Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/323830343a373937633a3a2f33322d313238203d3e20323731333038.roa
File:                     323830343a373937633a3a2f33322d313238203d3e20323731333038.roa (raw, json)
Hash identifier:          ScRqR/jILQvWrm+GTsJ8Ua1Oo8TEVIfVnUof339J2f8=
Subject key identifier:   3E:B7:75:47:4A:2E:8B:0F:A7:5A:F1:2D:FF:7D:37:72:DF:1D:FC:A8
Certificate issuer:       /CN=A04AB1F995BE32686B8A65726A687827788C00FF
Certificate serial:       30AF078008B5C7239D151A2360EAF657D356D0CB
Authority key identifier: A0:4A:B1:F9:95:BE:32:68:6B:8A:65:72:6A:68:78:27:78:8C:00:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A04AB1F995BE32686B8A65726A687827788C00FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/323830343a373937633a3a2f33322d313238203d3e20323731333038.roa
Signing time:             Mon 03 Aug 2026 16:40:26 +0000
ROA not before:           Mon 03 Aug 2026 16:35:26 +0000
ROA not after:            Mon 02 Aug 2027 16:40:26 +0000
asID:                     271308
IP address blocks:        2804:797c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/A04AB1F995BE32686B8A65726A687827788C00FF.crl
                          rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/A04AB1F995BE32686B8A65726A687827788C00FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A04AB1F995BE32686B8A65726A687827788C00FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 10:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:af:07:80:08:b5:c7:23:9d:15:1a:23:60:ea:f6:57:d3:56:d0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A04AB1F995BE32686B8A65726A687827788C00FF
        Validity
            Not Before: Aug  3 16:35:26 2026 GMT
            Not After : Aug  2 16:40:26 2027 GMT
        Subject: CN=3EB775474A2E8B0FA75AF12DFF7D3772DF1DFCA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4c:0e:0b:11:3b:7f:db:05:d0:d6:36:31:b1:
                    2c:58:70:6a:98:c1:0f:2e:f9:32:dd:f9:57:c2:9a:
                    8d:f6:fd:9f:d0:63:cd:6f:a4:dd:10:90:ab:75:0e:
                    f8:bb:1f:dd:64:8c:a2:e4:ee:cb:6e:a4:14:99:d8:
                    e8:45:d3:f2:be:0d:a7:de:96:0e:ec:02:78:1f:ed:
                    af:ca:f2:00:23:78:5a:79:83:df:61:7e:9f:53:99:
                    82:dd:66:b2:ae:df:9e:f6:33:c9:5a:e5:17:dc:04:
                    10:ca:0e:2f:20:f8:bd:d3:78:86:47:a1:6a:fa:05:
                    97:cf:a9:8c:ab:fa:7b:bb:95:9c:6a:c0:32:e6:eb:
                    09:23:02:b8:4c:59:62:16:dd:65:4e:b4:99:dd:e0:
                    01:39:01:da:f0:2b:b7:39:41:34:66:52:07:ab:73:
                    ea:f1:9f:9c:d5:77:11:c2:bd:1c:2f:e8:79:27:0e:
                    ff:d9:e7:a4:c1:ad:fa:ad:01:f4:6d:b0:7d:7f:12:
                    97:2b:17:09:8d:af:a4:3f:6b:58:14:77:2b:4e:0c:
                    85:49:88:bd:e0:3e:44:15:fa:4b:c8:6d:ba:a9:cb:
                    e9:ab:be:22:b9:6d:01:18:5a:be:7c:ea:01:0f:d2:
                    f4:4c:b9:c1:dd:6d:be:a7:8e:69:71:56:27:24:89:
                    74:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B7:75:47:4A:2E:8B:0F:A7:5A:F1:2D:FF:7D:37:72:DF:1D:FC:A8
            X509v3 Authority Key Identifier:
