Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/323830343a373032383a3a2f33322d3332203d3e20323730373039.roa
File:                     323830343a373032383a3a2f33322d3332203d3e20323730373039.roa (raw, json)
Hash identifier:          tOvQHNkIFYq4oKGM9cW/Zso/JX4qEl5/x8vjcXcgZR4=
Subject key identifier:   68:88:73:6A:BD:9C:0E:9F:E5:68:87:EE:1A:31:A2:E2:6F:34:4B:88
Certificate issuer:       /CN=CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC
Certificate serial:       48444FB1CF12DF14A6753A4031AFF219B5C2D80A
Authority key identifier: CD:7C:B2:18:56:F8:D7:11:EE:A9:E8:6C:F9:7C:CF:1B:5A:1E:C3:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/323830343a373032383a3a2f33322d3332203d3e20323730373039.roa
Signing time:             Sat 27 Jun 2026 02:33:51 +0000
ROA not before:           Sat 27 Jun 2026 02:28:51 +0000
ROA not after:            Sat 26 Jun 2027 02:33:51 +0000
asID:                     270709
IP address blocks:        2804:7028::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.crl
                          rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:44:4f:b1:cf:12:df:14:a6:75:3a:40:31:af:f2:19:b5:c2:d8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC
        Validity
            Not Before: Jun 27 02:28:51 2026 GMT
            Not After : Jun 26 02:33:51 2027 GMT
        Subject: CN=6888736ABD9C0E9FE56887EE1A31A2E26F344B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:10:37:3a:06:37:94:bc:55:8b:78:ea:15:ea:
                    87:b7:ec:32:f2:e9:97:9d:09:18:fc:23:ce:f0:6e:
                    47:f8:ac:d0:80:1d:b3:13:56:64:02:21:36:0d:89:
                    f7:02:06:41:38:1f:47:61:63:4c:53:84:8a:e4:f8:
                    a9:6a:e1:b5:90:e5:05:e9:b9:7f:e4:d9:7f:df:0a:
                    b7:fb:9a:39:5c:04:8d:33:7a:39:6d:e4:31:a5:78:
                    15:61:1e:13:0a:7c:98:68:54:ac:48:1d:45:06:56:
                    c3:a2:60:04:7f:fe:4f:9f:32:56:5c:92:48:16:40:
                    db:9b:5c:df:14:9b:83:40:c1:a4:87:c1:a0:14:85:
                    8c:21:60:54:9f:33:49:04:f8:f3:0e:62:49:b0:ad:
                    1e:7b:a8:e3:f1:54:bd:54:00:df:c9:8d:00:2c:7c:
                    1d:76:f0:d1:b1:d3:4d:2e:a5:6d:09:6c:7f:a5:df:
                    85:c2:a8:b7:01:0c:4b:8b:eb:0b:59:65:3f:49:01:
                    56:34:02:cc:a5:33:ee:1b:ce:56:1b:e9:11:0c:12:
                    75:47:76:24:f3:25:e2:69:ef:ef:3b:01:75:72:4e:
                    ee:7b:9a:b1:5d:00:6e:62:b8:c0:08:f9:5d:43:70:
                    b2:e1:99:e1:88:2d:c8:d3:da:e3:b2:c7:02:d0:92:
                    52:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:88:73:6A:BD:9C:0E:9F:E5:68:87:EE:1A:31:A2:E2:6F:34:4B:88
            X509v3 Authority Key Identifier:
                keyid:CD:7C:B2:18:56:F8:D7:11:EE:A9:E8:6C:F9:7C:CF:1B:5A:1E:C3:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/323830343a373032383a3a2f33322d3332203d3e20323730373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7028::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:69:3a:7f:8a:0a:37:2f:ee:a0:dc:c2:27:60:48:12:7b:2c:
         cc:7e:71:87:b4:86:22:81:a7:f1:37:98:ff:d5:6b:3e:66:2b:
         3b:66:ee:a8:ae:14:56:b4:19:d0:fb:30:84:6e:36:fa:4a:60:
         1b:b4:22:98:c5:f7:62:53:06:48:b8:cd:96:1d:09:ef:ce:cd:
         34:c0:01:91:c8:39:71:99:52:44:57:2c:83:97:ae:d1:2c:b1:
         84:93:d8:39:98:dd:6e:33:41:8d:30:fb:ee:2c:c8:c4:a0:ab:
         0e:61:13:1e:c3:df:35:5e:94:52:7d:b0:44:9a:6a:ed:0a:e8:
         3f:55:06:8c:7a:71:ac:8c:50:6d:70:3a:47:8e:cd:36:4d:f3:
         83:f9:b7:99:56:b3:12:80:e4:91:f6:dd:93:3c:e4:ed:a1:92:
         d4:11:ae:16:b9:76:2c:e8:7e:74:01:ce:96:13:bd:b6:b6:ce:
         3e:e4:b9:1e:ef:5d:9f:34:f8:39:bc:5c:e6:c4:f9:d6:02:94:
         0d:67:c7:cf:3e:fb:c4:b9:38:f2:a1:76:ce:7c:a7:62:5e:9f:
         3b:98:eb:9e:b3:b4:7c:a0:d0:c4:c4:b2:82:d3:41:41:d5:38:
         ae:a2:1f:81:56:51:33:9b:f7:7f:11:13:4f:c5:81:e0:92:3e:
         01:4d:1a:1f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUSERPsc8S3xSmdTpAMa/yGbXC2AowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q3Q0IyMTg1NkY4RDcxMUVFQTlFODZDRjk3Q0NGMUI1
QTFFQzNDQzAeFw0yNjA2MjcwMjI4NTFaFw0yNzA2MjYwMjMzNTFaMDMxMTAvBgNV
BAMTKDY4ODg3MzZBQkQ5QzBFOUZFNTY4ODdFRTFBMzFBMkUyNkYzNDRCODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjEDc6BjeUvFWLeOoV6oe37DLy
6ZedCRj8I87wbkf4rNCAHbMTVmQCITYNifcCBkE4H0dhY0xThIrk+Klq4bWQ5QXp
uX/k2X/fCrf7mjlcBI0zejlt5DGleBVhHhMKfJhoVKxIHUUGVsOiYAR//k+fMlZc
kkgWQNubXN8Um4NAwaSHwaAUhYwhYFSfM0kE+PMOYkmwrR57qOPxVL1UAN/JjQAs
fB128NGx000upW0JbH+l34XCqLcBDEuL6wtZZT9JAVY0AsylM+4bzlYb6REMEnVH
diTzJeJp7+87AXVyTu57mrFdAG5iuMAI+V1DcLLhmeGILcjT2uOyxwLQklJPAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUaIhzar2cDp/laIfuGjGi4m80S4gwHwYDVR0j
BBgwFoAUzXyyGFb41xHuqehs+XzPG1oew8wwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby90ZU5HQVZTaXBwUWN3RjVGbW1ZYWVGSDhIdE00bVl1ZHlWd2JGR2Y0cUZD
LzAvQ0Q3Q0IyMTg1NkY4RDcxMUVFQTlFODZDRjk3Q0NGMUI1QTFFQzNDQy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DRDdDQjIxODU2RjhENzExRUVB
OUU4NkNGOTdDQ0YxQjVBMUVDM0NDLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby90
ZU5HQVZTaXBwUWN3RjVGbW1ZYWVGSDhIdE00bVl1ZHlWd2JGR2Y0cUZDLzAvMzIz
ODMwMzQzYTM3MzAzMjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMwMzcz
MDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARwKDANBgkqhkiG9w0BAQsFAAOCAQEAOWk6f4oKNy/u
oNzCJ2BIEnsszH5xh7SGIoGn8TeY/9VrPmYrO2buqK4UVrQZ0PswhG42+kpgG7Qi
mMX3YlMGSLjNlh0J787NNMABkcg5cZlSRFcsg5eu0SyxhJPYOZjdbjNBjTD77izI
xKCrDmETHsPfNV6UUn2wRJpq7QroP1UGjHpxrIxQbXA6R47NNk3zg/m3mVazEoDk
kfbdkzzk7aGS1BGuFrl2LOh+dAHOlhO9trbOPuS5Hu9dnzT4Obxc5sT51gKUDWfH
zz77xLk48qF2znynYl6fO5jrnrO0fKDQxMSygtNBQdU4rqIfgVZRM5v3fxETT8WB
4JI+AU0aHw==
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:59:00 2026 by rpki-client