Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a363030303a3a2f33362d3336203d3e20323638353738.roa
File:                     323830343a353335383a363030303a3a2f33362d3336203d3e20323638353738.roa (raw, json)
Hash identifier:          4cXV9F+HlnA04jF0ari1Tocosbjr7QCahzvsHzy5vCk=
Subject key identifier:   D9:9C:CB:EA:42:AA:C8:23:03:6E:8D:04:5D:AA:59:17:A7:FC:A5:A1
Certificate issuer:       /CN=AC4877562548C664D7DBA0D327B2F231710DC102
Certificate serial:       641BCF35D2B4AEBEFF616075E8DC0EB597E4B055
Authority key identifier: AC:48:77:56:25:48:C6:64:D7:DB:A0:D3:27:B2:F2:31:71:0D:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a363030303a3a2f33362d3336203d3e20323638353738.roa
Signing time:             Thu 17 Sep 2026 02:36:29 +0000
ROA not before:           Thu 17 Sep 2026 02:31:29 +0000
ROA not after:            Thu 16 Sep 2027 02:36:29 +0000
asID:                     268578
IP address blocks:        2804:5358:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.crl
                          rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 02:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:1b:cf:35:d2:b4:ae:be:ff:61:60:75:e8:dc:0e:b5:97:e4:b0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC4877562548C664D7DBA0D327B2F231710DC102
        Validity
            Not Before: Sep 17 02:31:29 2026 GMT
            Not After : Sep 16 02:36:29 2027 GMT
        Subject: CN=D99CCBEA42AAC823036E8D045DAA5917A7FCA5A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:27:1d:9f:65:c5:c4:55:ec:7f:b0:e8:08:ba:
                    e6:37:d2:be:10:2d:8c:00:d4:c8:19:a9:4c:78:4b:
                    8a:2c:23:42:fa:b8:90:0a:ae:4f:89:2e:66:21:6b:
                    57:39:3f:e3:df:4d:bd:9d:d5:b2:e5:74:72:ec:53:
                    20:00:0d:5f:fc:6e:8a:fd:0d:12:4e:4d:ea:4f:82:
                    3a:f9:e6:6a:04:ba:9c:c1:1f:6f:8f:cd:e5:3b:f5:
                    b7:42:26:23:49:b5:dd:ae:d3:35:e1:78:52:0d:4b:
                    c7:a6:63:bf:f3:5b:ec:41:ec:52:c3:7a:e1:49:e6:
                    f7:df:e6:1e:0f:f4:2b:ed:c2:97:29:a5:1f:d8:ef:
                    4c:89:e2:5e:14:1d:7f:0b:81:b7:b8:de:00:22:00:
                    ec:8c:9e:c5:09:87:d6:ea:22:2f:0b:5e:60:1d:77:
                    90:94:81:d3:1b:f9:bb:04:9c:1d:fa:86:53:45:e1:
                    c1:77:9c:37:25:24:4e:06:15:68:b6:06:b0:8c:90:
                    85:5d:af:60:d1:e2:49:3e:3e:b6:d3:6e:6e:aa:39:
                    41:4f:ea:d1:b5:07:15:74:20:f0:f1:57:4b:c6:3d:
                    d1:6d:0a:86:09:a1:a0:f1:e8:33:fc:f2:08:80:93:
                    9b:f4:f0:16:e3:27:48:8c:88:e6:2a:b4:65:88:e7:
                    41:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9C:CB:EA:42:AA:C8:23:03:6E:8D:04:5D:AA:59:17:A7:FC:A5:A1
            X509v3 Authority Key Identifier:
                keyid:AC:48:77:56:25:48:C6:64:D7:DB:A0:D3:27:B2:F2:31:71:0D:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a363030303a3a2f33362d3336203d3e20323638353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5358:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         30:78:ce:da:4d:cc:73:26:f2:c0:4e:f7:05:c8:88:f6:0a:74:
         8a:d1:57:47:09:39:c0:33:19:b3:08:9e:76:97:fe:35:7d:0c:
         3d:27:8e:6c:c7:9a:d9:59:cd:f9:1a:44:0d:fa:c9:6e:8a:5b:
         8e:4c:9b:4a:8e:50:57:c3:20:1e:3a:5a:dd:06:94:c7:9e:51:
         3e:9b:5f:21:05:85:3b:e2:34:6c:82:59:a8:5d:45:34:cf:48:
         3c:23:c3:77:5a:2a:0f:54:04:e3:c1:e9:14:4a:75:63:5b:63:
         17:c4:2f:70:d1:a5:52:e4:11:df:e1:cc:da:9a:c8:e9:9d:cc:
         c1:d8:e8:e6:54:61:3e:d6:71:a4:24:93:16:63:a8:56:13:00:
         ad:a8:fb:3b:52:70:28:d7:fe:20:2a:12:22:89:50:8c:ff:6f:
         e4:9f:a4:32:39:49:a8:1d:51:ec:1c:45:11:85:37:07:63:7c:
         7e:9f:25:b1:69:75:40:91:b5:de:c8:27:cd:28:7e:f8:ca:3f:
         1c:e9:1b:05:26:b7:46:3c:7a:0b:a7:97:de:35:8a:00:85:06:
         0d:9a:ce:56:f9:89:17:e1:6b:51:de:06:ec:f1:c6:ef:31:41:
         e8:a9:6b:53:e7:f3:e5:8d:ca:53:28:a1:dd:a0:0f:fb:d4:9e:
         5a:bc:2c:79
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZBvPNdK0rr7/YWB16NwOtZfksFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM0ODc3NTYyNTQ4QzY2NEQ3REJBMEQzMjdCMkYyMzE3
MTBEQzEwMjAeFw0yNjA5MTcwMjMxMjlaFw0yNzA5MTYwMjM2MjlaMDMxMTAvBgNV
BAMTKEQ5OUNDQkVBNDJBQUM4MjMwMzZFOEQwNDVEQUE1OTE3QTdGQ0E1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdJx2fZcXEVex/sOgIuuY30r4Q
LYwA1MgZqUx4S4osI0L6uJAKrk+JLmYha1c5P+PfTb2d1bLldHLsUyAADV/8bor9
DRJOTepPgjr55moEupzBH2+PzeU79bdCJiNJtd2u0zXheFINS8emY7/zW+xB7FLD
euFJ5vff5h4P9CvtwpcppR/Y70yJ4l4UHX8Lgbe43gAiAOyMnsUJh9bqIi8LXmAd
d5CUgdMb+bsEnB36hlNF4cF3nDclJE4GFWi2BrCMkIVdr2DR4kk+PrbTbm6qOUFP
6tG1BxV0IPDxV0vGPdFtCoYJoaDx6DP88giAk5v08BbjJ0iMiOYqtGWI50FVAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU2ZzL6kKqyCMDbo0EXapZF6f8paEwHwYDVR0j
BBgwFoAUrEh3ViVIxmTX26DTJ7LyMXENwQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTVLcG9XM0FxdFZjcjVMeks3U25mcVU2TXhYYlYyMlJSTG9oaWc5ZFBm
WksvMC9BQzQ4Nzc1NjI1NDhDNjY0RDdEQkEwRDMyN0IyRjIzMTcxMERDMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDNDg3NzU2MjU0OEM2NjRE
N0RCQTBEMzI3QjJGMjMxNzEwREMxMDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk1S3BvVzNBcXRWY3I1THpLN1NuZnFVNk14WGJWMjJSUkxvaGlnOWRQZlpLLzAv
MzIzODMwMzQzYTM1MzMzNTM4M2EzNjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODM1MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEU1hgMA0GCSqGSIb3DQEBCwUA
A4IBAQAweM7aTcxzJvLATvcFyIj2CnSK0VdHCTnAMxmzCJ52l/41fQw9J45sx5rZ
Wc35GkQN+sluiluOTJtKjlBXwyAeOlrdBpTHnlE+m18hBYU74jRsglmoXUU0z0g8
I8N3WioPVATjwekUSnVjW2MXxC9w0aVS5BHf4czamsjpnczB2OjmVGE+1nGkJJMW
Y6hWEwCtqPs7UnAo1/4gKhIiiVCM/2/kn6QyOUmoHVHsHEURhTcHY3x+nyWxaXVA
kbXeyCfNKH74yj8c6RsFJrdGPHoLp5feNYoAhQYNms5W+YkX4WtR3gbs8cbvMUHo
qWtT5/PljcpTKKHdoA/71J5avCx5
-----END CERTIFICATE-----
Generated at Sun Sep 20 10:57:23 2026 by rpki-client