Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33322d3438203d3e20323731343536.roa
File:                     323830343a376264303a3a2f33322d3438203d3e20323731343536.roa (raw, json)
Hash identifier:          n+zt1+l80G/25XB0h9Sq17WDRMO+LZ1WXxh3HzJaqnA=
Subject key identifier:   94:9D:6B:D3:06:B9:EF:CE:87:A7:0B:8D:1E:92:E8:75:70:4D:22:A0
Certificate issuer:       /CN=2B701A0900880E50F13E6749C2889988811EC8C1
Certificate serial:       4274EF013EE836D27F7F1E757E7B73E7C7781854
Authority key identifier: 2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33322d3438203d3e20323731343536.roa
Signing time:             Tue 06 Oct 2026 20:33:02 +0000
ROA not before:           Tue 06 Oct 2026 20:28:02 +0000
ROA not after:            Tue 05 Oct 2027 20:33:02 +0000
asID:                     271456
IP address blocks:        2804:7bd0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl
                          rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 17:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:74:ef:01:3e:e8:36:d2:7f:7f:1e:75:7e:7b:73:e7:c7:78:18:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B701A0900880E50F13E6749C2889988811EC8C1
        Validity
            Not Before: Oct  6 20:28:02 2026 GMT
            Not After : Oct  5 20:33:02 2027 GMT
        Subject: CN=949D6BD306B9EFCE87A70B8D1E92E875704D22A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:6b:32:f9:db:9c:32:35:fc:67:ac:fc:7c:
                    51:1b:46:c6:31:39:28:6a:ec:93:e6:28:17:7b:e1:
                    0c:20:e5:d1:04:dc:6a:c4:a9:ae:10:f7:38:5e:e8:
                    0a:b0:01:e4:bf:56:74:f8:5a:0f:af:2f:21:3c:a8:
                    7a:31:9f:b3:95:ce:d0:33:77:1b:4a:c2:d9:4a:e8:
                    4b:41:48:50:01:23:27:ea:27:69:eb:fd:3f:86:7d:
                    db:74:90:fd:2c:64:10:32:53:ad:0a:9e:15:5d:8f:
                    1c:33:0d:60:bc:fd:33:b9:ba:12:19:2b:57:a9:5c:
                    ba:33:e4:22:4b:a0:39:e5:73:86:77:52:9f:63:fe:
                    91:4a:97:53:e8:bb:06:98:33:a6:00:2e:5c:91:35:
                    42:6b:40:1f:83:39:56:c6:11:17:67:c0:4b:ee:a6:
                    fe:bc:e1:85:4e:0a:9a:64:f1:32:02:b0:35:dc:04:
                    19:12:77:6c:85:1c:1b:8c:de:53:51:4a:a4:ce:c5:
                    2f:38:d5:8b:47:4a:b4:b9:27:27:80:76:74:11:d1:
                    1a:55:09:51:b9:b7:e0:d6:28:5e:ed:ed:12:69:0d:
                    61:08:75:57:91:6b:66:81:e9:b4:1c:e1:93:0f:4b:
                    58:d7:7d:1c:f1:64:a2:ef:44:2d:73:4c:33:4b:f1:
                    81:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9D:6B:D3:06:B9:EF:CE:87:A7:0B:8D:1E:92:E8:75:70:4D:22:A0
            X509v3 Authority Key Identifier:
                keyid:2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33322d3438203d3e20323731343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:b8:26:28:e3:16:89:f9:b1:06:14:18:85:8b:f0:40:d2:8d:
         2d:2f:57:c2:cc:4e:51:cb:00:e2:26:08:52:aa:f6:5c:9d:4d:
         f2:2e:be:32:05:6a:ff:1a:22:6f:69:df:b2:0f:fd:75:15:2f:
         f7:1f:58:e9:4b:72:57:ca:23:bd:33:b8:bb:c1:af:0a:7c:a5:
         c9:49:13:6d:73:d3:7a:ae:fc:5d:0a:11:b9:59:09:85:84:7d:
         15:a3:25:29:83:9d:68:00:97:24:65:32:e1:72:7f:73:d5:32:
         ce:18:af:81:23:2f:ca:14:ad:7f:01:5c:14:15:b6:14:e7:9c:
         7a:01:12:9b:83:d6:a0:48:20:63:5e:32:22:6b:15:ad:17:e9:
         71:2d:53:ff:1d:c9:46:c2:67:a1:b9:63:06:d3:56:45:7e:12:
         45:19:7d:99:f8:bf:39:3b:db:e8:41:5c:a9:c9:91:28:03:59:
         b8:ba:64:0f:33:bd:d0:d2:0e:2d:80:18:2f:a3:2c:4b:0c:55:
         f4:25:27:76:b5:7a:33:a8:de:7c:36:11:73:3c:52:f3:91:53:
         f9:0f:71:2b:bf:c7:64:d8:c4:8c:14:e3:d8:0c:74:41:13:ae:
         4a:94:46:52:00:04:b0:94:47:c5:29:81:29:f6:52:43:5a:e9:
         38:69:02:d6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQnTvAT7oNtJ/fx51fntz58d4GFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI3MDFBMDkwMDg4MEU1MEYxM0U2NzQ5QzI4ODk5ODg4
MTFFQzhDMTAeFw0yNjEwMDYyMDI4MDJaFw0yNzEwMDUyMDMzMDJaMDMxMTAvBgNV
BAMTKDk0OUQ2QkQzMDZCOUVGQ0U4N0E3MEI4RDFFOTJFODc1NzA0RDIyQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr5Gsy+ducMjX8Z6z8fFEbRsYx
OShq7JPmKBd74Qwg5dEE3GrEqa4Q9zhe6AqwAeS/VnT4Wg+vLyE8qHoxn7OVztAz
dxtKwtlK6EtBSFABIyfqJ2nr/T+Gfdt0kP0sZBAyU60KnhVdjxwzDWC8/TO5uhIZ
K1epXLoz5CJLoDnlc4Z3Up9j/pFKl1PouwaYM6YALlyRNUJrQB+DOVbGERdnwEvu
pv684YVOCppk8TICsDXcBBkSd2yFHBuM3lNRSqTOxS841YtHSrS5JyeAdnQR0RpV
CVG5t+DWKF7t7RJpDWEIdVeRa2aB6bQc4ZMPS1jXfRzxZKLvRC1zTDNL8YHNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUlJ1r0wa5786HpwuNHpLodXBNIqAwHwYDVR0j
BBgwFoAUK3AaCQCIDlDxPmdJwoiZiIEeyMEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkQ5Sjk0S1Y5WEEzZ1J4WGt6ZER1aldFQm9uWTJaTmRmeTF3d2FWVEta
OEsvMS8yQjcwMUEwOTAwODgwRTUwRjEzRTY3NDlDMjg4OTk4ODgxMUVDOEMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNzAxQTA5MDA4ODBFNTBG
MTNFNjc0OUMyODg5OTg4ODExRUM4QzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZEOUo5NEtWOVhBM2dSeFhremREdWpXRUJvblkyWk5kZnkxd3dhVlRLWjhLLzEv
MzIzODMwMzQzYTM3NjI2NDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzQzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR70DANBgkqhkiG9w0BAQsFAAOCAQEAQLgmKOMW
ifmxBhQYhYvwQNKNLS9XwsxOUcsA4iYIUqr2XJ1N8i6+MgVq/xoib2nfsg/9dRUv
9x9Y6UtyV8ojvTO4u8GvCnylyUkTbXPTeq78XQoRuVkJhYR9FaMlKYOdaACXJGUy
4XJ/c9UyzhivgSMvyhStfwFcFBW2FOecegESm4PWoEggY14yImsVrRfpcS1T/x3J
RsJnobljBtNWRX4SRRl9mfi/OTvb6EFcqcmRKANZuLpkDzO90NIOLYAYL6MsSwxV
9CUndrV6M6jefDYRczxS85FT+Q9xK7/HZNjEjBTj2Ax0QROuSpRGUgAEsJRHxSmB
KfZSQ1rpOGkC1g==
-----END CERTIFICATE-----
Generated at Sat Oct 17 01:54:48 2026 by rpki-client