Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a3a2f33322d3332203d3e20323730363131.roa
File:                     323830343a366561383a3a2f33322d3332203d3e20323730363131.roa (raw, json)
Hash identifier:          LXA7A8EIzqUsQTbRAYby9JhH+LiYo9/sfPvwKojTnnA=
Subject key identifier:   CA:99:39:A6:9D:1B:19:75:CA:42:F0:3A:2A:69:27:74:95:12:08:58
Certificate issuer:       /CN=797EBC77EC40E28B81969DE1FED28595E33FA7CB
Certificate serial:       05BEE60690D563232E959994F82C0D01C0D9BCC7
Authority key identifier: 79:7E:BC:77:EC:40:E2:8B:81:96:9D:E1:FE:D2:85:95:E3:3F:A7:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EBC77EC40E28B81969DE1FED28595E33FA7CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a3a2f33322d3332203d3e20323730363131.roa
Signing time:             Fri 21 Aug 2026 11:28:53 +0000
ROA not before:           Fri 21 Aug 2026 11:23:53 +0000
ROA not after:            Fri 20 Aug 2027 11:28:53 +0000
asID:                     270611
IP address blocks:        2804:6ea8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/797EBC77EC40E28B81969DE1FED28595E33FA7CB.crl
                          rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/797EBC77EC40E28B81969DE1FED28595E33FA7CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EBC77EC40E28B81969DE1FED28595E33FA7CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:be:e6:06:90:d5:63:23:2e:95:99:94:f8:2c:0d:01:c0:d9:bc:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797EBC77EC40E28B81969DE1FED28595E33FA7CB
        Validity
            Not Before: Aug 21 11:23:53 2026 GMT
            Not After : Aug 20 11:28:53 2027 GMT
        Subject: CN=CA9939A69D1B1975CA42F03A2A69277495120858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c8:d1:eb:27:f9:68:95:8c:6b:a9:7e:22:67:
                    10:78:bf:1c:1d:01:e8:dd:57:f2:c1:12:fa:7c:bc:
                    2c:da:40:eb:2b:bf:d8:3e:cf:34:bf:87:bb:fa:79:
                    40:bb:89:1e:8a:2f:2a:f7:d1:c6:0e:fc:73:af:30:
                    b5:23:b9:d3:46:21:21:3e:03:a8:46:ca:30:23:fc:
                    b0:27:e0:60:14:a9:7a:94:12:a4:8a:39:45:90:ee:
                    23:d4:6d:ce:e8:dd:61:69:04:63:e5:04:85:96:6c:
                    a4:bd:7a:24:77:db:7e:0f:dd:43:2f:a2:87:78:57:
                    af:f3:40:73:02:82:c3:19:c9:59:e0:4f:92:e1:ce:
                    ce:fa:a0:8c:1a:9d:9c:5c:78:b2:14:8f:f5:a4:b8:
                    a2:fa:56:e2:73:1a:e5:3a:40:04:32:2e:29:1a:b7:
                    6d:3b:2c:b7:85:bf:d6:c9:ba:c3:35:af:ae:29:56:
                    7c:9a:cb:42:36:cb:49:cf:66:dc:09:ad:8e:e8:75:
                    26:a2:0a:95:3d:d9:2a:db:b3:23:fc:a2:73:5e:60:
                    cc:12:d1:32:df:15:1c:01:d9:c5:94:9b:72:ae:b5:
                    0e:d8:16:eb:cb:2a:5e:d3:7f:62:d8:f8:df:51:c9:
                    b9:00:a2:a0:5d:2b:0b:35:f3:fe:fc:1b:4e:10:a8:
                    4e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:99:39:A6:9D:1B:19:75:CA:42:F0:3A:2A:69:27:74:95:12:08:58
            X509v3 Authority Key Identifier:
                keyid:79:7E:BC:77:EC:40:E2:8B:81:96:9D:E1:FE:D2:85:95:E3:3F:A7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/797EBC77EC40E28B81969DE1FED28595E33FA7CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EBC77EC40E28B81969DE1FED28595E33FA7CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a3a2f33322d3332203d3e20323730363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ea8::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:0d:c9:72:42:4c:a0:06:28:a2:0d:9b:34:93:80:cd:07:97:
         43:a0:12:69:3d:22:90:78:44:3a:f7:74:8e:86:d5:e6:3d:f4:
         d3:9b:1a:16:e5:07:da:16:f8:a1:95:14:50:5c:76:21:6f:2c:
         a5:5d:ed:fd:e1:7e:6d:f9:11:7d:1e:4d:88:4a:e4:53:fc:75:
         f8:24:33:6c:be:29:3b:35:82:06:9a:d5:18:73:1f:36:21:b2:
         88:cd:12:8b:e7:4b:ee:a4:ec:59:d7:45:be:a2:30:af:d2:57:
         48:a2:a6:41:4b:34:78:b1:97:f1:e5:d2:1f:87:0a:f6:c4:e8:
         b6:fb:d6:51:7e:c2:62:29:8a:cb:9d:24:69:9d:15:4a:6e:60:
         65:62:15:03:6a:8d:a0:e5:57:56:85:3d:2c:5d:03:d3:e9:90:
         5c:7d:b4:42:b5:52:dd:80:02:5f:b7:3d:8f:43:94:fb:83:e9:
         11:e3:54:7f:27:b3:7a:64:ef:27:6b:5a:f5:c4:60:38:f7:8c:
         a2:c2:a5:70:54:3a:b6:ba:42:91:05:7d:b4:a7:0e:4d:95:c6:
         b6:5a:e6:3e:53:62:ef:45:b8:d0:38:9e:d6:5d:30:83:bd:4f:
         1d:4f:6d:4a:b7:61:f2:f5:82:82:76:4d:fe:73:21:49:b7:fe:
         85:c6:2f:15
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBb7mBpDVYyMulZmU+CwNAcDZvMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk3RUJDNzdFQzQwRTI4QjgxOTY5REUxRkVEMjg1OTVF
MzNGQTdDQjAeFw0yNjA4MjExMTIzNTNaFw0yNzA4MjAxMTI4NTNaMDMxMTAvBgNV
BAMTKENBOTkzOUE2OUQxQjE5NzVDQTQyRjAzQTJBNjkyNzc0OTUxMjA4NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKyNHrJ/lolYxrqX4iZxB4vxwd
AejdV/LBEvp8vCzaQOsrv9g+zzS/h7v6eUC7iR6KLyr30cYO/HOvMLUjudNGISE+
A6hGyjAj/LAn4GAUqXqUEqSKOUWQ7iPUbc7o3WFpBGPlBIWWbKS9eiR3234P3UMv
ood4V6/zQHMCgsMZyVngT5Lhzs76oIwanZxceLIUj/WkuKL6VuJzGuU6QAQyLika
t207LLeFv9bJusM1r64pVnyay0I2y0nPZtwJrY7odSaiCpU92SrbsyP8onNeYMwS
0TLfFRwB2cWUm3KutQ7YFuvLKl7Tf2LY+N9RybkAoqBdKws18/78G04QqE45AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUypk5pp0bGXXKQvA6KmkndJUSCFgwHwYDVR0j
BBgwFoAUeX68d+xA4ouBlp3h/tKFleM/p8swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2dSclRXNlZ2NzJjWnZod29yeFczZUFYdXpqd052a01BODZHMmdtNjJZ
aVEvMC83OTdFQkM3N0VDNDBFMjhCODE5NjlERTFGRUQyODU5NUUzM0ZBN0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5N0VCQzc3RUM0MEUyOEI4
MTk2OURFMUZFRDI4NTk1RTMzRkE3Q0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NnUnJUVzZWdjcyY1p2aHdvcnhXM2VBWHV6andOdmtNQTg2RzJnbTYyWWlRLzAv
MzIzODMwMzQzYTM2NjU2MTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzYzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARuqDANBgkqhkiG9w0BAQsFAAOCAQEAIw3JckJM
oAYoog2bNJOAzQeXQ6ASaT0ikHhEOvd0jobV5j3005saFuUH2hb4oZUUUFx2IW8s
pV3t/eF+bfkRfR5NiErkU/x1+CQzbL4pOzWCBprVGHMfNiGyiM0Si+dL7qTsWddF
vqIwr9JXSKKmQUs0eLGX8eXSH4cK9sTotvvWUX7CYimKy50kaZ0VSm5gZWIVA2qN
oOVXVoU9LF0D0+mQXH20QrVS3YACX7c9j0OU+4PpEeNUfyezemTvJ2ta9cRgOPeM
osKlcFQ6trpCkQV9tKcOTZXGtlrmPlNi70W40Die1l0wg71PHU9tSrdh8vWCgnZN
/nMhSbf+hcYvFQ==
-----END CERTIFICATE-----
Generated at Sun Aug 23 08:42:28 2026 by rpki-client