Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/323830343a316462303a3a2f33322d3332203d3e20323634333836.roa
File:                     323830343a316462303a3a2f33322d3332203d3e20323634333836.roa (raw, json)
Hash identifier:          qsf0SaqNbV3WbcW2NKh2GNUHkZ/aA5fWGzIQ1Vc8bBk=
Subject key identifier:   9A:B9:F0:D3:9C:89:37:12:64:D9:A8:A9:D9:DB:86:3E:38:D0:5A:D0
Certificate issuer:       /CN=67379271F7BEFF1C0ADF4F715F94E2CA2912DDED
Certificate serial:       7B190C331040B56ED62A51CAE2FEFE540A8D7603
Authority key identifier: 67:37:92:71:F7:BE:FF:1C:0A:DF:4F:71:5F:94:E2:CA:29:12:DD:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/323830343a316462303a3a2f33322d3332203d3e20323634333836.roa
Signing time:             Fri 21 Aug 2026 20:21:33 +0000
ROA not before:           Fri 21 Aug 2026 20:16:33 +0000
ROA not after:            Fri 20 Aug 2027 20:21:33 +0000
asID:                     264386
IP address blocks:        2804:1db0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.crl
                          rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 02:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:19:0c:33:10:40:b5:6e:d6:2a:51:ca:e2:fe:fe:54:0a:8d:76:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67379271F7BEFF1C0ADF4F715F94E2CA2912DDED
        Validity
            Not Before: Aug 21 20:16:33 2026 GMT
            Not After : Aug 20 20:21:33 2027 GMT
        Subject: CN=9AB9F0D39C89371264D9A8A9D9DB863E38D05AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:97:bb:c2:f5:d5:a8:d2:c7:7f:de:ca:ea:
                    2c:ee:88:e5:de:c4:54:b4:9a:f8:ec:bc:5a:f4:2d:
                    7c:22:53:43:cb:72:fb:52:ce:b5:9e:38:92:65:43:
                    b2:e0:b4:96:ce:58:b5:a2:be:90:16:fd:30:3e:18:
                    f2:5c:34:e4:b5:a4:50:0b:f3:70:85:96:4c:4d:a5:
                    7d:e0:4d:e0:af:db:81:94:9c:fe:93:2b:cc:ff:c1:
                    50:e1:48:06:c9:3b:b7:10:4d:dd:28:d2:f3:08:2f:
                    8a:46:fc:ae:e9:95:bc:35:59:75:ec:c6:4f:6d:4c:
                    a2:e2:ff:91:c9:53:a3:be:5d:57:6c:0e:23:28:87:
                    f6:2a:d9:34:59:90:c9:2b:55:cb:61:f1:c2:61:eb:
                    76:c7:c7:fc:cc:5c:1d:3e:68:e1:4c:a6:20:ce:b6:
                    77:ea:01:2c:1b:e3:43:b1:66:61:c6:8a:49:08:4d:
                    12:5f:a3:07:62:85:71:ef:4f:d8:92:11:0f:68:b1:
                    c9:20:a2:02:21:2e:91:55:28:20:c4:1d:3b:e6:4a:
                    8f:ec:7e:87:a9:1b:61:c2:8a:ad:66:34:91:5a:65:
                    a9:1b:d0:dd:d4:84:6e:78:64:9c:a4:a8:86:e1:b6:
                    c5:87:44:22:6f:9a:9b:17:41:85:50:01:fd:29:ad:
                    2f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B9:F0:D3:9C:89:37:12:64:D9:A8:A9:D9:DB:86:3E:38:D0:5A:D0
            X509v3 Authority Key Identifier:
                keyid:67:37:92:71:F7:BE:FF:1C:0A:DF:4F:71:5F:94:E2:CA:29:12:DD:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/323830343a316462303a3a2f33322d3332203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1db0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:b5:0f:e0:fc:d8:0c:44:de:d4:cf:94:ba:6c:a6:b1:61:ec:
         41:cc:df:04:19:96:f0:88:3d:f7:47:4e:d8:95:fc:d8:fe:3b:
         30:56:cf:12:c0:93:d8:68:f6:87:c1:a0:be:1f:dc:38:53:27:
         72:30:eb:31:0d:0b:e3:0b:30:e9:74:0e:29:8c:8e:e7:bb:d8:
         a8:0b:ff:0f:64:3b:c6:49:3c:b9:b6:fc:18:22:f9:c6:13:15:
         eb:fb:8c:8f:e6:f9:18:1b:cb:c6:94:79:5f:16:0c:c9:a5:25:
         6d:86:7e:8f:a8:7b:d9:e7:56:38:9a:01:b4:06:56:c5:81:2e:
         a5:e0:e6:9d:f3:a3:f8:24:24:99:26:24:40:4a:85:3c:59:ff:
         26:6e:c1:f1:65:7f:a6:f6:de:21:8c:1a:11:3e:ab:ac:75:a6:
         88:40:2b:85:93:a5:e9:ea:36:d7:af:a2:db:2b:d8:7c:1a:6c:
         a7:5d:67:5e:95:d8:67:4e:c3:98:f2:24:30:01:59:32:24:45:
         41:ed:73:1c:a3:be:50:69:b0:24:b9:8e:8a:ce:93:e7:23:34:
         18:a2:99:2a:7f:f1:80:35:74:e4:60:ca:dc:51:92:b7:49:e7:
         1d:6d:41:2a:18:75:b4:82:4f:ef:ad:6e:74:f5:22:8e:61:4a:
         0e:f0:96:29
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUexkMMxBAtW7WKlHK4v7+VAqNdgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjczNzkyNzFGN0JFRkYxQzBBREY0RjcxNUY5NEUyQ0Ey
OTEyRERFRDAeFw0yNjA4MjEyMDE2MzNaFw0yNzA4MjAyMDIxMzNaMDMxMTAvBgNV
BAMTKDlBQjlGMEQzOUM4OTM3MTI2NEQ5QThBOUQ5REI4NjNFMzhEMDVBRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDGJe7wvXVqNLHf97K6izuiOXe
xFS0mvjsvFr0LXwiU0PLcvtSzrWeOJJlQ7LgtJbOWLWivpAW/TA+GPJcNOS1pFAL
83CFlkxNpX3gTeCv24GUnP6TK8z/wVDhSAbJO7cQTd0o0vMIL4pG/K7plbw1WXXs
xk9tTKLi/5HJU6O+XVdsDiMoh/Yq2TRZkMkrVcth8cJh63bHx/zMXB0+aOFMpiDO
tnfqASwb40OxZmHGikkITRJfowdihXHvT9iSEQ9osckgogIhLpFVKCDEHTvmSo/s
foepG2HCiq1mNJFaZakb0N3UhG54ZJykqIbhtsWHRCJvmpsXQYVQAf0prS/nAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUmrnw05yJNxJk2aip2duGPjjQWtAwHwYDVR0j
BBgwFoAUZzeScfe+/xwK309xX5TiyikS3e0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREMySGtxUkJ0WlFQRnFuR3JNRmtEWkxCNTJVMXd5RGs4aER6ZUFlbkx6
amIvMC82NzM3OTI3MUY3QkVGRjFDMEFERjRGNzE1Rjk0RTJDQTI5MTJEREVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3Mzc5MjcxRjdCRUZGMUMw
QURGNEY3MTVGOTRFMkNBMjkxMkRERUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RDMkhrcVJCdFpRUEZxbkdyTUZrRFpMQjUyVTF3eURrOGhEemVBZW5MempiLzAv
MzIzODMwMzQzYTMxNjQ2MjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQdsDANBgkqhkiG9w0BAQsFAAOCAQEAWrUP4PzY
DETe1M+UumymsWHsQczfBBmW8Ig990dO2JX82P47MFbPEsCT2Gj2h8Ggvh/cOFMn
cjDrMQ0L4wsw6XQOKYyO57vYqAv/D2Q7xkk8ubb8GCL5xhMV6/uMj+b5GBvLxpR5
XxYMyaUlbYZ+j6h72edWOJoBtAZWxYEupeDmnfOj+CQkmSYkQEqFPFn/Jm7B8WV/
pvbeIYwaET6rrHWmiEArhZOl6eo216+i2yvYfBpsp11nXpXYZ07DmPIkMAFZMiRF
Qe1zHKO+UGmwJLmOis6T5yM0GKKZKn/xgDV05GDK3FGSt0nnHW1BKhh1tIJP761u
dPUijmFKDvCWKQ==
-----END CERTIFICATE-----
Generated at Mon Aug 24 05:33:01 2026 by rpki-client