Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a653030303a3a2f33382d3338203d3e20323635333030.roa
File:                     323830343a326462633a653030303a3a2f33382d3338203d3e20323635333030.roa (raw, json)
Hash identifier:          e8j8SAq9UKZx+iMS+9clPa3eiNlXI+5hXwQw/FJlL58=
Subject key identifier:   4F:A1:76:7F:CB:EE:DF:84:6A:D7:D3:AA:43:E4:59:C8:7A:F6:B6:A0
Certificate issuer:       /CN=98FB017963B86A925F721F20ED568534305BBBBF
Certificate serial:       4CD931A26EBE68AC6E672368E7D5F23F28CECE39
Authority key identifier: 98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a653030303a3a2f33382d3338203d3e20323635333030.roa
Signing time:             Thu 06 Aug 2026 20:52:53 +0000
ROA not before:           Thu 06 Aug 2026 20:47:53 +0000
ROA not after:            Thu 05 Aug 2027 20:52:53 +0000
asID:                     265300
IP address blocks:        2804:2dbc:e000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl
                          rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 03:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d9:31:a2:6e:be:68:ac:6e:67:23:68:e7:d5:f2:3f:28:ce:ce:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98FB017963B86A925F721F20ED568534305BBBBF
        Validity
            Not Before: Aug  6 20:47:53 2026 GMT
            Not After : Aug  5 20:52:53 2027 GMT
        Subject: CN=4FA1767FCBEEDF846AD7D3AA43E459C87AF6B6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a6:e9:ac:96:9c:05:a0:7a:8f:a2:e7:c8:ef:
                    cf:52:3d:8c:ef:f9:86:ee:d4:8e:90:a1:41:d2:47:
                    db:84:ba:8a:a5:9b:e0:e8:30:fa:60:13:4d:e3:81:
                    66:4e:d2:3e:7c:c6:79:74:3f:3c:ef:6e:19:7c:8b:
                    2d:f8:58:a4:66:a8:e5:47:77:ea:02:4c:63:89:48:
                    29:1d:5d:38:04:95:b5:7b:82:22:dc:42:c9:ef:a7:
                    fd:fc:d2:cc:7e:10:8b:83:11:30:13:1e:d3:6d:e7:
                    8e:84:a8:6c:dc:be:a7:d3:89:28:88:50:93:f4:c1:
                    d6:8c:a0:0b:a2:6b:09:69:5d:f3:0e:45:2d:d0:03:
                    b3:40:91:fd:ba:f0:f2:ce:dd:8e:87:e7:a7:77:f4:
                    6f:01:c2:27:66:a9:d9:a6:a4:86:10:6c:cc:b4:f0:
                    7f:6d:e4:f6:39:27:3e:fb:3d:d4:2f:6c:33:8e:d7:
                    7f:c9:f2:da:be:4a:e4:8b:43:73:fd:8b:61:28:17:
                    3d:49:c6:15:29:87:81:8a:2a:95:a3:e1:df:7b:40:
                    52:24:ee:e5:81:b3:ed:15:f5:ec:af:54:80:33:71:
                    87:85:7e:75:37:10:95:ea:b6:33:dc:c9:bb:7e:5c:
                    79:fb:6d:57:fe:d3:ca:83:21:0c:8f:6c:ca:c1:36:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A1:76:7F:CB:EE:DF:84:6A:D7:D3:AA:43:E4:59:C8:7A:F6:B6:A0
            X509v3 Authority Key Identifier:
                keyid:98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a653030303a3a2f33382d3338203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc:e000::/38

