Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a3a2f33322d3438203d3e20323637363537.roa
File:                     323830343a343464383a3a2f33322d3438203d3e20323637363537.roa (raw, json)
Hash identifier:          VvMa3fCwASBKiqStMr9LSRQluPf3Dp0bA57oIv6Z4eM=
Subject key identifier:   9A:F0:98:DE:42:86:74:DF:BE:0D:20:7A:84:4B:99:64:F8:0B:5A:22
Certificate issuer:       /CN=2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20
Certificate serial:       5DD9F0F167C11F9D0BAE5E05C45F5A5B499E88D6
Authority key identifier: 2B:A0:F1:A2:59:4E:57:38:C3:12:26:58:FD:A5:BF:DA:F6:6D:4E:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a3a2f33322d3438203d3e20323637363537.roa
Signing time:             Wed 17 Jun 2026 19:45:08 +0000
ROA not before:           Wed 17 Jun 2026 19:40:08 +0000
ROA not after:            Wed 16 Jun 2027 19:45:08 +0000
asID:                     267657
IP address blocks:        2804:44d8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl
                          rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 06:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d9:f0:f1:67:c1:1f:9d:0b:ae:5e:05:c4:5f:5a:5b:49:9e:88:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20
        Validity
            Not Before: Jun 17 19:40:08 2026 GMT
            Not After : Jun 16 19:45:08 2027 GMT
        Subject: CN=9AF098DE428674DFBE0D207A844B9964F80B5A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:24:78:c9:0f:da:3b:32:91:06:ec:de:39:b6:
                    ef:f7:12:f7:98:05:65:7b:49:e9:c7:1d:8b:50:e8:
                    7f:d4:a6:02:ba:28:73:f7:f4:8a:2a:90:81:c6:39:
                    05:ee:83:40:c0:ea:a6:d3:90:e4:0b:20:ff:9b:92:
                    62:11:a0:d9:e8:22:ac:38:1c:82:c1:00:84:c1:89:
                    2c:5c:a7:08:8d:64:df:a0:97:d3:3b:0c:67:ac:17:
                    e4:61:92:58:5a:8a:53:71:37:4c:a3:64:07:0f:b5:
                    4b:35:7d:8c:78:12:47:4d:19:53:ba:9c:21:1c:89:
                    27:d9:be:9b:08:0e:e4:32:5c:3d:e8:53:1f:c2:bc:
                    19:9e:16:b1:ef:0b:55:2d:69:b3:04:c4:3d:43:06:
                    c9:d1:69:bc:ef:0b:ef:6f:09:43:9d:81:5f:c1:fc:
                    35:f7:20:ab:8c:bc:b7:c5:3a:89:7d:d4:b2:9c:65:
                    54:19:fb:1e:c8:1b:18:cd:54:18:ed:75:c3:c8:4f:
                    1f:08:38:06:45:bc:28:2b:75:d3:c2:64:af:e3:2e:
                    c8:08:ff:6a:29:90:98:11:7b:33:9c:ef:f9:5a:26:
                    28:6c:a1:bf:79:72:69:a8:8e:d8:e6:0a:25:61:aa:
                    d7:ae:ba:fa:46:5e:bf:27:52:ed:b6:3f:11:af:97:
                    6c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F0:98:DE:42:86:74:DF:BE:0D:20:7A:84:4B:99:64:F8:0B:5A:22
            X509v3 Authority Key Identifier:
