Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/323830343a383732633a3a2f33322d3438203d3e20323732363932.roa
File:                     323830343a383732633a3a2f33322d3438203d3e20323732363932.roa (raw, json)
Hash identifier:          xKI47gEx51i6WJJdUvW1iyZiTIWaDO2k5waBwdCnnNY=
Subject key identifier:   C6:25:34:0E:46:22:56:AB:6B:F3:03:02:91:75:CB:E6:3D:DD:D4:FC
Certificate issuer:       /CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
Certificate serial:       760B6CA16FA877091EA37693587E7B09822011BE
Authority key identifier: 4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/323830343a383732633a3a2f33322d3438203d3e20323732363932.roa
Signing time:             Thu 22 Oct 2026 21:24:58 +0000
ROA not before:           Thu 22 Oct 2026 21:19:58 +0000
ROA not after:            Thu 21 Oct 2027 21:24:58 +0000
asID:                     272692
IP address blocks:        2804:872c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl
                          rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 02:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0b:6c:a1:6f:a8:77:09:1e:a3:76:93:58:7e:7b:09:82:20:11:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133
        Validity
            Not Before: Oct 22 21:19:58 2026 GMT
            Not After : Oct 21 21:24:58 2027 GMT
        Subject: CN=C625340E462256AB6BF303029175CBE63DDDD4FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:69:23:ef:48:35:ff:d8:fa:76:ed:74:ea:4e:
                    78:2e:1c:c5:0d:ae:b7:07:30:c8:c4:6d:96:30:fc:
                    c9:05:37:d0:35:c5:48:d4:28:65:6b:ee:dc:31:38:
                    00:4d:b6:56:f9:6b:d3:c5:d6:9e:d4:9e:77:93:da:
                    0b:33:17:1f:e8:d1:3c:27:8e:9e:3d:81:00:5d:ae:
                    c9:12:7f:98:13:1c:1d:1e:c8:a3:ab:a5:47:cd:bc:
                    8b:50:af:68:c5:f6:a8:0d:8b:67:61:18:33:72:0e:
                    a3:13:0b:29:a5:67:65:a8:fb:73:06:af:f3:43:f4:
                    e1:85:05:2c:38:ff:2b:38:70:24:59:9a:21:e8:c3:
                    6c:45:49:98:c9:f1:21:ec:a2:fb:06:78:af:38:a9:
                    fe:5e:3b:76:e0:a7:e8:f6:72:46:1a:e7:cb:3f:b6:
                    71:47:0f:b2:6b:4b:ec:90:5d:1e:92:1d:bd:d8:61:
                    02:f6:fd:7f:10:7e:f1:75:ad:04:9d:bb:19:65:27:
                    63:56:50:8f:9b:64:5e:7b:e4:26:72:b7:00:97:48:
                    15:14:8d:cf:49:2c:31:d4:45:f1:fd:ab:0d:12:da:
                    da:7b:40:c3:70:f4:8e:b5:71:31:64:ab:a2:21:9f:
                    8b:e4:28:29:92:b4:bc:a3:8c:94:fd:55:35:8a:c1:
                    16:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:25:34:0E:46:22:56:AB:6B:F3:03:02:91:75:CB:E6:3D:DD:D4:FC
            X509v3 Authority Key Identifier:
                keyid:4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/323830343a383732633a3a2f33322d3438203d3e20323732363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:872c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:ad:14:76:d2:c5:19:26:cf:95:5c:1c:d3:a5:0b:0d:6a:72:
         0e:ba:c7:f9:ce:ce:bf:0e:dd:45:4a:cb:7f:70:fd:0e:4e:60:
         ef:a2:c7:90:20:64:9a:3a:05:9b:61:bb:d4:07:2c:18:96:05:
         08:0b:14:f4:a1:18:47:6a:08:13:e8:3b:b0:42:ec:27:69:69:
         85:11:86:f9:dc:6c:a0:aa:dc:2d:b9:dc:64:04:4e:ff:a8:31:
         8f:c9:b2:84:e1:0b:67:c6:c1:70:2c:29:e0:3d:0e:8c:31:08:
         80:66:26:73:93:26:ca:81:17:9c:8a:04:1a:ba:be:e4:e9:63:
         4e:fb:88:02:2d:e0:ac:7d:11:09:69:38:6c:c1:e5:c3:d1:37:
         f0:9c:1c:13:1c:f3:70:76:02:2e:34:56:01:29:1d:f3:f9:56:
         25:27:d2:8f:d9:7b:0a:1e:13:02:4d:3c:c8:16:a7:d9:df:36:
         19:12:ba:f5:a7:d2:90:04:74:35:73:9b:e7:34:b3:43:d5:76:
         2d:c8:3d:7a:cc:c1:24:a9:74:28:12:d2:81:fa:50:30:61:c5:
         e1:8f:46:97:5b:ce:d9:ad:21:ce:fa:de:65:78:c6:a2:96:e0:
         43:b5:5a:a4:6d:c3:69:47:44:23:a8:74:71:52:dd:3f:7d:37:
         6b:02:2a:d9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdgtsoW+odwkeo3aTWH57CYIgEb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI3RDAwOTBBNkY0QzdCMkZCREY5REQ1QkRCRTc4QjE0
NThEMTEzMzAeFw0yNjEwMjIyMTE5NThaFw0yNzEwMjEyMTI0NThaMDMxMTAvBgNV
BAMTKEM2MjUzNDBFNDYyMjU2QUI2QkYzMDMwMjkxNzVDQkU2M0REREQ0RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaaSPvSDX/2Pp27XTqTnguHMUN
rrcHMMjEbZYw/MkFN9A1xUjUKGVr7twxOABNtlb5a9PF1p7UnneT2gszFx/o0Twn
jp49gQBdrskSf5gTHB0eyKOrpUfNvItQr2jF9qgNi2dhGDNyDqMTCymlZ2Wo+3MG
r/ND9OGFBSw4/ys4cCRZmiHow2xFSZjJ8SHsovsGeK84qf5eO3bgp+j2ckYa58s/
tnFHD7JrS+yQXR6SHb3YYQL2/X8QfvF1rQSduxllJ2NWUI+bZF575CZytwCXSBUU
jc9JLDHURfH9qw0S2tp7QMNw9I61cTFkq6Ihn4vkKCmStLyjjJT9VTWKwRZNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUxiU0DkYiVqtr8wMCkXXL5j3d1PwwHwYDVR0j
BBgwFoAUS30AkKb0x7L7353Vvb54sUWNETMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjdLSlVQdXpIRkhmanBrbWYyRzFNaWdvWjhGN2phQzMzR2QyS2FYd0RL
TFEvMC80QjdEMDA5MEE2RjRDN0IyRkJERjlERDVCREJFNzhCMTQ1OEQxMTMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCN0QwMDkwQTZGNEM3QjJG
QkRGOURENUJEQkU3OEIxNDU4RDExMzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3S0pVUHV6SEZIZmpwa21mMkcxTWlnb1o4RjdqYUMzM0dkMkthWHdES0xRLzAv
MzIzODMwMzQzYTM4MzczMjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMy
MzYzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASHLDANBgkqhkiG9w0BAQsFAAOCAQEAKq0UdtLF
GSbPlVwc06ULDWpyDrrH+c7Ovw7dRUrLf3D9Dk5g76LHkCBkmjoFm2G71AcsGJYF
CAsU9KEYR2oIE+g7sELsJ2lphRGG+dxsoKrcLbncZARO/6gxj8myhOELZ8bBcCwp
4D0OjDEIgGYmc5MmyoEXnIoEGrq+5OljTvuIAi3grH0RCWk4bMHlw9E38JwcExzz
cHYCLjRWASkd8/lWJSfSj9l7Ch4TAk08yBan2d82GRK69afSkAR0NXOb5zSzQ9V2
Lcg9eszBJKl0KBLSgfpQMGHF4Y9Gl1vO2a0hzvreZXjGopbgQ7VapG3DaUdEI6h0
cVLdP303awIq2Q==
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:19:54 2026 by rpki-client