Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a383030303a3a2f33352d3335203d3e20323638333937.roa
File:                     323830343a353039343a383030303a3a2f33352d3335203d3e20323638333937.roa (raw, json)
Hash identifier:          KbiSXpojTxSRbzdxdlYdYbeXopdHSqKN3yqcXBEVFg8=
Subject key identifier:   7B:90:02:E2:6C:09:ED:A5:59:1A:3A:F2:00:19:EB:2F:7C:69:8D:0C
Certificate issuer:       /CN=4C7E39342B53D3972022BF5B394E16FA64CCF0C1
Certificate serial:       64EECD1D1D8D168B9FD60DB68A80BBE341A20C12
Authority key identifier: 4C:7E:39:34:2B:53:D3:97:20:22:BF:5B:39:4E:16:FA:64:CC:F0:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a383030303a3a2f33352d3335203d3e20323638333937.roa
Signing time:             Wed 24 Jun 2026 01:42:26 +0000
ROA not before:           Wed 24 Jun 2026 01:37:26 +0000
ROA not after:            Wed 23 Jun 2027 01:42:26 +0000
asID:                     268397
IP address blocks:        2804:5094:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.crl
                          rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 04:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ee:cd:1d:1d:8d:16:8b:9f:d6:0d:b6:8a:80:bb:e3:41:a2:0c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C7E39342B53D3972022BF5B394E16FA64CCF0C1
        Validity
            Not Before: Jun 24 01:37:26 2026 GMT
            Not After : Jun 23 01:42:26 2027 GMT
        Subject: CN=7B9002E26C09EDA5591A3AF20019EB2F7C698D0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5f:14:e9:6c:d3:e7:93:8f:3a:48:75:7a:15:
                    61:56:23:6f:2d:0b:d0:a3:2a:3a:cb:25:1e:cc:5d:
                    93:70:0f:86:29:0c:67:55:78:31:39:e2:78:3c:d4:
                    e9:72:3b:43:be:90:e2:20:c0:39:a9:fe:15:96:bf:
                    5a:fc:1f:85:c8:e0:83:5c:cb:a7:2e:e4:1c:5c:0b:
                    70:f3:3c:aa:ca:d4:4e:c8:68:b8:a3:cb:6e:d0:6e:
                    2a:f6:50:37:53:fb:d6:56:83:89:b1:fe:c6:f1:6c:
                    ee:b9:37:c7:54:37:50:09:25:b3:79:53:b9:bb:4c:
                    c9:04:6d:ef:98:2d:82:9b:38:a8:8e:ba:5b:ba:3f:
                    fd:c5:fb:e6:80:0a:76:dd:12:7d:cd:b8:55:df:24:
                    69:a9:57:10:0f:3b:b9:08:79:8d:83:0f:28:71:ce:
                    a0:18:6a:2f:a0:34:62:5d:ae:e9:c6:e1:fd:c3:54:
                    67:b5:24:c4:02:18:d7:22:93:40:38:15:c0:0f:0f:
                    ea:f5:a4:58:b7:4a:50:0d:e4:09:87:15:d0:86:12:
                    6f:ac:c1:de:b1:f5:c3:f7:ce:39:6c:5d:26:8a:30:
                    63:67:e9:84:6d:d4:b0:03:3c:a1:0f:72:67:23:d5:
                    f8:9b:3c:ce:a2:64:a8:95:c5:7b:5b:e7:4b:cc:3f:
                    19:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:90:02:E2:6C:09:ED:A5:59:1A:3A:F2:00:19:EB:2F:7C:69:8D:0C
            X509v3 Authority Key Identifier:
                keyid:4C:7E:39:34:2B:53:D3:97:20:22:BF:5B:39:4E:16:FA:64:CC:F0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C7E39342B53D3972022BF5B394E16FA64CCF0C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a383030303a3a2f33352d3335203d3e20323638333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5094:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         1a:b0:9f:e6:93:a5:a8:67:91:44:c2:db:e8:c3:21:be:f8:77:
         9f:04:29:ec:1f:ca:c0:5b:fb:3e:33:ea:d4:97:e0:02:fa:ba:
         48:9f:59:85:28:64:c5:99:8d:de:2a:7a:95:c8:e2:80:10:ed:
         c5:86:db:1a:bb:8e:12:46:39:90:f8:cc:e2:91:0c:fb:60:1a:
         2b:a4:78:f5:c5:6b:38:6e:de:26:ed:c7:e2:8d:07:12:49:9f:
         30:22:e6:4d:be:4a:29:e8:41:2e:30:d8:14:63:79:71:7b:e6:
         9a:98:38:df:4e:bd:30:32:8a:b2:72:41:5f:39:95:e6:8c:c7:
         26:1c:4c:7b:cc:5c:24:0f:d5:95:8d:03:20:f2:63:a9:4f:75:
         c1:78:72:f7:7b:62:aa:b3:9e:36:55:8c:1d:26:56:61:90:6b:
         53:ad:89:f5:01:57:87:c0:5f:1b:c3:dc:b0:ae:86:24:47:09:
         a8:f9:8a:40:09:5d:b4:a9:de:00:36:8d:8d:43:08:ff:87:29:
         e4:a3:62:0f:db:ee:c2:46:5a:a9:f7:ce:3d:6a:f9:c6:4f:42:
         54:f5:f1:29:b6:8f:19:6b:38:ec:83:84:6e:fc:76:e1:27:15:
         31:a3:27:75:f4:64:d9:7b:52:86:91:26:a0:1c:4c:50:37:6b:
         1e:32:f2:96
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUZO7NHR2NFouf1g22ioC740GiDBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM3RTM5MzQyQjUzRDM5NzIwMjJCRjVCMzk0RTE2RkE2
NENDRjBDMTAeFw0yNjA2MjQwMTM3MjZaFw0yNzA2MjMwMTQyMjZaMDMxMTAvBgNV
BAMTKDdCOTAwMkUyNkMwOUVEQTU1OTFBM0FGMjAwMTlFQjJGN0M2OThEMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpXxTpbNPnk486SHV6FWFWI28t
C9CjKjrLJR7MXZNwD4YpDGdVeDE54ng81OlyO0O+kOIgwDmp/hWWv1r8H4XI4INc
y6cu5BxcC3DzPKrK1E7IaLijy27Qbir2UDdT+9ZWg4mx/sbxbO65N8dUN1AJJbN5
U7m7TMkEbe+YLYKbOKiOulu6P/3F++aACnbdEn3NuFXfJGmpVxAPO7kIeY2DDyhx
zqAYai+gNGJdrunG4f3DVGe1JMQCGNcik0A4FcAPD+r1pFi3SlAN5AmHFdCGEm+s
wd6x9cP3zjlsXSaKMGNn6YRt1LADPKEPcmcj1fibPM6iZKiVxXtb50vMPxnzAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUe5AC4mwJ7aVZGjryABnrL3xpjQwwHwYDVR0j
BBgwFoAUTH45NCtT05cgIr9bOU4W+mTM8MEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9OSmROZXpONkNHNEZTcFhhY29QWEpUNGU4MmlLWFJEYzdSam1kQVZMRDRp
LzAvNEM3RTM5MzQyQjUzRDM5NzIwMjJCRjVCMzk0RTE2RkE2NENDRjBDMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QzdFMzkzNDJCNTNEMzk3MjAy
MkJGNUIzOTRFMTZGQTY0Q0NGMEMxLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9O
SmROZXpONkNHNEZTcFhhY29QWEpUNGU4MmlLWFJEYzdSam1kQVZMRDRpLzAvMzIz
ODMwMzQzYTM1MzAzOTM0M2EzODMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNkM2Uy
MDMyMzYzODMzMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEUJSAMA0GCSqGSIb3DQEBCwUAA4IB
AQAasJ/mk6WoZ5FEwtvowyG++HefBCnsH8rAW/s+M+rUl+AC+rpIn1mFKGTFmY3e
KnqVyOKAEO3Fhtsau44SRjmQ+MzikQz7YBorpHj1xWs4bt4m7cfijQcSSZ8wIuZN
vkop6EEuMNgUY3lxe+aamDjfTr0wMoqyckFfOZXmjMcmHEx7zFwkD9WVjQMg8mOp
T3XBeHL3e2Kqs542VYwdJlZhkGtTrYn1AVeHwF8bw9ywroYkRwmo+YpACV20qd4A
No2NQwj/hynko2IP2+7CRlqp9849avnGT0JU9fEpto8Zazjsg4Ru/HbhJxUxoyd1
9GTZe1KGkSagHExQN2seMvKW
-----END CERTIFICATE-----
Generated at Sat Jun 27 14:05:54 2026 by rpki-client