Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a393030303a3a2f33362d3336203d3e20323638373037.roa
File:                     323830343a353938343a393030303a3a2f33362d3336203d3e20323638373037.roa (raw, json)
Hash identifier:          EsvlZltfQ5qfAewIz7L+KtWc+sL088cFzJPz4hsNYvk=
Subject key identifier:   C9:F1:B2:BD:17:DD:D8:3C:67:EF:FC:A4:EC:54:22:34:4C:99:DC:7D
Certificate issuer:       /CN=C35549FD881F7AAE59D817159EC9B19049B93616
Certificate serial:       5346BBA26F7AC39B40043610843D0EDD05E7C94C
Authority key identifier: C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a393030303a3a2f33362d3336203d3e20323638373037.roa
Signing time:             Sun 06 Sep 2026 20:12:58 +0000
ROA not before:           Sun 06 Sep 2026 20:07:58 +0000
ROA not after:            Sun 05 Sep 2027 20:12:58 +0000
asID:                     268707
IP address blocks:        2804:5984:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl
                          rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 10:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:46:bb:a2:6f:7a:c3:9b:40:04:36:10:84:3d:0e:dd:05:e7:c9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C35549FD881F7AAE59D817159EC9B19049B93616
        Validity
            Not Before: Sep  6 20:07:58 2026 GMT
            Not After : Sep  5 20:12:58 2027 GMT
        Subject: CN=C9F1B2BD17DDD83C67EFFCA4EC5422344C99DC7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:e1:7d:58:8a:b9:a4:a9:20:5f:65:8e:3d:
                    7f:56:77:b4:d5:72:ae:9a:9a:33:d3:fa:c5:a6:40:
                    10:e5:de:eb:16:fd:7c:bb:1f:2d:03:43:21:0e:e0:
                    b3:17:3a:2b:e6:16:8c:8f:b3:28:72:e3:93:96:43:
                    20:29:a0:f9:01:ba:0a:3d:8c:15:91:a8:35:d0:95:
                    d9:0b:ff:b4:83:8e:86:d9:5b:11:fd:43:54:63:87:
                    55:d3:8c:f2:b3:e8:2a:8a:dd:ee:e2:02:c4:7e:97:
                    40:cd:85:7d:1a:73:05:61:be:1d:79:bf:4f:6f:5b:
                    3a:fd:ca:11:e2:03:85:55:75:00:c4:f8:2e:25:d9:
                    5a:5a:ec:87:05:ef:f0:2e:6f:89:4d:cd:96:22:a1:
                    72:5e:1f:dc:70:4b:e2:21:da:ce:39:1c:90:42:a5:
                    c2:d7:84:e9:06:27:c5:1b:26:49:d8:5c:24:05:8b:
                    53:07:6e:98:35:ed:8c:82:74:43:24:00:cc:59:e4:
                    f9:79:5d:68:7b:83:91:3a:2a:1b:1d:68:44:f5:45:
                    67:b5:03:43:83:0c:a4:d6:11:12:d8:ef:a3:88:c0:
                    94:fe:ff:f6:ff:b2:95:4f:27:98:3d:6e:b5:13:3e:
                    01:59:74:39:33:c5:79:df:df:b2:43:1d:a0:9c:a7:
                    bc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F1:B2:BD:17:DD:D8:3C:67:EF:FC:A4:EC:54:22:34:4C:99:DC:7D
            X509v3 Authority Key Identifier:
