Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a3a2f33322d3332203d3e20323637353936.roa
File:                     323830343a343365303a3a2f33322d3332203d3e20323637353936.roa (raw, json)
Hash identifier:          2mGPCBn5FRMGp42vOGIlQKeHlFMvwLUgwO8vFMFIL64=
Subject key identifier:   86:52:2F:B7:4E:88:21:40:8B:B1:45:82:55:3A:95:9C:DB:50:83:A4
Certificate issuer:       /CN=EC951EF2EFF92958D0D8637B708E508C6DF31901
Certificate serial:       026809DE8BBA140614C7D098DC5CCC960815D757
Authority key identifier: EC:95:1E:F2:EF:F9:29:58:D0:D8:63:7B:70:8E:50:8C:6D:F3:19:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC951EF2EFF92958D0D8637B708E508C6DF31901.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a3a2f33322d3332203d3e20323637353936.roa
Signing time:             Wed 02 Sep 2026 21:07:01 +0000
ROA not before:           Wed 02 Sep 2026 21:02:01 +0000
ROA not after:            Wed 01 Sep 2027 21:07:01 +0000
asID:                     267596
IP address blocks:        2804:43e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/EC951EF2EFF92958D0D8637B708E508C6DF31901.crl
                          rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/EC951EF2EFF92958D0D8637B708E508C6DF31901.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC951EF2EFF92958D0D8637B708E508C6DF31901.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 09:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:68:09:de:8b:ba:14:06:14:c7:d0:98:dc:5c:cc:96:08:15:d7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC951EF2EFF92958D0D8637B708E508C6DF31901
        Validity
            Not Before: Sep  2 21:02:01 2026 GMT
            Not After : Sep  1 21:07:01 2027 GMT
        Subject: CN=86522FB74E8821408BB14582553A959CDB5083A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3f:11:15:74:57:7d:a3:5e:3c:27:2e:8e:a8:
                    18:a8:e5:16:87:08:cd:16:1f:8f:25:7b:43:b0:cf:
                    03:51:83:7b:47:fa:66:d1:af:91:6d:da:79:e3:9b:
                    58:6c:77:b5:59:88:fa:90:7b:8b:90:44:f3:cf:f7:
                    df:ac:64:59:7a:d8:dd:ab:e8:9e:53:68:e6:7f:51:
                    e6:2d:56:1e:b8:5d:57:6a:34:24:56:35:b5:11:79:
                    f4:56:a1:6f:98:06:2b:c4:ae:42:8b:63:e3:42:33:
                    e1:32:eb:3d:b0:86:ac:61:bb:18:3b:2e:3c:42:79:
                    e4:9e:78:5a:65:39:f3:6f:1d:4d:be:d3:f0:83:59:
                    ee:b9:e9:ba:9d:a9:a8:89:ae:09:7f:75:09:e9:d7:
                    a6:a6:79:36:31:3d:8a:21:55:9a:72:ae:01:fc:59:
                    de:c1:d3:71:d2:60:3d:3b:e9:3d:75:6b:9f:8f:91:
                    db:87:b2:6a:8b:5f:a8:5a:a1:57:2e:c8:a5:b2:cb:
                    99:72:06:9c:b2:88:5c:ca:4d:86:9f:15:bd:ff:8d:
                    22:63:8f:fa:38:3a:06:0e:cc:fe:4f:b4:98:ff:b5:
                    0d:a8:19:6d:4c:9c:52:76:5b:8b:bf:f3:63:29:45:
                    bb:70:71:a9:04:2b:5d:a1:35:48:62:3b:d5:90:32:
                    17:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:52:2F:B7:4E:88:21:40:8B:B1:45:82:55:3A:95:9C:DB:50:83:A4
            X509v3 Authority Key Identifier:
                keyid:EC:95:1E:F2:EF:F9:29:58:D0:D8:63:7B:70:8E:50:8C:6D:F3:19:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/EC951EF2EFF92958D0D8637B708E508C6DF31901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC951EF2EFF92958D0D8637B708E508C6DF31901.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a3a2f33322d3332203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:ec:0e:ee:3f:87:75:a3:e2:ff:fd:9e:2c:24:49:d0:de:df:
         51:a3:9c:b2:2c:c1:3f:4b:d5:d7:c2:92:50:6a:72:0a:9e:59:
         44:90:60:a2:9c:cd:81:8b:85:30:98:51:85:ad:27:16:96:e8:
         3a:9a:c6:b5:8a:e0:5d:dc:51:d0:99:36:87:aa:e1:62:62:13:
         a7:1c:93:3a:da:f1:af:5f:81:85:6e:a6:76:4f:32:3f:76:93:
         72:c6:99:9c:fe:a5:cf:db:ab:bd:33:1e:25:d2:2d:5e:b6:39:
         6e:51:30:69:0d:55:eb:12:2c:d5:a3:30:e1:fc:bd:05:ac:06:
         1d:44:d2:54:c2:b4:71:13:d7:4e:c4:b1:ef:e8:8b:5a:be:7c:
         7c:1e:72:cf:40:a4:82:69:10:29:48:79:55:eb:58:57:17:2f:
         16:9d:fc:d6:3b:b2:6d:ae:86:ff:c1:b5:17:a2:4c:95:bc:12:
         34:7e:2d:cd:ba:06:a6:fd:6b:bd:09:a4:6a:dd:53:50:ee:f3:
         5e:fc:cc:f2:6c:e9:2a:f6:8f:60:67:4c:8e:74:71:a4:83:76:
         12:fd:aa:67:e7:ee:64:31:e1:f4:e7:1d:08:9b:a3:d7:ca:f6:
         33:ab:25:44:85:2d:86:20:1d:9f:2f:28:cf:18:b6:f1:42:d4:
         94:65:ed:b5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUAmgJ3ou6FAYUx9CY3FzMlggV11cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5NTFFRjJFRkY5Mjk1OEQwRDg2MzdCNzA4RTUwOEM2
REYzMTkwMTAeFw0yNjA5MDIyMTAyMDFaFw0yNzA5MDEyMTA3MDFaMDMxMTAvBgNV
BAMTKDg2NTIyRkI3NEU4ODIxNDA4QkIxNDU4MjU1M0E5NTlDREI1MDgzQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPxEVdFd9o148Jy6OqBio5RaH
CM0WH48le0OwzwNRg3tH+mbRr5Ft2nnjm1hsd7VZiPqQe4uQRPPP99+sZFl62N2r
6J5TaOZ/UeYtVh64XVdqNCRWNbURefRWoW+YBivErkKLY+NCM+Ey6z2whqxhuxg7
LjxCeeSeeFplOfNvHU2+0/CDWe656bqdqaiJrgl/dQnp16ameTYxPYohVZpyrgH8
Wd7B03HSYD076T11a5+PkduHsmqLX6haoVcuyKWyy5lyBpyyiFzKTYafFb3/jSJj
j/o4OgYOzP5PtJj/tQ2oGW1MnFJ2W4u/82MpRbtwcakEK12hNUhiO9WQMhd/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUhlIvt06IIUCLsUWCVTqVnNtQg6QwHwYDVR0j
BBgwFoAU7JUe8u/5KVjQ2GN7cI5QjG3zGQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkE1YUdmUFM1WGgyRHpUYlhvTTRoTTZ6RjF1WXk2cWZWWFRMVWpGVTY3
c3ovMC9FQzk1MUVGMkVGRjkyOTU4RDBEODYzN0I3MDhFNTA4QzZERjMxOTAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDOTUxRUYyRUZGOTI5NThE
MEQ4NjM3QjcwOEU1MDhDNkRGMzE5MDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pBNWFHZlBTNVhoMkR6VGJYb000aE02ekYxdVl5NnFmVlhUTFVqRlU2N3N6LzAv
MzIzODMwMzQzYTM0MzM2NTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzUzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARD4DANBgkqhkiG9w0BAQsFAAOCAQEAkOwO7j+H
daPi//2eLCRJ0N7fUaOcsizBP0vV18KSUGpyCp5ZRJBgopzNgYuFMJhRha0nFpbo
OprGtYrgXdxR0Jk2h6rhYmITpxyTOtrxr1+BhW6mdk8yP3aTcsaZnP6lz9urvTMe
JdItXrY5blEwaQ1V6xIs1aMw4fy9BawGHUTSVMK0cRPXTsSx7+iLWr58fB5yz0Ck
gmkQKUh5VetYVxcvFp381juyba6G/8G1F6JMlbwSNH4tzboGpv1rvQmkat1TUO7z
XvzM8mzpKvaPYGdMjnRxpIN2Ev2qZ+fuZDHh9OcdCJuj18r2M6slRIUthiAdny8o
zxi28ULUlGXttQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 01:50:06 2026 by rpki-client