Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BaA4ihanDNq8MtzXYqBvtTnWA8abK2kkTptSDLXYr3rp/0/323830343a356434633a3a2f33322d313238203d3e20323638393633.roa
File:                     323830343a356434633a3a2f33322d313238203d3e20323638393633.roa (raw, json)
Hash identifier:          iwXe9zp4PFkoAx48SefDtMK/vKTCbIAMHTK/7NbWX/M=
Subject key identifier:   D7:0F:26:3D:ED:98:06:37:89:EA:E9:45:9A:EE:04:1A:93:BD:D0:11
Certificate issuer:       /CN=EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4
Certificate serial:       11D94852812EE08F56447F20BAFCC244FF2B3EB4
Authority key identifier: EE:0E:1A:EE:6B:3F:10:00:ED:CC:60:18:E5:5D:71:32:E8:3A:EA:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaA4ihanDNq8MtzXYqBvtTnWA8abK2kkTptSDLXYr3rp/0/323830343a356434633a3a2f33322d313238203d3e20323638393633.roa
Signing time:             Fri 24 Jul 2026 16:48:15 +0000
ROA not before:           Fri 24 Jul 2026 16:43:15 +0000
ROA not after:            Fri 23 Jul 2027 16:48:15 +0000
asID:                     268963
IP address blocks:        2804:5d4c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BaA4ihanDNq8MtzXYqBvtTnWA8abK2kkTptSDLXYr3rp/0/EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.crl
                          rsync://rpki-repo.registro.br/repo/BaA4ihanDNq8MtzXYqBvtTnWA8abK2kkTptSDLXYr3rp/0/EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 05:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d9:48:52:81:2e:e0:8f:56:44:7f:20:ba:fc:c2:44:ff:2b:3e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4
        Validity
            Not Before: Jul 24 16:43:15 2026 GMT
            Not After : Jul 23 16:48:15 2027 GMT
        Subject: CN=D70F263DED98063789EAE9459AEE041A93BDD011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:11:87:d0:24:51:36:50:a3:90:e6:a1:e9:
                    4d:7c:dd:56:30:e7:47:18:16:61:ce:1d:73:e9:59:
                    c5:62:46:07:52:59:08:52:62:b0:dc:b8:bc:f5:1a:
                    3a:05:b2:c2:17:22:39:c0:52:3e:03:0b:26:db:f1:
                    07:fa:03:5a:d1:0b:d4:f3:0a:b2:c5:21:d4:07:08:
                    06:c5:53:5e:b9:21:9c:b1:bd:5f:cb:f4:1b:8c:5b:
                    f7:22:28:79:9e:8d:71:e8:5e:67:a2:e5:fa:74:d9:
                    d2:0a:e5:9e:30:a9:d9:ab:3c:99:7c:4b:26:b8:17:
                    5c:2c:35:94:2a:22:10:7f:32:16:b3:c6:82:7a:8c:
                    a3:7c:18:81:0b:06:3d:01:74:a4:f8:77:15:cd:db:
                    6f:40:74:94:5f:90:9c:69:2b:dd:4a:0d:78:ca:d0:
                    0f:35:84:07:56:7a:03:6b:aa:c3:ba:fb:56:0a:0b:
                    b6:1a:97:b5:f9:d9:73:9a:db:e5:ae:7d:5f:3c:f7:
                    62:cb:c2:de:d8:16:aa:3a:0c:52:02:fb:78:af:95:
                    0b:98:6e:d5:a4:2f:74:9a:2d:15:e0:59:b8:f3:fd:
                    2c:81:fb:42:9b:6e:36:6e:2a:15:90:c9:f5:55:85:
                    4c:62:a7:c1:1e:29:b4:1e:04:ff:8a:5d:6b:f0:ba:
                    ed:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0F:26:3D:ED:98:06:37:89:EA:E9:45:9A:EE:04:1A:93:BD:D0:11
            X509v3 Authority Key Identifier:
