Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a333030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a333030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          1p5JVB+QtH6/9cYrFpcwuZaMnETxC0yOKPYMWQrJGbw=
Subject key identifier:   BA:76:F7:38:11:E7:86:06:08:CA:3A:86:32:39:11:2D:AE:F4:DC:1B
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       47623F0348C194C18A62B6D8E45CF4C3F2D88B11
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a333030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Tue 23 Jun 2026 12:40:28 +0000
ROA not before:           Tue 23 Jun 2026 12:35:28 +0000
ROA not after:            Tue 22 Jun 2027 12:40:28 +0000
asID:                     264247
IP address blocks:        2804:24e4:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
                          rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 21:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:62:3f:03:48:c1:94:c1:8a:62:b6:d8:e4:5c:f4:c3:f2:d8:8b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Jun 23 12:35:28 2026 GMT
            Not After : Jun 22 12:40:28 2027 GMT
        Subject: CN=BA76F73811E7860608CA3A863239112DAEF4DC1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:92:3e:2e:af:c7:f1:d1:12:c5:84:f0:c1:
                    7a:0c:9f:bb:07:b0:ec:b3:a5:a0:7e:10:45:57:08:
                    db:dc:5a:a2:3a:0e:c4:c3:6b:56:54:f8:12:f5:fc:
                    ec:21:c4:ba:03:23:09:94:68:87:91:1a:52:f6:8a:
                    1c:87:ea:44:2e:a5:44:f5:7f:fb:2e:16:61:9b:6b:
                    0f:7e:39:da:36:68:33:35:43:48:21:80:7d:6c:e1:
                    cf:d5:ad:22:8a:0e:be:e8:04:27:dc:3f:e7:78:79:
                    00:69:ec:91:88:e3:fe:57:d6:71:1c:01:aa:b9:4d:
                    ef:65:79:a5:0c:4d:b0:47:60:b9:a5:e5:ce:9a:24:
                    72:63:c8:64:91:d3:49:b7:da:8e:33:13:49:1e:8b:
                    7d:b1:41:86:f8:50:0d:c8:dc:1c:05:6f:f0:08:d7:
                    86:a9:bb:c5:8c:ff:16:b3:b7:c5:1c:c7:a0:5c:c7:
                    26:8b:82:86:40:b9:ad:62:47:57:72:7f:aa:9f:a1:
                    35:f6:b1:92:51:0f:f0:d7:4f:11:66:d9:d2:2c:ee:
                    0e:bf:c6:2d:ea:16:e3:ef:42:27:30:33:90:db:94:
                    bb:7b:93:27:a7:c9:86:35:38:f3:cc:09:39:d6:a8:
                    4d:03:b1:5f:d3:30:e7:47:18:a5:8f:ac:4b:44:63:
                    c5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:76:F7:38:11:E7:86:06:08:CA:3A:86:32:39:11:2D:AE:F4:DC:1B
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a333030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3a:eb:ad:d1:44:cd:63:3a:f2:53:b2:9a:35:b2:2c:fc:ca:e7:
         cc:c9:83:f5:ff:bb:12:0d:82:b1:49:ee:ad:db:a4:32:e0:9c:
         80:36:70:8a:e8:c3:5b:5c:9f:c3:c1:b1:4a:ec:62:d9:5f:93:
         ea:fb:42:73:cd:2c:22:57:b4:60:32:0d:be:bf:b5:8f:5c:32:
         62:30:f4:6d:3a:5b:73:a7:a3:d3:0b:58:12:4c:f6:39:11:31:
         41:75:6e:c3:89:83:0f:22:29:cf:65:8a:36:97:55:89:97:09:
         22:20:49:88:c0:19:4d:10:0f:df:81:fd:b8:9a:a7:17:27:ed:
         66:71:ad:21:21:c4:ac:97:74:a3:21:71:ef:f2:21:7f:dd:49:
         2a:d7:80:b6:3b:b3:8e:65:d3:f3:f3:79:6b:d7:47:32:29:fb:
         f4:80:0d:8a:59:15:40:0b:3d:a9:c1:9a:27:40:2a:b2:a6:83:
         8e:1e:f6:33:1a:b8:61:b4:d3:33:0f:ae:4d:92:dc:a7:a0:28:
         75:be:3d:68:1a:b7:8f:75:53:25:08:59:45:54:f4:2b:04:b8:
         ed:a3:ee:b7:4b:75:c1:aa:32:1c:3c:0c:ea:30:9d:96:80:51:
         52:45:b0:2b:74:2b:5e:b6:3c:4c:5d:9a:06:b3:86:6b:80:29:
         6a:d3:80:10
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUR2I/A0jBlMGKYrbY5Fz0w/LYixEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJGRTE2RkFDRDI5OTMxNkZDRUY3M0NGRUE3ODI4NDRE
N0MyRTY5ODAeFw0yNjA2MjMxMjM1MjhaFw0yNzA2MjIxMjQwMjhaMDMxMTAvBgNV
BAMTKEJBNzZGNzM4MTFFNzg2MDYwOENBM0E4NjMyMzkxMTJEQUVGNERDMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFuJI+Lq/H8dESxYTwwXoMn7sH
sOyzpaB+EEVXCNvcWqI6DsTDa1ZU+BL1/OwhxLoDIwmUaIeRGlL2ihyH6kQupUT1
f/suFmGbaw9+Odo2aDM1Q0ghgH1s4c/VrSKKDr7oBCfcP+d4eQBp7JGI4/5X1nEc
Aaq5Te9leaUMTbBHYLml5c6aJHJjyGSR00m32o4zE0kei32xQYb4UA3I3BwFb/AI
14apu8WM/xazt8Ucx6BcxyaLgoZAua1iR1dyf6qfoTX2sZJRD/DXTxFm2dIs7g6/
xi3qFuPvQicwM5DblLt7kyenyYY1OPPMCTnWqE0DsV/TMOdHGKWPrEtEY8X9AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUunb3OBHnhgYIyjqGMjkRLa703BswHwYDVR0j
BBgwFoAUEv4W+s0pkxb873PP6ngoRNfC5pgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0
dHMvMS8xMkZFMTZGQUNEMjk5MzE2RkNFRjczQ0ZFQTc4Mjg0NEQ3QzJFNjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyRkUxNkZBQ0QyOTkzMTZG
Q0VGNzNDRkVBNzgyODQ0RDdDMkU2OTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpQXR0TGlETGlyRFIzMnFnZWZOaEwzc3ZIU2FIdFV5bTNHcWh1WlhWNHRzLzEv
MzIzODMwMzQzYTMyMzQ2NTM0M2EzMzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDMyMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEJOQwMA0GCSqGSIb3DQEBCwUA
A4IBAQA6663RRM1jOvJTspo1siz8yufMyYP1/7sSDYKxSe6t26Qy4JyANnCK6MNb
XJ/DwbFK7GLZX5Pq+0JzzSwiV7RgMg2+v7WPXDJiMPRtOltzp6PTC1gSTPY5ETFB
dW7DiYMPIinPZYo2l1WJlwkiIEmIwBlNEA/fgf24mqcXJ+1mca0hIcSsl3SjIXHv
8iF/3Ukq14C2O7OOZdPz83lr10cyKfv0gA2KWRVACz2pwZonQCqypoOOHvYzGrhh
tNMzD65NktynoCh1vj1oGrePdVMlCFlFVPQrBLjto+63S3XBqjIcPAzqMJ2WgFFS
RbArdCtetjxMXZoGs4ZrgClq04AQ
-----END CERTIFICATE-----
Generated at Wed Jul 8 21:18:11 2026 by rpki-client