Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/323830343a366563383a3a2f33322d313238203d3e20323730363138.roa
File:                     323830343a366563383a3a2f33322d313238203d3e20323730363138.roa (raw, json)
Hash identifier:          bRMiegMgDdTd5uiqsOYWarSY5BWWFCPv8kuek1tLRNA=
Subject key identifier:   9D:7E:D1:49:97:40:A8:9F:63:C7:5D:C9:3B:CD:5E:68:AB:89:55:43
Certificate issuer:       /CN=1A384BFA8860D53ABCEDBC8A91B37A972B89181B
Certificate serial:       73A893170079860D218ECEF7D57C1E899F01138D
Authority key identifier: 1A:38:4B:FA:88:60:D5:3A:BC:ED:BC:8A:91:B3:7A:97:2B:89:18:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/323830343a366563383a3a2f33322d313238203d3e20323730363138.roa
Signing time:             Sun 02 Aug 2026 17:27:20 +0000
ROA not before:           Sun 02 Aug 2026 17:22:20 +0000
ROA not after:            Sun 01 Aug 2027 17:27:20 +0000
asID:                     270618
IP address blocks:        2804:6ec8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl
                          rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 03:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a8:93:17:00:79:86:0d:21:8e:ce:f7:d5:7c:1e:89:9f:01:13:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A384BFA8860D53ABCEDBC8A91B37A972B89181B
        Validity
            Not Before: Aug  2 17:22:20 2026 GMT
            Not After : Aug  1 17:27:20 2027 GMT
        Subject: CN=9D7ED1499740A89F63C75DC93BCD5E68AB895543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7f:ac:ef:ff:24:81:66:1b:c2:9b:48:9b:cb:
                    0e:15:69:c4:94:84:9e:b1:16:d0:e7:7a:dd:34:9a:
                    22:8c:66:97:65:c7:ed:b0:c9:55:8e:a3:9a:8f:83:
                    52:6b:24:9b:ee:c0:9b:21:a9:87:dc:37:eb:8e:4c:
                    4a:4e:9d:b3:28:40:f4:8a:35:74:e0:fa:93:2f:34:
                    87:59:cf:f4:ed:3a:ff:59:00:1e:a2:37:6c:78:8b:
                    a6:05:04:a5:b6:68:13:bb:63:ba:65:1f:a3:88:38:
                    cb:67:84:e5:82:46:f2:8c:e4:4c:64:36:ac:ec:55:
                    95:e6:2b:c6:0d:39:9d:f2:27:3c:8e:f6:64:8d:a2:
                    69:51:a0:78:13:1b:49:0b:05:bf:c8:62:d5:b9:6f:
                    13:25:81:ca:aa:81:bc:7a:2d:27:20:79:43:78:a1:
                    5b:29:a4:a4:fa:36:aa:cf:ee:39:41:55:41:cb:18:
                    d7:d1:9c:6e:fe:3d:9e:7c:a2:82:c8:ea:3f:2d:64:
                    ce:12:10:2b:eb:04:fd:33:7e:65:c1:4e:00:45:cd:
                    ed:60:b5:57:fc:1f:f6:7c:d8:fc:c3:b8:50:a9:ec:
                    ee:8d:23:24:ac:bd:4d:2b:e2:21:14:55:56:04:3e:
                    6d:67:fd:16:80:4d:c1:bf:c3:eb:64:6f:73:ed:13:
                    1d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7E:D1:49:97:40:A8:9F:63:C7:5D:C9:3B:CD:5E:68:AB:89:55:43
            X509v3 Authority Key Identifier:
