Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/323830343a336661383a3a2f33322d3438203d3e20323635393035.roa
File:                     323830343a336661383a3a2f33322d3438203d3e20323635393035.roa (raw, json)
Hash identifier:          R6xX27Le5oJ7NZ/gXhL4uDBxZ9kZXGBaAhinONQRCas=
Subject key identifier:   E7:D5:AF:E7:53:5A:9B:B7:E8:5A:B0:99:DF:E5:16:36:67:D7:52:C9
Certificate issuer:       /CN=E2D9846CEE4D21AA545F30565FD0121FBB599C61
Certificate serial:       4990E488439E5AB27AD3C07C772ECAA1CC0BABED
Authority key identifier: E2:D9:84:6C:EE:4D:21:AA:54:5F:30:56:5F:D0:12:1F:BB:59:9C:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2D9846CEE4D21AA545F30565FD0121FBB599C61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/323830343a336661383a3a2f33322d3438203d3e20323635393035.roa
Signing time:             Thu 20 Aug 2026 18:39:26 +0000
ROA not before:           Thu 20 Aug 2026 18:34:26 +0000
ROA not after:            Thu 19 Aug 2027 18:39:26 +0000
asID:                     265905
IP address blocks:        2804:3fa8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/E2D9846CEE4D21AA545F30565FD0121FBB599C61.crl
                          rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/E2D9846CEE4D21AA545F30565FD0121FBB599C61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2D9846CEE4D21AA545F30565FD0121FBB599C61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 15:23:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:90:e4:88:43:9e:5a:b2:7a:d3:c0:7c:77:2e:ca:a1:cc:0b:ab:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2D9846CEE4D21AA545F30565FD0121FBB599C61
        Validity
            Not Before: Aug 20 18:34:26 2026 GMT
            Not After : Aug 19 18:39:26 2027 GMT
        Subject: CN=E7D5AFE7535A9BB7E85AB099DFE5163667D752C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:c9:4f:12:6f:32:18:53:e4:69:aa:9e:3b:
                    3a:1a:f1:71:c1:42:9f:a4:18:58:38:93:d9:64:e8:
                    43:24:da:35:28:cb:db:ba:69:8a:cc:df:33:cb:28:
                    af:4a:71:2f:1f:d8:9c:02:c2:0b:dc:a3:37:ac:1b:
                    9c:80:b1:9b:24:f4:94:08:e4:50:58:b0:eb:fb:0d:
                    1f:78:0a:f7:8e:5b:f1:f6:3c:ca:02:b3:9c:99:6c:
                    a6:1b:c1:02:7e:e8:e7:10:31:4e:95:62:af:e6:b8:
                    7a:4e:87:de:8a:d8:ce:ce:ab:d5:3d:df:72:a2:64:
                    9d:10:ec:09:51:b9:d0:08:d3:14:0f:92:70:b5:91:
                    c4:dd:ec:54:d5:2c:ac:8e:55:88:eb:4e:32:52:5c:
                    e5:58:8d:7a:ae:f9:b0:12:2f:71:41:2c:5e:99:cf:
                    2d:ca:ba:98:53:de:ad:fe:8e:1e:70:45:b4:1e:15:
                    ad:03:91:56:24:d3:d1:f1:e4:52:e0:27:08:67:63:
                    cc:6d:28:f5:f4:80:72:18:8a:d8:64:71:fc:aa:1a:
                    8d:81:af:6e:df:95:2b:a6:80:34:a5:42:1f:13:27:
                    47:23:ba:6f:31:76:fb:30:ab:56:b2:e5:15:6e:4d:
                    fd:a1:84:8d:32:dd:e2:8a:ba:2b:92:1d:84:f2:4e:
                    67:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D5:AF:E7:53:5A:9B:B7:E8:5A:B0:99:DF:E5:16:36:67:D7:52:C9
            X509v3 Authority Key Identifier:
                keyid:E2:D9:84:6C:EE:4D:21:AA:54:5F:30:56:5F:D0:12:1F:BB:59:9C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/E2D9846CEE4D21AA545F30565FD0121FBB599C61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2D9846CEE4D21AA545F30565FD0121FBB599C61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/323830343a336661383a3a2f33322d3438203d3e20323635393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fa8::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:56:5d:93:0a:0c:84:5c:10:24:3a:72:2e:27:2c:d4:12:e7:
         b1:2d:c9:f9:73:00:28:77:96:ab:3b:a2:be:f1:39:4b:32:c1:
         b1:46:46:63:54:8f:ff:35:c4:c6:03:54:9c:41:7a:ef:7e:da:
         db:60:8b:48:8d:b6:6d:ac:ee:82:9d:b2:1e:d0:82:b8:a3:0d:
         bf:e6:07:ff:b8:b0:79:c2:4a:92:5d:12:d1:85:6a:71:ea:4c:
         2d:a9:3a:2f:9c:5c:48:37:ca:5a:cb:33:f6:a3:c7:6d:c4:d6:
         cc:32:c1:ff:2c:9a:86:ad:c9:91:b5:dc:e2:1d:81:f4:7f:27:
         c5:02:e4:2f:13:15:62:d2:14:db:4c:4c:c2:10:45:5e:7b:a7:
         ae:1b:97:49:45:cb:95:15:8b:e4:25:09:ae:60:8e:ae:1b:87:
         f3:2b:97:99:70:2d:9e:1c:0a:cf:21:a3:15:a9:55:5c:87:d6:
         3a:f1:2a:34:fe:a5:28:5f:69:90:ef:e5:0d:c8:7e:80:f4:d1:
         e9:af:80:26:d5:b2:6c:d7:38:91:fb:65:24:f0:1d:aa:33:53:
         70:86:66:7b:81:26:e2:ac:b3:29:d8:27:d6:e1:27:49:fc:a7:
         a9:ac:51:1c:5a:a1:52:de:a3:d7:37:bc:6f:ab:79:10:4f:62:
         03:7f:0f:f0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSZDkiEOeWrJ608B8dy7KocwLq+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJEOTg0NkNFRTREMjFBQTU0NUYzMDU2NUZEMDEyMUZC
QjU5OUM2MTAeFw0yNjA4MjAxODM0MjZaFw0yNzA4MTkxODM5MjZaMDMxMTAvBgNV
BAMTKEU3RDVBRkU3NTM1QTlCQjdFODVBQjA5OURGRTUxNjM2NjdENzUyQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyE8lPEm8yGFPkaaqeOzoa8XHB
Qp+kGFg4k9lk6EMk2jUoy9u6aYrM3zPLKK9KcS8f2JwCwgvcozesG5yAsZsk9JQI
5FBYsOv7DR94CveOW/H2PMoCs5yZbKYbwQJ+6OcQMU6VYq/muHpOh96K2M7Oq9U9
33KiZJ0Q7AlRudAI0xQPknC1kcTd7FTVLKyOVYjrTjJSXOVYjXqu+bASL3FBLF6Z
zy3KuphT3q3+jh5wRbQeFa0DkVYk09Hx5FLgJwhnY8xtKPX0gHIYithkcfyqGo2B
r27flSumgDSlQh8TJ0cjum8xdvswq1ay5RVuTf2hhI0y3eKKuiuSHYTyTmf5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU59Wv51Nam7foWrCZ3+UWNmfXUskwHwYDVR0j
BBgwFoAU4tmEbO5NIapUXzBWX9ASH7tZnGEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZDMVlVUHY1ajhFOGtuYzdDWXREd3BudlgzNW5Ld0VTUGZEbXhTdUN1
RkovMC9FMkQ5ODQ2Q0VFNEQyMUFBNTQ1RjMwNTY1RkQwMTIxRkJCNTk5QzYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UyRDk4NDZDRUU0RDIxQUE1
NDVGMzA1NjVGRDAxMjFGQkI1OTlDNjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FmQzFZVVB2NWo4RThrbmM3Q1l0RHdwbnZYMzVuS3dFU1BmRG14U3VDdUZKLzAv
MzIzODMwMzQzYTMzNjY2MTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzkzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ/qDANBgkqhkiG9w0BAQsFAAOCAQEAYFZdkwoM
hFwQJDpyLics1BLnsS3J+XMAKHeWqzuivvE5SzLBsUZGY1SP/zXExgNUnEF6737a
22CLSI22bazugp2yHtCCuKMNv+YH/7iwecJKkl0S0YVqcepMLak6L5xcSDfKWssz
9qPHbcTWzDLB/yyahq3JkbXc4h2B9H8nxQLkLxMVYtIU20xMwhBFXnunrhuXSUXL
lRWL5CUJrmCOrhuH8yuXmXAtnhwKzyGjFalVXIfWOvEqNP6lKF9pkO/lDch+gPTR
6a+AJtWybNc4kftlJPAdqjNTcIZme4Em4qyzKdgn1uEnSfynqaxRHFqhUt6j1ze8
b6t5EE9iA38P8A==
-----END CERTIFICATE-----
Generated at Mon Aug 24 04:33:51 2026 by rpki-client