Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33322d3332203d3e20323733373034.roa
File:                     323830343a386166383a3a2f33322d3332203d3e20323733373034.roa (raw, json)
Hash identifier:          Hl8EEBQ2uJ0JddQE4jfyKiEYSGrkawih8W+4YEnjJZ8=
Subject key identifier:   B2:B3:B5:F7:4A:2A:4F:E6:2B:60:41:E0:DA:32:4F:29:ED:81:3B:37
Certificate issuer:       /CN=627C38DEF3FF46B753DDB16E2067D8FACF739977
Certificate serial:       4F5DA071EDFDAA3B891462373987351616D70E82
Authority key identifier: 62:7C:38:DE:F3:FF:46:B7:53:DD:B1:6E:20:67:D8:FA:CF:73:99:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/627C38DEF3FF46B753DDB16E2067D8FACF739977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33322d3332203d3e20323733373034.roa
Signing time:             Sat 12 Sep 2026 20:05:08 +0000
ROA not before:           Sat 12 Sep 2026 20:00:08 +0000
ROA not after:            Sat 11 Sep 2027 20:05:08 +0000
asID:                     273704
IP address blocks:        2804:8af8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/627C38DEF3FF46B753DDB16E2067D8FACF739977.crl
                          rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/627C38DEF3FF46B753DDB16E2067D8FACF739977.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/627C38DEF3FF46B753DDB16E2067D8FACF739977.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 05:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5d:a0:71:ed:fd:aa:3b:89:14:62:37:39:87:35:16:16:d7:0e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627C38DEF3FF46B753DDB16E2067D8FACF739977
        Validity
            Not Before: Sep 12 20:00:08 2026 GMT
            Not After : Sep 11 20:05:08 2027 GMT
        Subject: CN=B2B3B5F74A2A4FE62B6041E0DA324F29ED813B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:0a:31:f6:ff:c4:18:1d:54:73:44:28:f7:
                    f3:7a:20:26:4a:e2:ab:15:64:4a:f7:54:7c:76:3c:
                    11:01:0b:83:1a:d0:32:6c:6e:46:28:62:92:7e:11:
                    e7:ad:48:a6:e7:b1:5e:4a:15:03:d8:75:69:cd:19:
                    a4:1a:25:21:bc:fe:b7:68:60:bd:fc:e8:7f:9e:fc:
                    0a:2f:05:b2:69:b0:e1:d9:25:ad:ad:9f:f0:94:a6:
                    e2:61:b3:e0:e4:ae:fa:65:af:3d:d6:c3:3a:43:d9:
                    24:79:1c:88:98:d6:b7:46:3b:68:4d:44:53:b2:8c:
                    c6:f5:32:02:8f:1b:91:d5:25:2a:a3:1c:ed:a3:34:
                    8d:f6:3b:47:d2:67:68:8e:d6:05:79:e1:42:68:09:
                    c8:3c:46:7e:61:20:3a:70:21:b0:17:f2:6a:8f:16:
                    c0:bb:1d:cd:c2:03:be:ef:72:fd:7b:a1:84:70:39:
                    6b:d9:6a:2a:f4:0a:a0:84:df:9b:c7:ba:17:d2:30:
                    03:5f:81:0f:61:1f:66:37:59:be:d1:30:53:18:7d:
                    0e:6f:e6:66:29:6b:ea:8d:f6:53:e8:ab:c4:9f:73:
                    65:cf:8f:8f:e6:cc:15:e1:d7:b5:13:ac:21:e0:51:
                    5a:46:f9:db:19:52:01:aa:a5:29:a1:63:1f:72:e5:
                    e5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B3:B5:F7:4A:2A:4F:E6:2B:60:41:E0:DA:32:4F:29:ED:81:3B:37
            X509v3 Authority Key Identifier:
                keyid:62:7C:38:DE:F3:FF:46:B7:53:DD:B1:6E:20:67:D8:FA:CF:73:99:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/627C38DEF3FF46B753DDB16E2067D8FACF739977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/627C38DEF3FF46B753DDB16E2067D8FACF739977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a3a2f33322d3332203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:c0:b4:c4:12:6e:3a:03:d3:ba:cd:87:14:1f:9e:06:12:cc:
         00:de:9c:44:a8:e7:1e:a2:69:49:6d:b8:33:ae:22:ee:dd:4f:
         0a:01:52:dd:2c:dc:a4:2b:75:18:da:67:07:63:de:f2:42:42:
         b2:2d:d8:74:b4:92:48:6a:0a:a7:d7:7d:37:d8:d3:87:49:8e:
         2d:60:74:ff:8f:4d:09:7f:98:1b:dc:a5:77:c1:19:ce:db:79:
         e2:8e:71:87:3c:a9:9d:a7:bc:2c:39:09:ee:78:b4:8f:7c:b1:
         fc:f7:57:d3:4c:1c:a0:1a:1f:f5:bc:0f:e0:7b:53:74:f1:5b:
         6f:71:46:6f:07:3b:38:72:c5:8b:d1:17:98:ee:93:a6:1c:90:
         3b:8d:2a:cf:0b:f6:d6:04:da:31:74:48:aa:22:c4:61:f9:7a:
         06:88:51:97:c7:89:dd:f8:04:13:cc:99:11:3e:4b:f8:40:8c:
         9a:4d:10:ad:0b:6c:84:31:86:b6:e5:8f:68:9d:4b:1d:88:85:
         a1:6d:93:65:20:bb:ed:6c:d9:fc:a8:13:89:09:c7:bf:f1:31:
         9e:06:ea:7c:66:0f:55:2c:be:43:67:08:1d:f5:ae:e6:f6:ef:
         16:6c:76:aa:5e:95:0f:56:7a:30:12:3e:a3:22:c8:e3:ef:7a:
         4f:2f:78:37
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUT12gce39qjuJFGI3OYc1FhbXDoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI3QzM4REVGM0ZGNDZCNzUzRERCMTZFMjA2N0Q4RkFD
RjczOTk3NzAeFw0yNjA5MTIyMDAwMDhaFw0yNzA5MTEyMDA1MDhaMDMxMTAvBgNV
BAMTKEIyQjNCNUY3NEEyQTRGRTYyQjYwNDFFMERBMzI0RjI5RUQ4MTNCMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClFAox9v/EGB1Uc0Qo9/N6ICZK
4qsVZEr3VHx2PBEBC4Ma0DJsbkYoYpJ+EeetSKbnsV5KFQPYdWnNGaQaJSG8/rdo
YL386H+e/AovBbJpsOHZJa2tn/CUpuJhs+Dkrvplrz3WwzpD2SR5HIiY1rdGO2hN
RFOyjMb1MgKPG5HVJSqjHO2jNI32O0fSZ2iO1gV54UJoCcg8Rn5hIDpwIbAX8mqP
FsC7Hc3CA77vcv17oYRwOWvZair0CqCE35vHuhfSMANfgQ9hH2Y3Wb7RMFMYfQ5v
5mYpa+qN9lPoq8Sfc2XPj4/mzBXh17UTrCHgUVpG+dsZUgGqpSmhYx9y5eVtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUsrO190oqT+YrYEHg2jJPKe2BOzcwHwYDVR0j
BBgwFoAUYnw43vP/RrdT3bFuIGfY+s9zmXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2o5WW5jSkZtb3hqNVBLeEpDMURueHNzS1dKOEFoWUpZM0xaa0VLQkdW
WGovMC82MjdDMzhERUYzRkY0NkI3NTNEREIxNkUyMDY3RDhGQUNGNzM5OTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyN0MzOERFRjNGRjQ2Qjc1
M0REQjE2RTIwNjdEOEZBQ0Y3Mzk5NzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NqOVluY0pGbW94ajVQS3hKQzFEbnhzc0tXSjhBaFlKWTNMWmtFS0JHVlhqLzAv
MzIzODMwMzQzYTM4NjE2NjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzczMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASK+DANBgkqhkiG9w0BAQsFAAOCAQEAdMC0xBJu
OgPTus2HFB+eBhLMAN6cRKjnHqJpSW24M64i7t1PCgFS3SzcpCt1GNpnB2Pe8kJC
si3YdLSSSGoKp9d9N9jTh0mOLWB0/49NCX+YG9yld8EZztt54o5xhzypnae8LDkJ
7ni0j3yx/PdX00wcoBof9bwP4HtTdPFbb3FGbwc7OHLFi9EXmO6TphyQO40qzwv2
1gTaMXRIqiLEYfl6BohRl8eJ3fgEE8yZET5L+ECMmk0QrQtshDGGtuWPaJ1LHYiF
oW2TZSC77WzZ/KgTiQnHv/ExngbqfGYPVSy+Q2cIHfWu5vbvFmx2ql6VD1Z6MBI+
oyLI4+96Ty94Nw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:24:19 2026 by rpki-client