Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a343030303a3a2f33342d3438203d3e20323635343139.roa
File:                     323830343a333364343a343030303a3a2f33342d3438203d3e20323635343139.roa (raw, json)
Hash identifier:          sZbFLZ2njzqlxJnlsdOvLibdbZh/F4rqbXRgf3EDaUA=
Subject key identifier:   54:CC:E0:18:B5:F2:D6:48:A3:CD:D8:D4:3F:EA:64:8F:9E:19:F3:A8
Certificate issuer:       /CN=14FFC8E5B952B4495755D566554505DF141BAB32
Certificate serial:       475C1FE6147D5AEF896DB3839C29CB0E92C695F6
Authority key identifier: 14:FF:C8:E5:B9:52:B4:49:57:55:D5:66:55:45:05:DF:14:1B:AB:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FFC8E5B952B4495755D566554505DF141BAB32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a343030303a3a2f33342d3438203d3e20323635343139.roa
Signing time:             Wed 16 Sep 2026 18:54:22 +0000
ROA not before:           Wed 16 Sep 2026 18:49:22 +0000
ROA not after:            Wed 15 Sep 2027 18:54:22 +0000
asID:                     265419
IP address blocks:        2804:33d4:4000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/14FFC8E5B952B4495755D566554505DF141BAB32.crl
                          rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/14FFC8E5B952B4495755D566554505DF141BAB32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FFC8E5B952B4495755D566554505DF141BAB32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 03:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5c:1f:e6:14:7d:5a:ef:89:6d:b3:83:9c:29:cb:0e:92:c6:95:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14FFC8E5B952B4495755D566554505DF141BAB32
        Validity
            Not Before: Sep 16 18:49:22 2026 GMT
            Not After : Sep 15 18:54:22 2027 GMT
        Subject: CN=54CCE018B5F2D648A3CDD8D43FEA648F9E19F3A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6a:66:5a:1a:cf:27:f3:f2:b2:ad:e9:65:81:
                    10:fc:5d:14:56:26:5f:3e:0f:f6:4a:02:e0:18:9e:
                    98:ea:7c:c3:c7:fa:1b:96:96:93:67:2d:20:a4:c2:
                    4a:9a:80:db:b8:ca:0a:a3:9a:c9:4f:a6:3b:c7:92:
                    2e:51:3d:a6:4b:41:16:d6:d2:82:2e:de:71:bd:49:
                    f5:c3:87:c7:d8:1e:29:1f:52:52:8d:9f:04:48:a3:
                    a7:55:c7:89:91:87:56:a9:8a:2d:04:9c:81:6c:1e:
                    3b:10:bd:a1:c9:53:a3:6f:82:f0:fa:e7:9d:89:80:
                    2f:54:25:0f:27:56:ff:9e:0d:5d:a1:34:64:1a:de:
                    f6:f4:ee:6c:af:76:f3:f8:c3:48:85:eb:72:dd:20:
                    05:2b:b6:66:16:b2:f0:e9:9d:6a:71:68:b7:48:5b:
                    8a:60:0a:8e:33:77:15:5b:11:74:e0:7d:04:39:e9:
                    48:e5:d8:e1:49:8e:d7:11:a2:66:2f:2e:60:fa:56:
                    91:65:cc:57:75:dc:b5:fd:88:4a:3c:9a:93:5a:d9:
                    38:cf:76:32:9c:00:a4:81:00:ea:b8:bf:70:60:29:
                    8c:04:b1:ce:e4:4e:26:73:d9:a4:9d:d2:72:97:67:
                    ea:fe:3e:00:13:28:87:01:cb:af:c1:d9:13:b4:f4:
                    ac:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CC:E0:18:B5:F2:D6:48:A3:CD:D8:D4:3F:EA:64:8F:9E:19:F3:A8
            X509v3 Authority Key Identifier:
                keyid:14:FF:C8:E5:B9:52:B4:49:57:55:D5:66:55:45:05:DF:14:1B:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/14FFC8E5B952B4495755D566554505DF141BAB32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FFC8E5B952B4495755D566554505DF141BAB32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a343030303a3a2f33342d3438203d3e20323635343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33d4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         80:81:54:14:1c:6f:01:6b:79:71:74:69:f3:ed:ae:20:8e:c0:
         14:3b:80:d6:41:aa:55:f1:52:2f:1b:bb:cc:72:f5:db:9f:a2:
         a2:2f:b7:41:f0:61:52:f8:69:e3:ac:52:7b:8d:3d:17:ff:46:
         3d:98:46:d8:f4:fa:5b:f5:8b:35:8b:ea:85:ac:3d:0f:3b:41:
         f0:7c:c3:96:49:cc:a8:21:ef:6f:49:4c:82:c0:dd:36:b8:63:
         88:92:15:38:09:0b:9e:2d:4e:4c:0a:d9:b1:13:ec:19:07:b1:
         da:b8:37:d4:02:ca:b7:48:a0:48:9c:2f:28:c2:ff:b3:67:68:
         5b:ef:16:a2:b8:99:58:72:a8:5a:f5:e9:e3:0c:2a:12:ad:da:
         6e:29:50:dc:aa:3a:88:3c:74:6b:0f:bc:16:93:0f:99:aa:d2:
         45:8b:5a:b0:ee:2b:ee:86:e6:1a:5e:63:c5:8b:cd:c5:d7:1e:
         46:1b:5c:1b:e9:09:c2:64:fc:06:97:1c:c6:b6:e6:c8:4a:92:
         1b:f2:c7:86:18:58:d8:eb:53:18:cd:4a:17:ef:d7:e0:4e:3c:
         a9:c9:23:57:c1:9a:4c:82:52:22:4b:c1:17:d1:1e:39:13:9e:
         ad:d4:1b:e0:41:37:a2:c1:be:b9:85:a5:26:6e:6b:19:52:44:
         c7:d4:86:4f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUR1wf5hR9Wu+JbbODnCnLDpLGlfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRGRkM4RTVCOTUyQjQ0OTU3NTVENTY2NTU0NTA1REYx
NDFCQUIzMjAeFw0yNjA5MTYxODQ5MjJaFw0yNzA5MTUxODU0MjJaMDMxMTAvBgNV
BAMTKDU0Q0NFMDE4QjVGMkQ2NDhBM0NERDhENDNGRUE2NDhGOUUxOUYzQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5amZaGs8n8/KyrellgRD8XRRW
Jl8+D/ZKAuAYnpjqfMPH+huWlpNnLSCkwkqagNu4ygqjmslPpjvHki5RPaZLQRbW
0oIu3nG9SfXDh8fYHikfUlKNnwRIo6dVx4mRh1apii0EnIFsHjsQvaHJU6NvgvD6
552JgC9UJQ8nVv+eDV2hNGQa3vb07myvdvP4w0iF63LdIAUrtmYWsvDpnWpxaLdI
W4pgCo4zdxVbEXTgfQQ56Ujl2OFJjtcRomYvLmD6VpFlzFd13LX9iEo8mpNa2TjP
djKcAKSBAOq4v3BgKYwEsc7kTiZz2aSd0nKXZ+r+PgATKIcBy6/B2RO09KwpAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUVMzgGLXy1kijzdjUP+pkj54Z86gwHwYDVR0j
BBgwFoAUFP/I5blStElXVdVmVUUF3xQbqzIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJZZG5wNnNxOWdUeWMxTXBKVmFTejZhNEI5TWhIU1VlSnJ4eFNBd3Ry
OGMvMC8xNEZGQzhFNUI5NTJCNDQ5NTc1NUQ1NjY1NTQ1MDVERjE0MUJBQjMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0RkZDOEU1Qjk1MkI0NDk1
NzU1RDU2NjU1NDUwNURGMTQxQkFCMzIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyWWRucDZzcTlnVHljMU1wSlZhU3o2YTRCOU1oSFNVZUpyeHhTQXd0cjhjLzAv
MzIzODMwMzQzYTMzMzM2NDM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDM0MzgyMDNk
M2UyMDMyMzYzNTM0MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEM9RAMA0GCSqGSIb3DQEBCwUA
A4IBAQCAgVQUHG8Ba3lxdGnz7a4gjsAUO4DWQapV8VIvG7vMcvXbn6KiL7dB8GFS
+GnjrFJ7jT0X/0Y9mEbY9Ppb9Ys1i+qFrD0PO0HwfMOWScyoIe9vSUyCwN02uGOI
khU4CQueLU5MCtmxE+wZB7HauDfUAsq3SKBInC8owv+zZ2hb7xaiuJlYcqha9enj
DCoSrdpuKVDcqjqIPHRrD7wWkw+ZqtJFi1qw7ivuhuYaXmPFi83F1x5GG1wb6QnC
ZPwGlxzGtubISpIb8seGGFjY61MYzUoX79fgTjypySNXwZpMglIiS8EX0R45E56t
1BvgQTeiwb65haUmbmsZUkTH1IZP
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:39:56 2026 by rpki-client