Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/323830343a333434343a3a2f33322d313238203d3e20323635343436.roa
File:                     323830343a333434343a3a2f33322d313238203d3e20323635343436.roa (raw, json)
Hash identifier:          FvBXp66I4N1tDAjWISoXDnHdQ3InDm4Qfo0R8ndEE8Y=
Subject key identifier:   22:4E:95:8A:A5:CB:70:49:13:02:D5:92:FE:42:F3:B9:ED:4A:5C:6E
Certificate issuer:       /CN=6EB2E47891E7387F368F372E4B7DE1F5A11743BC
Certificate serial:       2BAFC40195531CBE9BB10D33C3D3FDD2067BEE13
Authority key identifier: 6E:B2:E4:78:91:E7:38:7F:36:8F:37:2E:4B:7D:E1:F5:A1:17:43:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EB2E47891E7387F368F372E4B7DE1F5A11743BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/323830343a333434343a3a2f33322d313238203d3e20323635343436.roa
Signing time:             Fri 11 Sep 2026 14:01:56 +0000
ROA not before:           Fri 11 Sep 2026 13:56:56 +0000
ROA not after:            Fri 10 Sep 2027 14:01:56 +0000
asID:                     265446
IP address blocks:        2804:3444::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/6EB2E47891E7387F368F372E4B7DE1F5A11743BC.crl
                          rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/6EB2E47891E7387F368F372E4B7DE1F5A11743BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EB2E47891E7387F368F372E4B7DE1F5A11743BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 10:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:af:c4:01:95:53:1c:be:9b:b1:0d:33:c3:d3:fd:d2:06:7b:ee:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EB2E47891E7387F368F372E4B7DE1F5A11743BC
        Validity
            Not Before: Sep 11 13:56:56 2026 GMT
            Not After : Sep 10 14:01:56 2027 GMT
        Subject: CN=224E958AA5CB70491302D592FE42F3B9ED4A5C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:c8:91:6d:55:43:6d:7e:b3:fe:b7:e7:83:
                    1f:98:b1:e2:8f:1e:ef:65:36:e1:80:64:1c:81:8d:
                    8c:3a:56:08:66:6c:65:b3:47:09:34:08:3c:a5:fc:
                    65:97:b5:86:0c:a9:10:4f:d1:6a:13:d9:1e:1f:e3:
                    76:2c:1f:37:39:d3:cb:6a:fa:85:a4:89:41:ce:e6:
                    24:d7:b0:14:7d:64:21:26:23:0a:f4:30:10:dd:9a:
                    70:54:b0:da:f0:92:2a:84:6a:94:dd:63:12:a2:31:
                    24:dc:a6:48:21:20:2b:5f:3a:e6:5b:2f:fb:ef:e4:
                    c7:f4:0a:bd:d6:a3:5a:8f:7e:ae:18:08:56:a8:25:
                    62:91:7b:50:2e:33:78:d0:fa:de:11:56:ec:8c:33:
                    f4:dc:ec:43:94:ca:75:18:7b:da:84:5f:6c:e3:6b:
                    27:06:68:2d:25:2d:84:96:a4:9c:5d:64:7c:47:f3:
                    4a:d6:b5:08:3b:21:de:14:d8:5c:4d:79:21:bc:68:
                    9e:de:67:b6:ed:79:f8:86:4e:1d:9c:0c:d4:79:7b:
                    37:86:7f:82:ec:a6:0a:e2:00:f5:bc:13:81:aa:f4:
                    6d:bd:08:fb:3b:47:31:b3:82:94:22:4e:45:d8:69:
                    95:44:65:07:37:af:4b:63:6e:ad:6a:bc:97:ff:0f:
                    7d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4E:95:8A:A5:CB:70:49:13:02:D5:92:FE:42:F3:B9:ED:4A:5C:6E
            X509v3 Authority Key Identifier:
                keyid:6E:B2:E4:78:91:E7:38:7F:36:8F:37:2E:4B:7D:E1:F5:A1:17:43:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/6EB2E47891E7387F368F372E4B7DE1F5A11743BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EB2E47891E7387F368F372E4B7DE1F5A11743BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/323830343a333434343a3a2f33322d313238203d3e20323635343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3444::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:14:a9:7b:56:1d:1f:35:d7:ee:99:90:0a:c0:59:22:48:59:
         05:e2:89:69:51:73:f0:80:b3:1a:b4:8b:5a:0d:a7:a9:e1:5a:
         1b:bf:5c:c0:02:d9:82:31:63:b2:7d:83:19:55:48:30:f5:9e:
         11:f9:27:80:f2:71:b9:4b:31:20:4f:b6:c2:25:b5:0e:0f:86:
         bc:92:c3:79:cd:ba:21:5f:db:f4:2d:03:28:f2:f1:e0:59:71:
         f7:8b:9b:71:0a:12:65:97:e0:27:46:d3:01:1c:8d:d6:56:23:
         4f:30:cb:07:35:87:e1:e9:fa:dc:a2:b9:98:75:95:48:1c:c6:
         99:cd:b7:99:23:ef:ef:a6:c0:61:12:fe:c3:8c:13:66:68:b5:
         e4:39:23:f5:80:91:7c:26:51:a8:8c:93:4e:4d:21:d1:9c:71:
         c8:e9:cd:85:81:dc:b3:bd:cf:f4:70:31:ef:0a:e4:42:83:17:
         cd:bb:d7:b4:75:63:6a:5c:02:9f:cb:e5:3e:57:fa:35:da:68:
         41:70:89:6a:f8:8c:be:a9:de:66:32:dd:2a:0d:ff:eb:32:0e:
         75:68:81:dd:17:20:10:e8:c5:4e:47:de:d0:cd:71:98:8c:4c:
         fb:b3:b1:eb:17:38:b1:92:cf:5e:c4:70:ac:27:0c:d9:40:cd:
         e7:f6:4c:34
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUK6/EAZVTHL6bsQ0zw9P90gZ77hMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVCMkU0Nzg5MUU3Mzg3RjM2OEYzNzJFNEI3REUxRjVB
MTE3NDNCQzAeFw0yNjA5MTExMzU2NTZaFw0yNzA5MTAxNDAxNTZaMDMxMTAvBgNV
BAMTKDIyNEU5NThBQTVDQjcwNDkxMzAyRDU5MkZFNDJGM0I5RUQ0QTVDNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC078iRbVVDbX6z/rfngx+YseKP
Hu9lNuGAZByBjYw6VghmbGWzRwk0CDyl/GWXtYYMqRBP0WoT2R4f43YsHzc508tq
+oWkiUHO5iTXsBR9ZCEmIwr0MBDdmnBUsNrwkiqEapTdYxKiMSTcpkghICtfOuZb
L/vv5Mf0Cr3Wo1qPfq4YCFaoJWKRe1AuM3jQ+t4RVuyMM/Tc7EOUynUYe9qEX2zj
aycGaC0lLYSWpJxdZHxH80rWtQg7Id4U2FxNeSG8aJ7eZ7btefiGTh2cDNR5ezeG
f4LspgriAPW8E4Gq9G29CPs7RzGzgpQiTkXYaZVEZQc3r0tjbq1qvJf/D30dAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUIk6ViqXLcEkTAtWS/kLzue1KXG4wHwYDVR0j
BBgwFoAUbrLkeJHnOH82jzcuS33h9aEXQ7wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFEcDdwcjk0R1dEWERIcFdHWkZQVDhHY1hMQWJidmFiWnBpV2lieVo2
UHUvMC82RUIyRTQ3ODkxRTczODdGMzY4RjM3MkU0QjdERTFGNUExMTc0M0JDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFQjJFNDc4OTFFNzM4N0Yz
NjhGMzcyRTRCN0RFMUY1QTExNzQzQkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RhRHA3cHI5NEdXRFhESHBXR1pGUFQ4R2NYTEFiYnZhYlpwaVdpYnlaNlB1LzAv
MzIzODMwMzQzYTMzMzQzNDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzNDM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDREMA0GCSqGSIb3DQEBCwUAA4IBAQA0FKl7
Vh0fNdfumZAKwFkiSFkF4olpUXPwgLMatItaDaep4Vobv1zAAtmCMWOyfYMZVUgw
9Z4R+SeA8nG5SzEgT7bCJbUOD4a8ksN5zbohX9v0LQMo8vHgWXH3i5txChJll+An
RtMBHI3WViNPMMsHNYfh6frcormYdZVIHMaZzbeZI+/vpsBhEv7DjBNmaLXkOSP1
gJF8JlGojJNOTSHRnHHI6c2Fgdyzvc/0cDHvCuRCgxfNu9e0dWNqXAKfy+U+V/o1
2mhBcIlq+Iy+qd5mMt0qDf/rMg51aIHdFyAQ6MVOR97QzXGYjEz7s7HrFzixks9e
xHCsJwzZQM3n9kw0
-----END CERTIFICATE-----
Generated at Thu Oct 15 11:55:23 2026 by rpki-client