Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/323830343a366161343a383534303a3a2f34322d3432203d3e20323730333530.roa
File:                     323830343a366161343a383534303a3a2f34322d3432203d3e20323730333530.roa (raw, json)
Hash identifier:          ZX4HG1koEh3ICYjL7Cj+7x3wSW9pBNRax0nZJ/qNxwA=
Subject key identifier:   C1:77:C1:10:6B:50:42:99:9F:CA:08:69:B2:08:55:53:3E:E0:06:7E
Certificate issuer:       /CN=181D32E62BCCBB8FAE3072330C0A8788FB6F23CC
Certificate serial:       3E47427115252099E6D5154841090A05D84A5677
Authority key identifier: 18:1D:32:E6:2B:CC:BB:8F:AE:30:72:33:0C:0A:87:88:FB:6F:23:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/323830343a366161343a383534303a3a2f34322d3432203d3e20323730333530.roa
Signing time:             Thu 01 Oct 2026 18:47:44 +0000
ROA not before:           Thu 01 Oct 2026 18:42:44 +0000
ROA not after:            Thu 30 Sep 2027 18:47:44 +0000
asID:                     270350
IP address blocks:        2804:6aa4:8540::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.crl
                          rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 13:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:47:42:71:15:25:20:99:e6:d5:15:48:41:09:0a:05:d8:4a:56:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181D32E62BCCBB8FAE3072330C0A8788FB6F23CC
        Validity
            Not Before: Oct  1 18:42:44 2026 GMT
            Not After : Sep 30 18:47:44 2027 GMT
        Subject: CN=C177C1106B5042999FCA0869B20855533EE0067E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:65:3c:02:f4:95:7b:3f:7c:45:9b:37:55:
                    47:1a:4b:6d:cf:72:29:e4:10:a7:7f:19:a2:ab:a8:
                    a6:67:b7:9d:6c:7d:07:11:91:b6:b3:56:94:82:86:
                    70:24:29:db:f4:bd:8b:71:fc:14:17:a0:df:24:e3:
                    5a:ee:01:55:a9:73:4f:9c:6d:ff:d7:1d:67:86:09:
                    24:5b:b7:b4:a4:59:32:6b:4d:41:5e:90:d3:95:d6:
                    e9:fa:01:70:8b:60:1c:b7:d7:a4:05:f6:57:c4:b6:
                    1b:20:33:da:81:41:cd:f2:e4:89:3d:a5:9a:5d:b4:
                    b5:86:97:98:41:14:cb:18:1d:06:09:46:59:b7:24:
                    15:e9:4a:92:47:b9:18:21:ba:37:c2:91:a2:f9:c9:
                    48:4e:24:d1:2d:32:4f:a0:13:3b:94:9b:08:4e:3c:
                    eb:a4:01:dc:1d:b3:25:b7:6c:69:76:c1:5f:3a:56:
                    12:3e:6a:64:f7:b6:c4:1b:d2:7c:ee:63:d3:7e:85:
                    19:50:1e:00:7d:85:a7:e7:17:64:31:eb:a3:46:e1:
                    6c:9b:ac:cb:97:66:af:24:0c:5f:a4:fd:22:6c:75:
                    a6:b4:0b:4a:c9:6c:58:2c:f9:31:87:66:88:84:9e:
                    9b:29:54:e6:ea:9c:d1:dd:e9:79:18:6a:b2:d9:b7:
                    8d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:77:C1:10:6B:50:42:99:9F:CA:08:69:B2:08:55:53:3E:E0:06:7E
            X509v3 Authority Key Identifier:
                keyid:18:1D:32:E6:2B:CC:BB:8F:AE:30:72:33:0C:0A:87:88:FB:6F:23:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/323830343a366161343a383534303a3a2f34322d3432203d3e20323730333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6aa4:8540::/42

    Signature Algorithm: sha256WithRSAEncryption
         70:de:a1:82:01:e5:42:1c:5c:fe:f0:fb:e5:03:7e:9d:a5:a2:
         37:01:a4:32:f5:fc:38:89:af:d6:cc:57:8a:8a:e6:6a:48:31:
         38:96:ad:42:47:1e:ba:00:ea:6b:9b:40:ef:22:72:9f:70:d2:
         68:9d:60:ce:23:d0:57:ed:02:81:ca:7f:ef:79:f8:fb:f9:ec:
         a6:6b:0e:d1:f4:de:bb:8b:fc:48:02:66:c7:68:bb:20:19:54:
         65:c2:37:f2:9f:37:bd:6f:94:40:f2:81:20:04:97:55:cc:e3:
         ca:7c:fd:c1:37:3c:f2:a0:66:28:ec:5a:c6:64:1e:71:80:35:
         41:dd:4a:51:50:ba:d5:ef:15:64:79:d7:ff:6a:dd:8a:c1:21:
         bc:af:98:4d:6b:7d:ed:92:1b:c4:fa:c6:16:4c:44:cd:24:c9:
         39:52:8a:ea:ab:13:48:8f:0b:fc:77:b6:86:ba:1f:4a:0e:a0:
         75:f8:65:5f:b7:1b:f9:4f:db:62:77:c8:08:d2:4e:cb:26:59:
         45:58:5c:b4:05:58:e8:d7:ec:87:bb:87:a2:2d:83:00:8a:df:
         81:e5:ec:ac:2f:87:6c:90:88:44:2d:a5:8c:ce:51:f4:48:48:
         35:71:92:2b:1a:79:e7:5f:46:97:67:aa:2c:2f:5f:e4:4e:e3:
         b7:59:3d:29
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUPkdCcRUlIJnm1RVIQQkKBdhKVncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTgxRDMyRTYyQkNDQkI4RkFFMzA3MjMzMEMwQTg3ODhG
QjZGMjNDQzAeFw0yNjEwMDExODQyNDRaFw0yNzA5MzAxODQ3NDRaMDMxMTAvBgNV
BAMTKEMxNzdDMTEwNkI1MDQyOTk5RkNBMDg2OUIyMDg1NTUzM0VFMDA2N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI62U8AvSVez98RZs3VUcaS23P
cinkEKd/GaKrqKZnt51sfQcRkbazVpSChnAkKdv0vYtx/BQXoN8k41ruAVWpc0+c
bf/XHWeGCSRbt7SkWTJrTUFekNOV1un6AXCLYBy316QF9lfEthsgM9qBQc3y5Ik9
pZpdtLWGl5hBFMsYHQYJRlm3JBXpSpJHuRghujfCkaL5yUhOJNEtMk+gEzuUmwhO
POukAdwdsyW3bGl2wV86VhI+amT3tsQb0nzuY9N+hRlQHgB9hafnF2Qx66NG4Wyb
rMuXZq8kDF+k/SJsdaa0C0rJbFgs+TGHZoiEnpspVObqnNHd6XkYarLZt41TAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUwXfBEGtQQpmfyghpsghVUz7gBn4wHwYDVR0j
BBgwFoAUGB0y5ivMu4+uMHIzDAqHiPtvI8wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm1vV1NHcGhrVW9OcnJuQm5pZjVjTGFSZ21KRUV2NWNOYXViTGpweVMy
S24vMC8xODFEMzJFNjJCQ0NCQjhGQUUzMDcyMzMwQzBBODc4OEZCNkYyM0NDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4MUQzMkU2MkJDQ0JCOEZB
RTMwNzIzMzBDMEE4Nzg4RkI2RjIzQ0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jtb1dTR3Boa1VvTnJybkJuaWY1Y0xhUmdtSkVFdjVjTmF1YkxqcHlTMktuLzAv
MzIzODMwMzQzYTM2NjE2MTM0M2EzODM1MzQzMDNhM2EyZjM0MzIyZDM0MzIyMDNk
M2UyMDMyMzczMDMzMzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBigEaqSFQDANBgkqhkiG9w0BAQsF
AAOCAQEAcN6hggHlQhxc/vD75QN+naWiNwGkMvX8OImv1sxXiormakgxOJatQkce
ugDqa5tA7yJyn3DSaJ1gziPQV+0Cgcp/73n4+/nspmsO0fTeu4v8SAJmx2i7IBlU
ZcI38p83vW+UQPKBIASXVczjynz9wTc88qBmKOxaxmQecYA1Qd1KUVC61e8VZHnX
/2rdisEhvK+YTWt97ZIbxPrGFkxEzSTJOVKK6qsTSI8L/He2hrofSg6gdfhlX7cb
+U/bYnfICNJOyyZZRVhctAVY6Nfsh7uHoi2DAIrfgeXsrC+HbJCIRC2ljM5R9EhI
NXGSKxp5519Gl2eqLC9f5E7jt1k9KQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:30:56 2026 by rpki-client