Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/323830343a316265303a3a2f33322d3332203d3e203631373534.roa
File:                     323830343a316265303a3a2f33322d3332203d3e203631373534.roa (raw, json)
Hash identifier:          prwRV+4muUxgeE288YuIpMgn0JLBl08s7Jma9ztgF14=
Subject key identifier:   BD:CD:7B:F8:0B:E3:BD:B8:CF:38:80:5C:3B:CD:9F:00:AD:04:01:6B
Certificate issuer:       /CN=D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5
Certificate serial:       036912E356768B4EB4E6B8A0DA564DA1344A3CFD
Authority key identifier: D9:BD:8E:48:A9:B1:3E:FE:BA:F6:0D:AF:4D:75:C5:47:DE:14:0B:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/323830343a316265303a3a2f33322d3332203d3e203631373534.roa
Signing time:             Fri 11 Sep 2026 20:14:23 +0000
ROA not before:           Fri 11 Sep 2026 20:09:23 +0000
ROA not after:            Fri 10 Sep 2027 20:14:23 +0000
asID:                     61754
IP address blocks:        2804:1be0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.crl
                          rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 19:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:69:12:e3:56:76:8b:4e:b4:e6:b8:a0:da:56:4d:a1:34:4a:3c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5
        Validity
            Not Before: Sep 11 20:09:23 2026 GMT
            Not After : Sep 10 20:14:23 2027 GMT
        Subject: CN=BDCD7BF80BE3BDB8CF38805C3BCD9F00AD04016B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:f3:39:eb:15:56:b4:56:b5:9d:2d:5b:c5:
                    f2:ec:6b:7d:30:3e:d7:4f:67:47:c3:82:ae:e9:c7:
                    bf:3f:9a:ba:e8:2c:11:31:bf:0a:21:5e:07:b5:aa:
                    bd:e4:d5:a1:96:13:e5:ca:fc:cf:fe:c7:91:72:11:
                    28:c7:d2:6b:23:6e:9a:98:a5:e9:e1:d1:02:f9:fe:
                    85:b5:76:45:dd:4a:66:0b:6b:aa:64:d4:0f:a5:35:
                    c0:97:4c:aa:8b:d5:5d:c0:67:d3:0e:f6:54:c2:12:
                    08:1e:d2:f0:e8:d7:d8:46:e8:0e:30:4d:87:fa:19:
                    d0:8a:dd:8c:f1:ad:fc:e1:9d:df:7c:a5:25:ca:d8:
                    28:84:01:5f:5f:61:c7:2f:c7:ad:71:34:1b:2f:ee:
                    b5:09:e5:5a:7c:07:94:2d:bf:56:9c:da:80:04:f5:
                    e6:ec:69:8a:9c:f7:9a:b4:bf:14:50:1f:58:3a:77:
                    5d:3b:f7:f9:3e:dc:1f:b3:38:3b:0b:df:e4:0e:de:
                    ce:78:74:1d:ca:07:fb:71:16:a7:af:bc:05:76:37:
                    c4:ea:6e:8b:3d:1d:97:d1:2d:ef:63:a2:06:d9:06:
                    35:b7:c0:4d:d8:19:51:1e:74:7d:4e:ce:0a:72:1f:
                    5b:2c:a4:e7:68:31:fb:98:11:71:a5:ca:fc:c0:5b:
                    0f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CD:7B:F8:0B:E3:BD:B8:CF:38:80:5C:3B:CD:9F:00:AD:04:01:6B
            X509v3 Authority Key Identifier:
                keyid:D9:BD:8E:48:A9:B1:3E:FE:BA:F6:0D:AF:4D:75:C5:47:DE:14:0B:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/323830343a316265303a3a2f33322d3332203d3e203631373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:9c:e7:cd:25:c5:f7:8f:2a:09:7a:cf:c3:32:3b:04:f2:c6:
         4c:dd:7c:2e:b3:92:e7:89:eb:ce:75:3d:7f:50:fa:4a:3c:6b:
         57:8a:5a:ff:8c:c0:d1:40:77:84:47:81:f4:af:43:b5:6f:77:
         34:d1:5b:4a:a7:00:d9:b7:fb:aa:15:ee:88:28:d3:d1:af:a7:
         32:ca:65:2e:8c:d8:91:0b:ce:44:ca:8c:52:71:59:b4:59:58:
         ff:dc:97:6d:07:e8:f6:5a:16:18:fd:9c:a7:67:7a:2a:c9:ed:
         29:9b:02:e7:d7:3b:ae:0d:11:a1:e2:fe:7a:4f:bd:fc:0d:b2:
         4a:7f:f3:20:9d:79:d2:1b:d6:39:24:55:50:3c:33:b3:68:2e:
         af:8c:36:24:76:d6:73:ed:c9:19:ce:60:e6:72:0f:c1:03:70:
         e5:9e:88:cd:bc:80:c7:69:57:44:a2:86:48:b8:0b:0f:f5:a8:
         47:29:78:8e:71:65:71:fa:87:f2:03:96:6f:da:66:b1:1d:64:
         ce:11:5d:27:70:81:94:4d:a5:49:dd:90:1b:e2:84:c0:78:db:
         35:79:a1:ce:6b:98:e7:62:89:7d:0a:ad:bb:72:47:e1:28:1f:
         cf:d6:78:bb:45:a9:fc:fb:07:c4:eb:4a:a7:10:ea:0a:04:f4:
         06:a0:17:0d
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUA2kS41Z2i0605rig2lZNoTRKPP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlCRDhFNDhBOUIxM0VGRUJBRjYwREFGNEQ3NUM1NDdE
RTE0MEJDNTAeFw0yNjA5MTEyMDA5MjNaFw0yNzA5MTAyMDE0MjNaMDMxMTAvBgNV
BAMTKEJEQ0Q3QkY4MEJFM0JEQjhDRjM4ODA1QzNCQ0Q5RjAwQUQwNDAxNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOfM56xVWtFa1nS1bxfLsa30w
PtdPZ0fDgq7px78/mrroLBExvwohXge1qr3k1aGWE+XK/M/+x5FyESjH0msjbpqY
penh0QL5/oW1dkXdSmYLa6pk1A+lNcCXTKqL1V3AZ9MO9lTCEgge0vDo19hG6A4w
TYf6GdCK3Yzxrfzhnd98pSXK2CiEAV9fYccvx61xNBsv7rUJ5Vp8B5Qtv1ac2oAE
9ebsaYqc95q0vxRQH1g6d1079/k+3B+zODsL3+QO3s54dB3KB/txFqevvAV2N8Tq
bos9HZfRLe9jogbZBjW3wE3YGVEedH1OzgpyH1sspOdoMfuYEXGlyvzAWw+XAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUvc17+AvjvbjPOIBcO82fAK0EAWswHwYDVR0j
BBgwFoAU2b2OSKmxPv669g2vTXXFR94UC8UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW1uUmphc2I2R2JWdzU3cURxQ0RjZER2Q3Y1WGVYaHVGSmdpNDNyTmJE
ZEIvMC9EOUJEOEU0OEE5QjEzRUZFQkFGNjBEQUY0RDc1QzU0N0RFMTQwQkM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5QkQ4RTQ4QTlCMTNFRkVC
QUY2MERBRjRENzVDNTQ3REUxNDBCQzUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VtblJqYXNiNkdiVnc1N3FEcUNEY2REdkN2NVhlWGh1RkpnaTQzck5iRGRCLzAv
MzIzODMwMzQzYTMxNjI2NTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM3
MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEG+AwDQYJKoZIhvcNAQELBQADggEBAHuc580lxfeP
Kgl6z8MyOwTyxkzdfC6zkueJ6851PX9Q+ko8a1eKWv+MwNFAd4RHgfSvQ7VvdzTR
W0qnANm3+6oV7ogo09GvpzLKZS6M2JELzkTKjFJxWbRZWP/cl20H6PZaFhj9nKdn
eirJ7SmbAufXO64NEaHi/npPvfwNskp/8yCdedIb1jkkVVA8M7NoLq+MNiR21nPt
yRnOYOZyD8EDcOWeiM28gMdpV0Sihki4Cw/1qEcpeI5xZXH6h/IDlm/aZrEdZM4R
XSdwgZRNpUndkBvihMB42zV5oc5rmOdiiX0KrbtyR+EoH8/WeLtFqfz7B8TrSqcQ
6goE9AagFw0=
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:27:59 2026 by rpki-client