Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a323030303a3a2f33352d3335203d3e20323731303432.roa
File:                     323830343a373536303a323030303a3a2f33352d3335203d3e20323731303432.roa (raw, json)
Hash identifier:          L+2pMdQLP/l2gYGvJq7feQAZ80KjhMi0iLTUKjE9D3I=
Subject key identifier:   A3:1A:C4:69:F0:04:7C:9E:90:2D:07:3F:48:DA:87:99:36:71:35:2A
Certificate issuer:       /CN=31879B6517B714682709D1F80AD95E060C94084B
Certificate serial:       0148CFC13E70E7BA55D1EE341AE39F15B3438D32
Authority key identifier: 31:87:9B:65:17:B7:14:68:27:09:D1:F8:0A:D9:5E:06:0C:94:08:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31879B6517B714682709D1F80AD95E060C94084B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a323030303a3a2f33352d3335203d3e20323731303432.roa
Signing time:             Thu 15 Oct 2026 15:49:52 +0000
ROA not before:           Thu 15 Oct 2026 15:44:52 +0000
ROA not after:            Thu 14 Oct 2027 15:49:52 +0000
asID:                     271042
IP address blocks:        2804:7560:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/31879B6517B714682709D1F80AD95E060C94084B.crl
                          rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/31879B6517B714682709D1F80AD95E060C94084B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31879B6517B714682709D1F80AD95E060C94084B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 15:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:48:cf:c1:3e:70:e7:ba:55:d1:ee:34:1a:e3:9f:15:b3:43:8d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31879B6517B714682709D1F80AD95E060C94084B
        Validity
            Not Before: Oct 15 15:44:52 2026 GMT
            Not After : Oct 14 15:49:52 2027 GMT
        Subject: CN=A31AC469F0047C9E902D073F48DA87993671352A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:a4:47:0e:0c:9f:cf:74:f2:40:5b:0f:b2:
                    82:d5:cc:3b:15:7c:5e:f2:ab:9a:63:7b:83:5a:06:
                    79:10:51:e3:53:93:e1:3f:97:eb:bc:2d:dd:64:1d:
                    e3:7d:20:c4:51:62:02:17:df:a8:25:f0:90:c8:80:
                    66:c2:b7:4e:29:aa:af:de:08:0f:3c:77:5a:f2:d6:
                    a7:ad:f2:54:aa:d5:51:0d:c8:21:fa:3d:1d:8f:ac:
                    bd:4c:cd:4b:4d:6c:33:bd:56:56:33:16:02:ae:08:
                    cc:89:d2:b6:5e:c9:97:e8:b6:20:c7:b0:3e:4b:65:
                    ff:d8:c6:af:ec:49:28:9b:93:f6:81:2b:cd:d8:c0:
                    e3:80:f2:a3:00:f8:a2:43:a4:73:d7:40:fd:b7:fc:
                    c0:5c:04:ea:a1:14:44:03:7a:7f:17:f6:52:bc:65:
                    79:f6:97:fd:87:f7:c2:b9:28:ca:47:b1:7f:86:44:
                    c4:d3:08:aa:61:dd:3d:03:c4:34:61:af:28:fb:83:
                    22:41:5d:e8:b5:75:23:02:73:b2:99:d0:ae:6f:ff:
                    99:ef:eb:8d:70:8a:ca:4f:55:66:67:47:25:5e:53:
                    29:53:ba:db:d8:8b:b5:db:66:84:68:8c:e0:9f:64:
                    c6:0f:df:ff:b6:94:4d:db:5d:9a:08:02:0a:33:6d:
                    2b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1A:C4:69:F0:04:7C:9E:90:2D:07:3F:48:DA:87:99:36:71:35:2A
            X509v3 Authority Key Identifier:
                keyid:31:87:9B:65:17:B7:14:68:27:09:D1:F8:0A:D9:5E:06:0C:94:08:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/31879B6517B714682709D1F80AD95E060C94084B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31879B6517B714682709D1F80AD95E060C94084B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gf2YAQA4eikNpDt8W6sUDD2UxxhUznX9jBdqvKrb2fd8/0/323830343a373536303a323030303a3a2f33352d3335203d3e20323731303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7560:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         1b:f2:ce:cb:fa:8a:1a:c6:4a:18:73:ac:84:d0:e0:f7:03:82:
         a3:da:48:6d:c5:c7:ef:e7:87:aa:96:9c:ec:ea:cb:2c:18:e4:
         c0:37:d8:15:05:5b:57:9b:ae:e7:03:85:75:57:29:cf:8c:b7:
         97:d6:7b:1f:c0:9e:fd:59:4d:9f:61:51:25:f7:75:d8:30:55:
         d9:93:6d:ae:ca:aa:4b:68:2e:3b:fa:ab:37:4d:36:ca:fe:95:
         76:0d:21:dd:08:17:10:f5:3f:b3:42:fa:a1:3a:6e:35:d1:8a:
         73:11:32:8d:65:b7:f7:26:ec:3c:45:ca:02:00:07:91:f7:34:
         3b:f5:4f:ac:e4:c8:47:32:53:2c:0a:45:b9:ca:0a:b7:f8:88:
         0f:d6:7d:87:cd:85:27:0a:99:ec:49:51:88:fd:44:1c:da:8d:
         76:70:65:06:ed:d7:15:77:be:51:ac:a8:37:a0:3d:3c:8f:5b:
         e9:8a:86:71:ba:07:cb:63:ac:f0:a0:4e:2e:a0:34:81:1f:85:
         21:44:a8:9e:b0:7e:0c:0f:f6:27:5f:78:99:47:32:ba:81:92:
         7c:4b:27:df:da:7f:c8:51:69:b1:35:ec:c5:0b:19:d3:01:4b:
         ca:5b:13:ac:18:98:a5:b4:8b:3b:68:98:ad:21:0a:d8:be:96:
         84:61:b3:83
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAUjPwT5w57pV0e40GuOfFbNDjTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE4NzlCNjUxN0I3MTQ2ODI3MDlEMUY4MEFEOTVFMDYw
Qzk0MDg0QjAeFw0yNjEwMTUxNTQ0NTJaFw0yNzEwMTQxNTQ5NTJaMDMxMTAvBgNV
BAMTKEEzMUFDNDY5RjAwNDdDOUU5MDJEMDczRjQ4REE4Nzk5MzY3MTM1MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO3qRHDgyfz3TyQFsPsoLVzDsV
fF7yq5pje4NaBnkQUeNTk+E/l+u8Ld1kHeN9IMRRYgIX36gl8JDIgGbCt04pqq/e
CA88d1ry1qet8lSq1VENyCH6PR2PrL1MzUtNbDO9VlYzFgKuCMyJ0rZeyZfotiDH
sD5LZf/Yxq/sSSibk/aBK83YwOOA8qMA+KJDpHPXQP23/MBcBOqhFEQDen8X9lK8
ZXn2l/2H98K5KMpHsX+GRMTTCKph3T0DxDRhryj7gyJBXei1dSMCc7KZ0K5v/5nv
641wispPVWZnRyVeUylTutvYi7XbZoRojOCfZMYP3/+2lE3bXZoIAgozbSszAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUoxrEafAEfJ6QLQc/SNqHmTZxNSowHwYDVR0j
BBgwFoAUMYebZRe3FGgnCdH4CtleBgyUCEswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2YyWUFRQTRlaWtOcER0OFc2c1VERDJVeHhoVXpuWDlqQmRxdktyYjJm
ZDgvMC8zMTg3OUI2NTE3QjcxNDY4MjcwOUQxRjgwQUQ5NUUwNjBDOTQwODRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxODc5QjY1MTdCNzE0Njgy
NzA5RDFGODBBRDk1RTA2MEM5NDA4NEIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dmMllBUUE0ZWlrTnBEdDhXNnNVREQyVXh4aFV6blg5akJkcXZLcmIyZmQ4LzAv
MzIzODMwMzQzYTM3MzUzNjMwM2EzMjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzczMTMwMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEdWAgMA0GCSqGSIb3DQEBCwUA
A4IBAQAb8s7L+ooaxkoYc6yE0OD3A4Kj2khtxcfv54eqlpzs6sssGOTAN9gVBVtX
m67nA4V1VynPjLeX1nsfwJ79WU2fYVEl93XYMFXZk22uyqpLaC47+qs3TTbK/pV2
DSHdCBcQ9T+zQvqhOm410YpzETKNZbf3Juw8RcoCAAeR9zQ79U+s5MhHMlMsCkW5
ygq3+IgP1n2HzYUnCpnsSVGI/UQc2o12cGUG7dcVd75RrKg3oD08j1vpioZxugfL
Y6zwoE4uoDSBH4UhRKiesH4MD/YnX3iZRzK6gZJ8Syff2n/IUWmxNezFCxnTAUvK
WxOsGJiltIs7aJitIQrYvpaEYbOD
-----END CERTIFICATE-----
Generated at Tue Nov 3 23:00:12 2026 by rpki-client