Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a626130303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a626130303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          cKtLGjumIn+r/SU7Uug0eAJ7NXF8OtaHzhUdBGPVCLc=
Subject key identifier:   99:D4:2B:CE:38:8F:10:AA:9C:1E:4F:E5:2B:94:C1:61:98:79:11:9C
Certificate issuer:       /CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
Certificate serial:       3676F3083E814ED3ADA9D93070F88DB281A474BB
Authority key identifier: 2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a626130303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Tue 09 Jun 2026 12:30:46 +0000
ROA not before:           Tue 09 Jun 2026 12:25:46 +0000
ROA not after:            Tue 08 Jun 2027 12:30:46 +0000
asID:                     262687
IP address blocks:        2804:385c:ba00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:76:f3:08:3e:81:4e:d3:ad:a9:d9:30:70:f8:8d:b2:81:a4:74:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
        Validity
            Not Before: Jun  9 12:25:46 2026 GMT
            Not After : Jun  8 12:30:46 2027 GMT
        Subject: CN=99D42BCE388F10AA9C1E4FE52B94C1619879119C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6c:5f:f8:13:d9:fc:45:0b:32:6b:c1:9d:9b:
                    da:1b:48:6e:cd:df:a0:92:c4:5e:08:80:c7:6f:93:
                    5a:3c:ed:2d:15:2f:65:c0:4f:46:ca:aa:e7:b8:7f:
                    b8:bc:f2:f2:31:bf:d4:c5:d4:02:84:62:cc:5c:b7:
                    18:03:e9:42:14:44:f2:96:4d:5f:4f:a4:82:06:c4:
                    1a:4c:f2:5b:18:0d:45:b4:d7:2d:49:ee:be:a4:15:
                    7e:ae:1d:07:ef:68:50:72:50:2c:5d:e9:87:f4:e9:
                    14:81:c5:03:8c:a5:d4:69:5f:20:ab:7b:79:db:b5:
                    b9:7a:59:c8:e1:92:4a:59:d3:17:47:93:c7:a3:a7:
                    b3:19:09:cd:0b:51:21:c3:88:51:8b:af:ec:8b:f8:
                    16:58:34:21:4f:db:e7:d9:0a:13:e1:ca:cd:b8:c8:
                    71:26:9e:5b:20:b9:69:81:41:a2:f0:d2:db:39:85:
                    aa:22:b3:1b:8b:37:6e:17:43:c8:b3:38:ea:54:57:
                    c3:25:1b:3e:bf:a8:44:b6:92:9a:10:3c:ba:e2:6e:
                    08:58:83:2a:71:43:72:29:96:2a:6f:7b:8c:44:15:
                    be:7b:74:e8:ad:7b:c4:be:31:00:72:f6:9d:45:a7:
                    46:6e:9d:10:3f:47:41:14:79:38:c0:88:e5:46:7c:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D4:2B:CE:38:8F:10:AA:9C:1E:4F:E5:2B:94:C1:61:98:79:11:9C
            X509v3 Authority Key Identifier:
                keyid:2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a626130303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:e2:22:a4:87:21:8c:f5:29:2b:71:a3:75:25:0a:6b:9a:bd:
         3d:21:2d:30:1d:1a:68:ed:d5:fc:82:75:2f:29:24:64:af:b6:
         df:d4:c0:8f:a9:b3:fc:1b:fc:48:e8:2c:4f:2c:a5:11:b7:45:
         05:81:8a:dd:d3:52:b9:66:80:cd:90:11:02:c5:2f:41:92:46:
         36:fa:8c:80:22:03:a8:cc:be:c2:c3:97:0a:68:de:8e:54:ff:
         29:44:73:18:0c:72:1d:5e:b8:d2:31:2a:40:c2:4c:02:cc:6b:
         d2:26:13:26:de:77:b0:f9:ba:9d:98:3c:cd:87:a5:b1:ec:ee:
         b7:54:32:61:cb:95:5c:4b:2e:63:4f:bb:88:3d:b4:07:c1:ce:
         6c:e5:39:ad:0e:81:cc:20:63:e0:d5:da:ef:65:d7:fe:91:34:
         0f:0f:c4:54:97:90:67:a0:d1:34:b3:9b:f5:2e:e0:be:6e:a5:
         92:23:12:d2:03:f9:e5:24:9e:dd:4d:be:17:d4:cc:76:22:7e:
         14:6b:8f:f3:8b:6f:dd:dc:93:e1:dc:30:64:f9:3f:70:84:c9:
         ce:24:9a:f1:78:28:f8:d0:07:51:93:e9:cb:2c:b0:47:8c:c3:
         18:e0:f8:49:54:58:6a:a2:bd:f0:0a:7e:8a:85:35:8b:1d:59:
         18:6b:d4:74
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUNnbzCD6BTtOtqdkwcPiNsoGkdLswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVEMjUxMjlDN0Q3NkI4RkQ2Q0ZGMjNDQzNDRjg2QTc5
NDk5NDMyOTAeFw0yNjA2MDkxMjI1NDZaFw0yNzA2MDgxMjMwNDZaMDMxMTAvBgNV
BAMTKDk5RDQyQkNFMzg4RjEwQUE5QzFFNEZFNTJCOTRDMTYxOTg3OTExOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkbF/4E9n8RQsya8Gdm9obSG7N
36CSxF4IgMdvk1o87S0VL2XAT0bKque4f7i88vIxv9TF1AKEYsxctxgD6UIURPKW
TV9PpIIGxBpM8lsYDUW01y1J7r6kFX6uHQfvaFByUCxd6Yf06RSBxQOMpdRpXyCr
e3nbtbl6WcjhkkpZ0xdHk8ejp7MZCc0LUSHDiFGLr+yL+BZYNCFP2+fZChPhys24
yHEmnlsguWmBQaLw0ts5haoisxuLN24XQ8izOOpUV8MlGz6/qES2kpoQPLribghY
gypxQ3Iplipve4xEFb57dOite8S+MQBy9p1Fp0ZunRA/R0EUeTjAiOVGfHxLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUmdQrzjiPEKqcHk/lK5TBYZh5EZwwHwYDVR0j
BBgwFoAULtJRKcfXa4/Wz/I8w8+Gp5SZQykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTlmQnZ2dXY0NVAxMWJ4MlZualYzb2d0OWpXQmNyTjMyVjFaU2Z5SG9y
NW8vMC8yRUQyNTEyOUM3RDc2QjhGRDZDRkYyM0NDM0NGODZBNzk0OTk0MzI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFRDI1MTI5QzdENzZCOEZE
NkNGRjIzQ0MzQ0Y4NkE3OTQ5OTQzMjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5ZkJ2dnV2NDVQMTFieDJWbmpWM29ndDlqV0Jjck4zMlYxWlNmeUhvcjVvLzAv
MzIzODMwMzQzYTMzMzgzNTYzM2E2MjYxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzMjM2MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEOFy6MA0GCSqGSIb3DQEBCwUA
A4IBAQAd4iKkhyGM9SkrcaN1JQprmr09IS0wHRpo7dX8gnUvKSRkr7bf1MCPqbP8
G/xI6CxPLKURt0UFgYrd01K5ZoDNkBECxS9BkkY2+oyAIgOozL7Cw5cKaN6OVP8p
RHMYDHIdXrjSMSpAwkwCzGvSJhMm3new+bqdmDzNh6Wx7O63VDJhy5VcSy5jT7uI
PbQHwc5s5TmtDoHMIGPg1drvZdf+kTQPD8RUl5BnoNE0s5v1LuC+bqWSIxLSA/nl
JJ7dTb4X1Mx2In4Ua4/zi2/d3JPh3DBk+T9whMnOJJrxeCj40AdRk+nLLLBHjMMY
4PhJVFhqor3wCn6KhTWLHVkYa9R0
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:06:42 2026 by rpki-client