Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a3a2f33322d313238203d3e20323637303234.roa
File:                     323830343a343666633a3a2f33322d313238203d3e20323637303234.roa (raw, json)
Hash identifier:          GlIMErZak5L1Ejc8kc/btuN/c0QuGyHsxMwWSxCBfUg=
Subject key identifier:   6F:B0:0E:DA:E2:D0:81:CB:6A:14:19:85:1A:61:29:F7:68:3D:D3:08
Certificate issuer:       /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial:       6827E65713991E9972E96B379C52FCFDCFF26FA9
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a3a2f33322d313238203d3e20323637303234.roa
Signing time:             Wed 25 Feb 2026 03:27:37 +0000
ROA not before:           Wed 25 Feb 2026 03:22:37 +0000
ROA not after:            Wed 24 Feb 2027 03:27:37 +0000
asID:                     267024
IP address blocks:        2804:46fc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
                          rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:27:e6:57:13:99:1e:99:72:e9:6b:37:9c:52:fc:fd:cf:f2:6f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
        Validity
            Not Before: Feb 25 03:22:37 2026 GMT
            Not After : Feb 24 03:27:37 2027 GMT
        Subject: CN=6FB00EDAE2D081CB6A1419851A6129F7683DD308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:11:4d:f5:83:73:a4:ac:3b:b0:ba:4b:ca:
                    0c:27:ac:71:15:7b:f5:25:72:22:8c:c3:cd:dc:75:
                    9f:ee:60:b3:89:e1:41:77:b5:43:4f:64:8b:68:e7:
                    85:44:e8:08:c5:c4:9c:54:04:b5:c8:13:09:c8:d0:
                    84:81:65:2e:70:a3:7b:87:15:4f:14:06:11:94:d3:
                    c6:13:a9:58:19:37:03:22:b9:fe:18:1e:3c:70:3e:
                    54:76:52:5a:ce:77:ef:01:c9:0d:61:a5:9b:a9:cf:
                    71:4c:ad:82:05:b5:a2:ff:be:c3:4b:75:20:2e:9d:
                    67:71:03:21:be:c2:4f:c0:bf:8b:73:20:54:c8:4d:
                    7f:fc:88:99:4e:8a:f1:ee:de:b7:14:5e:83:d2:55:
                    2a:f0:dd:e9:9a:3b:af:70:dc:3a:ae:d8:dd:da:d3:
                    b2:a5:ff:f5:8c:4c:98:54:0e:06:8e:4a:0b:e5:59:
                    12:40:d7:bc:41:25:3f:3f:7c:41:cc:7b:cb:03:1c:
                    18:f0:5b:42:54:c8:cd:d8:d4:4d:1a:0a:dc:fe:d7:
                    9b:a6:5d:96:37:38:f2:79:00:ca:48:6b:7d:cf:05:
                    25:7d:e3:ea:ec:59:65:b5:e0:92:73:da:97:58:7c:
                    68:2b:e0:0f:3d:87:cb:c9:f0:1c:aa:34:00:3b:f1:
                    da:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B0:0E:DA:E2:D0:81:CB:6A:14:19:85:1A:61:29:F7:68:3D:D3:08
            X509v3 Authority Key Identifier:
                keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/323830343a343666633a3a2f33322d313238203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:cf:0d:31:23:b3:11:ff:a5:70:17:dc:81:20:ad:7f:04:30:
         c7:07:d8:4c:49:bd:60:58:07:7f:fa:40:ee:30:bc:8e:b6:d8:
         5a:59:b6:88:25:66:02:d6:a7:a3:cd:0c:12:ff:74:d0:55:62:
         5b:f6:28:3f:aa:d5:8f:33:da:ca:e1:b2:14:f0:35:c8:18:9b:
         f2:4f:fa:25:80:2f:ca:f1:2b:f7:4a:94:b4:bd:82:42:1c:c8:
         d2:93:9c:c5:37:27:ac:09:6c:79:c2:8a:da:b9:0e:17:61:52:
         a2:48:b5:f8:db:61:05:95:a1:fe:37:4c:4a:e1:6f:22:11:ba:
         be:6f:b9:1c:fe:0b:bb:5c:cd:93:06:9e:26:96:c4:b9:d8:12:
         88:ff:da:35:7b:eb:a0:49:dc:c4:94:24:2b:07:21:e6:a6:09:
         8e:02:ce:8f:3d:1f:ec:89:51:10:8a:34:b0:cc:97:fe:3a:1b:
         a7:90:3f:3f:75:11:7e:f0:3b:b5:51:1f:78:7f:84:38:c2:f0:
         a3:55:b7:5e:1e:b7:b8:e4:a7:c1:c4:29:6d:00:b1:81:02:18:
         da:7f:5f:63:0b:00:76:cf:83:8e:f6:bd:02:e3:70:e2:0c:79:
         68:d1:9d:0d:7e:5c:be:2c:9c:de:3d:35:41:56:4a:e3:7f:58:
         3a:47:25:71
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUaCfmVxOZHply6Ws3nFL8/c/yb6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMwQzE2RUEzQTNCODI2NTAxRDAyQUMyRTYyRUY5QTFD
RDk3MTIwQzAeFw0yNjAyMjUwMzIyMzdaFw0yNzAyMjQwMzI3MzdaMDMxMTAvBgNV
BAMTKDZGQjAwRURBRTJEMDgxQ0I2QTE0MTk4NTFBNjEyOUY3NjgzREQzMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPRFN9YNzpKw7sLpLygwnrHEV
e/UlciKMw83cdZ/uYLOJ4UF3tUNPZIto54VE6AjFxJxUBLXIEwnI0ISBZS5wo3uH
FU8UBhGU08YTqVgZNwMiuf4YHjxwPlR2UlrOd+8ByQ1hpZupz3FMrYIFtaL/vsNL
dSAunWdxAyG+wk/Av4tzIFTITX/8iJlOivHu3rcUXoPSVSrw3emaO69w3Dqu2N3a
07Kl//WMTJhUDgaOSgvlWRJA17xBJT8/fEHMe8sDHBjwW0JUyM3Y1E0aCtz+15um
XZY3OPJ5AMpIa33PBSV94+rsWWW14JJz2pdYfGgr4A89h8vJ8ByqNAA78dpxAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUb7AO2uLQgctqFBmFGmEp92g90wgwHwYDVR0j
BBgwFoAU3AwW6jo7gmUB0CrC5i75oc2XEgwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZ3dEM1b2g0OFpqR2FFS211SFJEUmo0Y05VN3M0U3ZhVXY2dnd0V3Vn
MU4vMS9EQzBDMTZFQTNBM0I4MjY1MDFEMDJBQzJFNjJFRjlBMUNEOTcxMjBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMEMxNkVBM0EzQjgyNjUw
MUQwMkFDMkU2MkVGOUExQ0Q5NzEyMEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGd3RDNW9oNDhaakdhRUttdUhSRFJqNGNOVTdzNFN2YVV2NnZ3dFd1ZzFOLzEv
MzIzODMwMzQzYTM0MzY2NjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczMDMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEb8MA0GCSqGSIb3DQEBCwUAA4IBAQBjzw0x
I7MR/6VwF9yBIK1/BDDHB9hMSb1gWAd/+kDuMLyOtthaWbaIJWYC1qejzQwS/3TQ
VWJb9ig/qtWPM9rK4bIU8DXIGJvyT/olgC/K8Sv3SpS0vYJCHMjSk5zFNyesCWx5
worauQ4XYVKiSLX422EFlaH+N0xK4W8iEbq+b7kc/gu7XM2TBp4mlsS52BKI/9o1
e+ugSdzElCQrByHmpgmOAs6PPR/siVEQijSwzJf+OhunkD8/dRF+8Du1UR94f4Q4
wvCjVbdeHre45KfBxCltALGBAhjaf19jCwB2z4OO9r0C43DiDHlo0Z0Nfly+LJze
PTVBVkrjf1g6RyVx
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:51:14 2026 by rpki-client