Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/323830343a386565303a3a2f33322d313238203d3e20323733343533.roa
File:                     323830343a386565303a3a2f33322d313238203d3e20323733343533.roa (raw, json)
Hash identifier:          qrT5F7w5lsQJT9f2S7Tiy14nPsm7JfCI43Xmrwr6vRA=
Subject key identifier:   52:0D:03:84:9E:E5:E7:0A:BA:D6:ED:3F:BC:01:86:FE:61:42:59:99
Certificate issuer:       /CN=DBA17EED3CA245B7AE8D3E74839E117D6618AFBA
Certificate serial:       129AE2CD728144D8A717C839E364F66A77315630
Authority key identifier: DB:A1:7E:ED:3C:A2:45:B7:AE:8D:3E:74:83:9E:11:7D:66:18:AF:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/323830343a386565303a3a2f33322d313238203d3e20323733343533.roa
Signing time:             Tue 30 Jun 2026 20:04:58 +0000
ROA not before:           Tue 30 Jun 2026 19:59:58 +0000
ROA not after:            Tue 29 Jun 2027 20:04:58 +0000
asID:                     273453
IP address blocks:        2804:8ee0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.crl
                          rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 08:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9a:e2:cd:72:81:44:d8:a7:17:c8:39:e3:64:f6:6a:77:31:56:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA17EED3CA245B7AE8D3E74839E117D6618AFBA
        Validity
            Not Before: Jun 30 19:59:58 2026 GMT
            Not After : Jun 29 20:04:58 2027 GMT
        Subject: CN=520D03849EE5E70ABAD6ED3FBC0186FE61425999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6c:1e:df:f7:b3:50:bc:69:2e:83:78:6b:f0:
                    2a:47:b3:6a:12:5b:55:45:6f:b8:66:05:47:34:13:
                    41:06:fd:61:7c:ff:e5:23:f4:3a:ac:19:24:10:74:
                    78:fa:20:ef:d8:78:3b:cc:9b:d1:06:ec:35:d7:17:
                    13:74:1b:36:b7:33:df:4b:97:70:b4:23:37:89:f3:
                    a2:80:32:91:df:40:d9:79:83:5c:0c:e4:4d:11:18:
                    48:7e:de:3d:ca:e2:00:e4:87:bb:90:f6:d8:4e:5c:
                    0c:5a:02:d3:f4:84:98:42:ff:2b:61:49:e6:38:4f:
                    af:71:8a:02:be:dc:64:4d:50:35:5b:07:35:ac:4c:
                    32:5a:9b:de:af:24:37:1d:ac:98:11:81:9a:6e:ef:
                    ca:5c:71:74:46:3d:9b:8d:17:9a:da:d4:95:57:50:
                    f8:c0:84:fe:f3:e7:80:71:71:ff:f6:6a:29:e1:59:
                    09:98:f6:0c:c0:7f:5d:df:15:41:b0:87:45:0b:32:
                    8a:f4:d7:dc:51:29:a2:2f:42:64:1c:b3:b0:26:3d:
                    be:58:ba:14:1d:47:49:89:9c:8a:6e:17:e2:8f:ab:
                    a4:b8:87:5c:42:67:b0:4f:94:dd:9e:59:74:21:77:
                    1b:f6:75:63:9d:0b:fe:6d:c7:77:4d:bc:ea:92:ad:
                    72:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0D:03:84:9E:E5:E7:0A:BA:D6:ED:3F:BC:01:86:FE:61:42:59:99
            X509v3 Authority Key Identifier:
                keyid:DB:A1:7E:ED:3C:A2:45:B7:AE:8D:3E:74:83:9E:11:7D:66:18:AF:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA17EED3CA245B7AE8D3E74839E117D6618AFBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/323830343a386565303a3a2f33322d313238203d3e20323733343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:39:39:13:6b:9f:4a:28:47:3c:9d:8d:c2:dc:f6:70:02:53:
         0b:ac:09:4b:36:f1:aa:6a:17:96:86:c7:3f:74:3e:e1:46:dd:
         10:b6:42:7b:7a:35:50:a0:dd:89:e4:cb:87:2e:fc:ea:ac:4b:
         e3:3f:8e:c4:4c:dc:d8:a9:5f:80:04:e1:3b:37:5f:7e:e8:d5:
         aa:99:ff:80:b7:8f:79:e2:96:d9:2d:0a:71:8d:cf:6c:3c:30:
         9e:80:37:af:24:8b:40:8a:05:ea:ad:32:15:a1:42:57:4f:7f:
         9e:29:76:62:b7:51:c9:9d:20:cc:0a:68:a2:83:17:cf:08:d3:
         64:af:a5:65:3d:b1:4d:7c:3e:61:f2:79:f4:64:4f:0f:37:8a:
         3b:60:36:46:f9:6b:df:99:0c:ee:67:da:91:cc:b1:7f:c2:09:
         01:1e:3b:22:b0:30:08:68:a2:47:3e:3f:37:19:cd:c3:15:ca:
         04:b8:ae:8d:10:87:04:aa:cd:d0:33:6b:53:6e:f1:3b:3b:cb:
         45:ed:01:e3:f6:14:b9:37:18:9e:3a:82:5a:c3:ad:4e:58:36:
         ae:60:9c:b0:63:5c:22:be:17:56:07:c2:12:28:71:7b:35:ea:
         48:1c:2a:f2:a3:57:f5:a9:71:fd:98:de:bb:b5:ef:e7:f9:e6:
         2b:a4:85:29
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUEprizXKBRNinF8g542T2ancxVjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJBMTdFRUQzQ0EyNDVCN0FFOEQzRTc0ODM5RTExN0Q2
NjE4QUZCQTAeFw0yNjA2MzAxOTU5NThaFw0yNzA2MjkyMDA0NThaMDMxMTAvBgNV
BAMTKDUyMEQwMzg0OUVFNUU3MEFCQUQ2RUQzRkJDMDE4NkZFNjE0MjU5OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbB7f97NQvGkug3hr8CpHs2oS
W1VFb7hmBUc0E0EG/WF8/+Uj9DqsGSQQdHj6IO/YeDvMm9EG7DXXFxN0Gza3M99L
l3C0IzeJ86KAMpHfQNl5g1wM5E0RGEh+3j3K4gDkh7uQ9thOXAxaAtP0hJhC/yth
SeY4T69xigK+3GRNUDVbBzWsTDJam96vJDcdrJgRgZpu78pccXRGPZuNF5ra1JVX
UPjAhP7z54Bxcf/2ainhWQmY9gzAf13fFUGwh0ULMor019xRKaIvQmQcs7AmPb5Y
uhQdR0mJnIpuF+KPq6S4h1xCZ7BPlN2eWXQhdxv2dWOdC/5tx3dNvOqSrXLlAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUUg0DhJ7l5wq61u0/vAGG/mFCWZkwHwYDVR0j
BBgwFoAU26F+7TyiRbeujT50g54RfWYYr7owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEM0dHRhaFdIQnBoRHNodUVkU1o2eEVxcGMxY0dWa3FROWJmcDdRWnlF
RjYvMC9EQkExN0VFRDNDQTI0NUI3QUU4RDNFNzQ4MzlFMTE3RDY2MThBRkJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQTE3RUVEM0NBMjQ1QjdB
RThEM0U3NDgzOUUxMTdENjYxOEFGQkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hDNHR0YWhXSEJwaERzaHVFZFNaNnhFcXBjMWNHVmtxUTliZnA3UVp5RUY2LzAv
MzIzODMwMzQzYTM4NjU2NTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzMzNDM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBI7gMA0GCSqGSIb3DQEBCwUAA4IBAQBDOTkT
a59KKEc8nY3C3PZwAlMLrAlLNvGqaheWhsc/dD7hRt0QtkJ7ejVQoN2J5MuHLvzq
rEvjP47ETNzYqV+ABOE7N19+6NWqmf+At4954pbZLQpxjc9sPDCegDevJItAigXq
rTIVoUJXT3+eKXZit1HJnSDMCmiigxfPCNNkr6VlPbFNfD5h8nn0ZE8PN4o7YDZG
+WvfmQzuZ9qRzLF/wgkBHjsisDAIaKJHPj83Gc3DFcoEuK6NEIcEqs3QM2tTbvE7
O8tF7QHj9hS5NxieOoJaw61OWDauYJywY1wivhdWB8ISKHF7NepIHCryo1f1qXH9
mN67te/n+eYrpIUp
-----END CERTIFICATE-----
Generated at Wed Jul 8 17:09:17 2026 by rpki-client