Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a3a2f33322d3332203d3e20323636303232.roa
File:                     323830343a333934343a3a2f33322d3332203d3e20323636303232.roa (raw, json)
Hash identifier:          Raef3QyLyivHo4me0A4+dO4xW/cj3UC/Vq0M2qUfBS0=
Subject key identifier:   E5:C2:FB:DD:56:D5:55:23:B0:99:0E:02:8C:D1:A1:87:C6:75:57:C5
Certificate issuer:       /CN=90705F919BBE46351F72D4F40C331818D517C16A
Certificate serial:       0E252D9600BBA1E79F0D7FB43283E895343151EB
Authority key identifier: 90:70:5F:91:9B:BE:46:35:1F:72:D4:F4:0C:33:18:18:D5:17:C1:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90705F919BBE46351F72D4F40C331818D517C16A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a3a2f33322d3332203d3e20323636303232.roa
Signing time:             Fri 21 Aug 2026 13:28:58 +0000
ROA not before:           Fri 21 Aug 2026 13:23:58 +0000
ROA not after:            Fri 20 Aug 2027 13:28:58 +0000
asID:                     266022
IP address blocks:        2804:3944::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/90705F919BBE46351F72D4F40C331818D517C16A.crl
                          rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/90705F919BBE46351F72D4F40C331818D517C16A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90705F919BBE46351F72D4F40C331818D517C16A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 06:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:25:2d:96:00:bb:a1:e7:9f:0d:7f:b4:32:83:e8:95:34:31:51:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90705F919BBE46351F72D4F40C331818D517C16A
        Validity
            Not Before: Aug 21 13:23:58 2026 GMT
            Not After : Aug 20 13:28:58 2027 GMT
        Subject: CN=E5C2FBDD56D55523B0990E028CD1A187C67557C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3f:05:13:57:b6:af:3a:f3:03:d4:3b:9d:f8:
                    67:9a:8a:92:43:28:8e:42:a8:77:fd:b3:09:da:c2:
                    12:73:28:e4:df:77:55:e0:ac:6c:50:3d:76:fb:b8:
                    7f:20:dd:ec:c7:58:81:36:f7:b9:ca:0e:49:ac:1b:
                    c3:ea:13:be:e8:0f:fc:22:44:2c:c2:85:74:aa:4d:
                    d5:41:35:24:a9:00:e5:0d:25:0e:fa:b4:cf:d2:c1:
                    4a:f3:aa:27:4d:37:a9:39:05:9d:f4:bf:a2:4b:d5:
                    56:eb:30:8b:42:95:df:c7:a6:50:3e:9f:0e:d2:d7:
                    c4:8d:16:31:ca:4a:3c:30:d3:44:89:0b:75:54:97:
                    f3:6a:33:7d:de:4e:4e:c7:9f:94:9e:67:aa:12:f3:
                    43:cd:16:e5:db:f5:19:ad:79:da:07:74:71:0d:fc:
                    c8:e9:29:f4:69:aa:2b:a2:eb:9b:3b:2a:50:5e:b8:
                    3d:50:09:b3:f3:b6:ef:76:54:63:6a:dd:5c:85:b8:
                    e5:8f:02:1a:25:5c:67:df:73:f9:c2:ca:f5:5c:fe:
                    d2:72:18:f8:f2:a4:92:7f:88:1c:8d:54:01:5b:5f:
                    47:31:27:73:98:1b:0c:9a:29:32:55:4e:32:c3:94:
                    b3:71:74:34:51:8d:00:a8:59:2c:73:53:04:1e:3e:
                    91:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C2:FB:DD:56:D5:55:23:B0:99:0E:02:8C:D1:A1:87:C6:75:57:C5
            X509v3 Authority Key Identifier:
                keyid:90:70:5F:91:9B:BE:46:35:1F:72:D4:F4:0C:33:18:18:D5:17:C1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/90705F919BBE46351F72D4F40C331818D517C16A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90705F919BBE46351F72D4F40C331818D517C16A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a3a2f33322d3332203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3944::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:90:69:3c:5a:96:3e:41:68:5f:d7:cf:f6:43:f0:90:ae:97:
         00:28:86:f2:5d:13:1c:f3:eb:3c:bf:d6:69:dd:a4:e3:88:87:
         e3:3f:17:ec:1a:31:95:7f:82:57:6d:42:53:41:e9:1b:d0:a3:
         88:00:c2:86:45:51:4d:05:30:69:f7:05:71:a1:30:62:73:7b:
         9f:4a:99:85:15:45:6f:47:01:2d:74:a5:1a:33:90:65:2c:ba:
         85:d8:f5:fc:0d:4d:96:07:60:fe:66:2e:3b:97:ea:1c:17:8a:
         3e:b1:67:8f:f3:e9:73:91:bf:9c:d4:3a:a8:73:e3:b7:df:3c:
         42:8d:b1:ff:10:15:ab:6b:d2:79:bd:de:68:72:b4:bb:c5:5c:
         d6:9a:4f:5e:35:ec:8a:c0:77:43:d7:f0:24:17:86:2f:a5:26:
         b4:1c:85:85:19:63:59:c4:df:e7:08:fa:2a:fa:b6:4a:ef:04:
         53:72:a9:13:8f:29:92:f6:60:bd:38:a4:1a:18:24:77:f2:d0:
         6c:26:ee:3e:c4:74:4f:30:17:01:8e:d0:96:16:ff:0a:d6:13:
         14:3c:0f:e0:eb:5e:c9:7f:2a:60:52:c2:81:f1:30:6f:3c:45:
         6b:1e:eb:15:37:ee:c2:ff:95:c0:bc:1a:0a:39:eb:e5:14:27:
         1f:02:8c:c8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDiUtlgC7oeefDX+0MoPolTQxUeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA3MDVGOTE5QkJFNDYzNTFGNzJENEY0MEMzMzE4MThE
NTE3QzE2QTAeFw0yNjA4MjExMzIzNThaFw0yNzA4MjAxMzI4NThaMDMxMTAvBgNV
BAMTKEU1QzJGQkRENTZENTU1MjNCMDk5MEUwMjhDRDFBMTg3QzY3NTU3QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaPwUTV7avOvMD1Dud+GeaipJD
KI5CqHf9swnawhJzKOTfd1XgrGxQPXb7uH8g3ezHWIE297nKDkmsG8PqE77oD/wi
RCzChXSqTdVBNSSpAOUNJQ76tM/SwUrzqidNN6k5BZ30v6JL1VbrMItCld/HplA+
nw7S18SNFjHKSjww00SJC3VUl/NqM33eTk7Hn5SeZ6oS80PNFuXb9RmtedoHdHEN
/MjpKfRpqiui65s7KlBeuD1QCbPztu92VGNq3VyFuOWPAholXGffc/nCyvVc/tJy
GPjypJJ/iByNVAFbX0cxJ3OYGwyaKTJVTjLDlLNxdDRRjQCoWSxzUwQePpEhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU5cL73VbVVSOwmQ4CjNGhh8Z1V8UwHwYDVR0j
BBgwFoAUkHBfkZu+RjUfctT0DDMYGNUXwWowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnc4RjVFb2Nkc0NrY040WWZLQlBrWUp0Tno0VUZEcEZMcnl0elZpN2dl
dW4vMC85MDcwNUY5MTlCQkU0NjM1MUY3MkQ0RjQwQzMzMTgxOEQ1MTdDMTZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwNzA1RjkxOUJCRTQ2MzUx
RjcyRDRGNDBDMzMxODE4RDUxN0MxNkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3OEY1RW9jZHNDa2NONFlmS0JQa1lKdE56NFVGRHBGTHJ5dHpWaTdnZXVuLzAv
MzIzODMwMzQzYTMzMzkzNDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzAzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ5RDANBgkqhkiG9w0BAQsFAAOCAQEAJJBpPFqW
PkFoX9fP9kPwkK6XACiG8l0THPPrPL/Wad2k44iH4z8X7BoxlX+CV21CU0HpG9Cj
iADChkVRTQUwafcFcaEwYnN7n0qZhRVFb0cBLXSlGjOQZSy6hdj1/A1Nlgdg/mYu
O5fqHBeKPrFnj/Ppc5G/nNQ6qHPjt988Qo2x/xAVq2vSeb3eaHK0u8Vc1ppPXjXs
isB3Q9fwJBeGL6UmtByFhRljWcTf5wj6Kvq2Su8EU3KpE48pkvZgvTikGhgkd/LQ
bCbuPsR0TzAXAY7Qlhb/CtYTFDwP4OteyX8qYFLCgfEwbzxFax7rFTfuwv+VwLwa
Cjnr5RQnHwKMyA==
-----END CERTIFICATE-----
Generated at Tue Aug 25 17:42:16 2026 by rpki-client