Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/323830343a326364343a3a2f33322d3438203d3e20323635323436.roa
File:                     323830343a326364343a3a2f33322d3438203d3e20323635323436.roa (raw, json)
Hash identifier:          8tp9G+ZkoTW7zpxEwleqsQG+iPfG+b1uU/9UJklLPaE=
Subject key identifier:   FA:48:EA:69:66:4E:1B:8B:BA:CB:01:E9:A0:C1:31:1D:C5:B3:C0:3F
Certificate issuer:       /CN=36BD7746574DFC7F52D27A235FA3CE34225F5A1E
Certificate serial:       123C22968CD35C6E60A402692D38C942A7071B34
Authority key identifier: 36:BD:77:46:57:4D:FC:7F:52:D2:7A:23:5F:A3:CE:34:22:5F:5A:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36BD7746574DFC7F52D27A235FA3CE34225F5A1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/323830343a326364343a3a2f33322d3438203d3e20323635323436.roa
Signing time:             Tue 11 Aug 2026 20:08:09 +0000
ROA not before:           Tue 11 Aug 2026 20:03:09 +0000
ROA not after:            Tue 10 Aug 2027 20:08:09 +0000
asID:                     265246
IP address blocks:        2804:2cd4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/36BD7746574DFC7F52D27A235FA3CE34225F5A1E.crl
                          rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/36BD7746574DFC7F52D27A235FA3CE34225F5A1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36BD7746574DFC7F52D27A235FA3CE34225F5A1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 13:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3c:22:96:8c:d3:5c:6e:60:a4:02:69:2d:38:c9:42:a7:07:1b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36BD7746574DFC7F52D27A235FA3CE34225F5A1E
        Validity
            Not Before: Aug 11 20:03:09 2026 GMT
            Not After : Aug 10 20:08:09 2027 GMT
        Subject: CN=FA48EA69664E1B8BBACB01E9A0C1311DC5B3C03F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:e6:c6:8b:60:54:b2:69:5a:67:70:94:d4:
                    52:f6:f0:61:87:39:66:87:a4:99:54:f2:60:67:ce:
                    01:04:0d:30:2f:d2:00:2d:a4:43:8e:08:23:22:d0:
                    b0:e4:18:ac:fe:d8:fd:e2:70:6d:51:c7:02:98:b1:
                    52:e3:d7:e3:63:2c:f3:ea:aa:60:8b:1f:e4:6c:5f:
                    67:42:fe:22:6f:e8:cc:3d:49:ca:f8:ff:93:2d:7c:
                    7f:ae:1d:54:d6:07:f0:6e:6d:2a:f9:f4:2b:44:73:
                    39:bb:3c:29:eb:72:a2:84:b1:90:5f:b4:1e:91:05:
                    72:2f:27:42:40:6d:60:94:73:f8:17:8b:c8:bf:05:
                    f4:cf:ab:79:fb:f3:c1:c4:05:bb:12:f4:a6:fd:f0:
                    9e:b1:9a:52:61:a5:ab:34:8f:95:07:14:2a:bf:6d:
                    59:3e:87:51:4b:32:fc:51:18:06:23:9d:d2:a9:80:
                    3e:b3:86:b9:13:53:be:2f:b5:07:57:d6:34:ce:46:
                    b0:31:65:6e:17:dc:44:8c:88:28:56:f6:9f:ed:9e:
                    1f:a5:22:38:70:f9:f4:cc:bf:63:6b:a8:71:b0:14:
                    8b:b0:4e:b8:1a:13:e1:67:c0:50:4e:21:47:59:bf:
                    b0:00:ea:07:12:89:82:cf:71:ee:58:b0:c5:01:29:
                    56:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:48:EA:69:66:4E:1B:8B:BA:CB:01:E9:A0:C1:31:1D:C5:B3:C0:3F
            X509v3 Authority Key Identifier:
                keyid:36:BD:77:46:57:4D:FC:7F:52:D2:7A:23:5F:A3:CE:34:22:5F:5A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/36BD7746574DFC7F52D27A235FA3CE34225F5A1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36BD7746574DFC7F52D27A235FA3CE34225F5A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/323830343a326364343a3a2f33322d3438203d3e20323635323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:88:f1:9a:ab:f1:64:3e:0a:86:d7:e2:ad:30:ce:f4:95:d6:
         15:3b:fc:85:c8:62:69:c9:14:6b:d4:20:60:90:d7:a0:2d:80:
         2a:ee:71:b3:52:46:1a:0e:a3:29:e2:d8:35:6e:9a:ab:3a:ad:
         35:be:6e:cd:14:27:5a:81:3d:dc:a3:d3:94:70:49:f9:a8:49:
         f5:36:83:0a:8c:9c:db:1c:f1:c7:58:4e:dd:95:ca:0b:b6:19:
         39:e4:18:90:3e:5f:34:8e:26:46:bb:d5:28:d3:e2:b1:7e:c8:
         b0:7f:7a:12:53:3a:79:2f:d0:9f:0c:7e:f5:50:ca:6f:ff:ea:
         77:75:85:ce:91:04:f8:c1:e5:d4:c8:81:ea:a3:f6:69:4a:64:
         d8:93:41:14:ee:47:74:ed:dd:14:54:00:d5:9d:41:5b:12:f5:
         b2:00:58:e8:93:5f:d2:86:16:68:2c:aa:87:7b:6c:ab:dd:1a:
         42:f8:24:6b:37:29:fa:a6:a9:ea:f8:4c:ab:13:26:61:3f:78:
         a6:4d:f2:00:bd:cc:d6:37:4b:d0:91:cd:0f:cd:1b:28:57:37:
         e8:9f:9e:c7:41:ee:34:7b:4b:d7:77:34:31:00:58:37:78:3b:
         bf:8d:f7:3f:77:50:48:95:33:43:65:5d:b1:b3:9e:2a:55:d9:
         6d:7f:7a:e6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEjwilozTXG5gpAJpLTjJQqcHGzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZCRDc3NDY1NzRERkM3RjUyRDI3QTIzNUZBM0NFMzQy
MjVGNUExRTAeFw0yNjA4MTEyMDAzMDlaFw0yNzA4MTAyMDA4MDlaMDMxMTAvBgNV
BAMTKEZBNDhFQTY5NjY0RTFCOEJCQUNCMDFFOUEwQzEzMTFEQzVCM0MwM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY7+bGi2BUsmlaZ3CU1FL28GGH
OWaHpJlU8mBnzgEEDTAv0gAtpEOOCCMi0LDkGKz+2P3icG1RxwKYsVLj1+NjLPPq
qmCLH+RsX2dC/iJv6Mw9Scr4/5MtfH+uHVTWB/BubSr59CtEczm7PCnrcqKEsZBf
tB6RBXIvJ0JAbWCUc/gXi8i/BfTPq3n788HEBbsS9Kb98J6xmlJhpas0j5UHFCq/
bVk+h1FLMvxRGAYjndKpgD6zhrkTU74vtQdX1jTORrAxZW4X3ESMiChW9p/tnh+l
Ijhw+fTMv2NrqHGwFIuwTrgaE+FnwFBOIUdZv7AA6gcSiYLPce5YsMUBKVbJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU+kjqaWZOG4u6ywHpoMExHcWzwD8wHwYDVR0j
BBgwFoAUNr13RldN/H9S0nojX6PONCJfWh4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1hxVVMyRW56M0ZDaDlUM2ZKVEw2VmRvdlVxWGRXelBxMndITDNZZHJp
UFQvMC8zNkJENzc0NjU3NERGQzdGNTJEMjdBMjM1RkEzQ0UzNDIyNUY1QTFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2QkQ3NzQ2NTc0REZDN0Y1
MkQyN0EyMzVGQTNDRTM0MjI1RjVBMUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dYcVVTMkVuejNGQ2g5VDNmSlRMNlZkb3ZVcVhkV3pQcTJ3SEwzWWRyaVBULzAv
MzIzODMwMzQzYTMyNjM2NDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzIzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQs1DANBgkqhkiG9w0BAQsFAAOCAQEAXIjxmqvx
ZD4KhtfirTDO9JXWFTv8hchiackUa9QgYJDXoC2AKu5xs1JGGg6jKeLYNW6aqzqt
Nb5uzRQnWoE93KPTlHBJ+ahJ9TaDCoyc2xzxx1hO3ZXKC7YZOeQYkD5fNI4mRrvV
KNPisX7IsH96ElM6eS/Qnwx+9VDKb//qd3WFzpEE+MHl1MiB6qP2aUpk2JNBFO5H
dO3dFFQA1Z1BWxL1sgBY6JNf0oYWaCyqh3tsq90aQvgkazcp+qap6vhMqxMmYT94
pk3yAL3M1jdL0JHND80bKFc36J+ex0HuNHtL13c0MQBYN3g7v433P3dQSJUzQ2Vd
sbOeKlXZbX965g==
-----END CERTIFICATE-----
Generated at Mon Aug 24 18:48:32 2026 by rpki-client