Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a383030303a3a2f33332d3333203d3e20323637343239.roa
File:                     323830343a343136303a383030303a3a2f33332d3333203d3e20323637343239.roa (raw, json)
Hash identifier:          s6Cs7Z5NXOqgJi7IIpzgi7n7EqsSbiH/UFb1R6kVj7Q=
Subject key identifier:   61:DF:C6:0B:AE:A6:04:54:F9:47:8B:BA:1B:0F:B7:81:C0:5D:17:14
Certificate issuer:       /CN=6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF
Certificate serial:       7B0DE6B4E614142AC115E24B571C2FA85B2221C6
Authority key identifier: 6B:D6:13:29:CC:9F:31:3A:9A:21:BD:E8:18:B6:8C:5D:BB:7B:EB:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a383030303a3a2f33332d3333203d3e20323637343239.roa
Signing time:             Tue 15 Sep 2026 17:31:34 +0000
ROA not before:           Tue 15 Sep 2026 17:26:34 +0000
ROA not after:            Tue 14 Sep 2027 17:31:34 +0000
asID:                     267429
IP address blocks:        2804:4160:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.crl
                          rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 01:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0d:e6:b4:e6:14:14:2a:c1:15:e2:4b:57:1c:2f:a8:5b:22:21:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF
        Validity
            Not Before: Sep 15 17:26:34 2026 GMT
            Not After : Sep 14 17:31:34 2027 GMT
        Subject: CN=61DFC60BAEA60454F9478BBA1B0FB781C05D1714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:1b:cf:f5:22:3f:9b:74:7c:db:bf:d5:71:
                    50:55:2d:76:84:99:57:fc:17:dd:81:86:5b:53:66:
                    9d:79:b1:72:4c:2a:ad:dc:da:07:a1:09:03:70:87:
                    70:ee:91:2f:45:36:4c:69:ef:80:f8:3d:bf:3c:32:
                    b5:d5:a0:c9:cf:2f:0f:d8:5f:34:3d:25:52:d8:b2:
                    9e:e2:86:c6:06:43:a3:0f:5d:0e:ae:1e:89:d0:93:
                    24:84:63:c0:65:11:95:f0:6f:f9:88:73:00:ca:e0:
                    f2:de:77:40:e4:97:9b:2e:c2:a6:54:54:8c:ea:2f:
                    a1:5c:ec:0b:a0:2a:98:13:f6:dc:12:d8:1a:76:01:
                    fe:a5:88:9b:1a:3f:15:23:7c:55:7c:e4:7d:9e:c5:
                    23:58:a4:d5:4b:de:9f:ee:49:70:1d:82:00:4d:ce:
                    d6:63:c9:fb:aa:95:32:90:89:73:a1:dd:b7:59:ed:
                    3f:ee:5b:8f:11:e7:b5:6f:38:c0:0c:c4:1e:bf:44:
                    24:56:a3:71:89:56:7e:5c:e2:30:5c:6c:65:15:1c:
                    4a:e5:a3:25:ca:d1:d3:66:12:09:74:56:a6:5b:65:
                    a1:59:6c:1a:44:f2:db:7c:6c:ac:90:8a:0d:6b:3c:
                    dd:cf:ed:f8:c4:9e:4b:00:87:cf:de:4f:62:ce:37:
                    50:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DF:C6:0B:AE:A6:04:54:F9:47:8B:BA:1B:0F:B7:81:C0:5D:17:14
            X509v3 Authority Key Identifier:
