Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a3a2f33332d3333203d3e20323638313036.roa
File:                     323830343a353831383a3a2f33332d3333203d3e20323638313036.roa (raw, json)
Hash identifier:          ntWB4JM/T4vwcVv3rBpwidmQ3Y+jzd1ZJOmZANDMAW8=
Subject key identifier:   C7:43:6D:6F:09:B3:CC:A9:62:9F:A1:85:C0:27:DB:44:BB:BE:BE:C5
Certificate issuer:       /CN=614F55B896D05F51FBF66A43C86D750B52415663
Certificate serial:       66430AFA485C63189295FC5216DCB39329A60788
Authority key identifier: 61:4F:55:B8:96:D0:5F:51:FB:F6:6A:43:C8:6D:75:0B:52:41:56:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614F55B896D05F51FBF66A43C86D750B52415663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a3a2f33332d3333203d3e20323638313036.roa
Signing time:             Thu 02 Jul 2026 16:10:16 +0000
ROA not before:           Thu 02 Jul 2026 16:05:16 +0000
ROA not after:            Thu 01 Jul 2027 16:10:16 +0000
asID:                     268106
IP address blocks:        2804:5818::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/614F55B896D05F51FBF66A43C86D750B52415663.crl
                          rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/614F55B896D05F51FBF66A43C86D750B52415663.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614F55B896D05F51FBF66A43C86D750B52415663.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:43:0a:fa:48:5c:63:18:92:95:fc:52:16:dc:b3:93:29:a6:07:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614F55B896D05F51FBF66A43C86D750B52415663
        Validity
            Not Before: Jul  2 16:05:16 2026 GMT
            Not After : Jul  1 16:10:16 2027 GMT
        Subject: CN=C7436D6F09B3CCA9629FA185C027DB44BBBEBEC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:25:a4:49:82:77:ae:d3:53:9a:43:fe:61:31:
                    6c:22:60:60:ea:80:79:90:80:09:1d:1d:a4:2d:d5:
                    c0:0a:9a:83:bf:e1:9d:bd:b1:e2:06:75:c4:79:21:
                    39:cf:2d:77:c0:5b:99:61:52:fa:60:f7:c1:52:07:
                    9d:99:6b:cf:53:a7:4e:4c:07:09:00:8b:55:d0:85:
                    45:22:f1:4b:09:e4:fd:f1:6e:9c:a4:5f:6a:13:a8:
                    fc:7b:12:97:ab:e4:39:95:dc:08:db:3d:74:1f:4c:
                    ac:8c:20:2e:dc:62:90:11:bd:30:a9:6d:07:99:74:
                    6c:ad:40:77:e1:3e:d9:b2:d0:c4:6e:15:e2:a0:80:
                    eb:5e:ba:63:5e:60:eb:03:44:63:3d:84:69:4f:f2:
                    91:4c:9e:e8:29:4f:d1:b1:dc:72:68:45:9b:44:77:
                    8a:30:8a:22:e1:db:56:cc:a3:8d:be:6f:70:e6:cd:
                    0d:9b:38:7a:df:96:41:83:ff:be:46:0e:cc:fa:0b:
                    6c:16:8e:70:db:b1:d0:b1:a1:cd:4a:2f:c6:ff:e6:
                    3a:8d:4f:d5:9c:0f:28:bd:a4:0c:55:77:27:30:71:
                    c9:22:4c:ed:2b:01:9e:52:bd:fe:07:05:3e:08:1e:
                    5d:63:ea:83:cf:d8:5c:ac:e8:72:a9:32:59:65:09:
                    21:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:43:6D:6F:09:B3:CC:A9:62:9F:A1:85:C0:27:DB:44:BB:BE:BE:C5
            X509v3 Authority Key Identifier:
