Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/323830343a353966633a3a2f33322d313238203d3e20323638373338.roa
File:                     323830343a353966633a3a2f33322d313238203d3e20323638373338.roa (raw, json)
Hash identifier:          39rGVmVwcOEndC9tSMjY5ymYX7hkp5rIgyeMZ1ekWnU=
Subject key identifier:   48:5C:31:49:34:21:A1:16:D5:41:F5:36:58:E0:10:EC:78:39:48:CE
Certificate issuer:       /CN=7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59
Certificate serial:       4311E27B7B364CB57B2F48CBA90FDE32C5B3DAF9
Authority key identifier: 7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/323830343a353966633a3a2f33322d313238203d3e20323638373338.roa
Signing time:             Tue 28 Jul 2026 17:16:17 +0000
ROA not before:           Tue 28 Jul 2026 17:11:17 +0000
ROA not after:            Tue 27 Jul 2027 17:16:17 +0000
asID:                     268738
IP address blocks:        2804:59fc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.crl
                          rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 10:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:11:e2:7b:7b:36:4c:b5:7b:2f:48:cb:a9:0f:de:32:c5:b3:da:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59
        Validity
            Not Before: Jul 28 17:11:17 2026 GMT
            Not After : Jul 27 17:16:17 2027 GMT
        Subject: CN=485C31493421A116D541F53658E010EC783948CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:df:9b:e1:30:6c:63:67:70:71:54:01:7a:
                    1a:85:40:3d:b0:3e:71:b2:5e:c0:fb:8b:d7:1f:91:
                    c5:d0:53:68:b3:ec:2d:a5:7d:cf:c0:5b:2c:dc:e7:
                    e0:85:41:44:91:04:09:a3:14:88:7f:84:06:32:91:
                    59:17:33:19:6b:08:ec:73:0b:f8:d8:b4:f9:be:04:
                    40:ca:a3:90:71:e4:60:27:d2:df:5f:b8:2b:5c:03:
                    f1:9c:d6:2f:26:73:3c:c8:5e:3d:ac:77:80:60:92:
                    89:c4:2c:04:0e:3e:e8:9f:e3:e5:6b:09:39:c2:a7:
                    6a:a5:6c:0b:2c:19:78:b4:06:43:19:f1:af:2b:7d:
                    41:07:13:6c:6b:0b:2d:19:41:71:75:71:1e:73:3f:
                    8c:62:ec:50:e2:37:3e:ba:a6:cc:4d:52:6a:95:5b:
                    c1:ea:e8:a2:32:3f:c1:5d:58:1c:78:8a:5d:0f:19:
                    e6:be:63:b5:9a:1a:f4:19:0e:fe:f2:1a:cd:bf:f5:
                    9f:d3:96:dc:9e:da:da:18:98:b8:b1:81:ad:11:da:
                    a1:74:23:37:d5:a7:d2:be:c1:53:d7:a8:31:9c:eb:
                    7c:d0:85:ab:af:1a:b8:46:9e:89:85:a3:66:5a:44:
                    26:28:be:3a:70:15:0a:b9:71:dd:4f:c3:a0:56:d5:
                    77:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5C:31:49:34:21:A1:16:D5:41:F5:36:58:E0:10:EC:78:39:48:CE
            X509v3 Authority Key Identifier:
