Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/323830343a386632343a3a2f33322d313238203d3e20323733343730.roa
File:                     323830343a386632343a3a2f33322d313238203d3e20323733343730.roa (raw, json)
Hash identifier:          QKv26KeP2Hi1v1b/lI61eN9wVWw6Is1WGOfv5zAj8+8=
Subject key identifier:   51:2E:93:06:B1:2A:6E:11:11:F4:30:36:30:0A:CE:48:1D:FB:D9:B4
Certificate issuer:       /CN=6E1CBB3F6F0EFA4F652F00E51D7A88771FA59152
Certificate serial:       53176CC534B96C9F530BF6395AE30C9A78183268
Authority key identifier: 6E:1C:BB:3F:6F:0E:FA:4F:65:2F:00:E5:1D:7A:88:77:1F:A5:91:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E1CBB3F6F0EFA4F652F00E51D7A88771FA59152.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/323830343a386632343a3a2f33322d313238203d3e20323733343730.roa
Signing time:             Tue 18 Aug 2026 18:29:57 +0000
ROA not before:           Tue 18 Aug 2026 18:24:57 +0000
ROA not after:            Tue 17 Aug 2027 18:29:57 +0000
asID:                     273470
IP address blocks:        2804:8f24::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/6E1CBB3F6F0EFA4F652F00E51D7A88771FA59152.crl
                          rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/6E1CBB3F6F0EFA4F652F00E51D7A88771FA59152.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E1CBB3F6F0EFA4F652F00E51D7A88771FA59152.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 10:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:17:6c:c5:34:b9:6c:9f:53:0b:f6:39:5a:e3:0c:9a:78:18:32:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E1CBB3F6F0EFA4F652F00E51D7A88771FA59152
        Validity
            Not Before: Aug 18 18:24:57 2026 GMT
            Not After : Aug 17 18:29:57 2027 GMT
        Subject: CN=512E9306B12A6E1111F43036300ACE481DFBD9B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9f:b1:f9:b0:e6:90:8b:d1:fb:c7:e9:a6:e1:
                    00:c4:57:59:b6:56:d1:29:3f:ef:b3:ca:bc:1b:48:
                    9b:ec:8d:45:de:2c:c5:7e:f4:6e:29:5e:c9:c3:40:
                    4d:15:00:8d:4f:f4:0c:8e:82:19:ad:c3:fe:0d:a7:
                    e6:da:13:75:73:e9:17:a9:e6:cd:d0:08:b0:f2:50:
                    37:73:bd:a3:e4:11:97:e1:a7:9b:75:3e:7b:13:8d:
                    f3:70:06:aa:e9:de:62:c4:89:48:c7:07:34:77:e1:
                    ee:4c:5f:86:67:93:da:a0:ad:d8:ee:31:4a:63:a3:
                    2e:c5:34:93:72:e1:95:82:f3:79:47:5e:3c:da:27:
                    fe:ad:cb:8b:c7:d3:03:4c:ec:14:ac:89:ef:31:a7:
                    44:81:52:6e:18:d5:2c:2c:50:da:0b:50:f9:a3:3a:
                    92:62:13:0a:27:99:45:e7:8c:e6:ce:50:bc:e7:09:
                    05:2e:b9:b6:41:7c:8c:a1:ba:6a:6d:8f:a3:c9:3a:
                    e7:76:ed:68:3c:9f:ca:4c:db:fe:31:98:76:7f:5f:
                    73:e2:6d:90:8d:23:d8:29:d7:fa:99:13:82:65:b1:
                    8b:34:0a:58:10:f4:15:84:bb:a2:c9:1a:8d:34:ff:
                    11:27:3b:d6:54:17:6d:ee:93:6b:d5:97:a8:7c:56:
                    6f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2E:93:06:B1:2A:6E:11:11:F4:30:36:30:0A:CE:48:1D:FB:D9:B4
            X509v3 Authority Key Identifier:
                keyid:6E:1C:BB:3F:6F:0E:FA:4F:65:2F:00:E5:1D:7A:88:77:1F:A5:91:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/6E1CBB3F6F0EFA4F652F00E51D7A88771FA59152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E1CBB3F6F0EFA4F652F00E51D7A88771FA59152.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXg7DAN89dex2rsko1KFUJMiTp9uC8L5h94XzkhsgLzo/0/323830343a386632343a3a2f33322d313238203d3e20323733343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f24::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:bd:58:ee:cd:92:ec:95:f1:8c:da:0c:9c:85:60:16:c5:84:
         b9:01:0f:17:95:2d:90:db:b2:b3:a1:44:03:72:dd:23:d0:6f:
         2f:87:48:22:c8:ac:79:a2:31:f8:af:f9:4e:9d:17:03:e8:f9:
         12:4f:15:13:00:c6:8a:db:94:30:0a:77:ed:c1:19:db:27:0c:
         d1:69:0b:e5:aa:24:c1:dc:74:bb:21:c4:27:0e:43:68:84:bc:
         48:ef:3f:55:b7:a3:d4:f7:e6:1d:ab:93:8b:3a:31:49:3c:6d:
         43:0e:3d:d8:51:ac:01:88:26:c3:04:b0:ec:03:1b:d2:4b:ba:
         28:ab:5c:23:3b:ea:a5:46:3e:43:cd:70:05:70:8c:85:61:df:
         21:7f:b3:35:00:d8:c8:23:4b:50:16:77:91:48:03:e2:e6:fb:
         08:94:f1:fd:e6:ab:ab:38:20:dc:d4:44:be:b8:57:40:cf:15:
         77:34:ed:41:5e:d5:a8:ef:31:9f:23:2d:66:f7:08:4e:08:aa:
         c2:6d:94:27:6c:52:8b:73:12:56:f5:8b:85:95:a9:b2:f4:c2:
         b7:15:19:fc:f9:73:99:b2:d7:db:5a:27:5d:f0:30:b3:e4:80:
         34:43:f2:e6:09:21:05:d9:d0:22:c0:38:98:86:cc:70:5b:ef:
         1b:74:18:69
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUUxdsxTS5bJ9TC/Y5WuMMmngYMmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkUxQ0JCM0Y2RjBFRkE0RjY1MkYwMEU1MUQ3QTg4Nzcx
RkE1OTE1MjAeFw0yNjA4MTgxODI0NTdaFw0yNzA4MTcxODI5NTdaMDMxMTAvBgNV
BAMTKDUxMkU5MzA2QjEyQTZFMTExMUY0MzAzNjMwMEFDRTQ4MURGQkQ5QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1n7H5sOaQi9H7x+mm4QDEV1m2
VtEpP++zyrwbSJvsjUXeLMV+9G4pXsnDQE0VAI1P9AyOghmtw/4Np+baE3Vz6Rep
5s3QCLDyUDdzvaPkEZfhp5t1PnsTjfNwBqrp3mLEiUjHBzR34e5MX4Znk9qgrdju
MUpjoy7FNJNy4ZWC83lHXjzaJ/6ty4vH0wNM7BSsie8xp0SBUm4Y1SwsUNoLUPmj
OpJiEwonmUXnjObOULznCQUuubZBfIyhumptj6PJOud27Wg8n8pM2/4xmHZ/X3Pi
bZCNI9gp1/qZE4JlsYs0ClgQ9BWEu6LJGo00/xEnO9ZUF23uk2vVl6h8Vm/HAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUUS6TBrEqbhER9DA2MArOSB372bQwHwYDVR0j
BBgwFoAUbhy7P28O+k9lLwDlHXqIdx+lkVIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlhnN0RBTjg5ZGV4MnJza28xS0ZVSk1pVHA5dUM4TDVoOTRYemtoc2dM
em8vMC82RTFDQkIzRjZGMEVGQTRGNjUyRjAwRTUxRDdBODg3NzFGQTU5MTUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFMUNCQjNGNkYwRUZBNEY2
NTJGMDBFNTFEN0E4ODc3MUZBNTkxNTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JYZzdEQU44OWRleDJyc2tvMUtGVUpNaVRwOXVDOEw1aDk0WHpraHNnTHpvLzAv
MzIzODMwMzQzYTM4NjYzMjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzMzNDM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBI8kMA0GCSqGSIb3DQEBCwUAA4IBAQATvVju
zZLslfGM2gychWAWxYS5AQ8XlS2Q27KzoUQDct0j0G8vh0giyKx5ojH4r/lOnRcD
6PkSTxUTAMaK25QwCnftwRnbJwzRaQvlqiTB3HS7IcQnDkNohLxI7z9Vt6PU9+Yd
q5OLOjFJPG1DDj3YUawBiCbDBLDsAxvSS7ooq1wjO+qlRj5DzXAFcIyFYd8hf7M1
ANjII0tQFneRSAPi5vsIlPH95qurOCDc1ES+uFdAzxV3NO1BXtWo7zGfIy1m9whO
CKrCbZQnbFKLcxJW9YuFlamy9MK3FRn8+XOZstfbWidd8DCz5IA0Q/LmCSEF2dAi
wDiYhsxwW+8bdBhp
-----END CERTIFICATE-----
Generated at Sun Aug 23 22:23:14 2026 by rpki-client