Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          AfPX3Px0gf3zpehfAxLi2WJuaU6Q9wXiWYSjhGMfnj0=
Subject key identifier:   11:B1:7F:25:C9:D9:86:28:C1:E1:43:EF:DE:BD:AD:B6:92:2C:B9:37
Certificate issuer:       /CN=9300478022D5A08516D4A8091528E3CE35ECFE43
Certificate serial:       1CF0C440EBBDA0124D04DDC5E2106C1239BDE403
Authority key identifier: 93:00:47:80:22:D5:A0:85:16:D4:A8:09:15:28:E3:CE:35:EC:FE:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Mon 28 Sep 2026 16:58:28 +0000
ROA not before:           Mon 28 Sep 2026 16:53:28 +0000
ROA not after:            Mon 27 Sep 2027 16:58:28 +0000
asID:                     267991
IP address blocks:        2804:5654::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 13:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f0:c4:40:eb:bd:a0:12:4d:04:dd:c5:e2:10:6c:12:39:bd:e4:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9300478022D5A08516D4A8091528E3CE35ECFE43
        Validity
            Not Before: Sep 28 16:53:28 2026 GMT
            Not After : Sep 27 16:58:28 2027 GMT
        Subject: CN=11B17F25C9D98628C1E143EFDEBDADB6922CB937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bf:b8:3a:31:f1:ca:65:2c:51:5e:f6:11:77:
                    db:20:40:87:4f:c5:82:a6:ca:41:31:ee:ab:fa:a7:
                    ad:8b:81:d9:22:5e:56:6c:d6:a5:c4:95:92:4a:a3:
                    06:98:47:95:be:79:31:8a:c3:8c:9c:1b:2c:2f:fb:
                    d4:2f:4d:75:4e:a7:d2:c7:be:f0:91:9e:c3:0a:92:
                    94:cf:4d:9c:7d:c9:27:b2:38:83:a2:70:9d:c1:7f:
                    dc:28:ca:f8:2c:81:e0:1a:9e:40:f9:f0:89:f5:83:
                    17:37:9b:02:64:e9:f5:23:49:0d:69:09:3d:37:d5:
                    43:2a:01:8e:27:f6:1b:09:30:9b:ab:de:22:8f:a3:
                    a7:f2:2c:fe:6b:db:fe:fa:b6:bc:8a:02:ee:c8:0f:
                    0d:bb:64:9e:6e:95:72:33:58:45:cc:33:22:e7:49:
                    c8:cd:eb:af:ba:52:ae:98:3d:94:d9:8b:60:93:0d:
                    41:28:a4:94:47:e6:c9:11:be:21:43:43:4e:f5:65:
                    2c:7a:24:e9:45:66:dd:6d:10:fe:4d:5f:a5:91:62:
                    ce:6f:00:3b:40:93:c3:b5:f8:88:d7:d1:43:9b:0f:
                    fe:25:2c:a2:9b:b2:27:ac:14:2b:4e:df:eb:1b:e3:
                    a1:a5:4b:63:1d:64:8b:db:c9:a8:64:8e:90:a0:ad:
                    a0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B1:7F:25:C9:D9:86:28:C1:E1:43:EF:DE:BD:AD:B6:92:2C:B9:37
            X509v3 Authority Key Identifier:
                keyid:93:00:47:80:22:D5:A0:85:16:D4:A8:09:15:28:E3:CE:35:EC:FE:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654::/36

    Signature Algorithm: sha256WithRSAEncryption