                keyid:2B:A0:F1:A2:59:4E:57:38:C3:12:26:58:FD:A5:BF:DA:F6:6D:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/323830343a343464383a3a2f33322d3438203d3e20323637363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:ee:9a:2d:f6:07:b7:97:9d:7c:ea:14:38:9a:b3:80:4b:64:
         03:04:21:4b:3d:dc:41:c1:50:8b:01:e2:77:4a:5e:1f:fb:f9:
         56:9b:ce:50:2d:95:e9:55:1f:d1:21:24:ac:3a:9f:d2:bc:e3:
         30:9f:70:24:33:4e:c3:dc:1a:7d:c3:56:17:c7:f2:9d:a1:ae:
         ba:d1:99:0b:7b:d5:db:80:76:54:90:34:b9:b0:aa:b9:e9:00:
         8a:fe:88:e2:15:dc:cc:17:8a:ef:ab:f4:08:02:08:21:5a:4f:
         04:40:4f:e8:ef:1e:47:94:7a:36:6b:00:81:ff:a1:66:96:65:
         f4:bf:29:72:d6:96:ba:f5:18:34:e9:11:04:d9:82:b0:05:fd:
         05:94:03:84:1e:69:c6:7f:27:1a:0e:95:cb:b0:69:fc:10:4c:
         46:36:a6:0d:fe:02:84:6c:ff:00:2a:48:81:e3:1c:22:39:1d:
         cc:b6:b1:4a:b2:b7:c0:63:de:68:28:ee:9b:4c:f3:23:85:21:
         af:73:36:77:90:e9:6d:31:fb:db:64:bc:7c:53:54:aa:44:a2:
         d1:8a:77:8a:db:40:ce:8c:b9:97:e5:04:f3:0c:b3:d2:92:a6:
         3e:79:96:35:04:4b:e7:29:6e:7d:a4:0a:1d:f6:2f:b5:06:99:
         d9:6e:7c:5b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXdnw8WfBH50Lrl4FxF9aW0meiNYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJBMEYxQTI1OTRFNTczOEMzMTIyNjU4RkRBNUJGREFG
NjZENEUyMDAeFw0yNjA2MTcxOTQwMDhaFw0yNzA2MTYxOTQ1MDhaMDMxMTAvBgNV
BAMTKDlBRjA5OERFNDI4Njc0REZCRTBEMjA3QTg0NEI5OTY0RjgwQjVBMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaJHjJD9o7MpEG7N45tu/3EveY
BWV7SenHHYtQ6H/UpgK6KHP39IoqkIHGOQXug0DA6qbTkOQLIP+bkmIRoNnoIqw4
HILBAITBiSxcpwiNZN+gl9M7DGesF+RhklhailNxN0yjZAcPtUs1fYx4EkdNGVO6
nCEciSfZvpsIDuQyXD3oUx/CvBmeFrHvC1UtabMExD1DBsnRabzvC+9vCUOdgV/B
/DX3IKuMvLfFOol91LKcZVQZ+x7IGxjNVBjtdcPITx8IOAZFvCgrddPCZK/jLsgI
/2opkJgRezOc7/laJihsob95cmmojtjmCiVhqteuuvpGXr8nUu22PxGvl2xNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUmvCY3kKGdN++DSB6hEuZZPgLWiIwHwYDVR0j
BBgwFoAUK6DxollOVzjDEiZY/aW/2vZtTiAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlhrd0t3WTV1eUFTdzhSYnpxNU14YzFqY1RpYnQxY3Jza2R1UlZLNU41
UzMvMC8yQkEwRjFBMjU5NEU1NzM4QzMxMjI2NThGREE1QkZEQUY2NkQ0RTIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQTBGMUEyNTk0RTU3MzhD
MzEyMjY1OEZEQTVCRkRBRjY2RDRFMjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZYa3dLd1k1dXlBU3c4UmJ6cTVNeGMxamNUaWJ0MWNyc2tkdVJWSzVONVMzLzAv
MzIzODMwMzQzYTM0MzQ2NDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzYzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARE2DANBgkqhkiG9w0BAQsFAAOCAQEAg+6aLfYH
t5edfOoUOJqzgEtkAwQhSz3cQcFQiwHid0peH/v5VpvOUC2V6VUf0SEkrDqf0rzj
MJ9wJDNOw9wafcNWF8fynaGuutGZC3vV24B2VJA0ubCquekAiv6I4hXczBeK76v0
CAIIIVpPBEBP6O8eR5R6NmsAgf+hZpZl9L8pctaWuvUYNOkRBNmCsAX9BZQDhB5p
xn8nGg6Vy7Bp/BBMRjamDf4ChGz/ACpIgeMcIjkdzLaxSrK3wGPeaCjum0zzI4Uh
r3M2d5DpbTH722S8fFNUqkSi0Yp3ittAzoy5l+UE8wyz0pKmPnmWNQRL5ylufaQK
HfYvtQaZ2W58Ww==
-----END CERTIFICATE-----
Generated at Wed Jul 8 17:10:08 2026 by rpki-client