Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GkHfuriXujNXss6WfMy8Wzyvb2CgshmGh8WmZWZcqjzn/0/323830343a393665383a3a2f33322d313238203d3e20323734333638.roa
File:                     323830343a393665383a3a2f33322d313238203d3e20323734333638.roa (raw, json)
Hash identifier:          ybgW4IojrO0XtxhATzwVz5zeV6PAqfahKyTdVzcxcvY=
Subject key identifier:   5B:51:2C:93:56:AF:3F:0E:1A:DB:5F:16:DF:EA:69:5F:79:A9:72:EB
Certificate issuer:       /CN=DBC95DB002A014070D4111459856E390931EFEE7
Certificate serial:       533EF95FA80090158B0095B5CA5BA2238BA9C751
Authority key identifier: DB:C9:5D:B0:02:A0:14:07:0D:41:11:45:98:56:E3:90:93:1E:FE:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC95DB002A014070D4111459856E390931EFEE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkHfuriXujNXss6WfMy8Wzyvb2CgshmGh8WmZWZcqjzn/0/323830343a393665383a3a2f33322d313238203d3e20323734333638.roa
Signing time:             Fri 21 Aug 2026 14:55:05 +0000
ROA not before:           Fri 21 Aug 2026 14:50:05 +0000
ROA not after:            Fri 20 Aug 2027 14:55:05 +0000
asID:                     274368
IP address blocks:        2804:96e8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkHfuriXujNXss6WfMy8Wzyvb2CgshmGh8WmZWZcqjzn/0/DBC95DB002A014070D4111459856E390931EFEE7.crl
                          rsync://rpki-repo.registro.br/repo/GkHfuriXujNXss6WfMy8Wzyvb2CgshmGh8WmZWZcqjzn/0/DBC95DB002A014070D4111459856E390931EFEE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC95DB002A014070D4111459856E390931EFEE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3e:f9:5f:a8:00:90:15:8b:00:95:b5:ca:5b:a2:23:8b:a9:c7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC95DB002A014070D4111459856E390931EFEE7
        Validity
            Not Before: Aug 21 14:50:05 2026 GMT
            Not After : Aug 20 14:55:05 2027 GMT
        Subject: CN=5B512C9356AF3F0E1ADB5F16DFEA695F79A972EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:66:30:28:28:96:04:fa:80:69:22:e1:01:bb:
                    ed:77:7b:49:9a:a5:04:15:69:95:fe:a7:bc:a4:58:
                    7c:cf:b2:1d:c1:db:9a:0f:8c:33:76:80:eb:6a:28:
                    d6:76:4b:ad:9f:58:bd:29:92:e5:4c:af:a8:b3:90:
                    9f:af:d2:6c:61:11:cf:c5:3d:c1:3e:d5:bd:99:48:
                    41:40:da:d4:10:b6:48:41:6f:8f:56:67:22:ca:f9:
                    b7:70:35:ee:9b:d7:95:8a:fd:59:e3:46:05:e0:d4:
                    3e:1c:8a:10:73:26:9a:bb:80:35:f7:4d:37:36:24:
                    7e:7d:bd:65:17:6e:be:0b:00:1c:b8:89:5a:86:cf:
                    ae:ff:7c:df:38:6e:a0:28:56:db:dc:3b:ba:87:8d:
                    33:34:4b:87:ce:2b:89:38:09:b7:a2:c9:35:b2:f9:
                    20:2d:1e:dd:fe:01:38:ec:df:de:28:be:81:1a:c0:
                    84:39:39:81:31:99:0f:54:1f:a4:19:a2:19:67:d5:
                    9a:5b:2d:81:0f:21:55:93:dd:9e:ac:17:10:49:2e:
                    03:f5:01:79:84:d0:df:a0:d1:ed:ab:da:d9:b9:42:
                    80:3a:2e:0c:ed:4b:39:b9:21:b9:e3:70:18:56:2a:
                    0c:9a:96:dc:e6:b4:f2:a1:14:d5:6a:df:6b:96:6d:
                    49:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:51:2C:93:56:AF:3F:0E:1A:DB:5F:16:DF:EA:69:5F:79:A9:72:EB
            X509v3 Authority Key Identifier:
                keyid:DB:C9:5D:B0:02:A0:14:07:0D:41:11:45:98:56:E3:90:93:1E:FE:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkHfuriXujNXss6WfMy8Wzyvb2CgshmGh8WmZWZcqjzn/0/DBC95DB002A014070D4111459856E390931EFEE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC95DB002A014070D4111459856E390931EFEE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkHfuriXujNXss6WfMy8Wzyvb2CgshmGh8WmZWZcqjzn/0/323830343a393665383a3a2f33322d313238203d3e20323734333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:96e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:8e:29:2a:1d:63:8a:c6:13:49:80:f1:67:92:8a:31:57:b9:
         d0:0b:9a:b2:3a:70:fb:95:96:c6:6c:2f:94:41:02:64:3f:25:
         69:28:50:a8:5d:3b:50:3c:e5:db:d8:1d:68:9a:25:8f:61:a4:
         95:2f:2f:af:42:03:78:96:d8:c2:be:a9:33:52:7f:0f:07:e2:
         eb:a6:73:c7:9e:d5:26:94:c5:19:c5:de:72:cf:b2:8c:4e:39:
         c9:60:b4:d4:92:a8:c6:e9:a5:9d:a0:39:66:1a:d2:f1:03:35:
         97:b4:6a:87:50:6b:a5:ed:cf:67:eb:77:b9:06:fe:80:f0:b3:
         80:dc:2d:84:98:50:fc:5b:d0:8e:49:6d:07:a3:06:4e:38:48:
         49:dd:e0:f7:fa:c7:08:e6:ce:83:41:74:2d:a7:4e:d7:21:01:
         56:c5:cd:a9:ed:dd:09:7f:e7:a1:55:ce:4e:e2:bd:8e:10:21:
         fc:4e:6d:56:d9:a7:29:9d:27:60:0c:1f:a9:3d:e9:d3:98:2f:
         31:81:3e:20:eb:4f:75:9b:8e:31:9d:d0:25:b6:49:64:51:50:
         2b:df:78:a3:07:56:2b:69:21:1a:77:9f:fc:47:b0:45:ae:ae:
         8e:fe:5e:f8:e9:cc:76:01:15:0d:5b:4b:4a:29:b0:03:12:c8:
         d5:05:f4:ee
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUUz75X6gAkBWLAJW1yluiI4upx1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJDOTVEQjAwMkEwMTQwNzBENDExMTQ1OTg1NkUzOTA5
MzFFRkVFNzAeFw0yNjA4MjExNDUwMDVaFw0yNzA4MjAxNDU1MDVaMDMxMTAvBgNV
BAMTKDVCNTEyQzkzNTZBRjNGMEUxQURCNUYxNkRGRUE2OTVGNzlBOTcyRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnZjAoKJYE+oBpIuEBu+13e0ma
pQQVaZX+p7ykWHzPsh3B25oPjDN2gOtqKNZ2S62fWL0pkuVMr6izkJ+v0mxhEc/F
PcE+1b2ZSEFA2tQQtkhBb49WZyLK+bdwNe6b15WK/VnjRgXg1D4cihBzJpq7gDX3
TTc2JH59vWUXbr4LABy4iVqGz67/fN84bqAoVtvcO7qHjTM0S4fOK4k4CbeiyTWy
+SAtHt3+ATjs394ovoEawIQ5OYExmQ9UH6QZohln1ZpbLYEPIVWT3Z6sFxBJLgP1
AXmE0N+g0e2r2tm5QoA6LgztSzm5IbnjcBhWKgyaltzmtPKhFNVq32uWbUnnAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUW1Esk1avPw4a218W3+ppX3mpcuswHwYDVR0j
BBgwFoAU28ldsAKgFAcNQRFFmFbjkJMe/ucwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2tIZnVyaVh1ak5Yc3M2V2ZNeThXenl2YjJDZ3NobUdoOFdtWldaY3Fq
em4vMC9EQkM5NURCMDAyQTAxNDA3MEQ0MTExNDU5ODU2RTM5MDkzMUVGRUU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQzk1REIwMDJBMDE0MDcw
RDQxMTE0NTk4NTZFMzkwOTMxRUZFRTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0drSGZ1cmlYdWpOWHNzNldmTXk4V3p5dmIyQ2dzaG1HaDhXbVpXWmNxanpuLzAv
MzIzODMwMzQzYTM5MzY2NTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzQzMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBJboMA0GCSqGSIb3DQEBCwUAA4IBAQADjikq
HWOKxhNJgPFnkooxV7nQC5qyOnD7lZbGbC+UQQJkPyVpKFCoXTtQPOXb2B1omiWP
YaSVLy+vQgN4ltjCvqkzUn8PB+LrpnPHntUmlMUZxd5yz7KMTjnJYLTUkqjG6aWd
oDlmGtLxAzWXtGqHUGul7c9n63e5Bv6A8LOA3C2EmFD8W9COSW0HowZOOEhJ3eD3
+scI5s6DQXQtp07XIQFWxc2p7d0Jf+ehVc5O4r2OECH8Tm1W2acpnSdgDB+pPenT
mC8xgT4g6091m44xndAltklkUVAr33ijB1YraSEad5/8R7BFrq6O/l746cx2ARUN
W0tKKbADEsjVBfTu
-----END CERTIFICATE-----
Generated at Sun Aug 23 18:12:10 2026 by rpki-client