                keyid:61:4F:55:B8:96:D0:5F:51:FB:F6:6A:43:C8:6D:75:0B:52:41:56:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/614F55B896D05F51FBF66A43C86D750B52415663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614F55B896D05F51FBF66A43C86D750B52415663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a3a2f33332d3333203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5818::/33

    Signature Algorithm: sha256WithRSAEncryption
         5a:b6:94:63:a6:75:88:33:24:44:3e:7b:5d:42:48:56:2e:a3:
         7c:f3:d7:80:8d:02:e0:57:e6:ac:b3:1d:73:c5:18:8b:cb:fb:
         a1:ed:97:af:92:a7:45:c3:e4:a5:75:da:a4:c3:64:46:09:1b:
         05:20:b1:f5:1c:ae:22:4f:28:f8:8b:bd:8e:48:df:d1:ff:68:
         40:0c:fc:91:eb:72:26:63:72:18:da:df:2f:4b:b5:3d:ae:40:
         95:1b:ba:3c:38:84:80:04:21:25:29:b3:31:ec:50:f9:08:3d:
         8c:2f:48:b0:26:82:a6:65:34:bc:59:61:01:ac:f4:71:f2:89:
         51:5d:b2:9c:b3:ca:26:60:a6:75:ef:51:7d:ef:fb:a9:b9:de:
         b7:3b:2e:4d:a4:87:68:17:9b:0b:c5:5a:9f:8b:12:75:15:9a:
         1e:19:f9:1d:4d:05:82:c0:b6:8b:c1:a7:c9:b6:4e:39:9b:6d:
         88:fa:89:43:51:2d:a6:cf:c5:12:8b:b0:c8:2e:b1:81:46:de:
         01:b4:2a:c4:14:9f:b9:f9:0e:b0:2c:70:49:ef:74:f6:78:b5:
         40:a9:21:52:aa:5e:4e:f8:dd:34:26:95:0b:d6:a2:b3:00:88:
         da:b1:54:f0:4c:36:b0:16:01:dd:08:3f:67:c0:da:05:14:f3:
         f5:9b:09:c3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZkMK+khcYxiSlfxSFtyzkymmB4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE0RjU1Qjg5NkQwNUY1MUZCRjY2QTQzQzg2RDc1MEI1
MjQxNTY2MzAeFw0yNjA3MDIxNjA1MTZaFw0yNzA3MDExNjEwMTZaMDMxMTAvBgNV
BAMTKEM3NDM2RDZGMDlCM0NDQTk2MjlGQTE4NUMwMjdEQjQ0QkJCRUJFQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVJaRJgneu01OaQ/5hMWwiYGDq
gHmQgAkdHaQt1cAKmoO/4Z29seIGdcR5ITnPLXfAW5lhUvpg98FSB52Za89Tp05M
BwkAi1XQhUUi8UsJ5P3xbpykX2oTqPx7Eper5DmV3AjbPXQfTKyMIC7cYpARvTCp
bQeZdGytQHfhPtmy0MRuFeKggOteumNeYOsDRGM9hGlP8pFMnugpT9Gx3HJoRZtE
d4owiiLh21bMo42+b3DmzQ2bOHrflkGD/75GDsz6C2wWjnDbsdCxoc1KL8b/5jqN
T9WcDyi9pAxVdycwcckiTO0rAZ5Svf4HBT4IHl1j6oPP2Fys6HKpMlllCSEbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUx0NtbwmzzKlin6GFwCfbRLu+vsUwHwYDVR0j
BBgwFoAUYU9VuJbQX1H79mpDyG11C1JBVmMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlJaZHBUMWpxVWtxVm5Qdld1V2ZlWXVReGdTUzYzdkNSRjJFZjg2b2Y4
bncvMC82MTRGNTVCODk2RDA1RjUxRkJGNjZBNDNDODZENzUwQjUyNDE1NjYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxNEY1NUI4OTZEMDVGNTFG
QkY2NkE0M0M4NkQ3NTBCNTI0MTU2NjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JSWmRwVDFqcVVrcVZuUHZXdVdmZVl1UXhnU1M2M3ZDUkYyRWY4Nm9mOG53LzAv
MzIzODMwMzQzYTM1MzgzMTM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzEzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARYGAAwDQYJKoZIhvcNAQELBQADggEBAFq2lGOm
dYgzJEQ+e11CSFYuo3zz14CNAuBX5qyzHXPFGIvL+6Htl6+Sp0XD5KV12qTDZEYJ
GwUgsfUcriJPKPiLvY5I39H/aEAM/JHrciZjchja3y9LtT2uQJUbujw4hIAEISUp
szHsUPkIPYwvSLAmgqZlNLxZYQGs9HHyiVFdspyzyiZgpnXvUX3v+6m53rc7Lk2k
h2gXmwvFWp+LEnUVmh4Z+R1NBYLAtovBp8m2TjmbbYj6iUNRLabPxRKLsMgusYFG
3gG0KsQUn7n5DrAscEnvdPZ4tUCpIVKqXk743TQmlQvWorMAiNqxVPBMNrAWAd0I
P2fA2gUU8/WbCcM=
-----END CERTIFICATE-----
Generated at Wed Jul 8 21:06:09 2026 by rpki-client