Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a663230303a3a2f34302d3430203d3e20323633333439.roa
File:                     323830343a313463343a663230303a3a2f34302d3430203d3e20323633333439.roa (raw, json)
Hash identifier:          6AI4E7ysIsEjUc5q5QBvYWBvxiYJ19tHAYoWV1nR2Ks=
Subject key identifier:   5A:7B:C6:75:6F:CB:83:7F:4C:2E:53:AE:E8:8F:A7:1C:CE:D2:A6:54
Certificate issuer:       /CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
Certificate serial:       2211EA73D745D6F5D39A7C0D0831613C2D4402CF
Authority key identifier: FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a663230303a3a2f34302d3430203d3e20323633333439.roa
Signing time:             Wed 23 Sep 2026 01:05:18 +0000
ROA not before:           Wed 23 Sep 2026 01:00:18 +0000
ROA not after:            Wed 22 Sep 2027 01:05:18 +0000
asID:                     263349
IP address blocks:        2804:14c4:f200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:11:ea:73:d7:45:d6:f5:d3:9a:7c:0d:08:31:61:3c:2d:44:02:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
        Validity
            Not Before: Sep 23 01:00:18 2026 GMT
            Not After : Sep 22 01:05:18 2027 GMT
        Subject: CN=5A7BC6756FCB837F4C2E53AEE88FA71CCED2A654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:d8:3c:f9:5e:20:21:79:06:87:75:c4:d1:
                    1a:dc:31:3b:e0:4d:80:26:c9:af:c9:72:21:e0:e6:
                    90:a6:c4:03:1e:25:63:c0:95:05:8c:60:ff:89:6c:
                    11:94:a3:05:5a:fb:9c:ba:4f:5a:40:0c:f3:8f:ea:
                    d4:e1:e2:6c:a3:6b:b3:73:cf:94:c8:b5:d7:66:d2:
                    35:12:3c:a6:88:81:ac:07:6b:70:dc:a2:63:84:7c:
                    4d:8a:6a:32:f1:ae:50:91:4e:86:4a:45:49:73:47:
                    ba:54:46:cd:93:3e:89:5c:51:2e:3e:e8:d1:68:9e:
                    64:36:24:29:5b:40:47:12:fa:9f:d7:2e:dc:4a:e2:
                    d4:2d:1c:7d:a1:f6:40:bc:5c:6d:64:c2:1b:d6:da:
                    27:15:36:9d:bf:3b:00:ec:55:ae:86:82:61:74:46:
                    65:9b:7e:48:ec:84:b2:6f:04:af:05:84:62:cb:3a:
                    d7:0f:68:0b:e0:2d:98:bc:ae:50:71:4d:33:e9:8f:
                    0e:d2:ae:0d:90:a3:55:54:d3:71:e4:2e:7a:c2:fa:
                    e8:6f:e1:bc:f5:45:7b:fa:b1:2e:3f:6d:99:0f:40:
                    41:ff:dd:1e:ed:b4:75:29:2c:6f:0e:74:8d:ba:0c:
                    08:97:70:13:5d:25:76:d5:e3:f2:7a:08:73:0f:92:
                    29:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7B:C6:75:6F:CB:83:7F:4C:2E:53:AE:E8:8F:A7:1C:CE:D2:A6:54
            X509v3 Authority Key Identifier:
                keyid:FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a663230303a3a2f34302d3430203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14c4:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:be:e8:de:be:9c:ca:46:a9:16:c8:22:28:cd:a0:45:37:23:
         36:fe:e2:c4:63:29:de:48:ec:ae:1e:77:bc:1e:09:0c:81:49:
         fd:c0:8b:07:cb:fc:18:82:6a:85:7a:b9:ee:9c:50:56:46:8b:
         47:c8:b8:df:2e:c7:26:1f:0c:2f:a5:ea:14:11:c8:34:85:30:
         8f:cf:59:25:4e:f6:e2:40:47:70:fb:6f:8e:dc:33:3b:98:fc:
         d2:95:bb:41:e1:d5:47:e1:b3:37:3c:4d:ed:81:85:ee:93:19:
         64:cb:29:02:c5:13:5c:7e:31:8b:f6:fa:1a:2f:dd:ef:de:a6:
         ea:84:1d:65:7d:d5:11:6a:b4:3c:12:73:25:58:95:36:99:68:
         89:68:bc:1f:32:b6:01:d9:2a:4d:87:da:19:68:b9:d0:7e:98:
         b6:24:02:8b:fe:79:24:53:03:de:ad:22:31:f6:b5:fe:a3:e1:
         47:ec:6e:e1:7c:c5:aa:1b:bb:7f:f2:a8:76:37:ea:dd:b8:9d:
         e9:8b:93:fd:88:5f:b3:83:c0:bd:fc:e1:be:aa:77:62:f0:95:
         af:63:dc:cc:ef:8b:89:01:5d:14:b4:3b:70:6d:11:0e:ca:a1:
         93:7d:a3:cb:a5:5b:37:cb:6e:1f:04:d0:ea:aa:b6:c6:4f:30:
         78:3d:d5:e2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUIhHqc9dF1vXTmnwNCDFhPC1EAs8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZBNjhEMzc3REQ2NzBFMThFQ0UzRTEyQUE2NTZDNjI4
MEIyRDBDMzAeFw0yNjA5MjMwMTAwMThaFw0yNzA5MjIwMTA1MThaMDMxMTAvBgNV
BAMTKDVBN0JDNjc1NkZDQjgzN0Y0QzJFNTNBRUU4OEZBNzFDQ0VEMkE2NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQtg8+V4gIXkGh3XE0RrcMTvg
TYAmya/JciHg5pCmxAMeJWPAlQWMYP+JbBGUowVa+5y6T1pADPOP6tTh4myja7Nz
z5TItddm0jUSPKaIgawHa3DcomOEfE2KajLxrlCRToZKRUlzR7pURs2TPolcUS4+
6NFonmQ2JClbQEcS+p/XLtxK4tQtHH2h9kC8XG1kwhvW2icVNp2/OwDsVa6GgmF0
RmWbfkjshLJvBK8FhGLLOtcPaAvgLZi8rlBxTTPpjw7Srg2Qo1VU03HkLnrC+uhv
4bz1RXv6sS4/bZkPQEH/3R7ttHUpLG8OdI26DAiXcBNdJXbV4/J6CHMPkim3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUWnvGdW/Lg39MLlOu6I+nHM7SplQwHwYDVR0j
BBgwFoAU/6aNN33WcOGOzj4SqmVsYoCy0MMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHQ0dFhUak5ZQ29WTkpNV29QM0d1dnB4Y2pySm93RUhNejlhWHFwWmlr
bk0vMC9GRkE2OEQzNzdERDY3MEUxOEVDRTNFMTJBQTY1NkM2MjgwQjJEMEMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGQTY4RDM3N0RENjcwRTE4
RUNFM0UxMkFBNjU2QzYyODBCMkQwQzMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h0NHRYVGpOWUNvVk5KTVdvUDNHdXZweGNqckpvd0VITXo5YVhxcFppa25NLzAv
MzIzODMwMzQzYTMxMzQ2MzM0M2E2NjMyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzMzMzMzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEFMTyMA0GCSqGSIb3DQEBCwUA
A4IBAQAqvujevpzKRqkWyCIozaBFNyM2/uLEYyneSOyuHne8HgkMgUn9wIsHy/wY
gmqFernunFBWRotHyLjfLscmHwwvpeoUEcg0hTCPz1klTvbiQEdw+2+O3DM7mPzS
lbtB4dVH4bM3PE3tgYXukxlkyykCxRNcfjGL9voaL93v3qbqhB1lfdURarQ8EnMl
WJU2mWiJaLwfMrYB2SpNh9oZaLnQfpi2JAKL/nkkUwPerSIx9rX+o+FH7G7hfMWq
G7t/8qh2N+rduJ3pi5P9iF+zg8C9/OG+qndi8JWvY9zM74uJAV0UtDtwbREOyqGT
faPLpVs3y24fBNDqqrbGTzB4PdXi
-----END CERTIFICATE-----
Generated at Wed Oct 14 22:53:32 2026 by rpki-client