Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/323830343a386431303a3a2f33322d313238203d3e20323733333332.roa
File:                     323830343a386431303a3a2f33322d313238203d3e20323733333332.roa (raw, json)
Hash identifier:          /WHrl/SG0z+mJktp5DLSKPG5wA0iJikfaTfkyaKZWIM=
Subject key identifier:   54:86:0C:E5:B3:BB:56:BF:F9:B9:AA:AF:35:17:B5:49:A6:F8:55:22
Certificate issuer:       /CN=702838DD0B14B4FF3D09CE89247C34EBD427D264
Certificate serial:       37FD34348FEB5BECAECA2F2885B24DE0B3A0FA1B
Authority key identifier: 70:28:38:DD:0B:14:B4:FF:3D:09:CE:89:24:7C:34:EB:D4:27:D2:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/702838DD0B14B4FF3D09CE89247C34EBD427D264.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/323830343a386431303a3a2f33322d313238203d3e20323733333332.roa
Signing time:             Wed 14 Oct 2026 17:43:32 +0000
ROA not before:           Wed 14 Oct 2026 17:38:32 +0000
ROA not after:            Wed 13 Oct 2027 17:43:32 +0000
asID:                     273332
IP address blocks:        2804:8d10::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/702838DD0B14B4FF3D09CE89247C34EBD427D264.crl
                          rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/702838DD0B14B4FF3D09CE89247C34EBD427D264.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/702838DD0B14B4FF3D09CE89247C34EBD427D264.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 01:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fd:34:34:8f:eb:5b:ec:ae:ca:2f:28:85:b2:4d:e0:b3:a0:fa:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702838DD0B14B4FF3D09CE89247C34EBD427D264
        Validity
            Not Before: Oct 14 17:38:32 2026 GMT
            Not After : Oct 13 17:43:32 2027 GMT
        Subject: CN=54860CE5B3BB56BFF9B9AAAF3517B549A6F85522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a6:2f:84:d2:bf:31:61:f2:47:3d:83:62:b3:
                    62:7c:3c:c6:77:f6:11:d4:38:d8:a0:8c:78:5a:24:
                    0e:fc:9e:66:05:2a:d5:eb:b4:f2:ca:81:73:8b:69:
                    cd:db:cb:2d:11:9e:3f:d2:52:97:41:43:4b:72:98:
                    72:65:0b:64:e8:eb:27:e5:77:6d:1d:74:9a:83:68:
                    43:5b:5a:f0:72:32:f2:06:ed:9c:7d:ff:b0:12:05:
                    fe:5c:5c:a0:8c:e1:ba:8d:a8:08:60:c9:5f:c5:3a:
                    7a:5c:41:46:65:cf:41:8d:10:01:d0:6a:71:76:33:
                    7c:6c:e2:7f:28:ad:83:cd:6c:3b:96:03:dd:ca:28:
                    c9:df:0c:a5:1c:2f:86:c3:fb:8c:92:03:f3:03:57:
                    76:f7:79:b4:05:b9:7c:fb:fc:b4:b3:19:90:83:c5:
                    13:f2:aa:2f:fb:64:d6:27:3e:f0:f7:80:7a:1d:e0:
                    f5:ba:62:d2:69:5e:05:37:9d:38:eb:ce:3c:c9:fb:
                    2c:6a:42:76:83:82:44:6c:6f:3e:30:17:a4:e1:d9:
                    68:3c:05:2c:99:b8:da:f4:a6:9c:81:37:7d:e9:1f:
                    9f:1a:09:f6:0c:f1:be:49:60:e6:fe:2f:0c:be:b9:
                    b9:7d:c2:16:8a:67:7a:91:eb:df:b0:fd:8b:6e:37:
                    cc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:86:0C:E5:B3:BB:56:BF:F9:B9:AA:AF:35:17:B5:49:A6:F8:55:22
            X509v3 Authority Key Identifier:
                keyid:70:28:38:DD:0B:14:B4:FF:3D:09:CE:89:24:7C:34:EB:D4:27:D2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/702838DD0B14B4FF3D09CE89247C34EBD427D264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/702838DD0B14B4FF3D09CE89247C34EBD427D264.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/323830343a386431303a3a2f33322d313238203d3e20323733333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:c1:3d:67:bd:53:7d:b9:93:98:f6:bc:f4:79:b1:e6:bf:90:
         89:8e:ef:1d:7b:55:6c:e4:f0:15:73:d3:80:f8:98:05:9f:a3:
         af:87:83:20:df:02:f3:6b:f5:f6:4f:61:de:90:23:37:b2:ba:
         98:30:18:4b:7c:fc:41:51:0a:a1:c0:07:14:a6:47:e8:6e:e8:
         51:91:4d:7c:99:e0:71:49:4e:1c:0d:a9:8b:af:72:c8:08:f4:
         ce:5d:42:3e:51:12:08:92:85:2f:87:cf:bb:d4:e5:c0:53:b4:
         55:84:dd:cb:7c:6f:c4:02:b1:eb:a8:b1:7a:d4:ef:77:df:fc:
         08:a6:4f:a8:de:5c:85:ba:e4:0d:f9:12:38:95:37:f6:9a:46:
         29:91:f6:2c:4c:14:0f:fa:90:30:e3:a3:a3:51:a5:41:18:0d:
         62:fa:2b:6c:cb:2f:30:d0:b6:21:47:66:eb:59:e4:a1:f9:e8:
         6e:ef:2a:49:8e:b0:8e:f8:48:b5:fc:a1:4c:fc:53:d3:8f:3a:
         b0:68:6a:42:5f:b0:04:b7:af:c4:33:be:cf:f6:41:f5:11:13:
         39:91:a7:05:1f:92:f0:49:61:e6:1f:9b:19:cd:d7:ce:ec:97:
         ed:03:43:a1:11:10:cb:a4:20:8a:79:53:4c:37:99:d9:22:65:
         0b:ff:10:e0
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUN/00NI/rW+yuyi8ohbJN4LOg+hswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzAyODM4REQwQjE0QjRGRjNEMDlDRTg5MjQ3QzM0RUJE
NDI3RDI2NDAeFw0yNjEwMTQxNzM4MzJaFw0yNzEwMTMxNzQzMzJaMDMxMTAvBgNV
BAMTKDU0ODYwQ0U1QjNCQjU2QkZGOUI5QUFBRjM1MTdCNTQ5QTZGODU1MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/pi+E0r8xYfJHPYNis2J8PMZ3
9hHUONigjHhaJA78nmYFKtXrtPLKgXOLac3byy0Rnj/SUpdBQ0tymHJlC2To6yfl
d20ddJqDaENbWvByMvIG7Zx9/7ASBf5cXKCM4bqNqAhgyV/FOnpcQUZlz0GNEAHQ
anF2M3xs4n8orYPNbDuWA93KKMnfDKUcL4bD+4ySA/MDV3b3ebQFuXz7/LSzGZCD
xRPyqi/7ZNYnPvD3gHod4PW6YtJpXgU3nTjrzjzJ+yxqQnaDgkRsbz4wF6Th2Wg8
BSyZuNr0ppyBN33pH58aCfYM8b5JYOb+Lwy+ubl9whaKZ3qR69+w/YtuN8xLAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUVIYM5bO7Vr/5uaqvNRe1Sab4VSIwHwYDVR0j
BBgwFoAUcCg43QsUtP89Cc6JJHw069Qn0mQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGVOMll0SFdVMk5hZDNBYkpkWTZQTW5qVnI3VWlkeHJGcWlEVEhwb1l5
bzMvMC83MDI4MzhERDBCMTRCNEZGM0QwOUNFODkyNDdDMzRFQkQ0MjdEMjY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwMjgzOEREMEIxNEI0RkYz
RDA5Q0U4OTI0N0MzNEVCRDQyN0QyNjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhlTjJZdEhXVTJOYWQzQWJKZFk2UE1ualZyN1VpZHhyRnFpRFRIcG9ZeW8zLzAv
MzIzODMwMzQzYTM4NjQzMTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzMzMzMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBI0QMA0GCSqGSIb3DQEBCwUAA4IBAQC/wT1n
vVN9uZOY9rz0ebHmv5CJju8de1Vs5PAVc9OA+JgFn6Ovh4Mg3wLza/X2T2HekCM3
srqYMBhLfPxBUQqhwAcUpkfobuhRkU18meBxSU4cDamLr3LICPTOXUI+URIIkoUv
h8+71OXAU7RVhN3LfG/EArHrqLF61O933/wIpk+o3lyFuuQN+RI4lTf2mkYpkfYs
TBQP+pAw46OjUaVBGA1i+itsyy8w0LYhR2brWeSh+ehu7ypJjrCO+Ei1/KFM/FPT
jzqwaGpCX7AEt6/EM77P9kH1ERM5kacFH5LwSWHmH5sZzdfO7JftA0OhERDLpCCK
eVNMN5nZImUL/xDg
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:55:15 2026 by rpki-client