                keyid:EE:0E:1A:EE:6B:3F:10:00:ED:CC:60:18:E5:5D:71:32:E8:3A:EA:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaA4ihanDNq8MtzXYqBvtTnWA8abK2kkTptSDLXYr3rp/0/EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE0E1AEE6B3F1000EDCC6018E55D7132E83AEAE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaA4ihanDNq8MtzXYqBvtTnWA8abK2kkTptSDLXYr3rp/0/323830343a356434633a3a2f33322d313238203d3e20323638393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:6c:2f:8e:4e:41:5e:95:a1:75:00:dc:c5:27:dd:e6:af:6b:
         59:d3:3b:e0:a7:0a:e1:8c:e2:66:41:94:aa:e9:d6:91:61:3a:
         67:d4:28:37:13:51:a7:c9:aa:af:09:7e:a3:b8:4f:bb:cc:1c:
         e2:15:4d:d2:ff:1d:96:ee:8c:c7:9b:7d:66:03:27:d4:12:70:
         1a:19:05:0b:6d:4b:55:67:cc:cf:27:02:ca:b5:ea:f8:e4:97:
         41:f4:b7:05:b5:74:7a:e2:f1:b2:43:bf:d0:8c:d0:dc:0e:b4:
         06:af:9b:9a:44:66:56:7e:d8:66:f5:97:5c:31:65:fe:d0:0d:
         e4:a9:22:36:d5:6d:03:57:d5:9c:c1:63:17:0a:6c:41:a8:ef:
         2c:bd:c3:3e:7d:90:a0:0b:e9:d5:f6:ac:8f:32:9d:95:d9:e4:
         71:2e:42:03:54:f6:8a:58:f2:32:9c:b5:ee:68:10:04:60:9b:
         6f:b0:ab:c8:d1:76:a6:7d:16:9c:81:ae:c2:89:f1:9a:5c:41:
         24:59:02:4e:f6:c8:0f:94:48:be:99:ca:07:28:44:2f:b0:1c:
         32:ce:6e:0a:c0:6f:fc:5c:91:f8:a0:f9:56:21:d3:05:c0:bb:
         c6:f7:0c:35:20:22:35:ad:c2:6e:70:a0:55:73:d4:d6:23:7c:
         fa:5e:1d:74
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUEdlIUoEu4I9WRH8guvzCRP8rPrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUwRTFBRUU2QjNGMTAwMEVEQ0M2MDE4RTU1RDcxMzJF
ODNBRUFFNDAeFw0yNjA3MjQxNjQzMTVaFw0yNzA3MjMxNjQ4MTVaMDMxMTAvBgNV
BAMTKEQ3MEYyNjNERUQ5ODA2Mzc4OUVBRTk0NTlBRUUwNDFBOTNCREQwMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCerhGH0CRRNlCjkOah6U183VYw
50cYFmHOHXPpWcViRgdSWQhSYrDcuLz1GjoFssIXIjnAUj4DCybb8Qf6A1rRC9Tz
CrLFIdQHCAbFU165IZyxvV/L9BuMW/ciKHmejXHoXmei5fp02dIK5Z4wqdmrPJl8
Sya4F1wsNZQqIhB/MhazxoJ6jKN8GIELBj0BdKT4dxXN229AdJRfkJxpK91KDXjK
0A81hAdWegNrqsO6+1YKC7Yal7X52XOa2+WufV8892LLwt7YFqo6DFIC+3ivlQuY
btWkL3SaLRXgWbjz/SyB+0KbbjZuKhWQyfVVhUxip8EeKbQeBP+KXWvwuu31AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU1w8mPe2YBjeJ6ulFmu4EGpO90BEwHwYDVR0j
BBgwFoAU7g4a7ms/EADtzGAY5V1xMug66uQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmFBNGloYW5ETnE4TXR6WFlxQnZ0VG5XQThhYksya2tUcHRTRExYWXIz
cnAvMC9FRTBFMUFFRTZCM0YxMDAwRURDQzYwMThFNTVENzEzMkU4M0FFQUU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFMEUxQUVFNkIzRjEwMDBF
RENDNjAxOEU1NUQ3MTMyRTgzQUVBRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JhQTRpaGFuRE5xOE10elhZcUJ2dFRuV0E4YWJLMmtrVHB0U0RMWFlyM3JwLzAv
MzIzODMwMzQzYTM1NjQzNDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzOTM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBF1MMA0GCSqGSIb3DQEBCwUAA4IBAQBJbC+O
TkFelaF1ANzFJ93mr2tZ0zvgpwrhjOJmQZSq6daRYTpn1Cg3E1GnyaqvCX6juE+7
zBziFU3S/x2W7ozHm31mAyfUEnAaGQULbUtVZ8zPJwLKter45JdB9LcFtXR64vGy
Q7/QjNDcDrQGr5uaRGZWfthm9ZdcMWX+0A3kqSI21W0DV9WcwWMXCmxBqO8svcM+
fZCgC+nV9qyPMp2V2eRxLkIDVPaKWPIynLXuaBAEYJtvsKvI0XamfRacga7CifGa
XEEkWQJO9sgPlEi+mcoHKEQvsBwyzm4KwG/8XJH4oPlWIdMFwLvG9ww1ICI1rcJu
cKBVc9TWI3z6Xh10
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:47:19 2026 by rpki-client