Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3430303a3a2f33382d3338203d3e20323637323831.roa
File:                     323830343a346231303a3430303a3a2f33382d3338203d3e20323637323831.roa (raw, json)
Hash identifier:          tjGn1JcbLjfHuR9gEGG+LU5yIHdwGq8qob2wyaA8mqU=
Subject key identifier:   28:B8:76:A4:11:5A:F4:4C:44:44:03:79:7F:15:5A:13:67:6E:B5:30
Certificate issuer:       /CN=0FF30EC686201018DE081110542623BAED2ADF49
Certificate serial:       266E0E236DCADFDD7B253A7C6F70B533CE4D44DF
Authority key identifier: 0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3430303a3a2f33382d3338203d3e20323637323831.roa
Signing time:             Tue 15 Sep 2026 19:25:56 +0000
ROA not before:           Tue 15 Sep 2026 19:20:56 +0000
ROA not after:            Tue 14 Sep 2027 19:25:56 +0000
asID:                     267281
IP address blocks:        2804:4b10:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl
                          rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 20:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6e:0e:23:6d:ca:df:dd:7b:25:3a:7c:6f:70:b5:33:ce:4d:44:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF30EC686201018DE081110542623BAED2ADF49
        Validity
            Not Before: Sep 15 19:20:56 2026 GMT
            Not After : Sep 14 19:25:56 2027 GMT
        Subject: CN=28B876A4115AF44C444403797F155A13676EB530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:29:11:12:e0:60:68:ce:91:ac:eb:d7:15:7f:
                    c2:fe:bd:8f:ec:91:61:24:72:25:93:e3:1a:ea:5f:
                    6b:3a:86:bb:4c:e2:09:3c:8f:01:59:40:c9:cc:29:
                    75:b1:53:47:4c:23:c7:24:71:db:32:91:a2:a4:bf:
                    b1:cd:20:4d:b5:53:9f:71:93:7c:5c:a7:2d:09:70:
                    d1:d9:65:43:70:00:99:29:d4:38:2c:d8:19:55:f6:
                    a2:db:63:5c:56:d8:6c:a5:05:59:22:b5:eb:d2:d6:
                    f3:69:a3:b0:47:96:43:49:71:e8:b4:c1:25:30:0b:
                    5b:e9:40:ef:04:83:8c:d7:b7:dd:9a:27:54:51:e0:
                    35:90:62:29:82:fd:0c:e1:be:77:5a:7a:23:d1:cd:
                    1f:46:69:51:5f:1d:f9:8c:34:df:2d:ca:ad:dd:1b:
                    d3:35:27:11:a4:2a:22:c4:20:a9:65:e1:b9:8b:9f:
                    f4:f5:6f:da:2b:df:22:56:38:31:44:13:98:d7:68:
                    fb:d9:fe:05:9b:40:47:2e:03:66:df:e1:b5:ed:56:
                    3a:c0:02:be:95:bc:56:7e:84:47:12:4d:68:a1:5b:
                    87:85:41:4b:ba:a9:11:e1:db:70:a6:3a:4d:85:8d:
                    8a:b0:7d:3c:f6:37:f4:49:1f:4b:01:67:64:3f:97:
                    32:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B8:76:A4:11:5A:F4:4C:44:44:03:79:7F:15:5A:13:67:6E:B5:30
            X509v3 Authority Key Identifier:
