Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/323830343a353132383a3a2f33322d3334203d3e20323638343334.roa
File:                     323830343a353132383a3a2f33322d3334203d3e20323638343334.roa (raw, json)
Hash identifier:          RGN1cWJfXO4fGtGFSWqpBIVUu0nYDutJUZdRYYcXx7c=
Subject key identifier:   AD:F4:68:8E:26:88:90:90:4D:37:89:8F:AE:40:FB:65:10:4C:41:36
Certificate issuer:       /CN=C9AFDAFB3AF74A8CA0832B076914D7A4A4425648
Certificate serial:       76597C9682DA543AA6E6A53F8083CB5F873B78A8
Authority key identifier: C9:AF:DA:FB:3A:F7:4A:8C:A0:83:2B:07:69:14:D7:A4:A4:42:56:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/323830343a353132383a3a2f33322d3334203d3e20323638343334.roa
Signing time:             Sun 16 Aug 2026 22:11:00 +0000
ROA not before:           Sun 16 Aug 2026 22:06:00 +0000
ROA not after:            Sun 15 Aug 2027 22:11:00 +0000
asID:                     268434
IP address blocks:        2804:5128::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.crl
                          rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:59:7c:96:82:da:54:3a:a6:e6:a5:3f:80:83:cb:5f:87:3b:78:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9AFDAFB3AF74A8CA0832B076914D7A4A4425648
        Validity
            Not Before: Aug 16 22:06:00 2026 GMT
            Not After : Aug 15 22:11:00 2027 GMT
        Subject: CN=ADF4688E268890904D37898FAE40FB65104C4136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:af:6e:0c:49:3c:42:22:b9:c2:d4:da:7e:41:
                    c9:a4:2f:b9:66:f5:66:c5:3f:f1:96:9c:42:e3:d8:
                    8c:c1:b8:f8:00:0c:b5:b3:34:ba:ae:a8:ad:90:98:
                    ef:24:d7:65:5e:e0:57:f3:1c:19:53:29:89:f1:9c:
                    1d:40:75:18:7c:a5:69:46:24:55:8c:cd:53:1b:1e:
                    e1:82:bf:2f:45:e3:0f:83:32:93:e1:90:e7:9b:94:
                    9f:23:46:25:3a:40:97:db:1f:7b:19:13:79:a8:06:
                    10:25:39:26:4f:27:4a:7c:5a:fc:f8:02:2e:20:4b:
                    f7:f9:61:2d:b3:3e:7e:a6:b0:1c:ea:e2:23:7d:19:
                    61:4b:b2:ce:86:03:bd:95:50:81:f5:4b:38:88:1c:
                    85:99:01:24:0d:b6:58:48:b3:56:df:b0:9c:13:35:
                    0d:56:9f:57:87:eb:3f:6f:03:73:79:88:07:9b:f0:
                    51:b3:b8:a0:0a:29:53:4f:b9:8b:b8:25:eb:ee:b4:
                    b4:c1:ed:1e:96:63:32:3a:f7:7f:d9:3d:0f:e1:1f:
                    48:9b:af:fc:2a:84:61:53:33:75:cf:04:44:43:b0:
                    5d:96:5a:c7:fe:db:ce:27:af:a5:b0:2f:47:e8:9d:
                    9f:e7:f3:74:fa:4c:89:7f:78:5a:03:35:2a:38:5e:
                    17:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F4:68:8E:26:88:90:90:4D:37:89:8F:AE:40:FB:65:10:4C:41:36
            X509v3 Authority Key Identifier:
                keyid:C9:AF:DA:FB:3A:F7:4A:8C:A0:83:2B:07:69:14:D7:A4:A4:42:56:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AFDAFB3AF74A8CA0832B076914D7A4A4425648.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqaPXCGtNFWj8mCq8BKWcwECYfV1fURbub4jFy1PAHDr/0/323830343a353132383a3a2f33322d3334203d3e20323638343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5128::/32

