Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/323830343a366137343a363830303a3a2f33382d3338203d3e20323730333337.roa
File:                     323830343a366137343a363830303a3a2f33382d3338203d3e20323730333337.roa (raw, json)
Hash identifier:          NL7sfqzIBgeiC2g7/NgLpJ+E7tO7iYnW9HPjkpzRwyk=
Subject key identifier:   73:C5:49:7F:38:D6:22:8F:88:2B:3F:80:CC:2A:BF:18:5D:DB:07:8A
Certificate issuer:       /CN=7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA
Certificate serial:       248AC04F2F07513A44962129B4B83DB415D9D3D7
Authority key identifier: 7D:E2:C3:E9:F3:0F:18:F6:39:E2:99:5D:FD:0F:3A:80:A4:CD:B6:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/323830343a366137343a363830303a3a2f33382d3338203d3e20323730333337.roa
Signing time:             Tue 18 Aug 2026 13:54:30 +0000
ROA not before:           Tue 18 Aug 2026 13:49:30 +0000
ROA not after:            Tue 17 Aug 2027 13:54:30 +0000
asID:                     270337
IP address blocks:        2804:6a74:6800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.crl
                          rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8a:c0:4f:2f:07:51:3a:44:96:21:29:b4:b8:3d:b4:15:d9:d3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA
        Validity
            Not Before: Aug 18 13:49:30 2026 GMT
            Not After : Aug 17 13:54:30 2027 GMT
        Subject: CN=73C5497F38D6228F882B3F80CC2ABF185DDB078A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:0f:52:72:c0:94:e6:7b:bb:83:d7:b7:59:
                    aa:32:e5:0e:99:96:3a:bd:67:1b:24:e2:58:5a:93:
                    f1:41:0b:c5:1f:15:62:cb:90:83:aa:43:3a:52:77:
                    1a:a6:04:c2:69:ad:32:78:5d:c9:df:d6:a2:9b:e1:
                    04:ca:fb:79:19:f2:52:07:23:b7:d8:bd:65:42:34:
                    e2:32:f7:68:6d:c1:b8:41:8a:cd:9b:15:1d:da:e9:
                    9f:cf:14:4e:52:19:66:bc:bb:99:19:71:a0:87:90:
                    37:89:c3:c1:2b:ba:e6:4f:da:e4:13:3a:18:0f:0a:
                    3b:81:c5:55:d7:f7:36:2f:ec:57:e6:ea:80:11:9d:
                    e2:d6:fa:fe:99:3a:0c:de:9b:23:69:d4:ab:db:62:
                    06:cd:c8:67:e4:85:5b:ac:37:18:b4:e5:b4:74:29:
                    f2:91:f5:f2:5d:f3:ef:93:1c:b5:49:a8:56:0f:43:
                    c8:41:08:64:c0:62:42:4e:84:5a:ec:be:c8:4d:c7:
                    8d:fe:5d:e8:0b:16:bc:d9:1e:57:91:a5:ae:5a:2c:
                    32:1e:0a:13:db:ef:8a:f4:8a:9e:46:a5:15:47:04:
                    14:39:46:bd:4c:b4:e7:07:b1:6d:ed:8b:e2:d1:dd:
                    60:a3:24:2f:97:92:f3:2f:84:e6:53:e2:2f:be:dc:
                    99:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C5:49:7F:38:D6:22:8F:88:2B:3F:80:CC:2A:BF:18:5D:DB:07:8A
            X509v3 Authority Key Identifier:
                keyid:7D:E2:C3:E9:F3:0F:18:F6:39:E2:99:5D:FD:0F:3A:80:A4:CD:B6:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/323830343a366137343a363830303a3a2f33382d3338203d3e20323730333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a74:6800::/38