                keyid:6B:D6:13:29:CC:9F:31:3A:9A:21:BD:E8:18:B6:8C:5D:BB:7B:EB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/323830343a343136303a383030303a3a2f33332d3333203d3e20323637343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4160:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         21:56:49:ae:1b:02:39:f0:07:6e:ae:da:b0:3b:21:f9:d5:b6:
         08:5c:73:ce:30:2f:c1:d8:4e:6a:12:da:47:bf:98:da:1a:c4:
         12:cb:cc:ab:a3:80:5f:ea:d7:ae:e7:b4:da:04:b1:27:be:7e:
         ba:fe:87:a3:5e:0e:41:47:14:42:f4:37:0a:d5:e4:e7:f5:08:
         25:25:2a:00:34:0c:5f:03:6d:14:ec:17:0d:25:71:cc:4d:88:
         68:46:a6:5a:5e:7b:45:3f:29:2c:d5:96:5c:fd:e7:27:bf:9e:
         76:0c:84:96:bc:22:a3:e7:bf:ca:7d:93:f3:5e:b5:40:65:81:
         20:37:34:c5:b2:ff:ca:e4:0c:f1:c8:4e:a0:2b:9c:d4:41:f6:
         ea:6b:86:67:fc:e2:02:ca:96:15:3c:52:c9:d8:be:c9:db:18:
         5b:77:cc:c1:99:b8:4f:8b:e5:0b:69:0f:f4:c2:b6:0f:a0:3c:
         62:ef:a1:25:e4:45:15:7c:46:af:2d:f0:65:a6:2d:eb:9e:19:
         1c:e4:9d:55:a9:e2:d5:17:6e:6e:60:2d:ce:31:2a:ed:7d:e8:
         8e:80:57:01:63:b2:83:a5:14:f4:81:97:1e:15:c7:b7:e1:30:
         06:b3:37:5b:1d:1f:52:d7:30:98:cc:3b:96:58:bf:4b:0b:0c:
         e6:1c:12:60
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUew3mtOYUFCrBFeJLVxwvqFsiIcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJENjEzMjlDQzlGMzEzQTlBMjFCREU4MThCNjhDNURC
QjdCRUJFRjAeFw0yNjA5MTUxNzI2MzRaFw0yNzA5MTQxNzMxMzRaMDMxMTAvBgNV
BAMTKDYxREZDNjBCQUVBNjA0NTRGOTQ3OEJCQTFCMEZCNzgxQzA1RDE3MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzgBvP9SI/m3R827/VcVBVLXaE
mVf8F92BhltTZp15sXJMKq3c2gehCQNwh3DukS9FNkxp74D4Pb88MrXVoMnPLw/Y
XzQ9JVLYsp7ihsYGQ6MPXQ6uHonQkySEY8BlEZXwb/mIcwDK4PLed0Dkl5suwqZU
VIzqL6Fc7AugKpgT9twS2Bp2Af6liJsaPxUjfFV85H2exSNYpNVL3p/uSXAdggBN
ztZjyfuqlTKQiXOh3bdZ7T/uW48R57VvOMAMxB6/RCRWo3GJVn5c4jBcbGUVHErl
oyXK0dNmEgl0VqZbZaFZbBpE8tt8bKyQig1rPN3P7fjEnksAh8/eT2LON1BLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUYd/GC66mBFT5R4u6Gw+3gcBdFxQwHwYDVR0j
BBgwFoAUa9YTKcyfMTqaIb3oGLaMXbt76+8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVB4cXJjelpRMlFOak5vUllUQXg4VGFhS2JQRGFjWFZLd2ZjTGZvUTFI
aDMvMC82QkQ2MTMyOUNDOUYzMTNBOUEyMUJERTgxOEI2OEM1REJCN0JFQkVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCRDYxMzI5Q0M5RjMxM0E5
QTIxQkRFODE4QjY4QzVEQkI3QkVCRUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FQeHFyY3paUTJRTmpOb1JZVEF4OFRhYUtiUERhY1hWS3dmY0xmb1ExSGgzLzAv
MzIzODMwMzQzYTM0MzEzNjMwM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNzM0MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEQWCAMA0GCSqGSIb3DQEBCwUA
A4IBAQAhVkmuGwI58AdurtqwOyH51bYIXHPOMC/B2E5qEtpHv5jaGsQSy8yro4Bf
6teu57TaBLEnvn66/oejXg5BRxRC9DcK1eTn9QglJSoANAxfA20U7BcNJXHMTYho
RqZaXntFPyks1ZZc/ecnv552DISWvCKj57/KfZPzXrVAZYEgNzTFsv/K5AzxyE6g
K5zUQfbqa4Zn/OICypYVPFLJ2L7J2xhbd8zBmbhPi+ULaQ/0wrYPoDxi76El5EUV
fEavLfBlpi3rnhkc5J1VqeLVF25uYC3OMSrtfeiOgFcBY7KDpRT0gZceFce34TAG
szdbHR9S1zCYzDuWWL9LCwzmHBJg
-----END CERTIFICATE-----
Generated at Wed Oct 14 10:00:16 2026 by rpki-client