Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a383030303a3a2f33362d3336203d3e20323731343134.roa
File:                     323830343a376232383a383030303a3a2f33362d3336203d3e20323731343134.roa (raw, json)
Hash identifier:          ARph+qDSMeP2A5c1wkrwYbxO+qtNBwwv+yjom58+pPM=
Subject key identifier:   94:0E:41:CB:33:C7:6C:8C:5C:29:65:EC:53:0B:98:7F:3C:D8:94:E8
Certificate issuer:       /CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB
Certificate serial:       02122060BF1AB0A1298AB826C3823E1D3A85FDDA
Authority key identifier: D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a383030303a3a2f33362d3336203d3e20323731343134.roa
Signing time:             Thu 23 Jul 2026 18:33:52 +0000
ROA not before:           Thu 23 Jul 2026 18:28:52 +0000
ROA not after:            Thu 22 Jul 2027 18:33:52 +0000
asID:                     271414
IP address blocks:        2804:7b28:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl
                          rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 Jul 2026 09:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:12:20:60:bf:1a:b0:a1:29:8a:b8:26:c3:82:3e:1d:3a:85:fd:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB
        Validity
            Not Before: Jul 23 18:28:52 2026 GMT
            Not After : Jul 22 18:33:52 2027 GMT
        Subject: CN=940E41CB33C76C8C5C2965EC530B987F3CD894E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ee:2a:f6:75:9e:9d:ee:1b:e9:cd:9a:64:bb:
                    a4:e0:09:61:d7:46:e7:d0:f7:b0:ed:c0:b2:93:5f:
                    ba:f1:73:d5:87:db:99:52:27:4e:49:4e:04:d4:22:
                    f5:38:0c:79:fc:eb:29:8a:cb:8f:dc:0d:aa:96:85:
                    65:ce:83:6c:80:e9:40:b8:fe:7d:6e:06:4a:3e:03:
                    af:5d:dc:2d:20:c7:1d:41:72:cd:92:c1:77:63:04:
                    84:b6:97:49:3c:b7:69:3d:03:9c:ba:81:97:52:f5:
                    b1:b5:c6:08:13:04:fb:82:d1:40:aa:a0:c1:96:94:
                    47:3a:3f:dc:4d:f4:ca:87:fa:7c:75:07:f5:2a:7f:
                    e7:74:72:2c:9c:cf:7f:25:35:a3:3b:e5:8d:4f:6e:
                    98:a0:b0:74:8d:5b:22:f6:68:dd:84:d2:4b:31:4b:
                    4f:97:ac:57:36:24:5f:ff:67:de:a4:fb:7b:e8:59:
                    51:43:2c:86:3b:85:70:45:6b:8b:07:6d:68:2d:1c:
                    a0:f2:73:b1:c4:32:4a:2a:53:68:a9:4f:31:b1:15:
                    7e:e2:90:98:6a:5a:b8:db:ac:3b:b2:71:0c:05:b0:
                    ad:7b:9a:8b:f5:27:2f:9e:f0:69:f4:4e:0d:15:d3:
                    af:17:c7:49:73:31:36:bb:c8:89:43:7d:89:6c:45:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0E:41:CB:33:C7:6C:8C:5C:29:65:EC:53:0B:98:7F:3C:D8:94:E8
            X509v3 Authority Key Identifier:
                keyid:D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a383030303a3a2f33362d3336203d3e20323731343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b28:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         52:f2:10:cd:fe:38:ab:e6:10:88:1e:f8:f9:0b:b7:32:1a:bd:
