Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/323830343a353164633a313065303a3a2f34332d3433203d3e20323638343831.roa
File:                     323830343a353164633a313065303a3a2f34332d3433203d3e20323638343831.roa (raw, json)
Hash identifier:          iamZZffbKJh+nac6JCAFwVGJClBx4q/ducF1AmBoonc=
Subject key identifier:   08:6E:02:10:2C:EB:62:21:28:6C:CA:DD:D5:A1:98:B1:01:BE:58:0C
Certificate issuer:       /CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
Certificate serial:       763DDEE0DB063812FA53F9950176F713C7C6B495
Authority key identifier: 85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/323830343a353164633a313065303a3a2f34332d3433203d3e20323638343831.roa
Signing time:             Fri 12 Jun 2026 15:05:26 +0000
ROA not before:           Fri 12 Jun 2026 15:00:26 +0000
ROA not after:            Fri 11 Jun 2027 15:05:26 +0000
asID:                     268481
IP address blocks:        2804:51dc:10e0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl
                          rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 03:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3d:de:e0:db:06:38:12:fa:53:f9:95:01:76:f7:13:c7:c6:b4:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
        Validity
            Not Before: Jun 12 15:00:26 2026 GMT
            Not After : Jun 11 15:05:26 2027 GMT
        Subject: CN=086E02102CEB6221286CCADDD5A198B101BE580C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:db:2d:f2:ce:28:a4:84:27:b2:76:a9:79:ca:
                    ca:74:3b:bc:b1:9c:bc:25:57:e6:93:04:13:8b:fe:
                    2c:41:00:90:70:79:7e:a6:c5:3c:64:ea:aa:4e:f7:
                    c6:a6:f0:c2:77:ac:e8:9e:00:2a:17:63:90:5f:dc:
                    bc:da:35:72:71:cf:31:e5:8d:3f:55:d2:27:14:23:
                    b3:38:fb:6a:5d:ca:ce:5f:8d:4f:52:5e:f4:7f:62:
                    78:42:c5:3c:d6:ac:a7:e8:13:0f:29:b2:32:eb:d4:
                    86:a0:29:e1:7b:74:dd:bf:84:20:ac:16:a1:73:ba:
                    9a:ce:31:9a:a5:d4:89:80:94:73:b0:b9:e8:0b:54:
                    fa:9b:d9:c7:8b:08:cb:53:3c:31:fd:dc:ad:4c:9c:
                    93:4a:f1:2c:bd:f5:66:c4:fb:2f:f7:a9:da:06:ec:
                    c4:b7:e8:ff:97:19:67:bd:87:5c:89:4b:d0:bf:52:
                    70:0b:98:20:3c:1d:61:4b:da:cd:52:cf:b9:c9:c0:
                    d9:7f:5f:20:c5:56:56:70:fa:7c:84:59:13:39:10:
                    75:a7:1d:02:03:6e:05:9a:d6:46:b1:84:7b:5d:b1:
                    84:c4:64:39:7b:5e:6d:71:30:fc:ce:34:05:00:c6:
                    b6:7a:c5:87:ec:9c:21:bc:13:c3:c8:f9:be:e7:1e:
                    53:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6E:02:10:2C:EB:62:21:28:6C:CA:DD:D5:A1:98:B1:01:BE:58:0C
            X509v3 Authority Key Identifier:
