Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/323830343a353335633a633030303a3a2f33342d3334203d3e20323638353739.roa
File:                     323830343a353335633a633030303a3a2f33342d3334203d3e20323638353739.roa (raw, json)
Hash identifier:          dYvZtezQ6LYsr1spa2aGZMujWw5iIpjGJ5eIVT9+/9s=
Subject key identifier:   ED:EC:5B:05:23:C6:B5:36:6E:F6:60:B2:1F:DF:87:87:03:E2:61:7A
Certificate issuer:       /CN=6133BA817EF62A52BE6BE4DBE7CC6DAC20DD8484
Certificate serial:       0C9CB1BF4E20C4E3D47165032548E91290B22A3F
Authority key identifier: 61:33:BA:81:7E:F6:2A:52:BE:6B:E4:DB:E7:CC:6D:AC:20:DD:84:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6133BA817EF62A52BE6BE4DBE7CC6DAC20DD8484.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/323830343a353335633a633030303a3a2f33342d3334203d3e20323638353739.roa
Signing time:             Sat 12 Sep 2026 15:41:50 +0000
ROA not before:           Sat 12 Sep 2026 15:36:50 +0000
ROA not after:            Sat 11 Sep 2027 15:41:50 +0000
asID:                     268579
IP address blocks:        2804:535c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/6133BA817EF62A52BE6BE4DBE7CC6DAC20DD8484.crl
                          rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/6133BA817EF62A52BE6BE4DBE7CC6DAC20DD8484.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6133BA817EF62A52BE6BE4DBE7CC6DAC20DD8484.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 18:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9c:b1:bf:4e:20:c4:e3:d4:71:65:03:25:48:e9:12:90:b2:2a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6133BA817EF62A52BE6BE4DBE7CC6DAC20DD8484
        Validity
            Not Before: Sep 12 15:36:50 2026 GMT
            Not After : Sep 11 15:41:50 2027 GMT
        Subject: CN=EDEC5B0523C6B5366EF660B21FDF878703E2617A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:ff:9d:03:0e:c0:9a:49:b8:4b:07:91:e5:
                    cc:a9:df:2b:96:aa:da:f3:37:e5:28:1c:2b:fa:fa:
                    68:d6:2d:85:97:41:fc:10:48:c6:0b:4c:35:24:23:
                    a4:d0:e1:8c:d4:7b:a6:f7:74:3c:20:3d:9b:b7:f9:
                    c4:5c:db:e3:db:7f:46:16:cb:6e:f6:8b:cc:e9:43:
                    c6:10:73:b0:9a:ec:03:27:72:df:e8:11:82:b0:9d:
                    60:42:5d:9a:0d:96:6b:a4:5e:86:bc:e1:5f:f8:4d:
                    93:ba:2b:26:07:01:4e:30:db:fa:54:2d:6f:df:3c:
                    42:c7:3a:2b:64:a1:c5:0f:ec:c2:65:58:bb:ee:86:
                    6e:fd:f2:5a:21:95:26:c0:c1:a5:5d:b9:96:ce:a3:
                    d1:29:70:39:1b:5c:a2:5f:f1:b4:9d:27:c0:6c:a6:
                    35:f5:32:03:94:45:59:34:ca:62:09:23:b3:30:09:
                    b4:f9:9f:d9:0f:d7:a7:ab:3a:ab:9b:4b:6e:0e:2a:
                    39:27:d4:26:73:e0:41:62:0b:c1:f5:5b:84:35:c0:
                    fd:44:4a:20:1f:bb:f3:3e:39:92:d9:7a:d1:51:67:
                    7a:04:06:0d:3d:22:f1:de:24:5c:3f:f6:2d:fc:d3:
                    be:04:80:8d:ab:77:a9:85:1e:a7:c8:f7:09:f6:fb:
                    25:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EC:5B:05:23:C6:B5:36:6E:F6:60:B2:1F:DF:87:87:03:E2:61:7A
            X509v3 Authority Key Identifier:
                keyid:61:33:BA:81:7E:F6:2A:52:BE:6B:E4:DB:E7:CC:6D:AC:20:DD:84:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/6133BA817EF62A52BE6BE4DBE7CC6DAC20DD8484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6133BA817EF62A52BE6BE4DBE7CC6DAC20DD8484.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/323830343a353335633a633030303a3a2f33342d3334203d3e20323638353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:535c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         82:1a:32:e3:c4:41:f4:6f:b0:ba:2d:88:4b:05:6a:2d:f4:a5:
         e1:0c:7b:38:06:ff:33:bf:9f:b4:3c:b0:64:8f:90:49:6c:1a:
         24:f4:6f:d9:9d:c7:12:46:22:6c:51:94:90:80:15:0a:6d:4b:
         16:5c:85:a7:ae:35:a0:39:e2:47:01:8c:44:17:a1:5e:de:a5:
         64:fc:35:81:b3:95:68:b6:96:b0:cb:93:90:fd:b9:3c:55:b6:
         a2:4b:26:b0:e4:a5:4f:59:81:07:f5:03:9f:e4:cc:eb:d6:d4:
         ea:30:1a:98:aa:de:9d:ce:e3:a0:25:c0:09:06:ad:ac:74:b6:
         5f:b3:7b:38:45:b5:e7:81:22:08:8f:2a:75:9b:e9:f6:1e:0b:
         a8:e3:fa:0f:d1:29:78:e6:8b:e1:8a:88:c9:9a:28:11:8f:63:
         51:59:b8:79:9f:56:c2:99:7a:2f:bd:05:f1:4c:ca:94:ec:c9:
         b4:16:3d:30:ba:d6:90:ee:09:1a:a4:01:02:73:5c:ba:c9:55:
         d3:e6:48:5b:5a:b0:c8:93:ac:60:34:e2:87:a9:6e:9f:b5:0b:
         e3:30:38:99:01:eb:3b:ce:8d:dd:11:5a:2f:33:67:ab:61:ef:
         a6:5d:10:d9:ed:6c:13:29:e9:3e:7e:e0:09:d3:fb:77:e6:a3:
         24:7e:2e:ba
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDJyxv04gxOPUcWUDJUjpEpCyKj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEzM0JBODE3RUY2MkE1MkJFNkJFNERCRTdDQzZEQUMy
MEREODQ4NDAeFw0yNjA5MTIxNTM2NTBaFw0yNzA5MTExNTQxNTBaMDMxMTAvBgNV
BAMTKEVERUM1QjA1MjNDNkI1MzY2RUY2NjBCMjFGREY4Nzg3MDNFMjYxN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbv+dAw7Amkm4SweR5cyp3yuW
qtrzN+UoHCv6+mjWLYWXQfwQSMYLTDUkI6TQ4YzUe6b3dDwgPZu3+cRc2+Pbf0YW
y272i8zpQ8YQc7Ca7AMnct/oEYKwnWBCXZoNlmukXoa84V/4TZO6KyYHAU4w2/pU
LW/fPELHOitkocUP7MJlWLvuhm798lohlSbAwaVduZbOo9EpcDkbXKJf8bSdJ8Bs
pjX1MgOURVk0ymIJI7MwCbT5n9kP16erOqubS24OKjkn1CZz4EFiC8H1W4Q1wP1E
SiAfu/M+OZLZetFRZ3oEBg09IvHeJFw/9i38074EgI2rd6mFHqfI9wn2+yW3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU7exbBSPGtTZu9mCyH9+HhwPiYXowHwYDVR0j
BBgwFoAUYTO6gX72KlK+a+Tb58xtrCDdhIQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkttbU5ROGIzVmpBcmVURzJ3Mkh5WnFTNUpYd0diM01HVkdDcU5tdnZL
TkUvMC82MTMzQkE4MTdFRjYyQTUyQkU2QkU0REJFN0NDNkRBQzIwREQ4NDg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMzNCQTgxN0VGNjJBNTJC
RTZCRTREQkU3Q0M2REFDMjBERDg0ODQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZLbW1OUThiM1ZqQXJlVEcydzJIeVpxUzVKWHdHYjNNR1ZHQ3FObXZ2S05FLzAv
MzIzODMwMzQzYTM1MzMzNTYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM1MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEU1zAMA0GCSqGSIb3DQEBCwUA
A4IBAQCCGjLjxEH0b7C6LYhLBWot9KXhDHs4Bv8zv5+0PLBkj5BJbBok9G/ZnccS
RiJsUZSQgBUKbUsWXIWnrjWgOeJHAYxEF6Fe3qVk/DWBs5Votpawy5OQ/bk8Vbai
Syaw5KVPWYEH9QOf5Mzr1tTqMBqYqt6dzuOgJcAJBq2sdLZfs3s4RbXngSIIjyp1
m+n2Hguo4/oP0Sl45ovhiojJmigRj2NRWbh5n1bCmXovvQXxTMqU7Mm0Fj0wutaQ
7gkapAECc1y6yVXT5khbWrDIk6xgNOKHqW6ftQvjMDiZAes7zo3dEVovM2erYe+m
XRDZ7WwTKek+fuAJ0/t35qMkfi66
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:08:51 2026 by rpki-client