                keyid:1A:38:4B:FA:88:60:D5:3A:BC:ED:BC:8A:91:B3:7A:97:2B:89:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/323830343a366563383a3a2f33322d313238203d3e20323730363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ec8::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:a2:35:82:d4:5c:02:82:23:fe:87:52:6e:21:73:b1:19:59:
         b6:1b:8e:c8:6f:0c:7f:33:5c:9f:f9:00:c4:70:c0:c1:3c:02:
         f7:91:6a:ab:05:f3:8f:c6:cb:7a:03:4a:89:a9:ad:33:72:53:
         62:7d:65:59:c7:52:13:fe:3c:6c:16:6a:c0:a6:c6:59:3f:bb:
         88:ed:6c:14:81:4a:99:22:ca:e1:1b:ef:56:26:3d:37:98:32:
         4e:a7:04:f2:80:92:98:80:72:9f:b8:f0:82:f0:bd:9f:ff:55:
         52:be:7e:28:ac:f3:b5:ca:62:c6:17:30:cf:c1:fa:78:a8:82:
         e6:fd:49:51:c3:1b:37:fb:6b:ef:0c:b2:b2:4d:06:4a:b0:27:
         60:32:c8:bf:b9:d2:37:6e:f4:cb:00:16:83:3a:ce:57:ca:9b:
         99:da:8a:9a:88:7c:33:17:6b:a8:fa:85:22:49:82:b5:b5:ce:
         b2:36:74:75:36:ac:53:c2:fa:45:4e:22:c9:61:19:38:10:31:
         52:70:b7:47:cf:2c:b9:70:05:c1:1d:70:bf:cb:f3:f5:c4:f4:
         fb:72:58:25:68:e0:d7:db:3f:82:ff:64:7d:51:54:97:c6:bc:
         5c:03:4e:75:ea:13:42:c6:f1:e5:4a:77:34:52:d0:04:f9:ae:
         11:03:58:da
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUc6iTFwB5hg0hjs731XweiZ8BE40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUEzODRCRkE4ODYwRDUzQUJDRURCQzhBOTFCMzdBOTcy
Qjg5MTgxQjAeFw0yNjA4MDIxNzIyMjBaFw0yNzA4MDExNzI3MjBaMDMxMTAvBgNV
BAMTKDlEN0VEMTQ5OTc0MEE4OUY2M0M3NURDOTNCQ0Q1RTY4QUI4OTU1NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNf6zv/ySBZhvCm0ibyw4VacSU
hJ6xFtDnet00miKMZpdlx+2wyVWOo5qPg1JrJJvuwJshqYfcN+uOTEpOnbMoQPSK
NXTg+pMvNIdZz/TtOv9ZAB6iN2x4i6YFBKW2aBO7Y7plH6OIOMtnhOWCRvKM5Exk
NqzsVZXmK8YNOZ3yJzyO9mSNomlRoHgTG0kLBb/IYtW5bxMlgcqqgbx6LScgeUN4
oVsppKT6NqrP7jlBVUHLGNfRnG7+PZ58ooLI6j8tZM4SECvrBP0zfmXBTgBFze1g
tVf8H/Z82PzDuFCp7O6NIySsvU0r4iEUVVYEPm1n/RaATcG/w+tkb3PtEx3dAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnX7RSZdAqJ9jx13JO81eaKuJVUMwHwYDVR0j
BBgwFoAUGjhL+ohg1Tq87byKkbN6lyuJGBswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9taEdFSEVvRlRGZTNOY2NVRkY0M3pBaTFBcEhqN2VXQ3Y1cmJheVkzQlNa
LzEvMUEzODRCRkE4ODYwRDUzQUJDRURCQzhBOTFCMzdBOTcyQjg5MTgxQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQTM4NEJGQTg4NjBENTNBQkNF
REJDOEE5MUIzN0E5NzJCODkxODFCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9t
aEdFSEVvRlRGZTNOY2NVRkY0M3pBaTFBcEhqN2VXQ3Y1cmJheVkzQlNaLzEvMzIz
ODMwMzQzYTM2NjU2MzM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3MzAz
NjMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBG7IMA0GCSqGSIb3DQEBCwUAA4IBAQBBojWC1FwC
giP+h1JuIXOxGVm2G47Ibwx/M1yf+QDEcMDBPAL3kWqrBfOPxst6A0qJqa0zclNi
fWVZx1IT/jxsFmrApsZZP7uI7WwUgUqZIsrhG+9WJj03mDJOpwTygJKYgHKfuPCC
8L2f/1VSvn4orPO1ymLGFzDPwfp4qILm/UlRwxs3+2vvDLKyTQZKsCdgMsi/udI3
bvTLABaDOs5XypuZ2oqaiHwzF2uo+oUiSYK1tc6yNnR1NqxTwvpFTiLJYRk4EDFS
cLdHzyy5cAXBHXC/y/P1xPT7clglaODX2z+C/2R9UVSXxrxcA0516hNCxvHlSnc0
UtAE+a4RA1ja
-----END CERTIFICATE-----
Generated at Sun Aug 23 13:14:57 2026 by rpki-client