Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/323830343a376132633a633030303a3a2f33372d3337203d3e20323731333532.roa
File:                     323830343a376132633a633030303a3a2f33372d3337203d3e20323731333532.roa (raw, json)
Hash identifier:          pOdVJvemOCbLtaN2i5UBybvjRd+Yu+2mPv7VhjKfC1c=
Subject key identifier:   FF:CC:A8:31:DC:2D:C1:28:1A:DA:DF:EE:BC:F8:77:A6:8B:56:21:19
Certificate issuer:       /CN=604CC86F51D78DE8F32943D7FAA159451D63781F
Certificate serial:       1F4DED4B4D7A554501953189E3488CC4B071ACC5
Authority key identifier: 60:4C:C8:6F:51:D7:8D:E8:F3:29:43:D7:FA:A1:59:45:1D:63:78:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/604CC86F51D78DE8F32943D7FAA159451D63781F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/323830343a376132633a633030303a3a2f33372d3337203d3e20323731333532.roa
Signing time:             Sat 25 Jul 2026 01:13:17 +0000
ROA not before:           Sat 25 Jul 2026 01:08:17 +0000
ROA not after:            Sat 24 Jul 2027 01:13:17 +0000
asID:                     271352
IP address blocks:        2804:7a2c:c000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/604CC86F51D78DE8F32943D7FAA159451D63781F.crl
                          rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/604CC86F51D78DE8F32943D7FAA159451D63781F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/604CC86F51D78DE8F32943D7FAA159451D63781F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 18:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4d:ed:4b:4d:7a:55:45:01:95:31:89:e3:48:8c:c4:b0:71:ac:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604CC86F51D78DE8F32943D7FAA159451D63781F
        Validity
            Not Before: Jul 25 01:08:17 2026 GMT
            Not After : Jul 24 01:13:17 2027 GMT
        Subject: CN=FFCCA831DC2DC1281ADADFEEBCF877A68B562119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:71:1d:6a:1c:aa:7b:aa:b7:db:d5:17:a1:17:
                    7b:09:cf:03:d8:4c:f8:f1:c7:f6:a2:f5:45:46:60:
                    19:29:eb:a9:16:d8:d0:aa:75:db:50:bc:cd:f7:6b:
                    c0:bb:9d:7f:0d:e9:fc:47:26:1f:5d:90:77:2b:48:
                    c6:00:fd:50:45:1a:43:fb:8d:07:1c:a6:65:ae:2d:
                    de:17:c1:ba:db:64:e2:2f:31:06:3f:96:7b:13:df:
                    fe:4e:1e:e9:0d:a2:c2:6d:c3:42:44:b8:b7:f5:a7:
                    4c:0c:72:1a:08:e4:df:ac:c6:28:12:d4:c1:e3:d0:
                    14:e6:87:ac:98:cd:c1:e7:a5:dc:5c:ec:45:80:69:
                    d0:08:19:f2:c1:7d:9e:b7:c4:85:f2:fe:b3:c5:d9:
                    87:f3:a3:a3:bb:cc:1f:2c:f0:4f:21:b8:7d:66:36:
                    cb:fe:e1:f8:72:23:8a:c7:ac:2d:39:84:a4:2f:fe:
                    b8:e7:ce:6f:1b:08:07:4c:fb:ae:a2:ea:f4:96:b9:
                    6d:ef:d7:b1:57:8c:ff:d1:40:ef:cf:75:06:21:e0:
                    1e:d9:ae:b6:e4:43:6b:45:a1:6c:3b:33:76:21:86:
                    f3:27:e8:96:cf:2b:03:2d:8b:d7:7d:4c:f9:8f:81:
                    6d:72:0e:25:52:b1:04:10:d6:2e:ed:05:17:1d:9e:
                    59:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CC:A8:31:DC:2D:C1:28:1A:DA:DF:EE:BC:F8:77:A6:8B:56:21:19
            X509v3 Authority Key Identifier:
                keyid:60:4C:C8:6F:51:D7:8D:E8:F3:29:43:D7:FA:A1:59:45:1D:63:78:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/604CC86F51D78DE8F32943D7FAA159451D63781F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/604CC86F51D78DE8F32943D7FAA159451D63781F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/323830343a376132633a633030303a3a2f33372d3337203d3e20323731333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a2c:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         90:ce:56:e0:e5:23:ca:61:5b:ba:c4:b6:a1:bb:79:9e:29:69:
         a5:48:08:de:6f:5b:0c:b0:8c:db:d4:ff:8a:cf:0d:7f:cb:7f:
         12:81:4c:8f:0e:18:ee:10:8b:15:40:ad:02:de:fe:57:64:5a:
         65:f0:f3:9c:fb:66:12:0c:c9:d7:af:be:0b:e2:f8:0b:5b:77:
         9c:42:28:da:ad:74:c8:0b:da:58:84:1d:0d:9d:64:64:17:5f:
         52:68:f3:1f:aa:37:e7:3d:37:31:e3:94:b7:de:33:4e:63:e3:
         f5:b6:7a:cc:95:7d:27:d4:8f:55:f7:4a:25:c5:83:12:5c:9f:
         3d:eb:93:ed:74:52:74:5c:a9:6c:cf:db:0b:6c:cc:65:17:3a:
         28:ec:db:36:a1:a3:c3:81:71:29:0a:11:b2:c0:50:e7:b7:72:
         b5:ba:83:e0:8f:34:62:ce:92:6f:9f:c1:aa:d1:be:55:38:97:
         c2:d7:cc:b4:92:de:85:df:a1:5f:cf:20:8d:f0:3d:f5:30:ad:
         d9:d7:1b:6a:8e:c6:d5:6e:b3:17:95:c2:91:78:00:09:88:42:
         c9:7a:89:ac:10:c7:e8:55:cc:e5:5e:da:3b:8b:a3:06:fc:72:
         0a:6a:84:ac:54:5d:e8:45:21:c2:12:d2:5f:e6:40:b4:fe:0d:
         ca:4a:7e:8b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUH03tS016VUUBlTGJ40iMxLBxrMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA0Q0M4NkY1MUQ3OERFOEYzMjk0M0Q3RkFBMTU5NDUx
RDYzNzgxRjAeFw0yNjA3MjUwMTA4MTdaFw0yNzA3MjQwMTEzMTdaMDMxMTAvBgNV
BAMTKEZGQ0NBODMxREMyREMxMjgxQURBREZFRUJDRjg3N0E2OEI1NjIxMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9cR1qHKp7qrfb1RehF3sJzwPY
TPjxx/ai9UVGYBkp66kW2NCqddtQvM33a8C7nX8N6fxHJh9dkHcrSMYA/VBFGkP7
jQccpmWuLd4XwbrbZOIvMQY/lnsT3/5OHukNosJtw0JEuLf1p0wMchoI5N+sxigS
1MHj0BTmh6yYzcHnpdxc7EWAadAIGfLBfZ63xIXy/rPF2Yfzo6O7zB8s8E8huH1m
Nsv+4fhyI4rHrC05hKQv/rjnzm8bCAdM+66i6vSWuW3v17FXjP/RQO/PdQYh4B7Z
rrbkQ2tFoWw7M3YhhvMn6JbPKwMti9d9TPmPgW1yDiVSsQQQ1i7tBRcdnlkXAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU/8yoMdwtwSga2t/uvPh3potWIRkwHwYDVR0j
BBgwFoAUYEzIb1HXjejzKUPX+qFZRR1jeB8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlJWakxSR1pYVllQMUJoMlJwZmt5OEF6TFp4TlNScGtOYWR4OFhrZW1X
RUovMC82MDRDQzg2RjUxRDc4REU4RjMyOTQzRDdGQUExNTk0NTFENjM3ODFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwNENDODZGNTFENzhERThG
MzI5NDNEN0ZBQTE1OTQ1MUQ2Mzc4MUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJSVmpMUkdaWFZZUDFCaDJScGZreThBekxaeE5TUnBrTmFkeDhYa2VtV0VKLzAv
MzIzODMwMzQzYTM3NjEzMjYzM2E2MzMwMzAzMDNhM2EyZjMzMzcyZDMzMzcyMDNk
M2UyMDMyMzczMTMzMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAygEeizAMA0GCSqGSIb3DQEBCwUA
A4IBAQCQzlbg5SPKYVu6xLahu3meKWmlSAjeb1sMsIzb1P+Kzw1/y38SgUyPDhju
EIsVQK0C3v5XZFpl8POc+2YSDMnXr74L4vgLW3ecQijarXTIC9pYhB0NnWRkF19S
aPMfqjfnPTcx45S33jNOY+P1tnrMlX0n1I9V90olxYMSXJ8965PtdFJ0XKlsz9sL
bMxlFzoo7Ns2oaPDgXEpChGywFDnt3K1uoPgjzRizpJvn8Gq0b5VOJfC18y0kt6F
36FfzyCN8D31MK3Z1xtqjsbVbrMXlcKReAAJiELJeomsEMfoVczlXto7i6MG/HIK
aoSsVF3oRSHCEtJf5kC0/g3KSn6L
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:46:36 2026 by rpki-client