Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/323830343a313066633a3a2f33322d3334203d3e20323633363536.roa
File:                     323830343a313066633a3a2f33322d3334203d3e20323633363536.roa (raw, json)
Hash identifier:          YplvbWvmhYXYhTo8Lcmj/5HGe48e5FY06evNKf+ymA4=
Subject key identifier:   DA:53:F2:21:CE:F4:40:D7:DF:7B:E6:99:45:75:6B:12:30:BE:39:F7
Certificate issuer:       /CN=E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150
Certificate serial:       43EA5C512B3A2F612CBE9824859ADCBB2133F0AE
Authority key identifier: E1:D8:8A:34:12:BF:A4:DB:8D:3C:7F:3C:E9:BD:CA:99:8F:42:B1:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/323830343a313066633a3a2f33322d3334203d3e20323633363536.roa
Signing time:             Tue 30 Jun 2026 14:37:55 +0000
ROA not before:           Tue 30 Jun 2026 14:32:55 +0000
ROA not after:            Tue 29 Jun 2027 14:37:55 +0000
asID:                     263656
IP address blocks:        2804:10fc::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 19:52:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ea:5c:51:2b:3a:2f:61:2c:be:98:24:85:9a:dc:bb:21:33:f0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150
        Validity
            Not Before: Jun 30 14:32:55 2026 GMT
            Not After : Jun 29 14:37:55 2027 GMT
        Subject: CN=DA53F221CEF440D7DF7BE69945756B1230BE39F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d1:67:e5:e2:99:22:fb:e0:0a:73:3f:85:33:
                    5f:56:8f:af:72:8f:a9:90:01:16:53:00:99:de:7c:
                    dd:e5:33:9d:e9:d4:6a:17:fa:27:4b:67:83:17:e9:
                    6b:a8:26:2d:06:32:a9:1b:c7:56:87:fd:a5:6d:27:
                    13:53:89:d3:5b:f0:7d:18:db:26:04:04:14:7e:84:
                    ac:1f:9b:d6:5c:c5:b2:d0:a5:76:28:8a:27:47:d9:
                    a1:10:58:74:eb:42:84:90:f5:8d:bd:b4:e6:0b:81:
                    4c:44:38:3c:0a:ae:3d:19:93:e0:38:83:1e:27:c5:
                    47:a2:4d:8b:b7:11:c1:26:06:df:fc:20:5d:f0:73:
                    37:e9:b1:1c:1b:56:dc:71:49:29:d2:46:9e:d5:a7:
                    71:2e:7e:dc:34:dc:83:dd:df:94:e9:c4:64:d3:dc:
                    d6:b3:66:fd:6d:dc:78:08:d7:d6:7a:3a:f2:25:9d:
                    cd:2e:33:80:67:83:3a:f9:ac:9b:2e:b2:70:f8:e3:
                    bf:f5:da:ef:33:81:2b:03:b7:06:d0:4d:aa:0a:05:
                    45:03:b8:ad:e5:ad:56:ba:89:3c:04:d1:b3:74:48:
                    c5:73:ca:cc:62:be:5a:45:f8:83:f5:af:04:58:15:
                    f1:c7:e8:8a:55:e9:a4:7f:ae:e9:83:7e:6c:a9:03:
                    38:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:53:F2:21:CE:F4:40:D7:DF:7B:E6:99:45:75:6B:12:30:BE:39:F7
            X509v3 Authority Key Identifier:
                keyid:E1:D8:8A:34:12:BF:A4:DB:8D:3C:7F:3C:E9:BD:CA:99:8F:42:B1:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1D88A3412BFA4DB8D3C7F3CE9BDCA998F42B150.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/323830343a313066633a3a2f33322d3334203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:7a:8e:d3:5b:12:19:fe:62:68:d5:c3:64:57:6b:89:93:6d:
         24:83:7b:8b:da:95:f3:bd:48:71:72:a0:0c:73:24:31:d8:56:
         70:b1:15:5b:3f:b4:b9:45:eb:82:a9:8d:47:a3:a8:69:a0:e1:
         57:cb:72:d6:60:da:d2:d3:b5:3a:03:9c:99:c5:6f:e4:28:ec:
         da:8f:ad:b4:1f:2c:45:8d:51:a8:2a:f5:01:d2:c4:99:e2:af:
         6f:97:4b:ee:53:e2:38:e2:4c:a2:40:96:00:b6:f2:1b:3a:ca:
         10:ae:55:7b:9a:a6:82:7a:36:2a:6c:ce:32:1c:90:9b:5c:f9:
         af:a3:f1:34:b6:97:bc:2e:52:3f:aa:69:20:69:4a:40:44:b0:
         51:d0:bc:5d:cd:e3:d2:b4:fb:f3:40:42:ff:8c:7a:35:ed:ae:
         1a:d4:7f:3b:e4:35:57:d8:03:48:51:65:c8:e3:0e:38:e9:5a:
         03:76:d5:36:81:b7:c3:47:49:2d:82:60:c1:38:c2:ab:fc:8f:
         88:f4:14:7f:e7:16:4e:f9:61:1d:a5:0d:27:e6:ce:58:68:02:
         07:13:10:c9:e6:c3:93:6a:cb:54:d7:43:3d:da:c4:58:8a:fb:
         40:b8:6d:b7:fe:cb:e9:9f:f6:b2:a8:43:4b:52:39:1f:c6:a9:
         52:47:3e:7a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUQ+pcUSs6L2EsvpgkhZrcuyEz8K4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFEODhBMzQxMkJGQTREQjhEM0M3RjNDRTlCRENBOTk4
RjQyQjE1MDAeFw0yNjA2MzAxNDMyNTVaFw0yNzA2MjkxNDM3NTVaMDMxMTAvBgNV
BAMTKERBNTNGMjIxQ0VGNDQwRDdERjdCRTY5OTQ1NzU2QjEyMzBCRTM5RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl0Wfl4pki++AKcz+FM19Wj69y
j6mQARZTAJnefN3lM53p1GoX+idLZ4MX6WuoJi0GMqkbx1aH/aVtJxNTidNb8H0Y
2yYEBBR+hKwfm9ZcxbLQpXYoiidH2aEQWHTrQoSQ9Y29tOYLgUxEODwKrj0Zk+A4
gx4nxUeiTYu3EcEmBt/8IF3wczfpsRwbVtxxSSnSRp7Vp3Euftw03IPd35TpxGTT
3NazZv1t3HgI19Z6OvIlnc0uM4Bngzr5rJsusnD447/12u8zgSsDtwbQTaoKBUUD
uK3lrVa6iTwE0bN0SMVzysxivlpF+IP1rwRYFfHH6IpV6aR/rumDfmypAzi7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU2lPyIc70QNffe+aZRXVrEjC+OfcwHwYDVR0j
BBgwFoAU4diKNBK/pNuNPH886b3KmY9CsVAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9LaUVrUDV6eTJkbnZ4cDNaZUdkRzFhUEFoQTZzNVpZeGp1SlloOHZDVkJ4
LzAvRTFEODhBMzQxMkJGQTREQjhEM0M3RjNDRTlCRENBOTk4RjQyQjE1MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FMUQ4OEEzNDEyQkZBNERCOEQz
QzdGM0NFOUJEQ0E5OThGNDJCMTUwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9L
aUVrUDV6eTJkbnZ4cDNaZUdkRzFhUEFoQTZzNVpZeGp1SlloOHZDVkJ4LzAvMzIz
ODMwMzQzYTMxMzA2NjYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjMzMzYz
NTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQQ/DANBgkqhkiG9w0BAQsFAAOCAQEAbHqO01sSGf5i
aNXDZFdriZNtJIN7i9qV871IcXKgDHMkMdhWcLEVWz+0uUXrgqmNR6OoaaDhV8ty
1mDa0tO1OgOcmcVv5Cjs2o+ttB8sRY1RqCr1AdLEmeKvb5dL7lPiOOJMokCWALby
GzrKEK5Ve5qmgno2KmzOMhyQm1z5r6PxNLaXvC5SP6ppIGlKQESwUdC8Xc3j0rT7
80BC/4x6Ne2uGtR/O+Q1V9gDSFFlyOMOOOlaA3bVNoG3w0dJLYJgwTjCq/yPiPQU
f+cWTvlhHaUNJ+bOWGgCBxMQyebDk2rLVNdDPdrEWIr7QLhtt/7L6Z/2sqhDS1I5
H8apUkc+eg==
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:55:05 2026 by rpki-client