Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a363030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a363030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          8TxD15B0A0bAMdfw5gVOfdaODyvf4Fnc+gYO6r0rbDE=
Subject key identifier:   DF:70:8A:87:A9:C6:42:6A:95:3A:26:5F:7A:46:33:AF:A8:39:D8:52
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       4AEDB484E6F24CEC7DE8D653148AAC8FF6D9804F
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a363030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Tue 23 Jun 2026 11:47:28 +0000
ROA not before:           Tue 23 Jun 2026 11:42:28 +0000
ROA not after:            Tue 22 Jun 2027 11:47:28 +0000
asID:                     264247
IP address blocks:        2804:24e4:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
                          rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 21:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ed:b4:84:e6:f2:4c:ec:7d:e8:d6:53:14:8a:ac:8f:f6:d9:80:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Jun 23 11:42:28 2026 GMT
            Not After : Jun 22 11:47:28 2027 GMT
        Subject: CN=DF708A87A9C6426A953A265F7A4633AFA839D852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4b:ce:17:7e:f5:63:1b:b9:dd:58:05:e7:58:
                    fc:95:66:2f:11:d0:a9:5e:c6:f8:7d:ca:a5:0e:24:
                    4c:09:a1:7a:63:29:ce:2b:49:ac:e5:2e:cb:e2:11:
                    e0:9c:6d:09:0f:dc:6c:da:3a:1b:50:80:f8:8c:c2:
                    f4:67:ee:cd:c4:37:a9:04:fa:99:14:d7:22:02:d3:
                    0d:6d:03:03:4e:0a:e1:15:aa:6b:53:d2:0f:8e:fc:
                    58:e8:d2:5a:8f:ae:b2:cc:48:cc:45:5d:43:81:50:
                    1d:f3:15:bd:8f:16:17:e0:3d:ac:c8:81:26:16:a6:
                    99:3c:13:ec:c4:fc:7a:c6:1c:e9:0b:93:e4:b4:1e:
                    92:ab:e5:d1:63:fc:fc:ff:af:f9:14:04:89:7c:7a:
                    0d:ee:e3:e1:00:dc:4b:e6:ba:1d:3f:a2:30:c9:75:
                    d4:09:76:0c:ba:63:a8:3e:03:bd:c5:f8:0c:35:b8:
                    3d:36:86:c8:ee:7b:24:e1:04:4f:0d:4b:61:1b:78:
                    9b:f1:14:8e:21:b7:0a:35:04:24:49:9d:fb:48:ef:
                    3f:88:d5:c2:4d:c1:92:7a:cf:29:7c:0b:a4:30:13:
                    2d:20:8d:a6:33:de:d4:96:25:86:3a:bf:7f:d9:1e:
                    5b:3c:12:d7:67:ad:4b:56:24:71:5b:08:28:a0:9d:
                    0a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:70:8A:87:A9:C6:42:6A:95:3A:26:5F:7A:46:33:AF:A8:39:D8:52
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a363030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         73:d6:90:8d:d7:57:e3:1d:31:32:e1:61:59:11:93:89:b1:77:
         fd:df:70:08:29:a0:6a:8f:f6:51:07:08:4c:77:17:45:18:ac:
         bc:eb:c4:6b:b7:35:88:0c:6c:63:1c:1b:28:06:4c:ab:a9:14:
         5a:fc:2e:b7:80:ff:a0:f4:a1:25:6d:09:93:e7:57:d9:6f:c9:
         51:7b:7d:65:c0:e1:64:c8:25:e4:46:33:8a:6d:a8:a2:99:c3:
         4c:92:2c:99:39:39:cb:0b:f2:f3:49:08:e8:d0:0c:a2:2e:3f:
         2b:3e:c5:75:bd:94:6a:b8:34:d4:3f:24:0a:6b:bc:67:28:cd:
         c3:fc:2b:f4:31:2f:13:3c:1f:8f:06:f7:cf:2d:52:a2:56:3e:
         e9:de:cd:14:51:ef:f4:09:ea:e3:88:ec:02:96:33:10:85:1a:
         48:de:9a:17:41:24:83:c3:b7:0a:d6:d7:ce:27:aa:52:67:87:
         f7:f0:4d:26:09:11:51:20:43:ba:e4:e4:1e:0f:47:0e:8c:e2:
         15:80:e7:e4:19:b3:f2:1b:4e:8b:00:f5:3a:4b:e7:7c:01:3c:
         cf:10:a2:6b:e4:fc:f9:9c:74:e7:e2:70:18:64:91:49:51:f1:
         fe:4d:cb:ce:80:23:7d:fe:8a:ff:f4:cc:e4:65:2b:30:96:75:
         24:2b:c2:93
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUSu20hObyTOx96NZTFIqsj/bZgE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJGRTE2RkFDRDI5OTMxNkZDRUY3M0NGRUE3ODI4NDRE
N0MyRTY5ODAeFw0yNjA2MjMxMTQyMjhaFw0yNzA2MjIxMTQ3MjhaMDMxMTAvBgNV
BAMTKERGNzA4QTg3QTlDNjQyNkE5NTNBMjY1RjdBNDYzM0FGQTgzOUQ4NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaS84XfvVjG7ndWAXnWPyVZi8R
0Klexvh9yqUOJEwJoXpjKc4rSazlLsviEeCcbQkP3GzaOhtQgPiMwvRn7s3EN6kE
+pkU1yIC0w1tAwNOCuEVqmtT0g+O/Fjo0lqPrrLMSMxFXUOBUB3zFb2PFhfgPazI
gSYWppk8E+zE/HrGHOkLk+S0HpKr5dFj/Pz/r/kUBIl8eg3u4+EA3Evmuh0/ojDJ
ddQJdgy6Y6g+A73F+Aw1uD02hsjueyThBE8NS2EbeJvxFI4htwo1BCRJnftI7z+I
1cJNwZJ6zyl8C6QwEy0gjaYz3tSWJYY6v3/ZHls8EtdnrUtWJHFbCCignQq1AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU33CKh6nGQmqVOiZfekYzr6g52FIwHwYDVR0j
BBgwFoAUEv4W+s0pkxb873PP6ngoRNfC5pgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0
dHMvMS8xMkZFMTZGQUNEMjk5MzE2RkNFRjczQ0ZFQTc4Mjg0NEQ3QzJFNjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyRkUxNkZBQ0QyOTkzMTZG
Q0VGNzNDRkVBNzgyODQ0RDdDMkU2OTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpQXR0TGlETGlyRFIzMnFnZWZOaEwzc3ZIU2FIdFV5bTNHcWh1WlhWNHRzLzEv
MzIzODMwMzQzYTMyMzQ2NTM0M2EzNjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDMyMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEJORgMA0GCSqGSIb3DQEBCwUA
A4IBAQBz1pCN11fjHTEy4WFZEZOJsXf933AIKaBqj/ZRBwhMdxdFGKy868RrtzWI
DGxjHBsoBkyrqRRa/C63gP+g9KElbQmT51fZb8lRe31lwOFkyCXkRjOKbaiimcNM
kiyZOTnLC/LzSQjo0AyiLj8rPsV1vZRquDTUPyQKa7xnKM3D/Cv0MS8TPB+PBvfP
LVKiVj7p3s0UUe/0CerjiOwCljMQhRpI3poXQSSDw7cK1tfOJ6pSZ4f38E0mCRFR
IEO65OQeD0cOjOIVgOfkGbPyG06LAPU6S+d8ATzPEKJr5Pz5nHTn4nAYZJFJUfH+
TcvOgCN9/or/9MzkZSswlnUkK8KT
-----END CERTIFICATE-----
Generated at Wed Jul 8 20:17:50 2026 by rpki-client