Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/323830343a3365383a3a2f33322d3438203d3e203238363633.roa
File:                     323830343a3365383a3a2f33322d3438203d3e203238363633.roa (raw, json)
Hash identifier:          2uLFZVG9GtJ8j6pYa17qcdQphjR0P01jjV9bJTohA4Y=
Subject key identifier:   53:73:DF:69:01:F1:1B:74:99:85:E4:DE:25:91:EA:89:E9:D1:D2:AA
Certificate issuer:       /CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
Certificate serial:       6C153417700EADE5D36BD942AA7DD5A721C7319D
Authority key identifier: 7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/323830343a3365383a3a2f33322d3438203d3e203238363633.roa
Signing time:             Wed 03 Jun 2026 14:32:43 +0000
ROA not before:           Wed 03 Jun 2026 14:27:43 +0000
ROA not after:            Wed 02 Jun 2027 14:32:43 +0000
asID:                     28663
IP address blocks:        2804:3e8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl
                          rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:15:34:17:70:0e:ad:e5:d3:6b:d9:42:aa:7d:d5:a7:21:c7:31:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2
        Validity
            Not Before: Jun  3 14:27:43 2026 GMT
            Not After : Jun  2 14:32:43 2027 GMT
        Subject: CN=5373DF6901F11B749985E4DE2591EA89E9D1D2AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5c:ae:4b:ff:d3:57:0b:17:01:25:d3:43:0c:
                    66:c0:00:65:50:dd:1b:d2:74:ad:2c:b4:c8:a3:77:
                    0b:f2:e0:30:4a:34:83:6d:54:ab:a4:8c:c6:af:aa:
                    d2:48:94:9c:05:93:c4:4d:37:90:3a:27:e8:31:07:
                    e8:e1:72:7d:55:33:03:6d:4c:7e:17:65:2d:53:b5:
                    b9:95:bc:10:68:f8:2d:58:dc:ca:6b:3e:bb:7d:22:
                    81:fe:3d:5b:90:91:b7:62:0f:d3:7e:22:3d:3f:1e:
                    12:94:17:ae:03:15:4d:41:c9:e9:4d:e8:00:7e:b3:
                    14:39:03:47:9d:4c:d3:ac:51:4a:e9:6e:91:5a:91:
                    67:16:a2:e5:e7:eb:fe:20:8a:b9:bf:1f:0b:c3:b4:
                    2a:ea:30:9f:c3:31:26:e8:3a:a2:9b:7a:5a:4f:2b:
                    82:14:8a:5d:cd:0e:ca:e1:f2:9c:00:d4:22:b7:da:
                    59:5e:98:46:5b:da:ac:a5:90:39:ec:41:d5:87:dc:
                    3d:c1:5d:f3:af:0f:6e:ec:dd:8f:94:4c:de:cf:d3:
                    78:f7:52:22:5c:3a:e6:aa:ae:42:03:bc:cb:66:5f:
                    54:7b:06:48:c5:6e:bc:f5:d7:f5:0e:2c:14:1c:a7:
                    91:fc:85:f4:52:ca:07:f8:cd:17:f6:ea:3d:53:48:
                    8d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:73:DF:69:01:F1:1B:74:99:85:E4:DE:25:91:EA:89:E9:D1:D2:AA
            X509v3 Authority Key Identifier:
                keyid:7A:BE:3E:FE:65:54:79:E0:79:ED:DC:B6:B0:CA:B5:29:7A:4F:38:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABE3EFE655479E079EDDCB6B0CAB5297A4F38E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Vy71tGVhujiVvFSt7rZBihdkDRAwowUPNJLww2AhvpT/0/323830343a3365383a3a2f33322d3438203d3e203238363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:80:4f:17:dc:91:91:44:3e:33:58:b0:18:af:12:c4:b8:22:
         ec:9c:0e:0a:90:2a:6b:25:8c:0f:33:3e:a0:28:0e:be:05:7e:
         59:cd:50:48:33:38:64:dc:f5:fc:a9:ba:09:6c:ec:1c:98:c1:
         e1:f4:dd:75:15:af:79:5a:29:90:2e:a2:4d:d5:df:71:4f:35:
         92:6e:78:9f:7d:9d:0e:3a:1e:0d:b1:e8:98:b8:88:13:be:52:
         b8:7e:80:b0:c1:b2:94:9b:09:2d:a7:0e:40:86:a4:fe:f6:73:
         a8:fe:fa:44:7b:06:2c:22:eb:ca:24:c3:2f:c7:2a:61:5c:cd:
         34:4b:51:5d:c8:c9:1a:82:3f:03:e6:f6:cb:dd:d0:58:5f:2f:
         5f:bd:87:8d:33:07:38:40:63:af:49:8c:31:ba:79:a6:03:c3:
         62:cc:ce:38:97:2a:10:9b:ea:59:86:05:28:28:3a:d6:9e:2c:
         8a:0a:7d:d4:d8:ed:55:f9:8f:88:2f:23:d6:43:18:6a:cd:af:
         06:55:19:61:e4:33:e3:b3:8f:14:26:fa:09:df:b7:01:5e:26:
         4b:ba:b5:ca:9e:93:52:31:0c:f8:b4:84:5c:6a:87:88:0a:28:
         20:53:ba:53:b1:ec:29:31:90:49:a0:ea:7f:d3:d3:a1:09:11:
         65:a9:b6:73
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUbBU0F3AOreXTa9lCqn3VpyHHMZ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FCRTNFRkU2NTU0NzlFMDc5RUREQ0I2QjBDQUI1Mjk3
QTRGMzhFMjAeFw0yNjA2MDMxNDI3NDNaFw0yNzA2MDIxNDMyNDNaMDMxMTAvBgNV
BAMTKDUzNzNERjY5MDFGMTFCNzQ5OTg1RTRERTI1OTFFQTg5RTlEMUQyQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfXK5L/9NXCxcBJdNDDGbAAGVQ
3RvSdK0stMijdwvy4DBKNINtVKukjMavqtJIlJwFk8RNN5A6J+gxB+jhcn1VMwNt
TH4XZS1TtbmVvBBo+C1Y3MprPrt9IoH+PVuQkbdiD9N+Ij0/HhKUF64DFU1ByelN
6AB+sxQ5A0edTNOsUUrpbpFakWcWouXn6/4girm/HwvDtCrqMJ/DMSboOqKbelpP
K4IUil3NDsrh8pwA1CK32llemEZb2qylkDnsQdWH3D3BXfOvD27s3Y+UTN7P03j3
UiJcOuaqrkIDvMtmX1R7BkjFbrz11/UOLBQcp5H8hfRSygf4zRf26j1TSI3vAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUU3PfaQHxG3SZheTeJZHqienR0qowHwYDVR0j
BBgwFoAUer4+/mVUeeB57dy2sMq1KXpPOOIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVZ5NzF0R1ZodWppVnZGU3Q3clpCaWhka0RSQXdvd1VQTkpMd3cyQWh2
cFQvMC83QUJFM0VGRTY1NTQ3OUUwNzlFRERDQjZCMENBQjUyOTdBNEYzOEUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBQkUzRUZFNjU1NDc5RTA3
OUVERENCNkIwQ0FCNTI5N0E0RjM4RTIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlWeTcxdEdWaHVqaVZ2RlN0N3JaQmloZGtEUkF3b3dVUE5KTHd3MkFodnBULzAv
MzIzODMwMzQzYTMzNjUzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzNjM2
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAPoMA0GCSqGSIb3DQEBCwUAA4IBAQB+gE8X3JGRRD4z
WLAYrxLEuCLsnA4KkCprJYwPMz6gKA6+BX5ZzVBIMzhk3PX8qboJbOwcmMHh9N11
Fa95WimQLqJN1d9xTzWSbniffZ0OOh4NseiYuIgTvlK4foCwwbKUmwktpw5AhqT+
9nOo/vpEewYsIuvKJMMvxyphXM00S1FdyMkagj8D5vbL3dBYXy9fvYeNMwc4QGOv
SYwxunmmA8NizM44lyoQm+pZhgUoKDrWniyKCn3U2O1V+Y+ILyPWQxhqza8GVRlh
5DPjs48UJvoJ37cBXiZLurXKnpNSMQz4tIRcaoeICiggU7pTsewpMZBJoOp/09Oh
CRFlqbZz
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:57:29 2026 by rpki-client