Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ABM7Y4kwEbXfTDTazAoRfJALD6ooc2bCLkmWshL6G3nF/0/323830343a376362343a3a2f33322d3430203d3e20323731353133.roa
File:                     323830343a376362343a3a2f33322d3430203d3e20323731353133.roa (raw, json)
Hash identifier:          lB9tvkIvp0T27rm+9y+gME3VZkJTJxjiSG8Vpks95vo=
Subject key identifier:   A6:E7:3B:56:98:2F:4C:FE:FB:A3:CA:FF:C6:FA:1D:56:02:BE:53:C0
Certificate issuer:       /CN=27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C
Certificate serial:       08A1DDE77A74EB969042D0AF721E6973A6FC0B5D
Authority key identifier: 27:79:1B:25:4E:6E:44:4C:2D:F8:EB:D6:B3:E6:FF:1D:5D:06:67:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABM7Y4kwEbXfTDTazAoRfJALD6ooc2bCLkmWshL6G3nF/0/323830343a376362343a3a2f33322d3430203d3e20323731353133.roa
Signing time:             Wed 07 Oct 2026 22:56:57 +0000
ROA not before:           Wed 07 Oct 2026 22:51:57 +0000
ROA not after:            Wed 06 Oct 2027 22:56:57 +0000
asID:                     271513
IP address blocks:        2804:7cb4::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABM7Y4kwEbXfTDTazAoRfJALD6ooc2bCLkmWshL6G3nF/0/27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C.crl
                          rsync://rpki-repo.registro.br/repo/ABM7Y4kwEbXfTDTazAoRfJALD6ooc2bCLkmWshL6G3nF/0/27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 22:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a1:dd:e7:7a:74:eb:96:90:42:d0:af:72:1e:69:73:a6:fc:0b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C
        Validity
            Not Before: Oct  7 22:51:57 2026 GMT
            Not After : Oct  6 22:56:57 2027 GMT
        Subject: CN=A6E73B56982F4CFEFBA3CAFFC6FA1D5602BE53C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:c1:5c:55:28:28:2d:e3:69:99:39:e9:0f:
                    de:bb:d3:cd:a6:d1:88:fd:af:19:a7:e2:8c:dc:41:
                    67:f7:f2:c1:37:06:b7:78:b0:c1:1e:e6:b6:52:67:
                    d3:e7:0b:29:d6:97:c0:e0:54:b1:1d:da:f2:fc:c7:
                    07:08:46:4d:db:96:0f:36:41:4b:3e:ed:0a:ca:ef:
                    6e:9b:05:c5:c5:6f:4c:f1:5e:82:bc:c5:d5:0d:8c:
                    03:7b:4a:76:00:6b:a3:eb:42:8a:b5:b1:a2:06:39:
                    43:79:66:a8:d7:ff:b3:a0:45:0f:b0:97:82:1b:52:
                    8a:11:cf:19:17:e5:ec:f3:5b:e4:ba:e7:35:9d:ec:
                    78:6b:2a:b4:06:9a:fc:68:c5:a6:cb:ac:df:5b:c6:
                    a3:9d:cf:4a:46:7f:a7:a2:75:99:9c:d8:90:96:c2:
                    82:ee:da:04:1f:d9:4e:8a:f2:1f:08:f3:2f:00:82:
                    a0:83:c7:73:98:44:fd:dc:8b:2e:fb:d8:ae:11:e7:
                    fb:e4:27:0c:8a:6e:a6:0a:33:63:dc:97:8a:e3:b3:
                    33:2c:d5:db:3f:2e:7d:d1:b7:3c:a1:18:9c:a8:78:
                    09:f8:76:41:c7:86:82:fb:98:8b:02:d9:6b:ab:51:
                    68:d9:03:46:7c:4b:81:62:a9:3d:ae:85:76:e8:07:
                    c2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E7:3B:56:98:2F:4C:FE:FB:A3:CA:FF:C6:FA:1D:56:02:BE:53:C0
            X509v3 Authority Key Identifier:
                keyid:27:79:1B:25:4E:6E:44:4C:2D:F8:EB:D6:B3:E6:FF:1D:5D:06:67:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABM7Y4kwEbXfTDTazAoRfJALD6ooc2bCLkmWshL6G3nF/0/27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27791B254E6E444C2DF8EBD6B3E6FF1D5D06673C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABM7Y4kwEbXfTDTazAoRfJALD6ooc2bCLkmWshL6G3nF/0/323830343a376362343a3a2f33322d3430203d3e20323731353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:08:8b:fa:a5:c3:52:36:46:99:4a:28:9b:52:aa:05:7a:1b:
         a4:e8:4a:1b:eb:da:76:1c:5d:38:93:5e:fd:93:ee:93:09:d9:
         85:a2:99:c2:f3:36:ff:00:45:6b:dc:9c:3e:2b:9d:16:8e:74:
         c0:20:8d:fb:aa:14:ed:13:09:55:43:b0:ff:f9:1f:0a:2d:7e:
         96:29:fd:4b:86:3c:b8:97:88:93:5b:40:52:eb:ac:22:6c:7b:
         f9:02:c9:81:5c:43:1f:0b:89:9f:31:f7:6f:fa:37:2e:da:cd:
         3a:e4:c8:58:b5:f7:fb:f8:82:06:80:fa:3e:ef:95:10:f9:b3:
         3a:10:d2:6e:cd:9c:ee:40:c3:5d:19:7d:cc:ba:b4:52:ea:35:
         6d:2b:bb:e5:49:1c:0f:b5:6e:a6:4f:35:d8:8a:d6:85:ec:85:
         75:55:8f:b3:9e:8b:45:f9:22:0c:24:9a:22:eb:b0:8e:c5:d6:
         8a:1e:0d:f2:41:a5:63:33:1e:19:1d:a0:df:89:3a:13:b2:0b:
         cb:2d:c5:db:c1:81:84:e1:b0:4c:6c:2b:90:12:f8:af:8f:3f:
         86:df:87:27:bf:a9:bc:25:d1:79:73:b6:d6:76:35:36:18:38:
         b2:1b:b8:9e:9d:21:34:fb:9b:39:cb:54:83:25:f3:9b:68:61:
         02:29:da:b0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCKHd53p065aQQtCvch5pc6b8C10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc3OTFCMjU0RTZFNDQ0QzJERjhFQkQ2QjNFNkZGMUQ1
RDA2NjczQzAeFw0yNjEwMDcyMjUxNTdaFw0yNzEwMDYyMjU2NTdaMDMxMTAvBgNV
BAMTKEE2RTczQjU2OTgyRjRDRkVGQkEzQ0FGRkM2RkExRDU2MDJCRTUzQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOMMFcVSgoLeNpmTnpD967082m
0Yj9rxmn4ozcQWf38sE3Brd4sMEe5rZSZ9PnCynWl8DgVLEd2vL8xwcIRk3blg82
QUs+7QrK726bBcXFb0zxXoK8xdUNjAN7SnYAa6PrQoq1saIGOUN5ZqjX/7OgRQ+w
l4IbUooRzxkX5ezzW+S65zWd7HhrKrQGmvxoxabLrN9bxqOdz0pGf6eidZmc2JCW
woLu2gQf2U6K8h8I8y8AgqCDx3OYRP3ciy772K4R5/vkJwyKbqYKM2Pcl4rjszMs
1ds/Ln3RtzyhGJyoeAn4dkHHhoL7mIsC2WurUWjZA0Z8S4FiqT2uhXboB8K/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUpuc7VpgvTP77o8r/xvodVgK+U8AwHwYDVR0j
BBgwFoAUJ3kbJU5uREwt+OvWs+b/HV0GZzwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUJNN1k0a3dFYlhmVERUYXpBb1JmSkFMRDZvb2MyYkNMa21Xc2hMNkcz
bkYvMC8yNzc5MUIyNTRFNkU0NDRDMkRGOEVCRDZCM0U2RkYxRDVEMDY2NzNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3NzkxQjI1NEU2RTQ0NEMy
REY4RUJENkIzRTZGRjFENUQwNjY3M0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FCTTdZNGt3RWJYZlREVGF6QW9SZkpBTEQ2b29jMmJDTGttV3NoTDZHM25GLzAv
MzIzODMwMzQzYTM3NjM2MjM0M2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzNzMx
MzUzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR8tDANBgkqhkiG9w0BAQsFAAOCAQEAcgiL+qXD
UjZGmUoom1KqBXobpOhKG+vadhxdOJNe/ZPukwnZhaKZwvM2/wBFa9ycPiudFo50
wCCN+6oU7RMJVUOw//kfCi1+lin9S4Y8uJeIk1tAUuusImx7+QLJgVxDHwuJnzH3
b/o3LtrNOuTIWLX3+/iCBoD6Pu+VEPmzOhDSbs2c7kDDXRl9zLq0Uuo1bSu75Ukc
D7Vupk812IrWheyFdVWPs56LRfkiDCSaIuuwjsXWih4N8kGlYzMeGR2g34k6E7IL
yy3F28GBhOGwTGwrkBL4r48/ht+HJ7+pvCXReXO21nY1Nhg4shu4np0hNPubOctU
gyXzm2hhAinasA==
-----END CERTIFICATE-----
Generated at Sun Oct 18 04:10:29 2026 by rpki-client