Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a653430303a3a2f33382d3338203d3e20323730333431.roa
File:                     323830343a366138343a653430303a3a2f33382d3338203d3e20323730333431.roa (raw, json)
Hash identifier:          WHnrk2HcD0Tm+2OnyHCVgnFk8NphBMSPEf8O72xsCS8=
Subject key identifier:   40:55:F7:B0:E6:6F:0B:3C:0D:22:8E:79:DE:D3:F3:33:52:CA:0A:11
Certificate issuer:       /CN=D4CE1443D6786421014CB2B08469ADBFF750F303
Certificate serial:       4DC3AD30F0828FC9E9E1ABF7BB0F7142CB4837F7
Authority key identifier: D4:CE:14:43:D6:78:64:21:01:4C:B2:B0:84:69:AD:BF:F7:50:F3:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a653430303a3a2f33382d3338203d3e20323730333431.roa
Signing time:             Thu 02 Jul 2026 15:09:07 +0000
ROA not before:           Thu 02 Jul 2026 15:04:07 +0000
ROA not after:            Thu 01 Jul 2027 15:09:07 +0000
asID:                     270341
IP address blocks:        2804:6a84:e400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.crl
                          rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c3:ad:30:f0:82:8f:c9:e9:e1:ab:f7:bb:0f:71:42:cb:48:37:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4CE1443D6786421014CB2B08469ADBFF750F303
        Validity
            Not Before: Jul  2 15:04:07 2026 GMT
            Not After : Jul  1 15:09:07 2027 GMT
        Subject: CN=4055F7B0E66F0B3C0D228E79DED3F33352CA0A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:e9:b7:c7:ba:2c:a6:d1:ae:e8:46:a0:73:
                    96:06:30:24:ea:93:b8:62:ef:a2:55:1a:1c:8d:64:
                    dc:cd:49:50:33:0b:b2:23:6e:d9:e3:2b:eb:18:ab:
                    1d:d9:a6:f5:2f:60:8b:45:27:a8:19:3e:65:4f:13:
                    15:07:38:2b:cc:67:88:83:eb:47:c8:21:90:f1:c4:
                    df:11:f6:9f:a7:07:a1:53:6f:a6:f4:8e:11:68:b2:
                    a3:04:46:54:93:de:a0:0a:00:30:e8:2d:5f:da:de:
                    fc:13:1a:bc:bc:41:f4:a4:e1:9e:92:8d:72:6d:67:
                    ff:8d:54:3b:92:88:ca:96:b9:28:5e:9e:8b:be:60:
                    49:f7:f0:f2:ad:fb:cc:a5:4c:4f:18:94:46:f5:ce:
                    8a:ed:1a:23:65:c9:a7:ff:c3:ae:1a:3c:8b:15:f7:
                    15:cf:d2:83:3d:19:fa:a1:cd:72:99:81:35:0b:ea:
                    fe:d5:b3:d0:7c:02:ab:e4:86:f4:a5:02:31:22:40:
                    8b:87:17:b9:7a:02:5d:62:be:cd:05:bd:0f:5f:42:
                    61:35:56:99:b2:6c:af:a0:4d:dc:0a:53:48:c7:46:
                    56:30:6f:07:36:f5:c1:11:37:eb:ab:82:a6:85:84:
                    da:82:71:fa:c2:1f:23:78:64:02:d1:6a:4d:97:c4:
                    a1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:55:F7:B0:E6:6F:0B:3C:0D:22:8E:79:DE:D3:F3:33:52:CA:0A:11
            X509v3 Authority Key Identifier:
                keyid:D4:CE:14:43:D6:78:64:21:01:4C:B2:B0:84:69:AD:BF:F7:50:F3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a653430303a3a2f33382d3338203d3e20323730333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a84:e400::/38