    Signature Algorithm: sha256WithRSAEncryption
         8b:e1:7f:7a:d2:02:6c:3a:79:61:86:15:9c:82:af:fb:07:f4:
         7c:c8:a5:3f:5c:29:68:8e:fb:2e:5f:16:a2:bc:4b:d7:ba:f6:
         18:8c:37:a5:a5:15:94:3a:f9:21:45:fc:b8:75:f6:be:f1:d9:
         81:65:76:d2:50:4c:07:b0:f6:78:f5:4f:ef:d5:fe:31:67:14:
         a6:5d:50:8c:56:47:b5:13:ca:da:d9:d7:d7:ad:9f:d3:d8:b7:
         f5:0c:8a:78:48:ac:b5:12:11:b7:19:3b:0b:4d:57:f6:bc:4c:
         44:c1:bd:f3:1a:d9:86:d7:20:30:69:94:1f:46:3b:26:18:c6:
         92:0e:7e:60:b7:e8:99:ed:3c:bc:83:81:a4:00:c2:95:9a:7a:
         3e:5d:e3:24:e9:a5:bc:2e:e2:c2:b1:48:d5:d7:25:8f:fd:43:
         36:b7:c9:21:d7:df:67:3a:94:6b:30:da:55:1d:f5:97:10:28:
         ad:8b:4f:4b:b2:7f:3b:01:64:53:cb:78:b9:73:d8:0d:7a:83:
         78:07:1e:4c:13:d7:d9:f4:6e:fd:ce:c9:bb:1d:a3:c3:b2:25:
         ac:04:0d:55:ed:a5:95:ac:4b:97:b0:7a:6c:c9:9f:3e:e0:4f:
         a8:c6:27:97:fb:1b:47:17:30:ca:60:47:1d:ce:27:ac:3b:c2:
         8d:f0:75:26
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJIrATy8HUTpEliEptLg9tBXZ09cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RFMkMzRTlGMzBGMThGNjM5RTI5OTVERkQwRjNBODBB
NENEQjZDQTAeFw0yNjA4MTgxMzQ5MzBaFw0yNzA4MTcxMzU0MzBaMDMxMTAvBgNV
BAMTKDczQzU0OTdGMzhENjIyOEY4ODJCM0Y4MENDMkFCRjE4NUREQjA3OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSQ9ScsCU5nu7g9e3Waoy5Q6Z
ljq9Zxsk4lhak/FBC8UfFWLLkIOqQzpSdxqmBMJprTJ4Xcnf1qKb4QTK+3kZ8lIH
I7fYvWVCNOIy92htwbhBis2bFR3a6Z/PFE5SGWa8u5kZcaCHkDeJw8EruuZP2uQT
OhgPCjuBxVXX9zYv7Ffm6oARneLW+v6ZOgzemyNp1KvbYgbNyGfkhVusNxi05bR0
KfKR9fJd8++THLVJqFYPQ8hBCGTAYkJOhFrsvshNx43+XegLFrzZHleRpa5aLDIe
ChPb74r0ip5GpRVHBBQ5Rr1MtOcHsW3ti+LR3WCjJC+XkvMvhOZT4i++3Jl/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUc8VJfzjWIo+IKz+AzCq/GF3bB4owHwYDVR0j
BBgwFoAUfeLD6fMPGPY54pld/Q86gKTNtsowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWNkeW5jTnVwSDlhZ2M4TXNoQmRidERYN0JDM1M0UFBCU2hvVGJqU3M2
RkUvMC83REUyQzNFOUYzMEYxOEY2MzlFMjk5NURGRDBGM0E4MEE0Q0RCNkNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdERTJDM0U5RjMwRjE4RjYz
OUUyOTk1REZEMEYzQTgwQTRDREI2Q0EuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FjZHluY051cEg5YWdjOE1zaEJkYnREWDdCQzNTNFBQQlNob1RialNzNkZFLzAv
MzIzODMwMzQzYTM2NjEzNzM0M2EzNjM4MzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzczMDMzMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEanRoMA0GCSqGSIb3DQEBCwUA
A4IBAQCL4X960gJsOnlhhhWcgq/7B/R8yKU/XClojvsuXxaivEvXuvYYjDelpRWU
OvkhRfy4dfa+8dmBZXbSUEwHsPZ49U/v1f4xZxSmXVCMVke1E8ra2dfXrZ/T2Lf1
DIp4SKy1EhG3GTsLTVf2vExEwb3zGtmG1yAwaZQfRjsmGMaSDn5gt+iZ7Ty8g4Gk
AMKVmno+XeMk6aW8LuLCsUjV1yWP/UM2t8kh199nOpRrMNpVHfWXECiti09Lsn87
AWRTy3i5c9gNeoN4Bx5ME9fZ9G79zsm7HaPDsiWsBA1V7aWVrEuXsHpsyZ8+4E+o
xieX+xtHFzDKYEcdziesO8KN8HUm
-----END CERTIFICATE-----
Generated at Sun Aug 23 05:55:54 2026 by rpki-client