Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/323830343a383265343a3a2f33322d3334203d3e20323732313633.roa
File:                     323830343a383265343a3a2f33322d3334203d3e20323732313633.roa (raw, json)
Hash identifier:          ddk8DjDkjMDV7KpqT4lXBkRIzGCezXEz4joSC1iPKGU=
Subject key identifier:   39:49:66:13:D5:D6:0C:1B:1D:8B:F3:BF:72:B5:FD:E6:E9:E6:9D:AE
Certificate issuer:       /CN=31C3EAF80087CCCB6C18990C0EB2E2BA77D74E57
Certificate serial:       3DD4BD22A22F08299015D4AC285BC8BC6B26CD8E
Authority key identifier: 31:C3:EA:F8:00:87:CC:CB:6C:18:99:0C:0E:B2:E2:BA:77:D7:4E:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31C3EAF80087CCCB6C18990C0EB2E2BA77D74E57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/323830343a383265343a3a2f33322d3334203d3e20323732313633.roa
Signing time:             Wed 16 Sep 2026 14:27:12 +0000
ROA not before:           Wed 16 Sep 2026 14:22:12 +0000
ROA not after:            Wed 15 Sep 2027 14:27:12 +0000
asID:                     272163
IP address blocks:        2804:82e4::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/31C3EAF80087CCCB6C18990C0EB2E2BA77D74E57.crl
                          rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/31C3EAF80087CCCB6C18990C0EB2E2BA77D74E57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31C3EAF80087CCCB6C18990C0EB2E2BA77D74E57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 14:43:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d4:bd:22:a2:2f:08:29:90:15:d4:ac:28:5b:c8:bc:6b:26:cd:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31C3EAF80087CCCB6C18990C0EB2E2BA77D74E57
        Validity
            Not Before: Sep 16 14:22:12 2026 GMT
            Not After : Sep 15 14:27:12 2027 GMT
        Subject: CN=39496613D5D60C1B1D8BF3BF72B5FDE6E9E69DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:6e:39:b8:65:00:82:82:4f:ce:2a:11:74:
                    6c:54:b6:c3:4e:24:78:37:62:1e:96:41:83:90:92:
                    c1:ce:c6:94:0d:09:f1:72:49:e6:39:b6:a3:39:84:
                    94:f5:3a:db:3c:c4:f7:65:92:1c:f1:d5:98:15:2d:
                    42:4c:4b:24:6a:a5:3f:71:d2:9d:00:0b:96:1a:6e:
                    74:33:ac:21:15:f0:a4:89:52:9c:85:ad:42:d0:a0:
                    04:64:da:8b:82:e7:b5:3e:34:93:6f:4c:aa:41:56:
                    5f:2b:d3:20:d5:c4:99:e4:b9:95:7e:43:6c:79:7a:
                    46:e2:27:a2:61:a6:29:37:13:f8:07:52:94:8b:47:
                    f8:88:7b:1b:66:5b:33:53:65:b1:0d:5f:62:8b:80:
                    68:42:39:58:79:58:57:a3:01:08:3f:de:62:66:ce:
                    f7:0b:8a:bb:ed:30:57:7d:25:32:12:35:4c:d4:c9:
                    19:c0:f0:95:b9:b1:12:2f:47:7e:a3:31:b2:b8:82:
                    ec:44:85:8a:3c:60:45:36:b1:35:23:18:61:1d:e3:
                    90:3c:4e:a9:93:db:d9:87:63:ef:ff:0f:07:42:eb:
                    03:bc:c9:7f:bd:f8:7d:42:09:09:e7:cd:de:07:51:
                    64:99:5e:ad:69:33:be:fb:bb:50:4a:d0:79:fb:77:
                    62:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:49:66:13:D5:D6:0C:1B:1D:8B:F3:BF:72:B5:FD:E6:E9:E6:9D:AE
            X509v3 Authority Key Identifier:
                keyid:31:C3:EA:F8:00:87:CC:CB:6C:18:99:0C:0E:B2:E2:BA:77:D7:4E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/31C3EAF80087CCCB6C18990C0EB2E2BA77D74E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31C3EAF80087CCCB6C18990C0EB2E2BA77D74E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/323830343a383265343a3a2f33322d3334203d3e20323732313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:42:a1:a3:0a:b4:be:99:1b:1c:0f:d6:73:af:05:d1:ce:96:
         df:58:87:c8:2d:8d:b8:b2:0a:72:e6:f6:ee:35:eb:be:29:a4:
         87:30:79:81:63:18:5c:fd:a4:64:86:15:bf:48:ed:bc:f9:47:
         52:ba:fa:d6:1f:39:6c:de:18:10:73:44:4b:e1:4b:07:50:25:
         21:3a:d2:73:f3:e5:91:9e:50:2b:b0:5b:ee:1f:79:03:e6:cf:
         a5:f2:4a:54:c6:43:f2:2a:66:6a:a0:be:80:5c:21:c4:b0:19:
         4d:ff:c6:c2:cf:85:10:13:dc:1c:b1:e3:2f:85:5f:b5:38:31:
         89:98:7a:04:54:6f:93:b0:48:1f:aa:e1:ee:4d:a1:67:98:5b:
         d6:bd:16:f5:ca:9e:a0:85:43:9d:8f:3a:15:2a:84:8c:09:3a:
         88:5d:e1:05:0d:9a:84:53:11:5b:c3:5c:bc:49:23:4f:10:b0:
         f4:12:84:ee:98:53:e7:73:b2:0a:ca:57:1e:06:f4:c5:a7:67:
         d5:6c:33:1f:34:90:00:a7:ff:bb:a6:c8:8e:28:fd:59:c8:61:
         b0:72:30:c6:9d:ff:e0:ca:aa:48:68:28:87:3e:e2:93:39:e7:
         d1:4f:b0:98:14:e4:86:17:c7:97:8f:29:f6:9a:e9:43:03:28:
         df:fd:50:2e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPdS9IqIvCCmQFdSsKFvIvGsmzY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFDM0VBRjgwMDg3Q0NDQjZDMTg5OTBDMEVCMkUyQkE3
N0Q3NEU1NzAeFw0yNjA5MTYxNDIyMTJaFw0yNzA5MTUxNDI3MTJaMDMxMTAvBgNV
BAMTKDM5NDk2NjEzRDVENjBDMUIxRDhCRjNCRjcyQjVGREU2RTlFNjlEQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VW45uGUAgoJPzioRdGxUtsNO
JHg3Yh6WQYOQksHOxpQNCfFySeY5tqM5hJT1Ots8xPdlkhzx1ZgVLUJMSyRqpT9x
0p0AC5YabnQzrCEV8KSJUpyFrULQoARk2ouC57U+NJNvTKpBVl8r0yDVxJnkuZV+
Q2x5ekbiJ6Jhpik3E/gHUpSLR/iIextmWzNTZbENX2KLgGhCOVh5WFejAQg/3mJm
zvcLirvtMFd9JTISNUzUyRnA8JW5sRIvR36jMbK4guxEhYo8YEU2sTUjGGEd45A8
TqmT29mHY+//DwdC6wO8yX+9+H1CCQnnzd4HUWSZXq1pM777u1BK0Hn7d2KZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUOUlmE9XWDBsdi/O/crX95unmna4wHwYDVR0j
BBgwFoAUMcPq+ACHzMtsGJkMDrLiunfXTlcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlJWQVVIN29GNVVQRlh4SE55bTNUb25USG81UVg0d0tTYTNlUGs2TENK
bVAvMC8zMUMzRUFGODAwODdDQ0NCNkMxODk5MEMwRUIyRTJCQTc3RDc0RTU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQzNFQUY4MDA4N0NDQ0I2
QzE4OTkwQzBFQjJFMkJBNzdENzRFNTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZSVkFVSDdvRjVVUEZYeEhOeW0zVG9uVEhvNVFYNHdLU2EzZVBrNkxDSm1QLzAv
MzIzODMwMzQzYTM4MzI2NTM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMy
MzEzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASC5DANBgkqhkiG9w0BAQsFAAOCAQEAXEKhowq0
vpkbHA/Wc68F0c6W31iHyC2NuLIKcub27jXrvimkhzB5gWMYXP2kZIYVv0jtvPlH
Urr61h85bN4YEHNES+FLB1AlITrSc/PlkZ5QK7Bb7h95A+bPpfJKVMZD8ipmaqC+
gFwhxLAZTf/Gws+FEBPcHLHjL4VftTgxiZh6BFRvk7BIH6rh7k2hZ5hb1r0W9cqe
oIVDnY86FSqEjAk6iF3hBQ2ahFMRW8NcvEkjTxCw9BKE7phT53OyCspXHgb0xadn
1WwzHzSQAKf/u6bIjij9WchhsHIwxp3/4MqqSGgohz7ikznn0U+wmBTkhhfHl48p
9prpQwMo3/1QLg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 16:47:20 2026 by rpki-client