                keyid:85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/323830343a353164633a313065303a3a2f34332d3433203d3e20323638343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51dc:10e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         b5:e2:e8:8a:23:99:0b:48:80:d6:e3:46:58:c4:46:d8:f5:32:
         d9:07:84:8e:5a:de:96:a7:38:47:7b:dd:5f:88:11:18:0a:f2:
         1b:47:31:4f:59:12:3c:03:ce:6d:c7:14:55:26:21:b8:27:e2:
         87:40:6e:04:94:c3:3a:2c:fb:48:f1:7d:13:2c:e6:67:45:1c:
         c1:8a:6e:5b:79:cf:d4:1d:d6:fd:40:42:d9:eb:63:4a:9a:7b:
         ae:fa:0c:1c:82:0f:22:f5:e5:49:29:69:a9:e3:69:d3:c5:37:
         34:7c:d1:f0:79:27:43:30:98:24:6b:30:3c:ae:27:f0:fa:bf:
         17:26:0f:71:31:5d:9d:fe:b8:14:c5:34:ac:61:39:88:b2:d8:
         a4:c0:9a:2d:b9:f1:47:e9:9e:1f:e6:5e:e6:e0:b0:9d:e9:0e:
         13:ab:08:ab:69:be:9c:e1:27:44:58:f2:97:a2:90:6d:81:9e:
         6f:b6:dd:e6:7d:2a:da:c4:3b:e5:fe:da:35:4f:21:01:f5:56:
         89:4f:25:74:bb:74:7a:27:b9:a0:cc:a5:66:28:5a:14:17:53:
         e3:fa:10:55:ba:38:6c:02:64:f9:9b:02:ca:4b:6f:f0:03:13:
         1e:a9:bc:c3:41:d0:cf:69:99:c0:32:79:97:ca:74:28:8d:09:
         bb:51:1a:f6
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUdj3e4NsGOBL6U/mVAXb3E8fGtJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUxNTREMTdFQjU2NDIwMjc3QTBENkQzMTY4RUNFQjdC
ODhDRDY1NDAeFw0yNjA2MTIxNTAwMjZaFw0yNzA2MTExNTA1MjZaMDMxMTAvBgNV
BAMTKDA4NkUwMjEwMkNFQjYyMjEyODZDQ0FEREQ1QTE5OEIxMDFCRTU4MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg2y3yziikhCeydql5ysp0O7yx
nLwlV+aTBBOL/ixBAJBweX6mxTxk6qpO98am8MJ3rOieACoXY5Bf3LzaNXJxzzHl
jT9V0icUI7M4+2pdys5fjU9SXvR/YnhCxTzWrKfoEw8psjLr1IagKeF7dN2/hCCs
FqFzuprOMZql1ImAlHOwuegLVPqb2ceLCMtTPDH93K1MnJNK8Sy99WbE+y/3qdoG
7MS36P+XGWe9h1yJS9C/UnALmCA8HWFL2s1Sz7nJwNl/XyDFVlZw+nyEWRM5EHWn
HQIDbgWa1kaxhHtdsYTEZDl7Xm1xMPzONAUAxrZ6xYfsnCG8E8PI+b7nHlN9AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUCG4CECzrYiEobMrd1aGYsQG+WAwwHwYDVR0j
BBgwFoAUhRVNF+tWQgJ3oNbTFo7Ot7iM1lQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXU1cFZMVDNTd2FxdjNWdWpkNXIyaEpxc0FlRm52WWZpZXNVOEZTQ2U0
SFAvMC84NTE1NEQxN0VCNTY0MjAyNzdBMEQ2RDMxNjhFQ0VCN0I4OENENjU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1MTU0RDE3RUI1NjQyMDI3
N0EwRDZEMzE2OEVDRUI3Qjg4Q0Q2NTQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V1NXBWTFQzU3dhcXYzVnVqZDVyMmhKcXNBZUZudllmaWVzVThGU0NlNEhQLzAv
MzIzODMwMzQzYTM1MzE2NDYzM2EzMTMwNjUzMDNhM2EyZjM0MzMyZDM0MzMyMDNk
M2UyMDMyMzYzODM0MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBSgEUdwQ4DANBgkqhkiG9w0BAQsF
AAOCAQEAteLoiiOZC0iA1uNGWMRG2PUy2QeEjlrelqc4R3vdX4gRGAryG0cxT1kS
PAPObccUVSYhuCfih0BuBJTDOiz7SPF9EyzmZ0UcwYpuW3nP1B3W/UBC2etjSpp7
rvoMHIIPIvXlSSlpqeNp08U3NHzR8HknQzCYJGswPK4n8Pq/FyYPcTFdnf64FMU0
rGE5iLLYpMCaLbnxR+meH+Ze5uCwnekOE6sIq2m+nOEnRFjyl6KQbYGeb7bd5n0q
2sQ75f7aNU8hAfVWiU8ldLt0eie5oMylZihaFBdT4/oQVbo4bAJk+ZsCyktv8AMT
Hqm8w0HQz2mZwDJ5l8p0KI0Ju1Ea9g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:16:14 2026 by rpki-client