Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWmLivVPbMiBruFV7LuouHdw7nes3piQj6Hvki5bbHmN/0/323830343a393636383a3a2f33322d313238203d3e20323734353837.roa
File:                     323830343a393636383a3a2f33322d313238203d3e20323734353837.roa (raw, json)
Hash identifier:          O26pUyl1kxFPsanWEcLK5B9WT0Wv4Aeu1U96xreuWzE=
Subject key identifier:   A0:1C:F3:3E:DB:D7:A8:28:C0:B3:11:AC:0C:2D:EB:3E:4B:3B:BE:59
Certificate issuer:       /CN=FB1D0071BE604BC0921A02EC23874FE14CFF1F0C
Certificate serial:       093D298D7C1FAA6476E1F24DFBC7B93F0328806E
Authority key identifier: FB:1D:00:71:BE:60:4B:C0:92:1A:02:EC:23:87:4F:E1:4C:FF:1F:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB1D0071BE604BC0921A02EC23874FE14CFF1F0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWmLivVPbMiBruFV7LuouHdw7nes3piQj6Hvki5bbHmN/0/323830343a393636383a3a2f33322d313238203d3e20323734353837.roa
Signing time:             Fri 26 Jun 2026 23:12:53 +0000
ROA not before:           Fri 26 Jun 2026 23:07:53 +0000
ROA not after:            Fri 25 Jun 2027 23:12:53 +0000
asID:                     274587
IP address blocks:        2804:9668::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GWmLivVPbMiBruFV7LuouHdw7nes3piQj6Hvki5bbHmN/0/FB1D0071BE604BC0921A02EC23874FE14CFF1F0C.crl
                          rsync://rpki-repo.registro.br/repo/GWmLivVPbMiBruFV7LuouHdw7nes3piQj6Hvki5bbHmN/0/FB1D0071BE604BC0921A02EC23874FE14CFF1F0C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB1D0071BE604BC0921A02EC23874FE14CFF1F0C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3d:29:8d:7c:1f:aa:64:76:e1:f2:4d:fb:c7:b9:3f:03:28:80:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB1D0071BE604BC0921A02EC23874FE14CFF1F0C
        Validity
            Not Before: Jun 26 23:07:53 2026 GMT
            Not After : Jun 25 23:12:53 2027 GMT
        Subject: CN=A01CF33EDBD7A828C0B311AC0C2DEB3E4B3BBE59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:8d:87:fa:63:e3:89:62:1d:b9:56:8a:96:
                    f0:9a:18:80:19:0c:cb:36:cf:a3:99:a0:20:62:fd:
                    71:8d:31:bd:93:4d:3e:e4:50:59:fb:5e:57:8d:c2:
                    a1:97:f3:a8:15:3e:1d:17:3e:d5:a2:bb:b4:be:10:
                    45:aa:79:0a:e3:bd:6f:d6:c4:7b:d4:8b:f6:2a:d1:
                    7f:1d:2e:6b:52:8b:d4:20:4c:5b:f3:04:1b:7b:c9:
                    0d:16:24:e9:5c:8c:3f:1d:ea:3e:f6:46:37:16:2d:
                    7f:db:a2:3b:63:04:e2:bc:85:57:17:7a:e2:e6:6f:
                    69:9b:8c:de:3f:37:23:8d:79:7c:9f:5f:19:c6:ce:
                    3c:f1:8e:bc:09:94:9e:e0:cd:58:85:57:14:85:a4:
                    e4:95:d1:db:82:f3:6e:80:da:2b:47:7e:93:fe:0d:
                    5f:e4:20:e4:17:a4:9b:07:4d:1f:52:5d:9d:5a:5c:
                    eb:8a:96:e3:2f:10:22:a8:ca:2d:fb:5d:e8:50:c1:
                    0d:51:81:00:2b:05:dd:c2:ab:86:ee:f1:31:e8:8b:
                    87:68:95:07:58:cc:f0:a5:f9:2f:ed:0f:51:7b:a0:
                    7c:aa:1f:f5:d7:b4:f9:7c:c2:24:0d:af:eb:ed:15:
                    d4:24:85:04:79:32:81:b6:24:75:e6:d5:08:e2:03:
                    aa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1C:F3:3E:DB:D7:A8:28:C0:B3:11:AC:0C:2D:EB:3E:4B:3B:BE:59
            X509v3 Authority Key Identifier:
                keyid:FB:1D:00:71:BE:60:4B:C0:92:1A:02:EC:23:87:4F:E1:4C:FF:1F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWmLivVPbMiBruFV7LuouHdw7nes3piQj6Hvki5bbHmN/0/FB1D0071BE604BC0921A02EC23874FE14CFF1F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB1D0071BE604BC0921A02EC23874FE14CFF1F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWmLivVPbMiBruFV7LuouHdw7nes3piQj6Hvki5bbHmN/0/323830343a393636383a3a2f33322d313238203d3e20323734353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9668::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:78:d6:77:c7:fc:a7:d1:fe:c5:b7:f4:1a:b8:79:91:1c:f4:
         d9:b3:70:a4:c8:f8:e0:21:24:92:24:63:e1:84:49:84:26:ed:
         12:6d:c2:68:a2:15:2c:45:cd:3c:37:ee:0a:04:8c:71:eb:3e:
         56:35:4b:91:b4:9b:29:f0:84:50:6b:dc:ce:8c:9c:5f:3b:33:
         29:c3:ff:19:41:46:83:53:46:b0:ec:94:3b:49:8b:4d:27:47:
         5c:50:f3:c7:5e:c2:97:96:3f:81:51:c9:a4:76:ff:87:52:ab:
         0a:4b:98:ae:30:e7:d0:10:48:29:ce:94:a9:f2:80:e4:a0:6b:
         65:71:bd:48:66:cf:25:e9:c0:c1:f3:e3:53:0b:24:92:5e:2c:
         f5:c7:f1:c1:65:32:d7:fa:73:91:12:8a:c9:33:b0:4c:84:3c:
         e9:44:5b:72:24:06:9a:df:cb:72:e9:70:6c:f2:91:af:3a:51:
         48:d2:45:24:aa:a5:85:8c:a2:3a:1d:51:9b:cd:6e:b4:15:1b:
         ef:08:5f:76:23:56:fb:c8:50:2d:b4:96:61:60:f0:20:b2:ae:
         17:05:83:c7:94:34:ad:95:9b:8e:5f:03:7a:6d:9e:3f:e0:ce:
         dd:01:07:6c:90:b2:56:a7:c3:81:92:84:7f:2d:50:92:f4:a2:
         43:35:ca:d1
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUCT0pjXwfqmR24fJN+8e5PwMogG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxRDAwNzFCRTYwNEJDMDkyMUEwMkVDMjM4NzRGRTE0
Q0ZGMUYwQzAeFw0yNjA2MjYyMzA3NTNaFw0yNzA2MjUyMzEyNTNaMDMxMTAvBgNV
BAMTKEEwMUNGMzNFREJEN0E4MjhDMEIzMTFBQzBDMkRFQjNFNEIzQkJFNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu/I2H+mPjiWIduVaKlvCaGIAZ
DMs2z6OZoCBi/XGNMb2TTT7kUFn7XleNwqGX86gVPh0XPtWiu7S+EEWqeQrjvW/W
xHvUi/Yq0X8dLmtSi9QgTFvzBBt7yQ0WJOlcjD8d6j72RjcWLX/bojtjBOK8hVcX
euLmb2mbjN4/NyONeXyfXxnGzjzxjrwJlJ7gzViFVxSFpOSV0duC826A2itHfpP+
DV/kIOQXpJsHTR9SXZ1aXOuKluMvECKoyi37XehQwQ1RgQArBd3Cq4bu8THoi4do
lQdYzPCl+S/tD1F7oHyqH/XXtPl8wiQNr+vtFdQkhQR5MoG2JHXm1QjiA6qBAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUoBzzPtvXqCjAsxGsDC3rPks7vlkwHwYDVR0j
BBgwFoAU+x0Acb5gS8CSGgLsI4dP4Uz/HwwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1dtTGl2VlBiTWlCcnVGVjdMdW91SGR3N25lczNwaVFqNkh2a2k1YmJI
bU4vMC9GQjFEMDA3MUJFNjA0QkMwOTIxQTAyRUMyMzg3NEZFMTRDRkYxRjBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCMUQwMDcxQkU2MDRCQzA5
MjFBMDJFQzIzODc0RkUxNENGRjFGMEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dXbUxpdlZQYk1pQnJ1RlY3THVvdUhkdzduZXMzcGlRajZIdmtpNWJiSG1OLzAv
MzIzODMwMzQzYTM5MzYzNjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzQzNTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBJZoMA0GCSqGSIb3DQEBCwUAA4IBAQB8eNZ3
x/yn0f7Ft/QauHmRHPTZs3CkyPjgISSSJGPhhEmEJu0SbcJoohUsRc08N+4KBIxx
6z5WNUuRtJsp8IRQa9zOjJxfOzMpw/8ZQUaDU0aw7JQ7SYtNJ0dcUPPHXsKXlj+B
Ucmkdv+HUqsKS5iuMOfQEEgpzpSp8oDkoGtlcb1IZs8l6cDB8+NTCySSXiz1x/HB
ZTLX+nOREorJM7BMhDzpRFtyJAaa38ty6XBs8pGvOlFI0kUkqqWFjKI6HVGbzW60
FRvvCF92I1b7yFAttJZhYPAgsq4XBYPHlDStlZuOXwN6bZ4/4M7dAQdskLJWp8OB
koR/LVCS9KJDNcrR
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:57:43 2026 by rpki-client