Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/323830343a333439343a323030313a3a2f34382d3438203d3e20323635343636.roa
File:                     323830343a333439343a323030313a3a2f34382d3438203d3e20323635343636.roa (raw, json)
Hash identifier:          nVDRDgz33zTXNWr6fnqh7IpLXNhlb4j3d19Xc2PGxlE=
Subject key identifier:   92:22:5B:42:E5:E7:F1:A0:2A:A3:2B:EE:E4:B7:A0:00:EA:A1:9A:58
Certificate issuer:       /CN=8F66558670F52B216CF1A300EE9109FB19CBD795
Certificate serial:       3AD8019A2DE5899B144FBA4F0137766A33DC07
Authority key identifier: 8F:66:55:86:70:F5:2B:21:6C:F1:A3:00:EE:91:09:FB:19:CB:D7:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F66558670F52B216CF1A300EE9109FB19CBD795.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/323830343a333439343a323030313a3a2f34382d3438203d3e20323635343636.roa
Signing time:             Tue 09 Jun 2026 12:58:15 +0000
ROA not before:           Tue 09 Jun 2026 12:53:15 +0000
ROA not after:            Tue 08 Jun 2027 12:58:15 +0000
asID:                     265466
IP address blocks:        2804:3494:2001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/8F66558670F52B216CF1A300EE9109FB19CBD795.crl
                          rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/8F66558670F52B216CF1A300EE9109FB19CBD795.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F66558670F52B216CF1A300EE9109FB19CBD795.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 20:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d8:01:9a:2d:e5:89:9b:14:4f:ba:4f:01:37:76:6a:33:dc:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F66558670F52B216CF1A300EE9109FB19CBD795
        Validity
            Not Before: Jun  9 12:53:15 2026 GMT
            Not After : Jun  8 12:58:15 2027 GMT
        Subject: CN=92225B42E5E7F1A02AA32BEEE4B7A000EAA19A58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:d0:5b:e6:2c:56:1a:b4:e6:5e:7c:1a:17:
                    1f:6a:37:07:4e:de:23:04:0e:85:5e:33:f0:b1:2e:
                    53:02:5a:0f:54:d7:69:05:eb:2b:39:53:2f:e6:d6:
                    dd:8c:8a:1c:c2:d3:0e:d2:3a:60:0c:e5:3e:4c:04:
                    b3:ec:f8:b8:81:10:c2:48:bb:5f:e3:9e:a6:76:0a:
                    d8:f2:27:74:e5:79:93:4d:9c:36:07:8b:d5:e0:bd:
                    d3:5b:4f:c7:f9:46:d9:2d:9b:4a:3a:3b:3e:7e:b9:
                    41:00:bb:2e:75:c6:f0:49:7d:d0:a7:e9:c7:36:c4:
                    8f:54:51:c5:83:62:30:e6:a7:7f:f3:03:d6:71:35:
                    f7:bb:6c:7e:04:98:ba:1e:ad:95:41:80:0d:39:ff:
                    04:5e:89:2a:dd:9c:08:04:3a:35:24:ed:14:f7:84:
                    9b:18:46:21:4b:55:b6:bf:00:20:70:f4:6c:02:8c:
                    80:98:37:1d:e4:1a:32:c9:b4:e3:a0:96:9a:f8:1d:
                    72:1d:6a:2f:5e:50:b9:4c:00:cf:e1:e2:ff:71:df:
                    1f:2b:0f:0f:d1:2d:aa:dd:75:6d:0b:97:54:f4:40:
                    78:22:df:3f:9f:8a:86:11:9b:c6:e7:1a:7c:b2:e4:
                    6b:de:83:c4:9a:b6:fe:6e:ae:84:89:48:21:62:1a:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:22:5B:42:E5:E7:F1:A0:2A:A3:2B:EE:E4:B7:A0:00:EA:A1:9A:58
            X509v3 Authority Key Identifier:
                keyid:8F:66:55:86:70:F5:2B:21:6C:F1:A3:00:EE:91:09:FB:19:CB:D7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/8F66558670F52B216CF1A300EE9109FB19CBD795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F66558670F52B216CF1A300EE9109FB19CBD795.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/323830343a333439343a323030313a3a2f34382d3438203d3e20323635343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3494:2001::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:7b:cb:6f:43:69:83:f2:2d:fa:38:95:5c:52:69:32:f7:51:
         61:83:0f:64:9c:8a:25:e3:be:d5:ce:18:c1:ee:20:44:c2:15:
         f0:9d:0d:48:52:6f:07:44:e7:b5:a2:d6:00:62:dc:ae:29:13:
         a1:11:16:49:cf:46:1f:ab:b4:2a:52:a6:b4:00:13:63:04:31:
         81:b7:b2:c6:2f:70:73:8a:f5:a5:fa:a1:04:a2:41:d8:e8:83:
         1c:90:41:f4:3d:1b:11:19:cc:28:4f:71:94:71:d6:d1:4b:3b:
         0a:c9:4b:1f:5e:aa:0a:7e:84:f1:a3:3d:2c:11:fd:5b:9a:28:
         82:fa:f5:ad:7a:c6:d0:05:71:23:fa:ae:fc:27:fe:95:b7:ff:
         c3:c8:75:de:46:ef:4a:e6:d7:c4:a4:93:50:23:e7:72:16:57:
         59:66:dd:ea:44:c8:81:91:a3:63:7f:ef:13:88:23:ba:c0:09:
         e0:5e:7c:2f:8b:e5:ab:c2:ed:25:c1:27:d2:7c:58:cc:f7:21:
         a6:8c:62:e5:ff:25:85:b5:e3:a8:8f:06:50:38:80:9d:3b:5f:
         19:47:ea:74:4a:e4:cd:b7:0c:24:f3:af:ca:f8:94:88:5c:43:
         22:98:51:cb:7a:b1:d2:bd:e1:bf:e0:96:4e:f6:ac:01:ae:64:
         48:0d:1e:59
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgITOtgBmi3liZsUT7pPATd2ajPcBzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg4RjY2NTU4NjcwRjUyQjIxNkNGMUEzMDBFRTkxMDlGQjE5
Q0JENzk1MB4XDTI2MDYwOTEyNTMxNVoXDTI3MDYwODEyNTgxNVowMzExMC8GA1UE
AxMoOTIyMjVCNDJFNUU3RjFBMDJBQTMyQkVFRTRCN0EwMDBFQUExOUE1ODCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMRF0FvmLFYatOZefBoXH2o3B07e
IwQOhV4z8LEuUwJaD1TXaQXrKzlTL+bW3YyKHMLTDtI6YAzlPkwEs+z4uIEQwki7
X+OepnYK2PIndOV5k02cNgeL1eC901tPx/lG2S2bSjo7Pn65QQC7LnXG8El90Kfp
xzbEj1RRxYNiMOanf/MD1nE197tsfgSYuh6tlUGADTn/BF6JKt2cCAQ6NSTtFPeE
mxhGIUtVtr8AIHD0bAKMgJg3HeQaMsm046CWmvgdch1qL15QuUwAz+Hi/3HfHysP
D9Etqt11bQuXVPRAeCLfP5+KhhGbxucafLLka96DxJq2/m6uhIlIIWIasOsCAwEA
AaOCAlwwggJYMB0GA1UdDgQWBBSSIltC5efxoCqjK+7kt6AA6qGaWDAfBgNVHSME
GDAWgBSPZlWGcPUrIWzxowDukQn7GcvXlTAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby80RXROQnhVZW91NWhLbTNFZ0ZXckt0Z05vc3hqMkFDZlNCMXFBaDVYSE45
Qy8wLzhGNjY1NTg2NzBGNTJCMjE2Q0YxQTMwMEVFOTEwOUZCMTlDQkQ3OTUuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvOEY2NjU1ODY3MEY1MkIyMTZD
RjFBMzAwRUU5MTA5RkIxOUNCRDc5NS5jZXIwgbYGCCsGAQUFBwELBIGpMIGmMIGj
BggrBgEFBQcwC4aBlnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEV0TkJ4VWVvdTVoS20zRWdGV3JLdGdOb3N4ajJBQ2ZTQjFxQWg1WEhOOUMvMC8z
MjM4MzAzNDNhMzMzNDM5MzQzYTMyMzAzMDMxM2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzIzNjM1MzQzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG
CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQ0lCABMA0GCSqGSIb3DQEBCwUA
A4IBAQAse8tvQ2mD8i36OJVcUmky91Fhgw9knIol477VzhjB7iBEwhXwnQ1IUm8H
ROe1otYAYtyuKROhERZJz0Yfq7QqUqa0ABNjBDGBt7LGL3BzivWl+qEEokHY6IMc
kEH0PRsRGcwoT3GUcdbRSzsKyUsfXqoKfoTxoz0sEf1bmiiC+vWtesbQBXEj+q78
J/6Vt//DyHXeRu9K5tfEpJNQI+dyFldZZt3qRMiBkaNjf+8TiCO6wAngXnwvi+Wr
wu0lwSfSfFjM9yGmjGLl/yWFteOojwZQOICdO18ZR+p0SuTNtwwk86/K+JSIXEMi
mFHLerHSveG/4JZO9qwBrmRIDR5Z
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:49 2026 by rpki-client