Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a383030303a3a2f33332d3333203d3e20323638323632.roa
File:                     323830343a346537343a383030303a3a2f33332d3333203d3e20323638323632.roa (raw, json)
Hash identifier:          0I/HWAfglrJX3i1lTCr9eGuvmlfCIDUYlLwq4bRrY68=
Subject key identifier:   11:06:CC:F1:5B:AA:05:4E:33:D1:B3:27:AC:2B:BC:AB:C1:C4:2F:CC
Certificate issuer:       /CN=ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC
Certificate serial:       4107920E1E9844CB173651A6D1CCD6ABF46A342A
Authority key identifier: AB:B1:DE:D5:76:74:B3:AD:9F:C7:F1:2E:23:37:47:2C:2D:95:FB:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a383030303a3a2f33332d3333203d3e20323638323632.roa
Signing time:             Fri 18 Sep 2026 12:38:36 +0000
ROA not before:           Fri 18 Sep 2026 12:33:36 +0000
ROA not after:            Fri 17 Sep 2027 12:38:36 +0000
asID:                     268262
IP address blocks:        2804:4e74:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.crl
                          rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 03:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:07:92:0e:1e:98:44:cb:17:36:51:a6:d1:cc:d6:ab:f4:6a:34:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC
        Validity
            Not Before: Sep 18 12:33:36 2026 GMT
            Not After : Sep 17 12:38:36 2027 GMT
        Subject: CN=1106CCF15BAA054E33D1B327AC2BBCABC1C42FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1e:43:48:fa:47:77:33:2d:32:12:02:f4:ce:
                    04:1f:2f:a8:1b:de:52:f9:90:0a:a7:0d:3d:46:2d:
                    c7:13:32:47:44:ec:23:9e:71:ef:14:da:97:67:d3:
                    ca:1a:10:40:7a:d2:1e:af:d8:2d:5c:dd:1c:2b:82:
                    e2:c1:eb:cf:f6:de:23:3c:50:8d:19:cd:da:fa:22:
                    b9:e1:de:51:3c:04:ee:05:6a:f8:05:bc:27:87:46:
                    bc:5b:d6:e3:3c:20:57:5a:26:d5:33:2a:1b:74:85:
                    17:06:d6:79:75:30:89:a9:69:04:42:5c:fb:60:54:
                    5d:ee:99:84:84:ba:5b:34:b4:a8:84:ea:4d:3f:73:
                    3d:d3:cc:75:f0:ab:30:d9:65:31:a8:f9:97:75:7e:
                    3d:1f:24:46:77:9a:c9:4a:82:8e:c6:54:2e:db:6e:
                    10:b6:bd:21:bb:66:b4:ef:eb:c1:79:c5:8b:6b:d6:
                    38:1c:a3:f3:84:ea:12:75:b7:dc:9c:0b:78:80:24:
                    e7:22:6e:8c:3c:db:4d:8c:a5:d5:99:2c:90:47:93:
                    54:ef:2f:ed:08:26:bd:89:1e:b7:d9:ce:e6:54:0c:
                    60:eb:3a:5e:04:1e:b4:e8:6c:ef:a6:76:10:f4:39:
                    5b:8e:bf:ce:fe:1c:ff:c7:8d:7d:ea:13:a4:a8:01:
                    85:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:06:CC:F1:5B:AA:05:4E:33:D1:B3:27:AC:2B:BC:AB:C1:C4:2F:CC
            X509v3 Authority Key Identifier:
                keyid:AB:B1:DE:D5:76:74:B3:AD:9F:C7:F1:2E:23:37:47:2C:2D:95:FB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABB1DED57674B3AD9FC7F12E2337472C2D95FBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a383030303a3a2f33332d3333203d3e20323638323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e74:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         06:a1:3c:56:93:05:90:da:40:5d:f9:2d:64:29:79:b7:46:42:
         dc:14:bd:cf:f8:f3:ff:ea:8b:fb:8c:47:b4:97:5d:21:33:d6:
         73:88:e2:a1:24:7a:f9:73:8d:c1:1e:b1:dc:44:42:64:6d:05:
         4d:ec:1e:d8:08:b5:2b:e4:a4:1b:d8:be:bb:f5:0c:f8:e3:01:
         76:f8:08:50:e5:1b:c8:1e:a5:f7:75:d6:11:bd:17:fb:43:2a:
         89:6c:a3:35:2a:d6:f1:0a:c2:f3:b3:a1:02:7d:9f:77:82:96:
         d4:e6:28:22:67:ee:8d:ae:10:6d:4d:ed:c5:c6:1f:56:b7:6a:
         a2:f2:00:55:d2:80:67:cf:6f:85:a5:6a:d6:4c:62:c3:a4:12:
         eb:be:2c:7c:10:84:e2:c4:d8:bb:e0:11:da:95:c1:41:1d:4c:
         b8:46:91:95:50:3b:9a:6b:44:bb:8f:2e:ee:b1:8b:f6:56:6b:
         5e:69:3b:d0:87:30:d8:70:e0:08:aa:1c:d0:d1:74:bf:b6:0a:
         7a:3f:a0:98:24:7a:fe:8e:29:8b:bd:4f:21:fb:9a:7a:ae:ad:
         a9:36:af:9a:32:e1:4c:92:a4:9c:95:ce:7f:19:32:11:23:5f:
         03:00:39:0b:a4:76:f1:09:1b:08:37:2c:f5:e8:52:4a:c7:7c:
         c3:11:c1:b0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQQeSDh6YRMsXNlGm0czWq/RqNCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJCMURFRDU3Njc0QjNBRDlGQzdGMTJFMjMzNzQ3MkMy
RDk1RkJGQzAeFw0yNjA5MTgxMjMzMzZaFw0yNzA5MTcxMjM4MzZaMDMxMTAvBgNV
BAMTKDExMDZDQ0YxNUJBQTA1NEUzM0QxQjMyN0FDMkJCQ0FCQzFDNDJGQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcHkNI+kd3My0yEgL0zgQfL6gb
3lL5kAqnDT1GLccTMkdE7COece8U2pdn08oaEEB60h6v2C1c3RwrguLB68/23iM8
UI0Zzdr6Irnh3lE8BO4FavgFvCeHRrxb1uM8IFdaJtUzKht0hRcG1nl1MImpaQRC
XPtgVF3umYSEuls0tKiE6k0/cz3TzHXwqzDZZTGo+Zd1fj0fJEZ3mslKgo7GVC7b
bhC2vSG7ZrTv68F5xYtr1jgco/OE6hJ1t9ycC3iAJOcibow8202MpdWZLJBHk1Tv
L+0IJr2JHrfZzuZUDGDrOl4EHrTobO+mdhD0OVuOv87+HP/HjX3qE6SoAYWLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUEQbM8VuqBU4z0bMnrCu8q8HEL8wwHwYDVR0j
BBgwFoAUq7He1XZ0s62fx/EuIzdHLC2V+/wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1Rl
VmovMC9BQkIxREVENTc2NzRCM0FEOUZDN0YxMkUyMzM3NDcyQzJEOTVGQkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCQjFERUQ1NzY3NEIzQUQ5
RkM3RjEyRTIzMzc0NzJDMkQ5NUZCRkMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N0WGhOb0RwemJaTmpXVHI5S3IyWVFnN0poRjZlMVZIamNuRms3WDNUZVZqLzAv
MzIzODMwMzQzYTM0NjUzNzM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzODMyMzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygETnSAMA0GCSqGSIb3DQEBCwUA
A4IBAQAGoTxWkwWQ2kBd+S1kKXm3RkLcFL3P+PP/6ov7jEe0l10hM9ZziOKhJHr5
c43BHrHcREJkbQVN7B7YCLUr5KQb2L679Qz44wF2+AhQ5RvIHqX3ddYRvRf7QyqJ
bKM1KtbxCsLzs6ECfZ93gpbU5igiZ+6NrhBtTe3Fxh9Wt2qi8gBV0oBnz2+FpWrW
TGLDpBLrvix8EITixNi74BHalcFBHUy4RpGVUDuaa0S7jy7usYv2VmteaTvQhzDY
cOAIqhzQ0XS/tgp6P6CYJHr+jimLvU8h+5p6rq2pNq+aMuFMkqSclc5/GTIRI18D
ADkLpHbxCRsINyz16FJKx3zDEcGw
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:52:49 2026 by rpki-client