Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/323830343a356161633a323030303a3a2f34302d3430203d3e20323638373838.roa
File:                     323830343a356161633a323030303a3a2f34302d3430203d3e20323638373838.roa (raw, json)
Hash identifier:          AmhNVXUJWbhW4cKvp1O5Ayx81nBZT9zMtEoaXZGL380=
Subject key identifier:   8F:D4:01:48:39:62:66:85:CE:7F:D1:E0:EB:10:B7:66:37:8A:A5:60
Certificate issuer:       /CN=6D42EE55DCD4D77A4A09DD35981E1005EC120183
Certificate serial:       6FAB5DB402FD624DA044B5BFE2ECA7C1DAB8D7EF
Authority key identifier: 6D:42:EE:55:DC:D4:D7:7A:4A:09:DD:35:98:1E:10:05:EC:12:01:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D42EE55DCD4D77A4A09DD35981E1005EC120183.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/323830343a356161633a323030303a3a2f34302d3430203d3e20323638373838.roa
Signing time:             Thu 13 Aug 2026 19:45:44 +0000
ROA not before:           Thu 13 Aug 2026 19:40:44 +0000
ROA not after:            Thu 12 Aug 2027 19:45:44 +0000
asID:                     268788
IP address blocks:        2804:5aac:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/6D42EE55DCD4D77A4A09DD35981E1005EC120183.crl
                          rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/6D42EE55DCD4D77A4A09DD35981E1005EC120183.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D42EE55DCD4D77A4A09DD35981E1005EC120183.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 11:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ab:5d:b4:02:fd:62:4d:a0:44:b5:bf:e2:ec:a7:c1:da:b8:d7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42EE55DCD4D77A4A09DD35981E1005EC120183
        Validity
            Not Before: Aug 13 19:40:44 2026 GMT
            Not After : Aug 12 19:45:44 2027 GMT
        Subject: CN=8FD4014839626685CE7FD1E0EB10B766378AA560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:17:e5:a9:cf:d2:ca:a1:62:54:41:87:0e:
                    47:30:86:62:48:b3:e4:6b:f9:c5:2c:a3:ec:55:5e:
                    a2:f2:6f:f8:e0:c8:dc:b0:48:4b:5d:15:26:33:b2:
                    66:8b:a5:62:2c:57:8d:e7:8b:65:80:51:eb:04:27:
                    b1:90:0d:a2:8b:c0:05:d8:b3:93:f1:8e:b0:27:3f:
                    f4:1e:97:f5:bc:e0:f5:69:a6:29:83:a1:77:a2:be:
                    be:33:10:82:59:2c:8f:ad:4c:1a:47:af:68:54:8c:
                    ea:08:81:8f:ce:fc:29:db:dc:2f:21:fa:42:64:e2:
                    d9:24:58:6b:aa:ed:d6:c5:27:0d:4c:65:e0:43:0b:
                    5a:f9:08:b0:ac:1a:79:9a:78:b7:ad:c6:d5:81:1b:
                    c8:24:73:83:aa:7a:1a:48:77:e1:67:72:2d:3d:fa:
                    e0:b4:e8:86:48:c5:ed:73:70:83:44:76:df:84:b6:
                    57:9f:c7:2e:e2:45:b5:b9:83:6c:13:47:cd:e9:2f:
                    3c:ec:b2:ec:c3:d5:ff:ea:13:b4:38:66:45:f1:5c:
                    fd:13:52:90:29:7e:1e:52:0f:f3:62:67:ef:f4:3d:
                    25:0b:f0:7f:4d:3d:ac:cb:14:d5:f8:a9:c1:17:9c:
                    87:99:e6:73:cb:5c:88:ea:6a:b8:16:17:88:0c:66:
                    03:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D4:01:48:39:62:66:85:CE:7F:D1:E0:EB:10:B7:66:37:8A:A5:60
            X509v3 Authority Key Identifier:
                keyid:6D:42:EE:55:DC:D4:D7:7A:4A:09:DD:35:98:1E:10:05:EC:12:01:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/6D42EE55DCD4D77A4A09DD35981E1005EC120183.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D42EE55DCD4D77A4A09DD35981E1005EC120183.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/323830343a356161633a323030303a3a2f34302d3430203d3e20323638373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aac:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:aa:13:fa:ad:e8:3b:fd:aa:58:e8:d5:1e:fb:99:4f:6c:20:
         e9:87:a0:5d:40:cf:9e:5d:63:b6:0f:ab:d9:e1:b1:76:f7:6e:
         45:1b:a3:c1:a3:2f:ec:24:3e:45:a6:ef:ad:16:0e:3e:50:9d:
         c3:bb:4b:ce:8d:4d:7c:0f:bf:ae:04:1f:a4:db:59:4d:22:30:
         e9:17:ed:ee:13:c1:0b:ad:48:63:39:07:a4:3b:b5:31:ff:10:
         b2:22:44:f9:b6:8c:37:e8:d9:31:d1:69:46:ee:9c:7b:5e:e6:
         b5:d4:26:16:d1:31:4b:75:0a:3b:12:b8:9b:08:74:0a:82:be:
         19:d5:89:eb:d4:f7:e1:cc:cb:60:02:bd:08:59:82:bd:40:03:
         4d:fe:bc:dd:ff:0e:74:fc:17:90:ae:43:49:95:87:b8:5e:e0:
         6a:d4:b4:26:10:11:bc:ca:fc:26:06:13:c2:20:ea:c7:04:a5:
         dc:ef:cb:8e:cf:fa:ba:2a:43:11:fd:91:6c:b4:42:6e:2e:7b:
         3e:c2:2c:c7:d3:e2:29:fd:fb:91:6c:2e:72:21:8f:42:ae:cc:
         7f:31:5b:f8:5a:cb:32:09:36:9a:bf:cd:50:08:ea:3f:c8:1f:
         39:b1:03:e3:5c:bf:31:ab:fa:c6:19:f2:48:ba:bf:da:40:ee:
         64:74:19:db
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUb6tdtAL9Yk2gRLW/4uynwdq41+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ0MkVFNTVEQ0Q0RDc3QTRBMDlERDM1OTgxRTEwMDVF
QzEyMDE4MzAeFw0yNjA4MTMxOTQwNDRaFw0yNzA4MTIxOTQ1NDRaMDMxMTAvBgNV
BAMTKDhGRDQwMTQ4Mzk2MjY2ODVDRTdGRDFFMEVCMTBCNzY2Mzc4QUE1NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrkhflqc/SyqFiVEGHDkcwhmJI
s+Rr+cUso+xVXqLyb/jgyNywSEtdFSYzsmaLpWIsV43ni2WAUesEJ7GQDaKLwAXY
s5PxjrAnP/Qel/W84PVppimDoXeivr4zEIJZLI+tTBpHr2hUjOoIgY/O/Cnb3C8h
+kJk4tkkWGuq7dbFJw1MZeBDC1r5CLCsGnmaeLetxtWBG8gkc4OqehpId+Fnci09
+uC06IZIxe1zcINEdt+Etlefxy7iRbW5g2wTR83pLzzssuzD1f/qE7Q4ZkXxXP0T
UpApfh5SD/NiZ+/0PSUL8H9NPazLFNX4qcEXnIeZ5nPLXIjqargWF4gMZgPxAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUj9QBSDliZoXOf9Hg6xC3ZjeKpWAwHwYDVR0j
BBgwFoAUbULuVdzU13pKCd01mB4QBewSAYMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdq
QkUvMC82RDQyRUU1NURDRDRENzdBNEEwOUREMzU5ODFFMTAwNUVDMTIwMTgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZENDJFRTU1RENENEQ3N0E0
QTA5REQzNTk4MUUxMDA1RUMxMjAxODMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hDV1prd0VVZzJ4c2pLSnhuUzdwNThOOEJYQ2tYYnppc0R3WHBvUDVnakJFLzAv
MzIzODMwMzQzYTM1NjE2MTYzM2EzMjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzODM3MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEWqwgMA0GCSqGSIb3DQEBCwUA
A4IBAQAlqhP6reg7/apY6NUe+5lPbCDph6BdQM+eXWO2D6vZ4bF2925FG6PBoy/s
JD5Fpu+tFg4+UJ3Du0vOjU18D7+uBB+k21lNIjDpF+3uE8ELrUhjOQekO7Ux/xCy
IkT5tow36Nkx0WlG7px7Xua11CYW0TFLdQo7EribCHQKgr4Z1Ynr1PfhzMtgAr0I
WYK9QANN/rzd/w50/BeQrkNJlYe4XuBq1LQmEBG8yvwmBhPCIOrHBKXc78uOz/q6
KkMR/ZFstEJuLns+wizH0+Ip/fuRbC5yIY9Crsx/MVv4WssyCTaav81QCOo/yB85
sQPjXL8xq/rGGfJIur/aQO5kdBnb
-----END CERTIFICATE-----
Generated at Tue Aug 25 04:23:16 2026 by rpki-client