                keyid:0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3430303a3a2f33382d3338203d3e20323637323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b10:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         40:a5:4d:21:7f:8f:8f:9e:be:55:98:ab:a7:c1:07:4d:49:b2:
         de:56:6f:9c:e1:f1:b0:1f:01:81:27:4f:eb:4e:51:02:72:6f:
         23:4e:b0:cb:c9:14:2b:db:91:72:fe:d6:de:ca:4b:91:c9:e1:
         53:70:df:96:2f:8e:33:36:de:ff:0a:60:ec:76:a3:84:6c:a5:
         e3:85:b4:38:75:17:91:24:94:c2:8d:67:d1:3b:ef:ee:96:b6:
         e7:fd:9d:d8:9b:ec:cf:34:c8:3c:a2:de:ac:fc:0d:17:ed:bb:
         e0:d8:a2:b7:d1:4a:2b:0b:e7:f9:57:8f:0b:24:de:83:18:cd:
         97:5d:0f:0f:50:0e:2b:32:1a:c4:b6:30:1d:96:6e:54:c8:25:
         e5:c9:ce:55:6e:82:04:3a:35:59:c1:11:ef:16:ad:69:4f:26:
         b5:7a:a1:11:5c:0e:90:df:39:a5:82:e9:12:62:06:a8:0a:2c:
         9c:22:e3:aa:a5:32:dc:23:de:1d:69:cb:82:12:a8:23:9d:e3:
         2f:03:f6:aa:6f:0d:18:8d:55:26:7c:b6:ef:7b:92:c3:16:0a:
         2b:01:b3:1b:fb:52:cc:54:d7:27:dd:9a:40:a0:33:68:95:3f:
         78:76:ef:af:d5:a4:84:de:f0:68:41:9b:bb:29:e0:0f:00:d4:
         55:21:08:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUJm4OI23K3917JTp8b3C1M85NRN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZGMzBFQzY4NjIwMTAxOERFMDgxMTEwNTQyNjIzQkFF
RDJBREY0OTAeFw0yNjA5MTUxOTIwNTZaFw0yNzA5MTQxOTI1NTZaMDMxMTAvBgNV
BAMTKDI4Qjg3NkE0MTE1QUY0NEM0NDQ0MDM3OTdGMTU1QTEzNjc2RUI1MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeKRES4GBozpGs69cVf8L+vY/s
kWEkciWT4xrqX2s6hrtM4gk8jwFZQMnMKXWxU0dMI8ckcdsykaKkv7HNIE21U59x
k3xcpy0JcNHZZUNwAJkp1Dgs2BlV9qLbY1xW2GylBVkitevS1vNpo7BHlkNJcei0
wSUwC1vpQO8Eg4zXt92aJ1RR4DWQYimC/QzhvndaeiPRzR9GaVFfHfmMNN8tyq3d
G9M1JxGkKiLEIKll4bmLn/T1b9or3yJWODFEE5jXaPvZ/gWbQEcuA2bf4bXtVjrA
Ar6VvFZ+hEcSTWihW4eFQUu6qRHh23CmOk2FjYqwfTz2N/RJH0sBZ2Q/lzIfAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUKLh2pBFa9ExERAN5fxVaE2dutTAwHwYDVR0j
BBgwFoAUD/MOxoYgEBjeCBEQVCYjuu0q30kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3ZuZHh2NUs3TUR1R3lZS3NyRUJWa0xram9nNkx0a1VxV255NFlVTWY0
WnYvMC8wRkYzMEVDNjg2MjAxMDE4REUwODExMTA1NDI2MjNCQUVEMkFERjQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGRjMwRUM2ODYyMDEwMThE
RTA4MTExMDU0MjYyM0JBRUQyQURGNDkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN2bmR4djVLN01EdUd5WUtzckVCVmtMa2pvZzZMdGtVcVdueTRZVU1mNFp2LzAv
MzIzODMwMzQzYTM0NjIzMTMwM2EzNDMwMzAzYTNhMmYzMzM4MmQzMzM4MjAzZDNl
MjAzMjM2MzczMjM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgIoBEsQBDANBgkqhkiG9w0BAQsFAAOC
AQEAQKVNIX+Pj56+VZirp8EHTUmy3lZvnOHxsB8BgSdP605RAnJvI06wy8kUK9uR
cv7W3spLkcnhU3Dfli+OMzbe/wpg7HajhGyl44W0OHUXkSSUwo1n0Tvv7pa25/2d
2JvszzTIPKLerPwNF+274Niit9FKKwvn+VePCyTegxjNl10PD1AOKzIaxLYwHZZu
VMgl5cnOVW6CBDo1WcER7xataU8mtXqhEVwOkN85pYLpEmIGqAosnCLjqqUy3CPe
HWnLghKoI53jLwP2qm8NGI1VJny273uSwxYKKwGzG/tSzFTXJ92aQKAzaJU/eHbv
r9WkhN7waEGbuyngDwDUVSEIgw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 07:33:15 2026 by rpki-client