Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/323830343a363561383a3a2f33322d3438203d3e20323639353036.roa
File:                     323830343a363561383a3a2f33322d3438203d3e20323639353036.roa (raw, json)
Hash identifier:          7qP5SNQMKUtHSnDTdr++FpT9KSR8JXWKYIB8q1f8nAk=
Subject key identifier:   F1:55:F6:A0:7F:6E:79:2B:B7:F0:58:B1:26:82:14:04:5C:90:4A:F0
Certificate issuer:       /CN=E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E
Certificate serial:       508D186F616C8E7D9D39E4D3F1D7B62CF47189D2
Authority key identifier: E5:2C:FD:D7:9A:BB:4B:9B:26:A8:AA:C3:84:6C:96:32:6A:03:EE:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/323830343a363561383a3a2f33322d3438203d3e20323639353036.roa
Signing time:             Thu 03 Sep 2026 23:28:43 +0000
ROA not before:           Thu 03 Sep 2026 23:23:43 +0000
ROA not after:            Thu 02 Sep 2027 23:28:43 +0000
asID:                     269506
IP address blocks:        2804:65a8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.crl
                          rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 09:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8d:18:6f:61:6c:8e:7d:9d:39:e4:d3:f1:d7:b6:2c:f4:71:89:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E
        Validity
            Not Before: Sep  3 23:23:43 2026 GMT
            Not After : Sep  2 23:28:43 2027 GMT
        Subject: CN=F155F6A07F6E792BB7F058B1268214045C904AF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8b:3e:17:1e:43:e4:35:92:2f:f7:d5:37:96:
                    0f:87:60:4c:38:1f:4a:97:55:a9:21:90:e0:07:c6:
                    9a:29:f8:dd:ea:37:9e:88:a7:ba:f2:df:66:ab:e7:
                    f6:87:f7:92:f0:6c:ec:d7:b9:99:e6:4d:84:dd:d7:
                    c9:e0:4a:ae:2d:e7:32:e1:78:7e:da:9e:c7:00:0a:
                    32:c7:be:55:ac:a8:f5:cb:dc:2e:e2:d9:03:0c:52:
                    32:b9:1d:94:94:99:ec:b0:bb:70:74:3e:11:ab:b4:
                    f5:67:51:0b:43:c8:d9:e9:3a:13:e8:af:be:5d:04:
                    ac:60:58:76:6e:29:0e:e4:71:9a:7f:1d:e7:f9:9f:
                    21:00:8a:7d:d9:5a:48:9c:87:af:e4:22:c5:52:11:
                    79:86:66:34:a1:49:61:76:9c:23:66:07:6c:ee:66:
                    2f:2f:7b:e1:bd:f9:91:54:41:6f:53:65:40:4d:3c:
                    9a:99:1e:18:b0:51:54:e5:3d:1b:fb:62:76:ca:62:
                    a6:90:b0:0a:8d:87:f0:4c:26:db:16:9f:e9:21:30:
                    a9:7b:d1:e8:db:34:bc:c6:32:f5:fa:62:0a:55:23:
                    73:a0:7b:f6:8c:ab:b4:bd:5f:1f:c4:9f:86:b7:a4:
                    77:b4:a6:aa:bd:d1:ab:63:89:43:aa:6c:c8:be:a6:
                    f1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:55:F6:A0:7F:6E:79:2B:B7:F0:58:B1:26:82:14:04:5C:90:4A:F0
            X509v3 Authority Key Identifier:
                keyid:E5:2C:FD:D7:9A:BB:4B:9B:26:A8:AA:C3:84:6C:96:32:6A:03:EE:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/323830343a363561383a3a2f33322d3438203d3e20323639353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:6e:77:78:dd:aa:84:a1:3f:c0:4a:d9:68:3b:ba:f5:6a:86:
         04:bf:70:30:3f:3b:c9:fc:f2:8f:6d:5d:f8:a6:30:4f:02:5b:
         23:c0:db:cd:e8:30:3b:06:b6:7c:cc:95:ea:81:2e:55:90:f5:
         f4:42:f8:df:a8:0f:4c:d8:f4:64:a2:40:dd:5c:4f:4f:68:62:
         2f:56:1a:c7:7b:25:2c:73:28:3a:8a:9a:94:bb:1c:e2:8a:98:
         6c:f9:15:cb:0c:ab:fe:08:c9:03:be:3e:69:59:9a:37:95:64:
         28:aa:40:37:ba:fe:5d:5c:cb:8a:ce:5a:8e:5b:af:56:3d:ca:
         ec:5e:f3:6a:ce:b4:02:85:5f:b1:31:7d:29:6c:51:41:07:c7:
         62:7f:be:36:d1:80:7d:c5:63:0a:1e:52:9e:35:60:4f:4a:e1:
         c9:2e:7a:d5:be:69:39:4e:2b:7e:de:a6:2e:f9:71:67:f7:0b:
         a1:62:d3:d8:36:0b:04:0b:5f:f5:4d:6b:2d:94:67:0b:55:1d:
         98:57:4e:ae:8d:a2:fb:e4:25:21:1e:9f:1a:70:1f:0e:6a:54:
         53:4b:86:3c:4f:6e:54:6d:4f:d6:96:8b:89:a8:50:df:4a:b0:
         54:45:b6:53:8e:b7:2e:dc:b5:ff:db:f6:52:c1:f6:58:7b:eb:
         cd:e0:65:f7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUI0Yb2Fsjn2dOeTT8de2LPRxidIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUyQ0ZERDc5QUJCNEI5QjI2QThBQUMzODQ2Qzk2MzI2
QTAzRUUwRTAeFw0yNjA5MDMyMzIzNDNaFw0yNzA5MDIyMzI4NDNaMDMxMTAvBgNV
BAMTKEYxNTVGNkEwN0Y2RTc5MkJCN0YwNThCMTI2ODIxNDA0NUM5MDRBRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTiz4XHkPkNZIv99U3lg+HYEw4
H0qXVakhkOAHxpop+N3qN56Ip7ry32ar5/aH95LwbOzXuZnmTYTd18ngSq4t5zLh
eH7anscACjLHvlWsqPXL3C7i2QMMUjK5HZSUmeywu3B0PhGrtPVnUQtDyNnpOhPo
r75dBKxgWHZuKQ7kcZp/Hef5nyEAin3ZWkich6/kIsVSEXmGZjShSWF2nCNmB2zu
Zi8ve+G9+ZFUQW9TZUBNPJqZHhiwUVTlPRv7YnbKYqaQsAqNh/BMJtsWn+khMKl7
0ejbNLzGMvX6YgpVI3Oge/aMq7S9Xx/En4a3pHe0pqq90atjiUOqbMi+pvHdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU8VX2oH9ueSu38FixJoIUBFyQSvAwHwYDVR0j
BBgwFoAU5Sz915q7S5smqKrDhGyWMmoD7g4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEg1dG1kRmVDVmJ0UzQxR2E4bk5ucncxNVRyQU5vRDZrWFFUZThxNDJK
TEsvMC9FNTJDRkRENzlBQkI0QjlCMjZBOEFBQzM4NDZDOTYzMjZBMDNFRTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1MkNGREQ3OUFCQjRCOUIy
NkE4QUFDMzg0NkM5NjMyNkEwM0VFMEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhINXRtZEZlQ1ZidFM0MUdhOG5ObnJ3MTVUckFOb0Q2a1hRVGU4cTQySkxLLzAv
MzIzODMwMzQzYTM2MzU2MTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5
MzUzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARlqDANBgkqhkiG9w0BAQsFAAOCAQEAgm53eN2q
hKE/wErZaDu69WqGBL9wMD87yfzyj21d+KYwTwJbI8DbzegwOwa2fMyV6oEuVZD1
9EL436gPTNj0ZKJA3VxPT2hiL1Yax3slLHMoOoqalLsc4oqYbPkVywyr/gjJA74+
aVmaN5VkKKpAN7r+XVzLis5ajluvVj3K7F7zas60AoVfsTF9KWxRQQfHYn++NtGA
fcVjCh5SnjVgT0rhyS561b5pOU4rft6mLvlxZ/cLoWLT2DYLBAtf9U1rLZRnC1Ud
mFdOro2i++QlIR6fGnAfDmpUU0uGPE9uVG1P1paLiahQ30qwVEW2U463Lty1/9v2
UsH2WHvrzeBl9w==
-----END CERTIFICATE-----
Generated at Thu Oct 15 19:36:09 2026 by rpki-client