    Signature Algorithm: sha256WithRSAEncryption
         d2:d7:46:2f:b0:fc:54:8d:63:cf:71:1f:38:90:40:72:ab:1b:
         a5:ef:21:09:05:0e:47:b1:6c:55:2a:99:87:c8:84:07:44:66:
         7f:5a:5f:37:2e:71:f3:81:4a:34:a7:a8:f1:67:c7:d0:e0:11:
         04:d8:02:de:e9:88:9f:6e:28:ad:14:a4:d0:c8:22:97:94:30:
         47:27:b3:41:26:8a:0c:f9:22:4a:23:2e:8b:34:bc:fd:32:14:
         d4:8e:f8:f2:ef:84:49:e5:6e:d8:a8:b6:ab:95:78:64:25:48:
         d7:9f:25:7b:a7:75:ea:5e:6b:d1:77:c1:c0:4f:6f:0e:70:08:
         c2:7e:51:0f:20:83:9b:af:fa:3c:6e:f9:85:60:9d:17:2f:c4:
         ac:cc:aa:45:de:63:11:b2:31:9d:c9:47:3c:4b:0a:27:b9:fb:
         24:26:fc:e6:90:cd:fc:c2:fd:30:2e:74:1d:ba:fc:01:a8:32:
         90:d6:bc:d0:d4:f0:3c:81:a0:29:93:b5:eb:85:36:f2:d0:f5:
         c8:97:61:a5:6e:86:93:76:61:43:c1:da:13:ec:ee:50:78:a6:
         74:5f:ba:49:e8:86:aa:ed:f7:1b:3f:9a:65:a9:48:8e:42:58:
         2c:f1:96:01:2b:ef:24:f0:53:7d:a5:1c:50:9b:6c:83:15:30:
         82:a9:98:74
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdll8loLaVDqm5qU/gIPLX4c7eKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlBRkRBRkIzQUY3NEE4Q0EwODMyQjA3NjkxNEQ3QTRB
NDQyNTY0ODAeFw0yNjA4MTYyMjA2MDBaFw0yNzA4MTUyMjExMDBaMDMxMTAvBgNV
BAMTKEFERjQ2ODhFMjY4ODkwOTA0RDM3ODk4RkFFNDBGQjY1MTA0QzQxMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSr24MSTxCIrnC1Np+QcmkL7lm
9WbFP/GWnELj2IzBuPgADLWzNLquqK2QmO8k12Ve4FfzHBlTKYnxnB1AdRh8pWlG
JFWMzVMbHuGCvy9F4w+DMpPhkOeblJ8jRiU6QJfbH3sZE3moBhAlOSZPJ0p8Wvz4
Ai4gS/f5YS2zPn6msBzq4iN9GWFLss6GA72VUIH1SziIHIWZASQNtlhIs1bfsJwT
NQ1Wn1eH6z9vA3N5iAeb8FGzuKAKKVNPuYu4JevutLTB7R6WYzI693/ZPQ/hH0ib
r/wqhGFTM3XPBERDsF2WWsf+284nr6WwL0fonZ/n83T6TIl/eFoDNSo4XhdjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUrfRojiaIkJBNN4mPrkD7ZRBMQTYwHwYDVR0j
BBgwFoAUya/a+zr3SoyggysHaRTXpKRCVkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3FhUFhDR3RORldqOG1DcThCS1djd0VDWWZWMWZVUmJ1YjRqRnkxUEFI
RHIvMC9DOUFGREFGQjNBRjc0QThDQTA4MzJCMDc2OTE0RDdBNEE0NDI1NjQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QUZEQUZCM0FGNzRBOENB
MDgzMkIwNzY5MTREN0E0QTQ0MjU2NDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dxYVBYQ0d0TkZXajhtQ3E4QktXY3dFQ1lmVjFmVVJidWI0akZ5MVBBSERyLzAv
MzIzODMwMzQzYTM1MzEzMjM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM4
MzQzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARRKDANBgkqhkiG9w0BAQsFAAOCAQEA0tdGL7D8
VI1jz3EfOJBAcqsbpe8hCQUOR7FsVSqZh8iEB0Rmf1pfNy5x84FKNKeo8WfH0OAR
BNgC3umIn24orRSk0Mgil5QwRyezQSaKDPkiSiMuizS8/TIU1I748u+ESeVu2Ki2
q5V4ZCVI158le6d16l5r0XfBwE9vDnAIwn5RDyCDm6/6PG75hWCdFy/ErMyqRd5j
EbIxnclHPEsKJ7n7JCb85pDN/ML9MC50Hbr8AagykNa80NTwPIGgKZO164U28tD1
yJdhpW6Gk3ZhQ8HaE+zuUHimdF+6SeiGqu33Gz+aZalIjkJYLPGWASvvJPBTfaUc
UJtsgxUwgqmYdA==
-----END CERTIFICATE-----
Generated at Sun Aug 23 18:12:17 2026 by rpki-client