                keyid:C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a393030303a3a2f33362d3336203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8a:a2:ec:c5:d2:47:bf:d6:9d:1d:7e:7d:dc:fc:f7:57:72:80:
         53:6c:88:ef:de:2b:2f:a1:7d:01:03:ae:81:39:41:32:6f:9c:
         cd:45:0f:af:78:b5:fe:00:1d:ec:7d:08:50:ac:f5:5d:cb:53:
         50:4d:e0:68:e4:d6:b6:70:0a:b6:30:d5:47:77:6f:47:9c:23:
         56:89:12:dc:b9:dc:d2:73:75:f5:6d:a2:0e:14:8c:54:23:bd:
         c2:ac:52:0d:a0:f0:3f:46:cd:b4:3d:1d:0f:95:ea:9a:e6:a1:
         49:2f:ae:bd:7a:8e:e6:ca:2a:1b:9a:96:c2:10:29:65:81:e7:
         95:87:8e:3f:af:f6:17:84:f2:07:9e:93:7d:5d:f7:de:1f:66:
         6a:29:97:c3:b1:d9:6d:cd:50:11:f1:1e:26:16:51:18:bb:da:
         32:63:9f:9e:bc:56:cd:64:ce:cf:0f:9c:67:50:a1:85:f3:2f:
         d1:88:91:52:8f:1d:40:f2:86:c2:59:95:b5:ef:69:ae:1e:42:
         18:3a:05:ba:f5:03:94:d8:07:2c:fb:d0:b1:ce:c8:b5:f9:ce:
         e2:de:7e:3f:c7:02:a0:14:41:0c:a0:27:f4:1a:05:ee:24:67:
         98:ac:09:f6:31:5d:ce:5c:93:50:f9:8a:56:a3:de:43:3a:73:
         6a:88:e5:1c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUU0a7om96w5tABDYQhD0O3QXnyUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM1NTQ5RkQ4ODFGN0FBRTU5RDgxNzE1OUVDOUIxOTA0
OUI5MzYxNjAeFw0yNjA5MDYyMDA3NThaFw0yNzA5MDUyMDEyNThaMDMxMTAvBgNV
BAMTKEM5RjFCMkJEMTdEREQ4M0M2N0VGRkNBNEVDNTQyMjM0NEM5OURDN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmBeF9WIq5pKkgX2WOPX9Wd7TV
cq6amjPT+sWmQBDl3usW/Xy7Hy0DQyEO4LMXOivmFoyPsyhy45OWQyApoPkBugo9
jBWRqDXQldkL/7SDjobZWxH9Q1Rjh1XTjPKz6CqK3e7iAsR+l0DNhX0acwVhvh15
v09vWzr9yhHiA4VVdQDE+C4l2Vpa7IcF7/Aub4lNzZYioXJeH9xwS+Ih2s45HJBC
pcLXhOkGJ8UbJknYXCQFi1MHbpg17YyCdEMkAMxZ5Pl5XWh7g5E6KhsdaET1RWe1
A0ODDKTWERLY76OIwJT+//b/spVPJ5g9brUTPgFZdDkzxXnf37JDHaCcp7xdAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUyfGyvRfd2Dxn7/yk7FQiNEyZ3H0wHwYDVR0j
BBgwFoAUw1VJ/Ygfeq5Z2BcVnsmxkEm5NhYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXFFRHF1NVJOaDhGdE1qZXlHbmtXaFBDVmdMUzJ1cWY0eW1SaFVLN3I5
RVYvMC9DMzU1NDlGRDg4MUY3QUFFNTlEODE3MTU5RUM5QjE5MDQ5QjkzNjE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNTU0OUZEODgxRjdBQUU1
OUQ4MTcxNTlFQzlCMTkwNDlCOTM2MTYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FxRURxdTVSTmg4RnRNamV5R25rV2hQQ1ZnTFMydXFmNHltUmhVSzdyOUVWLzAv
MzIzODMwMzQzYTM1MzkzODM0M2EzOTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODM3MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEWYSQMA0GCSqGSIb3DQEBCwUA
A4IBAQCKouzF0ke/1p0dfn3c/PdXcoBTbIjv3isvoX0BA66BOUEyb5zNRQ+veLX+
AB3sfQhQrPVdy1NQTeBo5Na2cAq2MNVHd29HnCNWiRLcudzSc3X1baIOFIxUI73C
rFINoPA/Rs20PR0Pleqa5qFJL669eo7myiobmpbCECllgeeVh44/r/YXhPIHnpN9
XffeH2ZqKZfDsdltzVAR8R4mFlEYu9oyY5+evFbNZM7PD5xnUKGF8y/RiJFSjx1A
8obCWZW172muHkIYOgW69QOU2Acs+9Cxzsi1+c7i3n4/xwKgFEEMoCf0GgXuJGeY
rAn2MV3OXJNQ+YpWo95DOnNqiOUc
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:20:55 2026 by rpki-client