Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a633030303a3a2f33362d3336203d3e20323731323538.roa
File:                     323830343a373861633a633030303a3a2f33362d3336203d3e20323731323538.roa (raw, json)
Hash identifier:          5rpfrNDuTb1Pxe996uvNv5iJzJ6H+rvM5iQ3+ANTVt8=
Subject key identifier:   80:C8:AA:67:58:62:6F:44:70:09:32:D2:25:32:07:15:3A:E1:F1:5A
Certificate issuer:       /CN=4A763D5AD2784076DF3620B8E46FF5745BFEFBDD
Certificate serial:       71943C4B614AC26EB8F63AF487F1ACE068180FDB
Authority key identifier: 4A:76:3D:5A:D2:78:40:76:DF:36:20:B8:E4:6F:F5:74:5B:FE:FB:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a633030303a3a2f33362d3336203d3e20323731323538.roa
Signing time:             Fri 03 Jul 2026 18:48:54 +0000
ROA not before:           Fri 03 Jul 2026 18:43:54 +0000
ROA not after:            Fri 02 Jul 2027 18:48:54 +0000
asID:                     271258
IP address blocks:        2804:78ac:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.crl
                          rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 06:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:94:3c:4b:61:4a:c2:6e:b8:f6:3a:f4:87:f1:ac:e0:68:18:0f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A763D5AD2784076DF3620B8E46FF5745BFEFBDD
        Validity
            Not Before: Jul  3 18:43:54 2026 GMT
            Not After : Jul  2 18:48:54 2027 GMT
        Subject: CN=80C8AA6758626F44700932D2253207153AE1F15A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:5c:03:3a:26:bd:dc:17:8a:d9:e0:97:89:
                    c6:c7:71:cc:92:25:1d:9a:3d:9c:f1:b1:25:75:8f:
                    14:e9:06:59:b9:a9:e5:64:c6:f8:c2:fd:66:3d:b1:
                    6b:da:51:12:8c:f4:bc:9e:01:b4:d2:75:e8:b8:f9:
                    2c:26:82:64:9b:22:92:e7:d7:26:b1:f2:6d:c1:ac:
                    ac:c0:49:52:ea:b2:de:cd:cc:2b:e5:44:2b:16:4a:
                    f2:c4:6e:a3:22:22:63:00:0a:94:0e:56:0c:db:77:
                    61:6f:9e:84:aa:b8:05:cc:4f:75:5a:62:70:d0:cf:
                    d0:32:40:b1:c9:9f:49:c3:99:ce:8c:25:ca:9c:be:
                    40:65:05:53:9f:e5:b6:7e:3e:02:9e:d6:ef:b9:f5:
                    e8:ad:1e:6b:1a:51:b1:c5:fe:65:f5:5a:58:f6:4d:
                    9e:11:31:17:94:33:a8:78:3c:9a:37:21:95:52:6b:
                    d9:88:1d:5c:f0:32:00:a6:be:85:26:9a:63:65:ef:
                    85:bc:fa:af:20:c2:4b:96:13:ae:a1:e4:c4:ee:e1:
                    8d:8e:c9:a4:c7:99:08:6f:33:28:9a:2f:12:08:2f:
                    4f:88:d3:c5:91:29:14:e1:3e:54:d5:07:a9:9e:6d:
                    89:3e:f6:29:08:1b:f9:54:23:4a:92:15:d3:6d:3e:
                    98:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C8:AA:67:58:62:6F:44:70:09:32:D2:25:32:07:15:3A:E1:F1:5A
            X509v3 Authority Key Identifier:
                keyid:4A:76:3D:5A:D2:78:40:76:DF:36:20:B8:E4:6F:F5:74:5B:FE:FB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a633030303a3a2f33362d3336203d3e20323731323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78ac:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         00:a0:07:8c:ea:51:96:cd:dd:26:43:b5:0f:2f:44:45:d8:16:
         4b:fb:7f:5e:6b:4f:49:9d:9f:aa:51:ee:76:61:18:50:9d:39:
         67:3a:94:c6:35:cc:08:5d:f1:65:ff:a1:dd:67:9f:90:88:72:
         95:c2:05:19:1e:eb:66:7d:5b:0b:c1:77:4e:58:a8:d1:46:d9:
         b5:68:29:52:c2:15:17:c5:71:fe:7c:e3:c2:b5:3d:1d:7c:aa:
         5c:64:6f:49:b9:cf:61:2d:dc:a0:c2:46:c6:60:93:36:77:51:
         49:81:ed:db:71:e5:3e:9a:c4:ad:4f:4e:d4:71:8b:6c:f4:8c:
         6e:21:33:e4:36:58:3b:1e:83:1a:cc:40:f3:e7:fd:63:f9:77:
         2b:0c:a1:7c:12:3f:37:d1:d0:1f:ac:fc:94:b8:47:c1:c5:a1:
         5b:5a:61:32:9b:52:aa:1c:52:fc:c1:cf:40:7f:bd:dc:be:06:
         f7:41:60:05:b8:f9:12:0b:c4:0a:63:ff:9d:fe:5b:ce:f4:d6:
         81:93:75:db:fc:d6:4f:38:74:6d:73:0a:5c:72:73:34:28:d7:
         f5:c0:f8:7b:b4:c7:f1:c6:9b:38:cd:b2:4e:00:6f:0a:ee:e2:
         5e:83:26:51:1f:8f:91:16:b2:6d:93:e1:69:3c:55:9f:2a:fe:
         03:22:19:48
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUcZQ8S2FKwm649jr0h/Gs4GgYD9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE3NjNENUFEMjc4NDA3NkRGMzYyMEI4RTQ2RkY1NzQ1
QkZFRkJERDAeFw0yNjA3MDMxODQzNTRaFw0yNzA3MDIxODQ4NTRaMDMxMTAvBgNV
BAMTKDgwQzhBQTY3NTg2MjZGNDQ3MDA5MzJEMjI1MzIwNzE1M0FFMUYxNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKc1wDOia93BeK2eCXicbHccyS
JR2aPZzxsSV1jxTpBlm5qeVkxvjC/WY9sWvaURKM9LyeAbTSdei4+SwmgmSbIpLn
1yax8m3BrKzASVLqst7NzCvlRCsWSvLEbqMiImMACpQOVgzbd2FvnoSquAXMT3Va
YnDQz9AyQLHJn0nDmc6MJcqcvkBlBVOf5bZ+PgKe1u+59eitHmsaUbHF/mX1Wlj2
TZ4RMReUM6h4PJo3IZVSa9mIHVzwMgCmvoUmmmNl74W8+q8gwkuWE66h5MTu4Y2O
yaTHmQhvMyiaLxIIL0+I08WRKRThPlTVB6mebYk+9ikIG/lUI0qSFdNtPpgxAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUgMiqZ1hib0RwCTLSJTIHFTrh8VowHwYDVR0j
BBgwFoAUSnY9WtJ4QHbfNiC45G/1dFv++90wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREF3Y1NUR0pXRUM5UndXUG90Mm9pUjV1SFpOcGlKWW5Zd2hXNUV1dWl3
SjEvMC80QTc2M0Q1QUQyNzg0MDc2REYzNjIwQjhFNDZGRjU3NDVCRkVGQkRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBNzYzRDVBRDI3ODQwNzZE
RjM2MjBCOEU0NkZGNTc0NUJGRUZCREQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RBd2NTVEdKV0VDOVJ3V1BvdDJvaVI1dUhaTnBpSlluWXdoVzVFdXVpd0oxLzAv
MzIzODMwMzQzYTM3Mzg2MTYzM2E2MzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMTMyMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEeKzAMA0GCSqGSIb3DQEBCwUA
A4IBAQAAoAeM6lGWzd0mQ7UPL0RF2BZL+39ea09JnZ+qUe52YRhQnTlnOpTGNcwI
XfFl/6HdZ5+QiHKVwgUZHutmfVsLwXdOWKjRRtm1aClSwhUXxXH+fOPCtT0dfKpc
ZG9Juc9hLdygwkbGYJM2d1FJge3bceU+msStT07UcYts9IxuITPkNlg7HoMazEDz
5/1j+XcrDKF8Ej830dAfrPyUuEfBxaFbWmEym1KqHFL8wc9Af73cvgb3QWAFuPkS
C8QKY/+d/lvO9NaBk3Xb/NZPOHRtcwpccnM0KNf1wPh7tMfxxps4zbJOAG8K7uJe
gyZRH4+RFrJtk+FpPFWfKv4DIhlI
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:00:11 2026 by rpki-client