         83:21:21:da:04:c6:d8:f0:85:86:c8:73:3b:70:5c:9a:b6:47:
         61:4c:4e:7f:86:08:71:ef:13:77:59:3a:b8:ea:53:a8:de:fb:
         c7:54:1d:52:be:e8:a4:c7:a8:97:ce:16:a9:16:00:b7:60:2c:
         1a:4f:fe:32:be:5d:a1:e3:0c:6a:2f:a5:09:93:1f:ff:59:49:
         aa:4c:e3:75:3c:c7:cb:6f:59:bd:dd:1b:ff:50:62:72:bd:7d:
         5c:30:b7:d8:5d:35:28:1b:35:b1:67:b1:67:ab:4d:86:37:56:
         c7:ef:d5:95:6e:c1:1d:ef:a8:e2:3c:a7:49:3a:c0:0b:d4:07:
         a7:25:3d:9d:35:4c:34:8c:8c:37:fe:92:a0:0f:c7:89:4b:36:
         0a:92:9f:07:23:30:40:8e:69:ff:e5:2b:2b:fd:39:3d:5f:a1:
         8f:0c:c2:34:bf:e4:82:53:4e:0f:76:ed:f4:f3:6c:9e:b3:f4:
         ed:20:7f:4b:8e:ff:1a:29:6e:b8:6d:2d:05:1c:69:05:99:9e:
         9e:01:36:26:3d:d3:01:9e:b9:ef:7e:02:2b:3e:c1:c7:d8:93:
         1e:c1:eb:b9:21:25:93:96:82:76:4a:d2:5b:aa:04:86:57:0d:
         8b:a5:6e:6b:6e:b0:3d:ec:d0:c3:7d:c5:5f:6c:6d:b3:1c:88:
         3c:f2:28:24
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHPDEQOu9oBJNBN3F4hBsEjm95AMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMwMDQ3ODAyMkQ1QTA4NTE2RDRBODA5MTUyOEUzQ0Uz
NUVDRkU0MzAeFw0yNjA5MjgxNjUzMjhaFw0yNzA5MjcxNjU4MjhaMDMxMTAvBgNV
BAMTKDExQjE3RjI1QzlEOTg2MjhDMUUxNDNFRkRFQkRBREI2OTIyQ0I5MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOv7g6MfHKZSxRXvYRd9sgQIdP
xYKmykEx7qv6p62LgdkiXlZs1qXElZJKowaYR5W+eTGKw4ycGywv+9QvTXVOp9LH
vvCRnsMKkpTPTZx9ySeyOIOicJ3Bf9woyvgsgeAankD58In1gxc3mwJk6fUjSQ1p
CT031UMqAY4n9hsJMJur3iKPo6fyLP5r2/76tryKAu7IDw27ZJ5ulXIzWEXMMyLn
ScjN66+6Uq6YPZTZi2CTDUEopJRH5skRviFDQ071ZSx6JOlFZt1tEP5NX6WRYs5v
ADtAk8O1+IjX0UObD/4lLKKbsiesFCtO3+sb46GlS2MdZIvbyahkjpCgraC1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEbF/JcnZhijB4UPv3r2ttpIsuTcwHwYDVR0j
BBgwFoAUkwBHgCLVoIUW1KgJFSjjzjXs/kMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5
Mk4vMC85MzAwNDc4MDIyRDVBMDg1MTZENEE4MDkxNTI4RTNDRTM1RUNGRTQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzMDA0NzgwMjJENUEwODUx
NkQ0QTgwOTE1MjhFM0NFMzVFQ0ZFNDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv
MzIzODMwMzQzYTM1MzYzNTM0M2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNjM3
MzkzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKARWVAAwDQYJKoZIhvcNAQELBQADggEBAIMhIdoE
xtjwhYbIcztwXJq2R2FMTn+GCHHvE3dZOrjqU6je+8dUHVK+6KTHqJfOFqkWALdg
LBpP/jK+XaHjDGovpQmTH/9ZSapM43U8x8tvWb3dG/9QYnK9fVwwt9hdNSgbNbFn
sWerTYY3Vsfv1ZVuwR3vqOI8p0k6wAvUB6clPZ01TDSMjDf+kqAPx4lLNgqSnwcj
MECOaf/lKyv9OT1foY8MwjS/5IJTTg927fTzbJ6z9O0gf0uO/xopbrhtLQUcaQWZ
np4BNiY90wGeue9+Ais+wcfYkx7B67khJZOWgnZK0luqBIZXDYulbmtusD3s0MN9
xV9sbbMciDzyKCQ=
-----END CERTIFICATE-----
Generated at Thu Oct 15 05:37:52 2026 by rpki-client