Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/323830343a346535303a3a2f33322d313238203d3e20323638323533.roa
File:                     323830343a346535303a3a2f33322d313238203d3e20323638323533.roa (raw, json)
Hash identifier:          9xAf7Dnbjp2iBGESLKAEm+7i697BHr0Dsyoz+VmVAdE=
Subject key identifier:   B6:20:BC:25:58:8A:E5:5A:F2:3A:DE:24:09:D5:E8:5F:F5:8A:15:FD
Certificate issuer:       /CN=8789A3CDAEAC12408496B42227D33F4A0813FB3B
Certificate serial:       2E9641B090B229C2E85E2A706A01E8C9FBB94461
Authority key identifier: 87:89:A3:CD:AE:AC:12:40:84:96:B4:22:27:D3:3F:4A:08:13:FB:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8789A3CDAEAC12408496B42227D33F4A0813FB3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/323830343a346535303a3a2f33322d313238203d3e20323638323533.roa
Signing time:             Thu 03 Sep 2026 16:43:32 +0000
ROA not before:           Thu 03 Sep 2026 16:38:32 +0000
ROA not after:            Thu 02 Sep 2027 16:43:32 +0000
asID:                     268253
IP address blocks:        2804:4e50::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/8789A3CDAEAC12408496B42227D33F4A0813FB3B.crl
                          rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/8789A3CDAEAC12408496B42227D33F4A0813FB3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8789A3CDAEAC12408496B42227D33F4A0813FB3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 03:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:96:41:b0:90:b2:29:c2:e8:5e:2a:70:6a:01:e8:c9:fb:b9:44:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8789A3CDAEAC12408496B42227D33F4A0813FB3B
        Validity
            Not Before: Sep  3 16:38:32 2026 GMT
            Not After : Sep  2 16:43:32 2027 GMT
        Subject: CN=B620BC25588AE55AF23ADE2409D5E85FF58A15FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:eb:77:d2:25:c8:73:55:99:d1:29:08:fe:
                    90:c8:c2:d4:e4:eb:6c:2c:37:21:0b:a6:a2:ca:6e:
                    81:94:79:d5:dd:8a:20:4a:61:25:92:64:70:54:b6:
                    ef:cd:74:fc:c0:da:ff:c2:95:b4:e4:b2:f6:6e:1e:
                    fd:02:e7:c7:59:46:98:0f:bb:8b:69:42:79:7a:50:
                    60:e7:8d:3d:c4:6d:35:e2:15:87:e4:5e:f6:18:61:
                    9d:f1:96:38:da:5b:f9:ac:f0:85:f5:02:a6:c7:c9:
                    2d:22:f5:b7:57:5c:ca:e2:32:a4:f5:97:8b:92:7e:
                    c7:bf:85:90:27:b4:97:ca:e2:85:0c:4c:04:1b:d1:
                    a7:81:9c:db:4f:d8:bf:7d:60:79:4b:de:22:b3:f0:
                    23:db:4f:c5:63:cb:04:9e:33:ec:05:c3:25:cc:00:
                    c0:a1:5e:7e:7d:38:e9:e5:20:8e:61:13:ac:b9:42:
                    8d:b6:a1:88:ca:95:3f:83:e2:8d:87:d1:d1:b4:ce:
                    b5:eb:b7:f8:5f:bd:66:ba:34:0d:6a:ee:1d:48:ad:
                    c0:05:d0:85:26:0f:4e:c3:6c:f5:e6:1b:56:24:d0:
                    df:c9:85:07:f2:a1:b2:5a:5a:ff:68:93:0b:3f:4c:
                    c0:a4:af:ba:84:58:68:47:f1:45:83:66:92:b5:f7:
                    73:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:20:BC:25:58:8A:E5:5A:F2:3A:DE:24:09:D5:E8:5F:F5:8A:15:FD
            X509v3 Authority Key Identifier:
                keyid:87:89:A3:CD:AE:AC:12:40:84:96:B4:22:27:D3:3F:4A:08:13:FB:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/8789A3CDAEAC12408496B42227D33F4A0813FB3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8789A3CDAEAC12408496B42227D33F4A0813FB3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/323830343a346535303a3a2f33322d313238203d3e20323638323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:0b:14:fc:ee:76:a4:13:d1:7f:ea:4b:f4:e1:a8:8b:d2:1b:
         34:f1:6a:11:7f:5b:62:31:b4:78:38:0a:0b:8e:9b:39:7d:48:
         33:b9:8e:e6:83:83:f4:4e:13:0f:3b:97:fc:56:df:5a:40:4a:
         b9:58:75:89:56:02:2b:1e:bb:a8:4c:67:f4:bb:63:0c:59:fd:
         da:d4:0c:fd:f5:70:c3:57:70:8c:02:09:bd:c9:f4:83:fb:50:
         e4:42:92:cb:52:fc:75:4e:2f:74:1c:af:1c:84:02:f2:eb:af:
         45:5b:5a:b8:f8:91:97:c0:a4:6b:a5:40:0d:c9:2d:85:bd:33:
         db:2f:05:09:5c:5a:e0:f6:2d:a4:78:e5:dd:9b:33:7a:95:02:
         ad:97:59:e7:10:a6:e0:ba:18:be:e6:76:9e:57:49:a1:09:10:
         cc:ce:83:a7:d4:5d:5a:3f:ab:cc:ab:c3:38:af:2f:5c:d2:94:
         0e:61:3d:66:06:de:09:5f:7c:55:26:37:02:df:b0:bd:69:af:
         a3:41:6d:d8:da:91:27:fb:12:de:7a:9f:f0:b7:ff:ad:f6:9b:
         d2:5a:04:62:f4:a6:a1:c2:20:ab:3c:50:f9:8b:16:f9:b1:b5:
         48:13:2a:4f:6d:2b:71:69:12:6d:bb:00:08:04:62:8b:e5:fb:
         84:da:24:ef
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIULpZBsJCyKcLoXipwagHoyfu5RGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc4OUEzQ0RBRUFDMTI0MDg0OTZCNDIyMjdEMzNGNEEw
ODEzRkIzQjAeFw0yNjA5MDMxNjM4MzJaFw0yNzA5MDIxNjQzMzJaMDMxMTAvBgNV
BAMTKEI2MjBCQzI1NTg4QUU1NUFGMjNBREUyNDA5RDVFODVGRjU4QTE1RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1GOt30iXIc1WZ0SkI/pDIwtTk
62wsNyELpqLKboGUedXdiiBKYSWSZHBUtu/NdPzA2v/ClbTksvZuHv0C58dZRpgP
u4tpQnl6UGDnjT3EbTXiFYfkXvYYYZ3xljjaW/ms8IX1AqbHyS0i9bdXXMriMqT1
l4uSfse/hZAntJfK4oUMTAQb0aeBnNtP2L99YHlL3iKz8CPbT8VjywSeM+wFwyXM
AMChXn59OOnlII5hE6y5Qo22oYjKlT+D4o2H0dG0zrXrt/hfvWa6NA1q7h1IrcAF
0IUmD07DbPXmG1Yk0N/JhQfyobJaWv9okws/TMCkr7qEWGhH8UWDZpK193NLAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUtiC8JViK5VryOt4kCdXoX/WKFf0wHwYDVR0j
BBgwFoAUh4mjza6sEkCElrQiJ9M/SggT+zswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUJIcmp6QXhIb0ZySFlEVnhZcGV6dkJmallnSFM0V0ZTcGtmRGY4M1lH
cG8vMC84Nzg5QTNDREFFQUMxMjQwODQ5NkI0MjIyN0QzM0Y0QTA4MTNGQjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3ODlBM0NEQUVBQzEyNDA4
NDk2QjQyMjI3RDMzRjRBMDgxM0ZCM0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VCSHJqekF4SG9GckhZRFZ4WXBlenZCZmpZZ0hTNFdGU3BrZkRmODNZR3BvLzAv
MzIzODMwMzQzYTM0NjUzNTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzMjM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBE5QMA0GCSqGSIb3DQEBCwUAA4IBAQDFCxT8
7nakE9F/6kv04aiL0hs08WoRf1tiMbR4OAoLjps5fUgzuY7mg4P0ThMPO5f8Vt9a
QEq5WHWJVgIrHruoTGf0u2MMWf3a1Az99XDDV3CMAgm9yfSD+1DkQpLLUvx1Ti90
HK8chALy669FW1q4+JGXwKRrpUANyS2FvTPbLwUJXFrg9i2keOXdmzN6lQKtl1nn
EKbguhi+5naeV0mhCRDMzoOn1F1aP6vMq8M4ry9c0pQOYT1mBt4JX3xVJjcC37C9
aa+jQW3Y2pEn+xLeep/wt/+t9pvSWgRi9KahwiCrPFD5ixb5sbVIEypPbStxaRJt
uwAIBGKL5fuE2iTv
-----END CERTIFICATE-----
Generated at Thu Oct 15 05:37:55 2026 by rpki-client