Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/323830343a376536383a3a2f33322d3332203d3e20323731363232.roa
File:                     323830343a376536383a3a2f33322d3332203d3e20323731363232.roa (raw, json)
Hash identifier:          mejRbBTLU+CGCy+Uvht/LDM6eJbHDz9kgyTEaUmlk9Q=
Subject key identifier:   C0:7A:AD:8D:8F:D8:49:FD:E3:51:AF:5E:EA:20:EA:30:31:90:ED:6B
Certificate issuer:       /CN=8382FC37DD96749FCFC2548CF3020524D7A1B822
Certificate serial:       4808AFB450AD7F9D0CD01B9B3283A3080F34402F
Authority key identifier: 83:82:FC:37:DD:96:74:9F:CF:C2:54:8C:F3:02:05:24:D7:A1:B8:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8382FC37DD96749FCFC2548CF3020524D7A1B822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/323830343a376536383a3a2f33322d3332203d3e20323731363232.roa
Signing time:             Mon 19 Oct 2026 04:04:41 +0000
ROA not before:           Mon 19 Oct 2026 03:59:41 +0000
ROA not after:            Mon 18 Oct 2027 04:04:41 +0000
asID:                     271622
IP address blocks:        2804:7e68::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/8382FC37DD96749FCFC2548CF3020524D7A1B822.crl
                          rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/8382FC37DD96749FCFC2548CF3020524D7A1B822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8382FC37DD96749FCFC2548CF3020524D7A1B822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 10:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:08:af:b4:50:ad:7f:9d:0c:d0:1b:9b:32:83:a3:08:0f:34:40:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8382FC37DD96749FCFC2548CF3020524D7A1B822
        Validity
            Not Before: Oct 19 03:59:41 2026 GMT
            Not After : Oct 18 04:04:41 2027 GMT
        Subject: CN=C07AAD8D8FD849FDE351AF5EEA20EA303190ED6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:49:23:fc:71:79:07:5f:2d:9e:b8:2d:5e:
                    e5:e5:1c:21:c3:f1:79:eb:94:95:e8:66:f7:8b:bc:
                    69:92:fb:f5:4a:65:24:e8:51:d6:4a:cb:ca:d9:5b:
                    38:66:44:5c:76:f9:14:b9:ba:4b:52:f5:5e:49:68:
                    6f:7b:a0:d9:f8:b3:14:dc:fb:1b:dd:92:0a:b4:52:
                    97:6d:cb:41:38:80:18:a8:cc:65:78:33:06:d7:ba:
                    b0:db:fb:f1:d1:c4:df:55:40:52:49:ed:14:73:e2:
                    5e:b5:4a:d3:0b:c2:2f:65:14:f7:3c:51:cc:73:48:
                    90:33:a2:2d:97:7a:0f:0c:81:b4:00:0a:5d:1f:f4:
                    fa:46:72:29:8b:a6:16:4d:d0:0d:e1:ec:1d:5d:10:
                    38:59:ba:fe:1f:ab:05:ec:e8:6d:9f:18:00:49:ad:
                    24:f4:47:90:be:aa:ca:58:6f:92:09:83:57:bf:61:
                    6f:46:08:1b:4f:0f:74:f3:12:47:23:1d:41:10:df:
                    77:cc:e4:de:7b:a2:04:4d:37:1b:4d:06:5d:80:c5:
                    41:39:fb:85:1f:87:2a:37:2a:40:bf:90:13:c2:dc:
                    9e:f3:6a:ee:b5:16:8e:12:2e:28:41:07:79:c2:c4:
                    01:d3:96:16:8c:b6:76:c0:77:37:c9:68:60:22:36:
                    d5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7A:AD:8D:8F:D8:49:FD:E3:51:AF:5E:EA:20:EA:30:31:90:ED:6B
            X509v3 Authority Key Identifier:
                keyid:83:82:FC:37:DD:96:74:9F:CF:C2:54:8C:F3:02:05:24:D7:A1:B8:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/8382FC37DD96749FCFC2548CF3020524D7A1B822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8382FC37DD96749FCFC2548CF3020524D7A1B822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/323830343a376536383a3a2f33322d3332203d3e20323731363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e68::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:64:ef:20:96:cb:9d:a8:48:e2:8a:b8:3c:87:1c:5d:80:19:
         07:fc:52:eb:79:c1:73:e4:41:d0:b2:9e:8a:41:16:e1:38:5f:
         4e:70:fa:78:d5:49:54:93:dd:7e:71:9d:87:93:13:9e:2f:7a:
         e2:66:63:9e:9f:ca:0c:52:53:34:75:e2:66:be:38:9d:60:b7:
         d4:7d:99:9d:28:d1:78:f1:69:27:f3:3c:d3:62:a0:6f:e6:c1:
         6d:e0:75:d8:3a:d3:96:a5:ad:b6:6f:90:9e:0e:b0:5e:fc:d3:
         8e:81:d0:30:35:34:6a:4a:df:24:4a:73:00:5d:43:05:f7:bd:
         9e:03:c1:57:67:ce:46:d2:f6:ac:1d:8d:ee:0a:39:c8:55:23:
         a5:b3:ad:7d:6e:f4:09:28:d3:9d:c8:40:8d:f5:b9:eb:cb:18:
         e5:8f:1c:96:d0:d6:09:66:38:d5:0e:33:b4:5d:9a:b6:c6:74:
         d1:e8:7a:af:ee:c4:1a:3a:f0:09:f1:b5:09:ff:ff:80:0f:5a:
         eb:ec:c3:ac:f8:24:2e:19:4e:32:41:50:e2:48:b3:ca:4d:73:
         a3:b6:e9:d3:9f:a5:a8:69:9a:6c:1b:22:27:f2:58:6a:51:6d:
         19:8e:ae:2f:1d:94:be:f9:84:72:ac:53:8a:6c:5a:18:89:31:
         16:e1:c6:5e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSAivtFCtf50M0BubMoOjCA80QC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM4MkZDMzdERDk2NzQ5RkNGQzI1NDhDRjMwMjA1MjRE
N0ExQjgyMjAeFw0yNjEwMTkwMzU5NDFaFw0yNzEwMTgwNDA0NDFaMDMxMTAvBgNV
BAMTKEMwN0FBRDhEOEZEODQ5RkRFMzUxQUY1RUVBMjBFQTMwMzE5MEVENkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5uUkj/HF5B18tnrgtXuXlHCHD
8XnrlJXoZveLvGmS+/VKZSToUdZKy8rZWzhmRFx2+RS5uktS9V5JaG97oNn4sxTc
+xvdkgq0Updty0E4gBiozGV4MwbXurDb+/HRxN9VQFJJ7RRz4l61StMLwi9lFPc8
UcxzSJAzoi2Xeg8MgbQACl0f9PpGcimLphZN0A3h7B1dEDhZuv4fqwXs6G2fGABJ
rST0R5C+qspYb5IJg1e/YW9GCBtPD3TzEkcjHUEQ33fM5N57ogRNNxtNBl2AxUE5
+4Ufhyo3KkC/kBPC3J7zau61Fo4SLihBB3nCxAHTlhaMtnbAdzfJaGAiNtVlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUwHqtjY/YSf3jUa9e6iDqMDGQ7WswHwYDVR0j
BBgwFoAUg4L8N92WdJ/PwlSM8wIFJNehuCIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmVvdTZqempxOEsySmdHWjUxMWJIb1Y4amh4cmMzTVVySFBUQ1IxVmhB
UGIvMC84MzgyRkMzN0REOTY3NDlGQ0ZDMjU0OENGMzAyMDUyNEQ3QTFCODIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzODJGQzM3REQ5Njc0OUZD
RkMyNTQ4Q0YzMDIwNTI0RDdBMUI4MjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJlb3U2anpqcThLMkpnR1o1MTFiSG9WOGpoeHJjM01VckhQVENSMVZoQVBiLzAv
MzIzODMwMzQzYTM3NjUzNjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzYzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR+aDANBgkqhkiG9w0BAQsFAAOCAQEAhGTvIJbL
nahI4oq4PIccXYAZB/xS63nBc+RB0LKeikEW4ThfTnD6eNVJVJPdfnGdh5MTni96
4mZjnp/KDFJTNHXiZr44nWC31H2ZnSjRePFpJ/M802Kgb+bBbeB12DrTlqWttm+Q
ng6wXvzTjoHQMDU0akrfJEpzAF1DBfe9ngPBV2fORtL2rB2N7go5yFUjpbOtfW70
CSjTnchAjfW568sY5Y8cltDWCWY41Q4ztF2atsZ00eh6r+7EGjrwCfG1Cf//gA9a
6+zDrPgkLhlOMkFQ4kizyk1zo7bp05+lqGmabBsiJ/JYalFtGY6uLx2UvvmEcqxT
imxaGIkxFuHGXg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:03:26 2026 by rpki-client