Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/NGB8dqEiihRqhGAB4uYuv9qjMoPwiESgu7eRCaJvWaa/0/323830343a313665343a3a2f33322d3332203d3e20323633313036.roa
File:                     323830343a313665343a3a2f33322d3332203d3e20323633313036.roa (raw, json)
Hash identifier:          VbuNA0kYm1xxNZtVEcZ5MamCvTQdNlpJ4aDxiSMgWPU=
Subject key identifier:   B8:4C:13:F6:7D:1B:15:78:6D:11:0D:D0:BA:36:9C:DA:7C:7F:CA:BE
Certificate issuer:       /CN=D2DEA9F054B1E0DF28F4359CF1C3949F8555DA6F
Certificate serial:       43A3EC68385349BDF442D5BB86EDD2A5413EEECA
Authority key identifier: D2:DE:A9:F0:54:B1:E0:DF:28:F4:35:9C:F1:C3:94:9F:85:55:DA:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2DEA9F054B1E0DF28F4359CF1C3949F8555DA6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NGB8dqEiihRqhGAB4uYuv9qjMoPwiESgu7eRCaJvWaa/0/323830343a313665343a3a2f33322d3332203d3e20323633313036.roa
Signing time:             Thu 13 Aug 2026 12:18:07 +0000
ROA not before:           Thu 13 Aug 2026 12:13:07 +0000
ROA not after:            Thu 12 Aug 2027 12:18:07 +0000
asID:                     263106
IP address blocks:        2804:16e4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NGB8dqEiihRqhGAB4uYuv9qjMoPwiESgu7eRCaJvWaa/0/D2DEA9F054B1E0DF28F4359CF1C3949F8555DA6F.crl
                          rsync://rpki-repo.registro.br/repo/NGB8dqEiihRqhGAB4uYuv9qjMoPwiESgu7eRCaJvWaa/0/D2DEA9F054B1E0DF28F4359CF1C3949F8555DA6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2DEA9F054B1E0DF28F4359CF1C3949F8555DA6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 00:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a3:ec:68:38:53:49:bd:f4:42:d5:bb:86:ed:d2:a5:41:3e:ee:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2DEA9F054B1E0DF28F4359CF1C3949F8555DA6F
        Validity
            Not Before: Aug 13 12:13:07 2026 GMT
            Not After : Aug 12 12:18:07 2027 GMT
        Subject: CN=B84C13F67D1B15786D110DD0BA369CDA7C7FCABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:bb:fd:85:89:e4:29:69:dc:5f:18:e1:e5:
                    3c:35:ec:63:f6:b7:a0:32:cf:7e:6c:64:64:64:9e:
                    57:6e:5c:b1:4b:dd:5b:57:d8:26:bd:4c:b2:0a:89:
                    a2:66:37:9b:d6:c7:87:23:a9:c2:a1:e9:e3:0c:15:
                    fb:19:29:87:93:03:38:ed:81:be:6a:bc:49:05:b4:
                    cc:2d:46:c5:a1:e3:86:31:f0:11:dd:56:48:43:64:
                    4d:b0:b6:8f:a4:96:bf:86:59:f2:97:7c:1c:4f:78:
                    b0:7f:26:59:04:c8:0f:25:24:df:0a:4b:e2:04:81:
                    63:3d:03:0e:5a:b5:61:38:32:74:6c:0c:8a:c0:d9:
                    70:d4:f9:f1:48:7b:bc:21:f9:a2:ab:61:db:d3:da:
                    c6:c8:ef:c6:7b:e2:ee:96:c9:46:c0:df:a1:78:cb:
                    72:98:27:23:80:a1:4d:17:a7:86:ce:5b:a5:35:f6:
                    26:28:a9:ee:7f:bf:52:87:16:12:ab:0b:83:bf:00:
                    a7:dd:d0:36:28:20:db:f3:7d:a9:d3:fa:9b:6d:77:
                    be:4d:aa:d5:a9:b8:6a:e8:fc:f1:6e:93:4a:61:3d:
                    df:2e:86:a8:39:4c:10:d2:61:fc:4a:6d:ae:19:d1:
                    ec:53:d4:ff:08:89:18:9d:30:b7:17:7c:0f:0b:14:
                    37:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4C:13:F6:7D:1B:15:78:6D:11:0D:D0:BA:36:9C:DA:7C:7F:CA:BE
            X509v3 Authority Key Identifier:
                keyid:D2:DE:A9:F0:54:B1:E0:DF:28:F4:35:9C:F1:C3:94:9F:85:55:DA:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NGB8dqEiihRqhGAB4uYuv9qjMoPwiESgu7eRCaJvWaa/0/D2DEA9F054B1E0DF28F4359CF1C3949F8555DA6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2DEA9F054B1E0DF28F4359CF1C3949F8555DA6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NGB8dqEiihRqhGAB4uYuv9qjMoPwiESgu7eRCaJvWaa/0/323830343a313665343a3a2f33322d3332203d3e20323633313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:70:70:bd:9d:c1:28:7b:41:b4:3a:36:16:63:a8:aa:28:16:
         3a:44:4b:33:23:51:ae:a1:20:b6:0e:32:70:92:fd:3e:21:8b:
         d8:5b:3a:d9:99:47:ff:70:23:56:38:24:0a:0c:61:d1:43:5d:
         aa:cf:65:dc:b3:d8:1a:84:f2:d8:ce:26:6c:e8:78:ea:ed:11:
         2c:c7:74:bb:1c:ba:06:05:36:14:ac:fa:86:46:bf:0a:21:af:
         9b:f4:7a:e2:a8:75:c3:d5:72:82:38:a5:84:82:5e:be:af:a0:
         7d:05:a0:32:a2:0a:95:23:f9:ff:4f:22:2a:37:c3:e4:77:ba:
         1a:9c:3f:eb:41:a6:83:be:d7:9a:22:8f:ef:40:f3:be:65:39:
         2d:89:e0:cb:c6:e3:0c:62:5d:bd:eb:e5:46:fd:22:fa:60:23:
         22:7b:1e:cf:ac:3c:b3:7a:e5:7c:e7:5d:26:93:63:04:3c:70:
         b3:68:41:07:91:f3:0c:b3:7a:b0:30:8d:0f:9d:00:a5:13:ad:
         50:1c:00:d4:85:07:c8:e0:09:a3:c9:84:bc:c9:30:32:64:5d:
         f3:64:fb:c0:34:d1:25:cc:39:2d:7e:2c:42:98:85:87:4b:3f:
         10:c6:3e:5a:cb:97:4e:6a:b1:bf:aa:ce:b2:a6:41:08:c9:a2:
         e4:93:cc:de
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUQ6PsaDhTSb30QtW7hu3SpUE+7sowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJERUE5RjA1NEIxRTBERjI4RjQzNTlDRjFDMzk0OUY4
NTU1REE2RjAeFw0yNjA4MTMxMjEzMDdaFw0yNzA4MTIxMjE4MDdaMDMxMTAvBgNV
BAMTKEI4NEMxM0Y2N0QxQjE1Nzg2RDExMEREMEJBMzY5Q0RBN0M3RkNBQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFsbv9hYnkKWncXxjh5Tw17GP2
t6Ayz35sZGRknlduXLFL3VtX2Ca9TLIKiaJmN5vWx4cjqcKh6eMMFfsZKYeTAzjt
gb5qvEkFtMwtRsWh44Yx8BHdVkhDZE2wto+klr+GWfKXfBxPeLB/JlkEyA8lJN8K
S+IEgWM9Aw5atWE4MnRsDIrA2XDU+fFIe7wh+aKrYdvT2sbI78Z74u6WyUbA36F4
y3KYJyOAoU0Xp4bOW6U19iYoqe5/v1KHFhKrC4O/AKfd0DYoINvzfanT+pttd75N
qtWpuGro/PFuk0phPd8uhqg5TBDSYfxKba4Z0exT1P8IiRidMLcXfA8LFDf1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUuEwT9n0bFXhtEQ3Qujac2nx/yr4wHwYDVR0j
BBgwFoAU0t6p8FSx4N8o9DWc8cOUn4VV2m8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9OR0I4ZHFFaWloUnFoR0FCNHVZdXY5cWpNb1B3aUVTZ3U3ZVJDYUp2V2Fh
LzAvRDJERUE5RjA1NEIxRTBERjI4RjQzNTlDRjFDMzk0OUY4NTU1REE2Ri5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EMkRFQTlGMDU0QjFFMERGMjhG
NDM1OUNGMUMzOTQ5Rjg1NTVEQTZGLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9O
R0I4ZHFFaWloUnFoR0FCNHVZdXY5cWpNb1B3aUVTZ3U3ZVJDYUp2V2FhLzAvMzIz
ODMwMzQzYTMxMzY2NTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMzMzEz
MDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQW5DANBgkqhkiG9w0BAQsFAAOCAQEAdHBwvZ3BKHtB
tDo2FmOoqigWOkRLMyNRrqEgtg4ycJL9PiGL2Fs62ZlH/3AjVjgkCgxh0UNdqs9l
3LPYGoTy2M4mbOh46u0RLMd0uxy6BgU2FKz6hka/CiGvm/R64qh1w9VygjilhIJe
vq+gfQWgMqIKlSP5/08iKjfD5He6Gpw/60Gmg77XmiKP70DzvmU5LYngy8bjDGJd
vevlRv0i+mAjInsez6w8s3rlfOddJpNjBDxws2hBB5HzDLN6sDCND50ApROtUBwA
1IUHyOAJo8mEvMkwMmRd82T7wDTRJcw5LX4sQpiFh0s/EMY+WsuXTmqxv6rOsqZB
CMmi5JPM3g==
-----END CERTIFICATE-----
Generated at Mon Aug 24 04:34:45 2026 by rpki-client