:4f:3b:6e:87:1c:95:f2:61:da:ff:d6:b3:
         4f:af:71:1d:61:27:d5:a9:ac:99:87:3b:fd:14:af:0e:02:25:
         e2:33:48:7a:b9:7a:db:e9:b4:84:57:67:60:35:84:43:97:6d:
         12:dd:81:ce:3e:0c:e8:df:d2:a1:78:19:75:cb:2a:a0:d1:f4:
         af:ec:4d:c2:37:e1:7b:12:9b:9c:72:12:ca:27:f6:9d:a1:25:
         4c:cf:a7:dd:d8:e8:18:90:6f:eb:f7:30:b2:c6:07:c4:a0:ff:
         82:2e:d6:61:68:08:dd:7f:0d:9e:e3:d6:d1:5f:45:34:bf:46:
         68:44:46:8b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgITIEPOXaL3PnSJranGh3qRjm3kXjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg3ODBERkQ2MUU1NDcxRjI0NUE2QkM2REQ0OTM2OTVGN0VE
MENFOTU4MB4XDTI2MDgxMjE2MTMyOFoXDTI3MDgxMTE2MTgyOFowMzExMC8GA1UE
AxMoNjExMDg2QjAyNjVCNENDQTVFNzQ4RkRDMzlCMkJBQ0QxNkRBQTdENDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALbKaI7AWh4ecqa7BTLyRdX9ORmu
J7R2iGMA9jntl+jw5gzs+7y3wxwgPODWyw7wsWspvu7e+WKqi/J7wgTXpZ9RGqFP
jvHpPqQYYyGSoG98LUeVf0UxGdxRfkTMaaJsvNGMqpHPlUOf4zZIx4HVX3I2uE9q
TfWEJlhKKYZyziKk2sjQJ48+0qAP1SibMwCX2LjXjehYuTwVwCTTIYdAskT/frIi
6h5DuggtW/fVOGFXAs6IodMkAm5/xJwfZ6ERT4TaZ9VqLeUfMXcRWisXKMT5mBfj
z/kwgoCB5cumgU7FqCMXnugLUHyWpzQAGObW3b8misheSxrusBYYELz+o8sCAwEA
AaOCAlkwggJVMB0GA1UdDgQWBBRhEIawJltMyl50j9w5srrNFtqn1DAfBgNVHSME
GDAWgBR4Df1h5UcfJFprxt1JNpX37QzpWDAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby85cUxScjZOeGN4dVNmV2lMMnlXVm5YY1JOTjFlNDN0OGIyNnozMmg3ZHl2
Qy8wLzc4MERGRDYxRTU0NzFGMjQ1QTZCQzZERDQ5MzY5NUY3RUQwQ0U5NTguY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNzgwREZENjFFNTQ3MUYyNDVB
NkJDNkRENDkzNjk1RjdFRDBDRTk1OC5jZXIwgbQGCCsGAQUFBwELBIGnMIGkMIGh
BggrBgEFBQcwC4aBlHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OXFMUnI2TnhjeHVTZldpTDJ5V1ZuWGNSTk4xZTQzdDhiMjZ6MzJoN2R5dkMvMC8z
MjM4MzAzNDNhMzEzMzM3MzAzYTMxMzMzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2Qz
ZTIwMzYzMTM5MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEE3ATMA0GCSqGSIb3DQEBCwUAA4IB
AQAavbwNi32c0y7mivKXoJ3Q2ZbuPrfqVbfW1NpQnAC9eyuKBOPGJ/3C4F9SoRjp
8+oQE2tP5gZLvepERFkU3UEytPUC2p9l6Y56gUed43AQa4a25WvAqVnF2qwqD3ZH
uMQ/VPkj22YeBOVCA/c2lIf3/RUfXCu+z5aZeEsE24ozC07A5ZFPO26HHJXyYdr/
1rNPr3EdYSfVqayZhzv9FK8OAiXiM0h6uXrb6bSEV2dgNYRDl20S3YHOPgzo39Kh
eBl1yyqg0fSv7E3CN+F7EpucchLKJ/adoSVMz6fd2OgYkG/r9zCyxgfEoP+CLtZh
aAjdfw2e49bRX0U0v0ZoREaL
-----END CERTIFICATE-----
Generated at Sun Aug 23 12:02:07 2026 by rpki-client