                keyid:7B:E7:B1:02:06:B5:B5:6C:0F:50:0A:1A:71:E8:2A:5C:D9:1B:CF:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BE7B10206B5B56C0F500A1A71E82A5CD91BCF59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qYcq4crzf1dArynbAwR7bTGFu7wj63qCrmrG6cuZUBd/0/323830343a353966633a3a2f33322d313238203d3e20323638373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:90:fc:53:2d:60:aa:0e:1e:eb:f6:2b:88:e5:54:c5:08:26:
         33:ba:7b:79:a0:7d:43:48:b6:25:d2:a1:3e:51:b2:52:8e:79:
         b8:85:1f:69:00:4d:3d:43:29:34:1a:47:cc:09:f1:f5:db:d2:
         9c:46:96:f2:24:89:53:70:74:09:a3:3d:15:f6:45:2c:86:76:
         5d:56:45:84:84:0e:dc:1f:92:54:86:69:0a:27:ef:f3:e8:4a:
         1d:83:a7:e6:e5:a8:ac:f5:ce:69:38:c4:44:ea:60:19:70:1c:
         c9:d2:f3:3b:5f:17:3c:16:85:69:73:fe:92:a3:a3:c6:cd:5d:
         5b:ba:f7:c2:99:59:6a:7f:a2:3d:76:49:d5:22:32:d7:8f:ad:
         aa:43:6b:c1:e2:1d:eb:d8:5e:c1:f7:f4:d7:4e:ea:e9:30:fa:
         06:bb:46:6c:9e:98:b7:ce:41:5a:67:5e:f8:45:d9:e8:e5:cd:
         87:63:40:47:c1:a8:5e:24:1b:4d:27:1d:f1:ad:27:d9:86:aa:
         19:2c:1a:fb:26:fb:59:41:72:a7:fa:66:a9:40:90:63:28:4a:
         89:12:d4:6f:c2:ed:74:2b:3d:a2:83:0a:65:43:3a:86:1d:27:
         d6:cd:5e:8a:54:a0:ed:e4:17:4d:c7:ec:48:c3:fd:e2:49:73:
         1c:90:9f:b8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQxHie3s2TLV7L0jLqQ/eMsWz2vkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JFN0IxMDIwNkI1QjU2QzBGNTAwQTFBNzFFODJBNUNE
OTFCQ0Y1OTAeFw0yNjA3MjgxNzExMTdaFw0yNzA3MjcxNzE2MTdaMDMxMTAvBgNV
BAMTKDQ4NUMzMTQ5MzQyMUExMTZENTQxRjUzNjU4RTAxMEVDNzgzOTQ4Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/mN+b4TBsY2dwcVQBehqFQD2w
PnGyXsD7i9cfkcXQU2iz7C2lfc/AWyzc5+CFQUSRBAmjFIh/hAYykVkXMxlrCOxz
C/jYtPm+BEDKo5Bx5GAn0t9fuCtcA/Gc1i8mczzIXj2sd4BgkonELAQOPuif4+Vr
CTnCp2qlbAssGXi0BkMZ8a8rfUEHE2xrCy0ZQXF1cR5zP4xi7FDiNz66psxNUmqV
W8Hq6KIyP8FdWBx4il0PGea+Y7WaGvQZDv7yGs2/9Z/Tltye2toYmLixga0R2qF0
IzfVp9K+wVPXqDGc63zQhauvGrhGnomFo2ZaRCYovjpwFQq5cd1Pw6BW1XebAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSFwxSTQhoRbVQfU2WOAQ7Hg5SM4wHwYDVR0j
BBgwFoAUe+exAga1tWwPUAoacegqXNkbz1kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9xWWNxNGNyemYxZEFyeW5iQXdSN2JUR0Z1N3dqNjNxQ3Jtckc2Y3VaVUJk
LzAvN0JFN0IxMDIwNkI1QjU2QzBGNTAwQTFBNzFFODJBNUNEOTFCQ0Y1OS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83QkU3QjEwMjA2QjVCNTZDMEY1
MDBBMUE3MUU4MkE1Q0Q5MUJDRjU5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9x
WWNxNGNyemYxZEFyeW5iQXdSN2JUR0Z1N3dqNjNxQ3Jtckc2Y3VaVUJkLzAvMzIz
ODMwMzQzYTM1Mzk2NjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2Mzgz
NzMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBFn8MA0GCSqGSIb3DQEBCwUAA4IBAQBZkPxTLWCq
Dh7r9iuI5VTFCCYzunt5oH1DSLYl0qE+UbJSjnm4hR9pAE09Qyk0GkfMCfH129Kc
RpbyJIlTcHQJoz0V9kUshnZdVkWEhA7cH5JUhmkKJ+/z6Eodg6fm5ais9c5pOMRE
6mAZcBzJ0vM7Xxc8FoVpc/6So6PGzV1buvfCmVlqf6I9dknVIjLXj62qQ2vB4h3r
2F7B9/TXTurpMPoGu0Zsnpi3zkFaZ174Rdno5c2HY0BHwaheJBtNJx3xrSfZhqoZ
LBr7JvtZQXKn+mapQJBjKEqJEtRvwu10Kz2igwplQzqGHSfWzV6KVKDt5BdNx+xI
w/3iSXMckJ+4
-----END CERTIFICATE-----
Generated at Sun Aug 23 22:18:48 2026 by rpki-client