Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/323830343a3762633a3a2f33332d3333203d3e203532383631.roa
File:                     323830343a3762633a3a2f33332d3333203d3e203532383631.roa (raw, json)
Hash identifier:          3/XHWTrJRaMETNKHJ3O126Qn4gySu0CnasHihiahgu8=
Subject key identifier:   48:E3:72:23:16:E7:7F:C1:A3:DB:36:7D:C1:15:A2:4E:B8:94:CB:03
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       264373099FF5BE74A0C0FF858D9632C54D8D0F32
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/323830343a3762633a3a2f33332d3333203d3e203532383631.roa
Signing time:             Tue 27 Oct 2026 15:46:35 +0000
ROA not before:           Tue 27 Oct 2026 15:41:35 +0000
ROA not after:            Tue 26 Oct 2027 15:46:35 +0000
asID:                     52861
IP address blocks:        2804:7bc::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 03:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:43:73:09:9f:f5:be:74:a0:c0:ff:85:8d:96:32:c5:4d:8d:0f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Oct 27 15:41:35 2026 GMT
            Not After : Oct 26 15:46:35 2027 GMT
        Subject: CN=48E3722316E77FC1A3DB367DC115A24EB894CB03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:55:7e:e9:c1:f8:76:92:44:a0:ec:ea:75:
                    0e:38:57:78:bc:4d:8e:32:44:7e:82:42:3d:e2:1f:
                    6c:07:e7:2c:c6:78:fa:13:af:85:34:7c:62:aa:4c:
                    bb:31:37:63:31:7a:ce:8a:e2:35:68:b0:83:38:29:
                    4d:e1:24:20:a1:cf:2f:99:a1:0d:0b:0d:db:c9:04:
                    d8:64:d3:87:81:fa:46:89:bd:91:cc:b4:d2:56:35:
                    41:28:1d:e7:c6:ef:9d:28:aa:28:e5:5b:ef:74:66:
                    fa:fb:59:30:90:a0:b4:49:ce:df:17:d5:95:53:fb:
                    68:ac:24:e2:a7:2c:7b:13:46:c8:a4:bc:79:e9:7c:
                    8c:64:87:74:3a:89:76:4a:f6:c7:51:eb:30:e6:ac:
                    07:54:76:55:54:9c:1f:a6:3e:0b:ab:aa:e2:1c:50:
                    d5:00:36:a2:76:1f:bf:44:71:36:2a:80:97:63:a5:
                    e7:cf:83:fa:ac:c8:8e:5e:40:ad:38:0d:2a:e9:e8:
                    b7:34:32:db:54:9b:df:fe:2e:8f:46:01:f2:c7:03:
                    49:e4:5c:05:8b:1e:79:68:43:e5:f2:f8:69:83:41:
                    3c:d2:98:e4:fb:86:e5:62:56:1c:27:d0:d9:cd:52:
                    46:e1:90:bc:37:36:64:81:8d:aa:9c:d9:12:72:6a:
                    bd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E3:72:23:16:E7:7F:C1:A3:DB:36:7D:C1:15:A2:4E:B8:94:CB:03
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/323830343a3762633a3a2f33332d3333203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bc::/33

    Signature Algorithm: sha256WithRSAEncryption
         2c:be:dd:2b:d8:ab:55:a7:99:f5:d4:6a:4c:f4:2f:80:88:a5:
         66:11:02:58:46:85:c8:3d:dc:c6:35:5e:e4:46:48:6a:5c:5d:
         6c:bb:48:1c:97:9f:b8:75:94:6b:63:2a:24:05:4d:fc:cb:3f:
         8c:e4:e7:21:86:72:11:55:cf:63:27:01:03:39:b7:fb:bd:e1:
         f1:81:f3:97:3a:70:39:08:90:3e:ed:3c:21:95:2b:f8:62:94:
         a5:4c:1b:bd:f8:dc:3a:3f:79:a0:26:5f:1f:e4:ba:8f:63:ba:
         71:be:3f:e9:c3:73:84:1d:54:d9:31:18:7a:c4:7f:91:4c:0d:
         72:7c:a5:d9:4b:39:46:cb:01:ef:23:e1:12:2f:1c:06:5c:47:
         c8:3b:f7:d4:6a:8e:bb:0a:cc:fa:a3:8c:4e:1d:90:29:de:f5:
         6c:08:c6:f6:92:8d:1a:b5:f2:ae:da:af:e9:42:39:05:3b:de:
         0c:a9:ae:a1:83:7f:bf:07:03:31:68:66:ca:35:bb:2c:61:51:
         22:f8:ed:13:26:89:0f:f0:42:80:a1:23:26:98:82:25:97:46:
         7f:7d:1e:66:d7:c2:83:a1:8c:9b:2e:6e:6e:a3:9a:84:1a:c8:
         f5:e3:a8:e2:dd:06:e7:07:f3:c6:8d:bc:bd:1f:3c:f3:14:a9:
         f7:01:e7:56
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJkNzCZ/1vnSgwP+FjZYyxU2NDzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4RkJFQ0MzRDczNDg3NUNEQzIzQjU1QjlFNTA5MkVB
MjdERjI3MDAeFw0yNjEwMjcxNTQxMzVaFw0yNzEwMjYxNTQ2MzVaMDMxMTAvBgNV
BAMTKDQ4RTM3MjIzMTZFNzdGQzFBM0RCMzY3REMxMTVBMjRFQjg5NENCMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9oVV+6cH4dpJEoOzqdQ44V3i8
TY4yRH6CQj3iH2wH5yzGePoTr4U0fGKqTLsxN2Mxes6K4jVosIM4KU3hJCChzy+Z
oQ0LDdvJBNhk04eB+kaJvZHMtNJWNUEoHefG750oqijlW+90Zvr7WTCQoLRJzt8X
1ZVT+2isJOKnLHsTRsikvHnpfIxkh3Q6iXZK9sdR6zDmrAdUdlVUnB+mPgurquIc
UNUANqJ2H79EcTYqgJdjpefPg/qsyI5eQK04DSrp6Lc0MttUm9/+Lo9GAfLHA0nk
XAWLHnloQ+Xy+GmDQTzSmOT7huViVhwn0NnNUkbhkLw3NmSBjaqc2RJyar3XAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUSONyIxbnf8Gj2zZ9wRWiTriUywMwHwYDVR0j
BBgwFoAUCI++zD1zSHXNwjtVueUJLqJ98nAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjF1VVdpVWtuUkRTV1AzM2ZTSDVuSzdMZndNOU1QMWNnZXZLVjU5eGhB
S1gvMC8wODhGQkVDQzNENzM0ODc1Q0RDMjNCNTVCOUU1MDkyRUEyN0RGMjcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4OEZCRUNDM0Q3MzQ4NzVD
REMyM0I1NUI5RTUwOTJFQTI3REYyNzAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0IxdVVXaVVrblJEU1dQMzNmU0g1bks3TGZ3TTlNUDFjZ2V2S1Y1OXhoQUtYLzAv
MzIzODMwMzQzYTM3NjI2MzNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDM1MzIzODM2
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgcoBAe8ADANBgkqhkiG9w0BAQsFAAOCAQEALL7dK9irVaeZ
9dRqTPQvgIilZhECWEaFyD3cxjVe5EZIalxdbLtIHJefuHWUa2MqJAVN/Ms/jOTn
IYZyEVXPYycBAzm3+73h8YHzlzpwOQiQPu08IZUr+GKUpUwbvfjcOj95oCZfH+S6
j2O6cb4/6cNzhB1U2TEYesR/kUwNcnyl2Us5RssB7yPhEi8cBlxHyDv31GqOuwrM
+qOMTh2QKd71bAjG9pKNGrXyrtqv6UI5BTveDKmuoYN/vwcDMWhmyjW7LGFRIvjt
EyaJD/BCgKEjJpiCJZdGf30eZtfCg6GMmy5ubqOahBrI9eOo4t0G5wfzxo28vR88
8xSp9wHnVg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 16:57:54 2026 by rpki-client