Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/B9wox35NMea8QAdBcmDu5LZTd3FzyXX2iX9MBLZukBPP/0/323830343a326130633a3a2f33322d3334203d3e20323634303533.roa
File:                     323830343a326130633a3a2f33322d3334203d3e20323634303533.roa (raw, json)
Hash identifier:          ZYtMQ/BkgpB5nnVtzwjcLprxFZ2kxrProkoOgGbes5k=
Subject key identifier:   BF:A6:9D:AE:F7:F4:DA:77:6C:A9:69:0D:D6:5D:2E:40:72:B8:F9:6A
Certificate issuer:       /CN=8EBC5E01A63F9FF4E39A989F8968E1274668A5AF
Certificate serial:       1B401771A5E90E27B8B63322801873F3686814D7
Authority key identifier: 8E:BC:5E:01:A6:3F:9F:F4:E3:9A:98:9F:89:68:E1:27:46:68:A5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EBC5E01A63F9FF4E39A989F8968E1274668A5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9wox35NMea8QAdBcmDu5LZTd3FzyXX2iX9MBLZukBPP/0/323830343a326130633a3a2f33322d3334203d3e20323634303533.roa
Signing time:             Sat 12 Sep 2026 16:42:23 +0000
ROA not before:           Sat 12 Sep 2026 16:37:23 +0000
ROA not after:            Sat 11 Sep 2027 16:42:23 +0000
asID:                     264053
IP address blocks:        2804:2a0c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B9wox35NMea8QAdBcmDu5LZTd3FzyXX2iX9MBLZukBPP/0/8EBC5E01A63F9FF4E39A989F8968E1274668A5AF.crl
                          rsync://rpki-repo.registro.br/repo/B9wox35NMea8QAdBcmDu5LZTd3FzyXX2iX9MBLZukBPP/0/8EBC5E01A63F9FF4E39A989F8968E1274668A5AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EBC5E01A63F9FF4E39A989F8968E1274668A5AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 03:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:40:17:71:a5:e9:0e:27:b8:b6:33:22:80:18:73:f3:68:68:14:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EBC5E01A63F9FF4E39A989F8968E1274668A5AF
        Validity
            Not Before: Sep 12 16:37:23 2026 GMT
            Not After : Sep 11 16:42:23 2027 GMT
        Subject: CN=BFA69DAEF7F4DA776CA9690DD65D2E4072B8F96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:92:d9:d4:78:c2:49:e3:04:ce:67:08:11:90:
                    6d:1e:53:e9:bd:43:74:3f:cb:9c:4a:70:b2:de:c6:
                    f3:51:3a:d7:24:5a:42:61:82:62:63:b1:56:a9:4b:
                    be:d0:5e:8a:17:36:4e:f4:5b:f4:40:2b:b4:79:58:
                    f6:05:8a:45:26:d5:50:e0:bf:a1:27:5f:75:10:4e:
                    71:40:14:10:d2:08:eb:b3:f7:10:b5:6c:4b:3f:22:
                    10:0f:46:07:1a:f0:c7:5d:23:57:8e:4f:12:74:d5:
                    8d:72:11:b7:d9:2c:b4:68:13:65:b7:50:19:55:cd:
                    ff:26:d5:ed:94:ed:f1:11:1a:3e:83:2d:94:2f:d1:
                    a1:ab:50:2f:3a:f1:e0:1f:a5:82:62:de:14:89:19:
                    b8:b1:cc:78:83:35:8e:72:c4:d8:79:87:77:d7:ef:
                    c4:14:19:97:eb:03:77:f7:31:11:48:93:67:30:a9:
                    e6:1f:52:9f:90:09:b2:12:25:10:6e:0e:30:45:c8:
                    8e:f3:8a:af:c1:e9:79:d8:c0:2b:51:8e:93:15:5f:
                    b5:7d:2c:46:06:7e:e2:ae:5e:0f:c5:57:50:0d:19:
                    8b:a0:eb:a6:ad:0b:de:b8:23:fe:a8:db:7a:3d:41:
                    d9:bd:35:87:2a:59:01:bb:aa:31:84:97:75:d2:e7:
                    13:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A6:9D:AE:F7:F4:DA:77:6C:A9:69:0D:D6:5D:2E:40:72:B8:F9:6A
            X509v3 Authority Key Identifier:
                keyid:8E:BC:5E:01:A6:3F:9F:F4:E3:9A:98:9F:89:68:E1:27:46:68:A5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9wox35NMea8QAdBcmDu5LZTd3FzyXX2iX9MBLZukBPP/0/8EBC5E01A63F9FF4E39A989F8968E1274668A5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EBC5E01A63F9FF4E39A989F8968E1274668A5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9wox35NMea8QAdBcmDu5LZTd3FzyXX2iX9MBLZukBPP/0/323830343a326130633a3a2f33322d3334203d3e20323634303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         e2:b3:ff:83:cc:4d:bc:fb:41:60:82:da:28:a7:5c:ec:33:49:
         d8:95:d7:92:22:06:eb:73:44:55:9f:ab:b9:b5:0d:d3:42:64:
         bc:b1:db:c3:7c:14:ad:e7:ec:aa:2e:b5:13:e9:ab:87:d4:0a:
         06:fd:1a:92:dc:b0:73:f3:41:b9:99:1e:90:e5:11:40:7f:5a:
         1c:5d:ef:e0:bc:e7:f7:3c:3b:58:64:50:63:fb:13:6f:86:b6:
         86:f4:db:45:30:b1:ae:ad:d4:19:07:d3:80:5f:fa:ff:2f:4d:
         8e:6e:fc:43:71:bd:ec:7a:40:ec:d1:65:2b:e7:69:a2:b3:9e:
         c2:93:3b:a7:28:2c:c4:1c:fc:6e:f3:6c:07:68:63:c4:9e:3a:
         9a:51:13:11:e9:e4:93:66:76:c0:96:30:e1:e0:f4:b7:49:fb:
         fb:5d:0e:ea:48:f6:51:75:7a:31:d1:fa:b6:5f:aa:a4:1a:b4:
         8a:be:a6:1b:80:9c:e8:e8:35:25:2c:b5:aa:a1:a1:af:27:71:
         d6:48:ef:5b:53:bc:8a:12:cf:31:14:e1:ed:aa:e3:af:71:fd:
         be:12:b5:92:87:c0:8b:03:90:b2:d6:9d:4d:06:2d:e1:4e:8a:
         a6:7b:ac:52:f1:f7:8e:a9:b8:ab:fe:e2:93:c4:99:5a:e5:39:
         bd:5b:a0:cf
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUG0AXcaXpDie4tjMigBhz82hoFNcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVCQzVFMDFBNjNGOUZGNEUzOUE5ODlGODk2OEUxMjc0
NjY4QTVBRjAeFw0yNjA5MTIxNjM3MjNaFw0yNzA5MTExNjQyMjNaMDMxMTAvBgNV
BAMTKEJGQTY5REFFRjdGNERBNzc2Q0E5NjkwREQ2NUQyRTQwNzJCOEY5NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQktnUeMJJ4wTOZwgRkG0eU+m9
Q3Q/y5xKcLLexvNROtckWkJhgmJjsVapS77QXooXNk70W/RAK7R5WPYFikUm1VDg
v6EnX3UQTnFAFBDSCOuz9xC1bEs/IhAPRgca8MddI1eOTxJ01Y1yEbfZLLRoE2W3
UBlVzf8m1e2U7fERGj6DLZQv0aGrUC868eAfpYJi3hSJGbixzHiDNY5yxNh5h3fX
78QUGZfrA3f3MRFIk2cwqeYfUp+QCbISJRBuDjBFyI7ziq/B6XnYwCtRjpMVX7V9
LEYGfuKuXg/FV1ANGYug66atC964I/6o23o9Qdm9NYcqWQG7qjGEl3XS5xO3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUv6adrvf02ndsqWkN1l0uQHK4+WowHwYDVR0j
BBgwFoAUjrxeAaY/n/TjmpifiWjhJ0Zopa8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjl3b3gzNU5NZWE4UUFkQmNtRHU1TFpUZDNGenlYWDJpWDlNQkxadWtC
UFAvMC84RUJDNUUwMUE2M0Y5RkY0RTM5QTk4OUY4OTY4RTEyNzQ2NjhBNUFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQkM1RTAxQTYzRjlGRjRF
MzlBOTg5Rjg5NjhFMTI3NDY2OEE1QUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I5d294MzVOTWVhOFFBZEJjbUR1NUxaVGQzRnp5WFgyaVg5TUJMWnVrQlBQLzAv
MzIzODMwMzQzYTMyNjEzMDYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM0
MzAzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQqDDANBgkqhkiG9w0BAQsFAAOCAQEA4rP/g8xN
vPtBYILaKKdc7DNJ2JXXkiIG63NEVZ+rubUN00JkvLHbw3wUrefsqi61E+mrh9QK
Bv0aktywc/NBuZkekOURQH9aHF3v4Lzn9zw7WGRQY/sTb4a2hvTbRTCxrq3UGQfT
gF/6/y9Njm78Q3G97HpA7NFlK+dporOewpM7pygsxBz8bvNsB2hjxJ46mlETEenk
k2Z2wJYw4eD0t0n7+10O6kj2UXV6MdH6tl+qpBq0ir6mG4Cc6Og1JSy1qqGhrydx
1kjvW1O8ihLPMRTh7arjr3H9vhK1kofAiwOQstadTQYt4U6KpnusUvH3jqm4q/7i
k8SZWuU5vVugzw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:03:39 2026 by rpki-client