    Signature Algorithm: sha256WithRSAEncryption
         6c:de:72:bb:51:44:f4:6f:54:9b:a5:f0:b8:6a:26:5b:53:01:
         07:2a:84:05:34:9e:45:11:35:93:ea:12:09:e3:9e:cf:e3:ca:
         d4:19:88:2f:d5:7b:e5:53:9b:41:4f:3e:bb:4c:14:09:4b:39:
         2a:ae:b1:31:a5:07:e1:c5:a3:01:e8:27:f4:4a:4f:b1:5b:a1:
         84:a1:fe:81:eb:47:b7:b2:49:15:24:d9:e1:ee:b7:c6:11:90:
         98:20:40:05:8a:f9:8e:9e:89:e7:32:27:4f:ee:98:ed:41:ee:
         cf:82:58:dc:8f:93:6d:76:52:ad:cf:fc:df:b5:56:e5:04:89:
         67:e8:bf:89:cc:64:56:8a:75:d6:4b:8c:b8:96:05:55:3f:fc:
         b4:17:d3:49:8d:54:30:65:1d:50:51:56:39:6b:5b:77:fa:f7:
         74:c0:52:2f:32:9c:37:c8:ed:25:7d:26:32:f2:1c:8b:53:05:
         fd:74:37:1f:72:09:7a:16:5c:fa:09:50:16:a0:c5:04:66:45:
         68:47:17:fa:d0:0a:ed:ef:79:10:a6:be:ff:3a:51:c0:7c:26:
         42:9a:0f:e0:00:e2:a1:17:66:32:f0:ea:20:c0:3b:36:1e:8c:
         cb:f2:0a:31:3b:db:05:95:98:71:aa:45:bb:48:88:0c:51:8d:
         fd:c9:28:5d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTcOtMPCCj8np4av3uw9xQstIN/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRDRTE0NDNENjc4NjQyMTAxNENCMkIwODQ2OUFEQkZG
NzUwRjMwMzAeFw0yNjA3MDIxNTA0MDdaFw0yNzA3MDExNTA5MDdaMDMxMTAvBgNV
BAMTKDQwNTVGN0IwRTY2RjBCM0MwRDIyOEU3OURFRDNGMzMzNTJDQTBBMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCod+m3x7osptGu6Eagc5YGMCTq
k7hi76JVGhyNZNzNSVAzC7IjbtnjK+sYqx3ZpvUvYItFJ6gZPmVPExUHOCvMZ4iD
60fIIZDxxN8R9p+nB6FTb6b0jhFosqMERlST3qAKADDoLV/a3vwTGry8QfSk4Z6S
jXJtZ/+NVDuSiMqWuShenou+YEn38PKt+8ylTE8YlEb1zortGiNlyaf/w64aPIsV
9xXP0oM9GfqhzXKZgTUL6v7Vs9B8AqvkhvSlAjEiQIuHF7l6Al1ivs0FvQ9fQmE1
VpmybK+gTdwKU0jHRlYwbwc29cERN+urgqaFhNqCcfrCHyN4ZALRak2XxKFdAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQFX3sOZvCzwNIo553tPzM1LKChEwHwYDVR0j
BBgwFoAU1M4UQ9Z4ZCEBTLKwhGmtv/dQ8wMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXVuTGNGMmNDY3VualdRMTVLbk1ZS0NTQkFleVRIWUN1NzFFUERkVW1R
Qk4vMC9ENENFMTQ0M0Q2Nzg2NDIxMDE0Q0IyQjA4NDY5QURCRkY3NTBGMzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0Q0UxNDQzRDY3ODY0MjEw
MTRDQjJCMDg0NjlBREJGRjc1MEYzMDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V1bkxjRjJjQ2N1bmpXUTE1S25NWUtDU0JBZXlUSFlDdTcxRVBEZFVtUUJOLzAv
MzIzODMwMzQzYTM2NjEzODM0M2E2NTM0MzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNk
M2UyMDMyMzczMDMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAigEaoTkMA0GCSqGSIb3DQEBCwUA
A4IBAQBs3nK7UUT0b1SbpfC4aiZbUwEHKoQFNJ5FETWT6hIJ457P48rUGYgv1Xvl
U5tBTz67TBQJSzkqrrExpQfhxaMB6Cf0Sk+xW6GEof6B60e3skkVJNnh7rfGEZCY
IEAFivmOnonnMidP7pjtQe7Pgljcj5NtdlKtz/zftVblBIln6L+JzGRWinXWS4y4
lgVVP/y0F9NJjVQwZR1QUVY5a1t3+vd0wFIvMpw3yO0lfSYy8hyLUwX9dDcfcgl6
Flz6CVAWoMUEZkVoRxf60Art73kQpr7/OlHAfCZCmg/gAOKhF2Yy8OogwDs2HozL
8goxO9sFlZhxqkW7SIgMUY39yShd
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:01 2026 by rpki-client