                keyid:A0:4A:B1:F9:95:BE:32:68:6B:8A:65:72:6A:68:78:27:78:8C:00:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/A04AB1F995BE32686B8A65726A687827788C00FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A04AB1F995BE32686B8A65726A687827788C00FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xADS5SdBptqHvhfb6m9tDRULHvMbuEktE7GQ5Nbxsre/0/323830343a373937633a3a2f33322d313238203d3e20323731333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:797c::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:d1:1d:e6:19:9a:ea:b5:6b:5d:6e:75:3d:99:27:bc:66:50:
         fa:c1:0e:15:22:bf:d8:36:db:b7:42:55:aa:71:18:9c:ba:7d:
         fb:e4:35:60:3c:b7:81:65:1f:da:13:f5:fb:a4:e5:f0:44:dc:
         1f:69:d2:38:9e:f9:ad:fd:ef:85:39:33:f2:b0:72:60:9f:0b:
         d8:3e:ec:ac:48:a7:6c:6a:8c:30:f7:41:f2:98:10:60:f0:3b:
         4b:6c:6a:64:9f:f3:c7:f7:f5:37:27:1f:86:fa:ef:08:c4:a5:
         f7:35:8f:ef:f8:3c:43:f8:61:0e:5e:a3:49:ec:5c:68:d8:98:
         96:82:ac:32:3f:fb:5b:ec:fd:bb:69:20:35:3c:df:e5:42:40:
         32:31:79:3f:69:ea:1a:0b:3f:42:f9:5c:ba:5c:be:8e:0c:54:
         43:1e:a2:04:00:15:d6:c6:29:66:89:66:1a:24:9e:23:70:8d:
         b4:d4:7f:61:c9:a0:43:fd:e5:f6:b4:47:b8:42:3f:51:54:a9:
         eb:7c:a7:70:3b:4b:67:61:92:96:d6:e4:77:bc:6e:a0:3c:8b:
         ef:3a:9d:c9:4c:cd:c9:e0:40:a0:c7:68:8d:3c:2c:4c:61:93:
         4c:e8:de:6a:52:0c:ad:49:a6:44:ed:ab:97:ad:6e:6a:ce:8d:
         6c:8b:64:a7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMK8HgAi1xyOdFRojYOr2V9NW0MswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA0QUIxRjk5NUJFMzI2ODZCOEE2NTcyNkE2ODc4Mjc3
ODhDMDBGRjAeFw0yNjA4MDMxNjM1MjZaFw0yNzA4MDIxNjQwMjZaMDMxMTAvBgNV
BAMTKDNFQjc3NTQ3NEEyRThCMEZBNzVBRjEyREZGN0QzNzcyREYxREZDQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcTA4LETt/2wXQ1jYxsSxYcGqY
wQ8u+TLd+VfCmo32/Z/QY81vpN0QkKt1Dvi7H91kjKLk7stupBSZ2OhF0/K+Dafe
lg7sAngf7a/K8gAjeFp5g99hfp9TmYLdZrKu3572M8la5RfcBBDKDi8g+L3TeIZH
oWr6BZfPqYyr+nu7lZxqwDLm6wkjArhMWWIW3WVOtJnd4AE5AdrwK7c5QTRmUger
c+rxn5zVdxHCvRwv6HknDv/Z56TBrfqtAfRtsH1/EpcrFwmNr6Q/a1gUdytODIVJ
iL3gPkQV+kvIbbqpy+mrviK5bQEYWr586gEP0vRMucHdbb6njmlxVickiXStAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPrd1R0ouiw+nWvEt/303ct8d/KgwHwYDVR0j
BBgwFoAUoEqx+ZW+MmhrimVyamh4J3iMAP8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94QURTNVNkQnB0cUh2aGZiNm05dERSVUxIdk1idUVrdEU3R1E1TmJ4c3Jl
LzAvQTA0QUIxRjk5NUJFMzI2ODZCOEE2NTcyNkE2ODc4Mjc3ODhDMDBGRi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BMDRBQjFGOTk1QkUzMjY4NkI4
QTY1NzI2QTY4NzgyNzc4OEMwMEZGLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
QURTNVNkQnB0cUh2aGZiNm05dERSVUxIdk1idUVrdEU3R1E1TmJ4c3JlLzAvMzIz
ODMwMzQzYTM3MzkzNzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3MzEz
MzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBHl8MA0GCSqGSIb3DQEBCwUAA4IBAQBX0R3mGZrq
tWtdbnU9mSe8ZlD6wQ4VIr/YNtu3QlWqcRicun375DVgPLeBZR/aE/X7pOXwRNwf
adI4nvmt/e+FOTPysHJgnwvYPuysSKdsaoww90HymBBg8DtLbGpkn/PH9/U3Jx+G
+u8IxKX3NY/v+DxD+GEOXqNJ7Fxo2JiWgqwyP/tb7P27aSA1PN/lQkAyMXk/aeoa
Cz9C+Vy6XL6ODFRDHqIEABXWxilmiWYaJJ4jcI201H9hyaBD/eX2tEe4Qj9RVKnr
fKdwO0tnYZKW1uR3vG6gPIvvOp3JTM3J4ECgx2iNPCxMYZNM6N5qUgytSaZE7auX
rW5qzo1si2Sn
-----END CERTIFICATE-----
Generated at Sun Aug 23 14:07:38 2026 by rpki-client