Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a313030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a313030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          N3MHtjOzXUNIf3lwRf5B3gYVyh+fAjjB05twT/b60Gc=
Subject key identifier:   60:92:E5:2D:9E:2F:80:13:C3:2F:29:81:DC:0B:75:72:3F:BC:4A:22
Certificate issuer:       /CN=9300478022D5A08516D4A8091528E3CE35ECFE43
Certificate serial:       68988242354AC82800B88F3896C77C6D3DC2F974
Authority key identifier: 93:00:47:80:22:D5:A0:85:16:D4:A8:09:15:28:E3:CE:35:EC:FE:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a313030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Mon 28 Sep 2026 16:58:38 +0000
ROA not before:           Mon 28 Sep 2026 16:53:38 +0000
ROA not after:            Mon 27 Sep 2027 16:58:38 +0000
asID:                     267991
IP address blocks:        2804:5654:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 13:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:98:82:42:35:4a:c8:28:00:b8:8f:38:96:c7:7c:6d:3d:c2:f9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9300478022D5A08516D4A8091528E3CE35ECFE43
        Validity
            Not Before: Sep 28 16:53:38 2026 GMT
            Not After : Sep 27 16:58:38 2027 GMT
        Subject: CN=6092E52D9E2F8013C32F2981DC0B75723FBC4A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:17:a7:57:e7:69:26:cf:e3:d3:1a:61:16:ae:
                    47:c5:3f:4f:fe:4b:8c:3b:dc:fe:0a:32:33:1f:31:
                    75:35:1d:3a:85:99:51:cd:67:32:b7:2d:92:43:40:
                    ac:1a:c8:38:5b:13:68:5f:1e:bd:fc:dd:d0:d8:f5:
                    86:83:74:e0:41:53:f3:ac:2f:62:67:74:18:44:db:
                    ec:08:31:30:4d:80:3b:f7:a9:1b:d7:bd:9d:d5:5f:
                    77:0d:49:6d:37:88:a8:c9:06:85:48:8a:5d:3f:92:
                    63:75:cb:2b:d7:b6:8e:ca:cd:53:15:b9:e3:ef:81:
                    c5:35:ab:b9:41:9b:d8:ab:33:22:e6:fc:5f:1d:e5:
                    2a:c9:51:30:c7:04:a2:9d:c8:f0:e2:0a:49:06:a5:
                    5c:9e:a2:9f:8b:99:54:f5:6c:c5:d5:d4:6b:e5:f1:
                    16:ad:a1:51:3e:99:8b:b8:1d:86:91:03:53:65:59:
                    7e:c5:bb:f0:ce:d1:2f:5c:f0:d8:14:fc:ab:3f:3a:
                    99:b4:4e:3b:3a:cd:ea:b3:b5:0b:e3:cb:5d:d8:61:
                    8d:4c:c6:f2:b1:3f:5b:b3:d8:4d:08:fd:dc:22:7d:
                    74:7a:db:b5:ef:fd:42:08:5b:76:50:a5:a5:42:95:
                    af:f3:9b:48:4c:be:7f:4d:d6:15:57:24:f7:08:3d:
                    3d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:92:E5:2D:9E:2F:80:13:C3:2F:29:81:DC:0B:75:72:3F:BC:4A:22
            X509v3 Authority Key Identifier:
                keyid:93:00:47:80:22:D5:A0:85:16:D4:A8:09:15:28:E3:CE:35:EC:FE:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a313030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7b:84:44:60:9d:23:f2:7b:86:28:45:fd:6e:83:dc:83:21:d7:
         2b:6c:22:fc:86:33:09:7f:6d:6f:e5:95:e0:9b:d6:39:8d:3a:
         0f:a4:4e:32:11:7b:1f:ca:69:b6:d4:54:11:26:d4:c5:bd:ef:
         e5:fc:71:7b:cb:65:d3:70:4b:0b:0a:72:53:58:71:f1:26:b1:
         05:7b:b9:ee:ab:da:ba:54:5b:48:36:08:a8:ff:c0:7f:14:70:
         3c:d8:64:7e:ac:be:06:75:2a:63:ed:8b:d4:63:c7:d7:6c:0e:
         20:91:df:8e:04:34:62:be:9c:82:59:07:55:24:d1:46:56:14:
         fe:40:40:c6:c0:68:7a:33:c0:d9:90:55:db:e4:f5:0c:1a:b1:
         96:f9:eb:01:a7:81:0d:d5:a4:4e:b6:90:a5:fe:27:bb:f9:7a:
         3d:f0:dd:bf:07:15:3e:3d:38:1c:e5:3c:5d:e9:89:94:98:ca:
         69:f5:11:a4:65:32:0c:f3:0c:a1:0f:2c:7e:09:e0:02:79:4c:
         77:26:1e:d9:e6:f9:15:23:fb:a1:a5:56:8c:4c:4e:d5:4a:2b:
         b8:b8:14:7d:b5:d4:52:9e:70:a8:27:2f:60:d1:d4:e3:71:a4:
         84:56:b2:dd:cf:00:54:92:64:90:da:bd:63:c0:f6:9d:8f:f9:
         40:d7:2a:50
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUaJiCQjVKyCgAuI84lsd8bT3C+XQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMwMDQ3ODAyMkQ1QTA4NTE2RDRBODA5MTUyOEUzQ0Uz
NUVDRkU0MzAeFw0yNjA5MjgxNjUzMzhaFw0yNzA5MjcxNjU4MzhaMDMxMTAvBgNV
BAMTKDYwOTJFNTJEOUUyRjgwMTNDMzJGMjk4MURDMEI3NTcyM0ZCQzRBMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrF6dX52kmz+PTGmEWrkfFP0/+
S4w73P4KMjMfMXU1HTqFmVHNZzK3LZJDQKwayDhbE2hfHr383dDY9YaDdOBBU/Os
L2JndBhE2+wIMTBNgDv3qRvXvZ3VX3cNSW03iKjJBoVIil0/kmN1yyvXto7KzVMV
uePvgcU1q7lBm9irMyLm/F8d5SrJUTDHBKKdyPDiCkkGpVyeop+LmVT1bMXV1Gvl
8RatoVE+mYu4HYaRA1NlWX7Fu/DO0S9c8NgU/Ks/Opm0Tjs6zeqztQvjy13YYY1M
xvKxP1uz2E0I/dwifXR627Xv/UIIW3ZQpaVCla/zm0hMvn9N1hVXJPcIPT3vAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUYJLlLZ4vgBPDLymB3At1cj+8SiIwHwYDVR0j
BBgwFoAUkwBHgCLVoIUW1KgJFSjjzjXs/kMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5
Mk4vMC85MzAwNDc4MDIyRDVBMDg1MTZENEE4MDkxNTI4RTNDRTM1RUNGRTQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzMDA0NzgwMjJENUEwODUx
NkQ0QTgwOTE1MjhFM0NFMzVFQ0ZFNDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv
MzIzODMwMzQzYTM1MzYzNTM0M2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzM5MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVlQQMA0GCSqGSIb3DQEBCwUA
A4IBAQB7hERgnSPye4YoRf1ug9yDIdcrbCL8hjMJf21v5ZXgm9Y5jToPpE4yEXsf
ymm21FQRJtTFve/l/HF7y2XTcEsLCnJTWHHxJrEFe7nuq9q6VFtINgio/8B/FHA8
2GR+rL4GdSpj7YvUY8fXbA4gkd+OBDRivpyCWQdVJNFGVhT+QEDGwGh6M8DZkFXb
5PUMGrGW+esBp4EN1aROtpCl/ie7+Xo98N2/BxU+PTgc5Txd6YmUmMpp9RGkZTIM
8wyhDyx+CeACeUx3Jh7Z5vkVI/uhpVaMTE7VSiu4uBR9tdRSnnCoJy9g0dTjcaSE
VrLdzwBUkmSQ2r1jwPadj/lA1ypQ
-----END CERTIFICATE-----
Generated at Wed Oct 14 14:11:53 2026 by rpki-client