    Signature Algorithm: sha256WithRSAEncryption
         40:0a:b6:ce:7c:18:a2:46:3a:49:c9:8c:3e:75:32:1a:4f:90:
         62:7e:60:d6:be:66:7e:62:2b:5d:ad:3a:e1:f9:24:65:ef:cc:
         b0:52:73:09:ef:33:cc:9c:e9:4b:22:f0:c0:ee:6d:39:13:47:
         bd:ff:ef:f2:66:fb:0f:4d:94:a0:1a:7b:c4:27:a8:f3:98:cd:
         2d:b6:c7:0b:5f:b0:4d:fa:a5:6d:a2:a6:4a:e2:17:30:32:ba:
         21:ba:f9:ed:d9:c0:61:61:b4:47:c0:06:d0:90:73:bc:ef:6e:
         aa:5d:4b:20:5d:cb:fb:b9:1c:2f:5b:41:ce:61:cb:ae:10:a6:
         24:ec:de:e4:a4:0a:0e:37:05:ae:20:e9:91:0f:5a:17:dd:5f:
         19:ed:cd:fc:4a:9d:f0:f7:b4:b7:13:a2:06:34:7d:01:38:e9:
         d6:d2:53:5e:d1:da:35:7e:b1:92:fb:a0:02:d1:07:a5:32:fb:
         8b:f7:c5:e9:80:88:92:ae:a9:75:e2:ab:d0:7c:7e:69:c4:b6:
         fd:49:88:a8:d2:eb:2d:8b:3c:b7:85:e9:69:df:ff:0a:3f:f9:
         43:97:a6:93:c6:e3:af:7d:e5:b7:ee:b9:39:11:b7:50:5b:df:
         a5:1a:69:87:97:30:d1:75:25:95:36:2b:cf:60:5e:4e:00:90:
         82:91:e2:a8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTNkxom6+aKxuZyNo59XyPyjOzjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThGQjAxNzk2M0I4NkE5MjVGNzIxRjIwRUQ1Njg1MzQz
MDVCQkJCRjAeFw0yNjA4MDYyMDQ3NTNaFw0yNzA4MDUyMDUyNTNaMDMxMTAvBgNV
BAMTKDRGQTE3NjdGQ0JFRURGODQ2QUQ3RDNBQTQzRTQ1OUM4N0FGNkI2QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCopumslpwFoHqPoufI789SPYzv
+Ybu1I6QoUHSR9uEuoqlm+DoMPpgE03jgWZO0j58xnl0Pzzvbhl8iy34WKRmqOVH
d+oCTGOJSCkdXTgElbV7giLcQsnvp/380sx+EIuDETATHtNt546EqGzcvqfTiSiI
UJP0wdaMoAuiawlpXfMORS3QA7NAkf268PLO3Y6H56d39G8BwidmqdmmpIYQbMy0
8H9t5PY5Jz77PdQvbDOO13/J8tq+SuSLQ3P9i2EoFz1JxhUph4GKKpWj4d97QFIk
7uWBs+0V9eyvVIAzcYeFfnU3EJXqtjPcybt+XHn7bVf+08qDIQyPbMrBNqm1AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUT6F2f8vu34Rq19OqQ+RZyHr2tqAwHwYDVR0j
BBgwFoAUmPsBeWO4apJfch8g7VaFNDBbu78wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzdkNGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1ckxxSGZaV0VE
b2MvMC85OEZCMDE3OTYzQjg2QTkyNUY3MjFGMjBFRDU2ODUzNDMwNUJCQkJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4RkIwMTc5NjNCODZBOTI1
RjcyMUYyMEVENTY4NTM0MzA1QkJCQkYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3ZDRiRmZLdVZ6VThkeG9DU3F2c0QzVUJXa1ZhRHd1dXJMcUhmWldFRG9jLzAv
MzIzODMwMzQzYTMyNjQ2MjYzM2E2NTMwMzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzYzNTMzMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigELbzgMA0GCSqGSIb3DQEBCwUA
A4IBAQBACrbOfBiiRjpJyYw+dTIaT5BifmDWvmZ+YitdrTrh+SRl78ywUnMJ7zPM
nOlLIvDA7m05E0e9/+/yZvsPTZSgGnvEJ6jzmM0ttscLX7BN+qVtoqZK4hcwMroh
uvnt2cBhYbRHwAbQkHO8726qXUsgXcv7uRwvW0HOYcuuEKYk7N7kpAoONwWuIOmR
D1oX3V8Z7c38Sp3w97S3E6IGNH0BOOnW0lNe0do1frGS+6AC0QelMvuL98XpgIiS
rql14qvQfH5pxLb9SYio0ustizy3help3/8KP/lDl6aTxuOvfeW37rk5EbdQW9+l
GmmHlzDRdSWVNivPYF5OAJCCkeKo
-----END CERTIFICATE-----
Generated at Tue Aug 25 10:22:43 2026 by rpki-client