         4b:90:4c:43:a5:ea:b0:5f:c0:4d:4f:4e:b2:e8:5d:65:92:f9:
         51:02:1e:9f:bc:da:45:48:19:18:9c:12:52:2b:ca:36:09:c0:
         21:2d:aa:a6:88:6f:6f:8b:99:d1:bd:91:a5:36:c7:b3:e1:c9:
         ca:d0:7c:6e:ef:44:57:b7:d8:71:7f:34:8a:73:64:a9:db:1b:
         2b:79:29:1a:37:93:ec:8c:56:fb:e1:61:c4:2d:82:d7:32:ed:
         49:09:e9:18:d0:08:37:e9:24:0e:69:41:a7:f5:cd:ae:cc:08:
         b0:4d:bc:32:6d:08:49:be:b2:e5:81:df:4f:a4:62:be:bc:4a:
         d3:7a:59:28:6c:f3:0c:34:51:7f:c6:6a:b7:9e:04:3a:bc:15:
         7b:f2:e3:be:25:43:bd:73:6f:c3:7e:9c:41:00:ac:4d:9e:ac:
         f1:1b:65:c7:6b:ca:f8:61:35:95:b6:d3:b9:94:6d:d5:85:d7:
         3a:37:74:1e:31:1c:43:43:39:dd:76:71:76:23:34:75:24:53:
         5b:4e:fc:6c:16:93:ab:95:f3:70:bb:4b:fb:75:9e:b0:fc:0c:
         20:bd:f8:68:14:be:33:54:58:61:fa:46:4b:67:b3:2c:6e:7b:
         f4:fe:39:d9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAhIgYL8asKEpirgmw4I+HTqF/dowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlCOERGNTFGMkU1Qzk2NkQyNEIxMTc4RjNCQjc4QzIy
OERCMUZBQjAeFw0yNjA3MjMxODI4NTJaFw0yNzA3MjIxODMzNTJaMDMxMTAvBgNV
BAMTKDk0MEU0MUNCMzNDNzZDOEM1QzI5NjVFQzUzMEI5ODdGM0NEODk0RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7ir2dZ6d7hvpzZpku6TgCWHX
RufQ97DtwLKTX7rxc9WH25lSJ05JTgTUIvU4DHn86ymKy4/cDaqWhWXOg2yA6UC4
/n1uBko+A69d3C0gxx1Bcs2SwXdjBIS2l0k8t2k9A5y6gZdS9bG1xggTBPuC0UCq
oMGWlEc6P9xN9MqH+nx1B/Uqf+d0ciycz38lNaM75Y1PbpigsHSNWyL2aN2E0ksx
S0+XrFc2JF//Z96k+3voWVFDLIY7hXBFa4sHbWgtHKDyc7HEMkoqU2ipTzGxFX7i
kJhqWrjbrDuycQwFsK17mov1Jy+e8Gn0Tg0V068Xx0lzMTa7yIlDfYlsRfj7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUlA5ByzPHbIxcKWXsUwuYfzzYlOgwHwYDVR0j
BBgwFoAU2bjfUfLlyWbSSxF487t4wijbH6swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWkxQXZyQ0Y2Smhyc0Nmam5NZVJObXZkNlZodU1LeWJjZ3NRRzRVcm1z
WHcvMC9EOUI4REY1MUYyRTVDOTY2RDI0QjExNzhGM0JCNzhDMjI4REIxRkFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5QjhERjUxRjJFNUM5NjZE
MjRCMTE3OEYzQkI3OEMyMjhEQjFGQUIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVpMUF2ckNGNkpocnNDZmpuTWVSTm12ZDZWaHVNS3liY2dzUUc0VXJtc1h3LzAv
MzIzODMwMzQzYTM3NjIzMjM4M2EzODMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMTM0MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEeyiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBS8hDN/jir5hCIHvj5C7cyGr1LkExDpeqwX8BNT06y6F1lkvlRAh6fvNpF
SBkYnBJSK8o2CcAhLaqmiG9vi5nRvZGlNsez4cnK0Hxu70RXt9hxfzSKc2Sp2xsr
eSkaN5PsjFb74WHELYLXMu1JCekY0Ag36SQOaUGn9c2uzAiwTbwybQhJvrLlgd9P
pGK+vErTelkobPMMNFF/xmq3ngQ6vBV78uO+JUO9c2/DfpxBAKxNnqzxG2XHa8r4
YTWVttO5lG3Vhdc6N3QeMRxDQznddnF2IzR1JFNbTvxsFpOrlfNwu0v7dZ6w/Awg
vfhoFL4zVFhh+kZLZ7Msbnv0/jnZ
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:09:19 2026 by rpki-client