Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/323830343a313832343a363a3a2f34382d3438203d3e20323632333031.roa
File:                     323830343a313832343a363a3a2f34382d3438203d3e20323632333031.roa (raw, json)
Hash identifier:          eSRt25vEGNq1lDoYGihq/eUMoXgMq05fnQHrohrSbEs=
Subject key identifier:   8E:0D:67:9F:D1:47:70:30:1A:F9:E6:6D:8D:42:78:CB:F3:7D:64:AC
Certificate issuer:       /CN=852019550F65300604B78703987278200F8E079E
Certificate serial:       436B86E23150F6EB36DF6109BD800C87A5EBD9D1
Authority key identifier: 85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/323830343a313832343a363a3a2f34382d3438203d3e20323632333031.roa
Signing time:             Fri 07 Aug 2026 14:06:28 +0000
ROA not before:           Fri 07 Aug 2026 14:01:28 +0000
ROA not after:            Fri 06 Aug 2027 14:06:28 +0000
asID:                     262301
IP address blocks:        2804:1824:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 15:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6b:86:e2:31:50:f6:eb:36:df:61:09:bd:80:0c:87:a5:eb:d9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852019550F65300604B78703987278200F8E079E
        Validity
            Not Before: Aug  7 14:01:28 2026 GMT
            Not After : Aug  6 14:06:28 2027 GMT
        Subject: CN=8E0D679FD14770301AF9E66D8D4278CBF37D64AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:6d:27:3c:dc:c6:71:a4:0c:d8:02:4c:9d:
                    7f:0a:82:5f:ea:04:32:36:e7:c8:67:2a:9d:8a:3e:
                    43:24:fb:10:71:65:54:45:90:7f:0a:a1:b9:e0:11:
                    82:ff:bc:65:4a:72:01:cf:d5:8c:5e:e5:47:80:f7:
                    d1:43:ab:91:a7:a3:f7:73:47:2e:ac:d6:43:f8:ce:
                    b0:f3:79:09:be:e7:c5:df:7b:f0:e0:ae:8b:1c:16:
                    78:e5:22:42:7f:7d:29:5a:70:92:a5:12:dc:4f:3f:
                    a3:20:25:6a:f4:1b:68:0d:97:45:04:ef:b7:7c:f6:
                    f3:59:7b:c6:11:4c:59:62:84:8c:81:eb:fe:37:17:
                    07:8e:8d:14:a4:9b:eb:f7:a4:de:bb:05:b9:01:d9:
                    31:f8:80:4d:5c:d5:a2:06:5f:15:f7:a5:3e:4b:76:
                    7a:78:75:b7:c6:6e:62:d0:a0:1b:b1:2d:c1:ab:8f:
                    c2:ba:5d:06:18:23:2d:e7:18:76:39:64:a2:da:18:
                    72:2c:72:94:4e:61:a1:41:e2:ea:ef:43:66:4e:50:
                    92:f7:d6:2e:46:99:58:aa:1a:33:ea:2a:1d:8a:40:
                    eb:79:99:27:3c:00:2d:9d:14:0d:06:92:84:15:22:
                    2c:0e:35:93:c0:4f:1a:60:91:1b:19:fd:cc:8b:28:
                    bc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0D:67:9F:D1:47:70:30:1A:F9:E6:6D:8D:42:78:CB:F3:7D:64:AC
            X509v3 Authority Key Identifier:
                keyid:85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/323830343a313832343a363a3a2f34382d3438203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1824:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:05:c5:c5:ce:25:17:8a:b7:ad:86:59:d8:2b:34:92:da:4d:
         fc:29:f9:e9:6d:77:3e:65:90:bd:bf:c6:75:59:64:29:cf:ab:
         45:67:81:fc:91:ee:72:e8:62:d5:f6:6f:ab:e9:ec:fa:90:0d:
         49:f8:e0:6a:f7:65:66:32:5e:a0:e0:6c:a7:6d:a2:9a:14:e8:
         26:91:2c:83:37:24:1a:76:16:68:5f:0c:a0:ab:59:68:72:86:
         79:a5:d1:8f:2f:4a:3b:3c:ac:e3:e9:03:2d:72:4c:cb:02:ae:
         95:9f:ac:be:a0:66:86:b1:b4:07:fb:6a:07:cd:fa:2b:e8:5a:
         fc:56:1d:cc:0d:b8:94:4a:17:7a:9c:23:98:3e:a3:da:e7:04:
         3a:dd:81:35:03:bc:52:03:16:ba:ec:e7:7d:9d:d0:bc:35:d1:
         90:21:53:c7:10:b1:18:a7:d7:0c:f0:3a:6e:e5:14:52:f1:78:
         db:2b:77:f1:f8:cc:0d:7b:4f:c9:c3:9d:09:33:f9:7c:8d:20:
         3e:78:e3:e9:3b:e4:83:34:dc:9f:ae:2e:1c:a2:19:f7:d0:80:
         ac:2b:5b:3b:5d:34:0a:15:3c:38:9a:15:3a:8e:ee:e4:b7:1d:
         01:59:f1:7a:e7:3b:7e:92:78:1b:c9:af:d2:cd:96:27:8b:ca:
         9f:c6:4b:3a
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUQ2uG4jFQ9us232EJvYAMh6Xr2dEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyMDE5NTUwRjY1MzAwNjA0Qjc4NzAzOTg3Mjc4MjAw
RjhFMDc5RTAeFw0yNjA4MDcxNDAxMjhaFw0yNzA4MDYxNDA2MjhaMDMxMTAvBgNV
BAMTKDhFMEQ2NzlGRDE0NzcwMzAxQUY5RTY2RDhENDI3OENCRjM3RDY0QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcW0nPNzGcaQM2AJMnX8Kgl/q
BDI258hnKp2KPkMk+xBxZVRFkH8KobngEYL/vGVKcgHP1Yxe5UeA99FDq5Gno/dz
Ry6s1kP4zrDzeQm+58Xfe/DgroscFnjlIkJ/fSlacJKlEtxPP6MgJWr0G2gNl0UE
77d89vNZe8YRTFlihIyB6/43FweOjRSkm+v3pN67BbkB2TH4gE1c1aIGXxX3pT5L
dnp4dbfGbmLQoBuxLcGrj8K6XQYYIy3nGHY5ZKLaGHIscpROYaFB4urvQ2ZOUJL3
1i5GmViqGjPqKh2KQOt5mSc8AC2dFA0GkoQVIiwONZPATxpgkRsZ/cyLKLxnAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUjg1nn9FHcDAa+eZtjUJ4y/N9ZKwwHwYDVR0j
BBgwFoAUhSAZVQ9lMAYEt4cDmHJ4IA+OB54wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVhjUzcxVEtaMjJkenlNUU51dkhha2M5UGJBQkNyRHFxZmpCTm9GeWFI
eUgvMC84NTIwMTk1NTBGNjUzMDA2MDRCNzg3MDM5ODcyNzgyMDBGOEUwNzlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1MjAxOTU1MEY2NTMwMDYw
NEI3ODcwMzk4NzI3ODIwMEY4RTA3OUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VYY1M3MVRLWjIyZHp5TVFOdXZIYWtjOVBiQUJDckRxcWZqQk5vRnlhSHlILzAv
MzIzODMwMzQzYTMxMzgzMjM0M2EzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzMjMzMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEGCQABjANBgkqhkiG9w0BAQsFAAOCAQEA
pQXFxc4lF4q3rYZZ2Cs0ktpN/Cn56W13PmWQvb/GdVlkKc+rRWeB/JHucuhi1fZv
q+ns+pANSfjgavdlZjJeoOBsp22imhToJpEsgzckGnYWaF8MoKtZaHKGeaXRjy9K
Ozys4+kDLXJMywKulZ+svqBmhrG0B/tqB836K+ha/FYdzA24lEoXepwjmD6j2ucE
Ot2BNQO8UgMWuuznfZ3QvDXRkCFTxxCxGKfXDPA6buUUUvF42yt38fjMDXtPycOd
CTP5fI0gPnjj6TvkgzTcn64uHKIZ99CArCtbO100ChU8OJoVOo7u5LcdAVnxeuc7
fpJ4G8mv0s2WJ4vKn8ZLOg==
-----END CERTIFICATE-----
Generated at Sun Aug 23 05:15:09 2026 by rpki-client