Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a383030303a3a2f33342d3334203d3e20323634303034.roa
File:                     323830343a323933383a383030303a3a2f33342d3334203d3e20323634303034.roa (raw, json)
Hash identifier:          RLBuba81oAReNxbDD0Xs/7gKuSuNjIe556DZGIVeQ3A=
Subject key identifier:   9F:72:D2:61:72:8D:0B:54:D2:24:23:8B:B6:16:08:27:EF:20:B5:F6
Certificate issuer:       /CN=9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0
Certificate serial:       4D558C5286D2AD158BBBDE2BA3F1865DE5CFF357
Authority key identifier: 9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a383030303a3a2f33342d3334203d3e20323634303034.roa
Signing time:             Thu 28 May 2026 18:02:38 +0000
ROA not before:           Thu 28 May 2026 17:57:38 +0000
ROA not after:            Thu 27 May 2027 18:02:38 +0000
asID:                     264004
IP address blocks:        2804:2938:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.crl
                          rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:55:8c:52:86:d2:ad:15:8b:bb:de:2b:a3:f1:86:5d:e5:cf:f3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0
        Validity
            Not Before: May 28 17:57:38 2026 GMT
            Not After : May 27 18:02:38 2027 GMT
        Subject: CN=9F72D261728D0B54D224238BB6160827EF20B5F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:65:cd:c0:cb:2f:59:d2:ee:3b:43:21:9c:
                    98:bc:54:38:21:75:34:4a:b0:5c:d0:9f:4a:9b:08:
                    01:e8:9e:21:71:3a:ee:13:c7:7f:6d:18:13:1a:23:
                    e2:a9:2a:05:7e:ef:a3:05:60:44:98:6f:b1:3d:47:
                    f3:3b:91:7b:b2:07:f9:84:7b:87:74:44:1b:70:f2:
                    01:97:99:4d:47:57:88:8d:7c:ae:a7:85:e3:fd:11:
                    18:6d:70:9e:f6:c5:76:88:d2:20:fc:47:53:db:95:
                    ae:63:4a:f2:96:59:91:65:f7:0e:11:15:5a:29:7d:
                    e5:c3:91:bb:bc:5d:0b:09:53:d2:cc:82:aa:8c:13:
                    3f:d5:a4:b5:4f:03:20:68:c9:e9:48:46:ef:e5:d5:
                    cc:ac:31:ab:88:0c:2c:fc:14:10:93:4a:e7:26:6d:
                    48:cb:a0:6d:1e:2a:f8:1e:45:74:e3:5c:1e:ba:00:
                    a5:f9:a5:09:b5:37:5e:6d:dc:58:88:77:c6:4d:40:
                    06:f9:04:7d:19:d0:fd:d9:e5:e2:07:77:6e:88:5a:
                    f4:bc:8c:6e:9c:e8:f0:dd:5d:bb:04:30:f5:ca:29:
                    28:ba:49:53:05:78:db:9d:a4:b5:f1:d3:1d:11:a3:
                    3b:52:99:c5:d0:f0:df:23:60:b7:b7:4a:dd:1f:58:
                    64:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:72:D2:61:72:8D:0B:54:D2:24:23:8B:B6:16:08:27:EF:20:B5:F6
            X509v3 Authority Key Identifier:
                keyid:9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a383030303a3a2f33342d3334203d3e20323634303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2938:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ec:99:cf:e0:80:82:63:b2:76:9e:fc:44:77:a1:5a:8c:9e:54:
         72:ac:7f:21:a0:65:fd:60:f8:37:db:c7:74:ca:7d:71:30:f5:
         84:f1:a7:3a:30:c2:3d:5e:df:d4:52:be:d0:9b:8d:a4:38:bc:
         f1:f9:4b:64:03:f5:bd:ff:a4:50:8e:8b:44:41:be:41:82:8a:
         15:7f:2f:87:38:77:06:0b:5e:7a:36:98:10:c3:98:25:46:d5:
         9f:a3:57:c0:13:f7:b2:dc:a1:fe:31:08:cc:56:6b:7e:50:dc:
         bd:54:66:db:87:25:b3:24:9b:a2:e7:d8:e5:69:d0:4e:ba:2f:
         5b:44:85:2e:d0:db:7e:82:ca:40:ce:ec:df:f2:9f:24:a1:91:
         78:2a:c8:00:8a:94:9c:cf:a3:40:f2:36:5c:f8:4a:c4:5f:ed:
         c2:36:a7:7b:24:77:7c:a3:52:87:78:79:98:b9:86:46:b4:dc:
         79:48:67:4f:3a:0a:ed:b3:93:e8:a3:e5:bb:f3:85:44:0a:20:
         24:d7:e0:a3:8f:6b:1e:2f:13:37:8e:14:92:fc:cb:3f:7f:22:
         36:f6:6c:96:a2:38:5a:09:e9:86:58:6c:a3:90:24:38:43:cc:
         14:c6:08:f9:0d:9c:19:70:97:d1:dd:57:9d:79:4a:6e:39:91:
         82:b2:a0:73
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTVWMUobSrRWLu94ro/GGXeXP81cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUUwRUZCNTU3NUZDNjFGNzY5MDhENUFDQjY1MzlEM0Y4
RkM1RjFDMDAeFw0yNjA1MjgxNzU3MzhaFw0yNzA1MjcxODAyMzhaMDMxMTAvBgNV
BAMTKDlGNzJEMjYxNzI4RDBCNTREMjI0MjM4QkI2MTYwODI3RUYyMEI1RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs/GXNwMsvWdLuO0MhnJi8VDgh
dTRKsFzQn0qbCAHoniFxOu4Tx39tGBMaI+KpKgV+76MFYESYb7E9R/M7kXuyB/mE
e4d0RBtw8gGXmU1HV4iNfK6nheP9ERhtcJ72xXaI0iD8R1Pbla5jSvKWWZFl9w4R
FVopfeXDkbu8XQsJU9LMgqqMEz/VpLVPAyBoyelIRu/l1cysMauIDCz8FBCTSucm
bUjLoG0eKvgeRXTjXB66AKX5pQm1N15t3FiId8ZNQAb5BH0Z0P3Z5eIHd26IWvS8
jG6c6PDdXbsEMPXKKSi6SVMFeNudpLXx0x0RoztSmcXQ8N8jYLe3St0fWGRZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUn3LSYXKNC1TSJCOLthYIJ+8gtfYwHwYDVR0j
BBgwFoAUng77VXX8YfdpCNWstlOdP4/F8cAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlRvNHFwcktIc3RQbUVtVVYyNUhBdHFGdVNZcEQ5QUJzdVphZ2tnU1hY
N3gvMC85RTBFRkI1NTc1RkM2MUY3NjkwOEQ1QUNCNjUzOUQzRjhGQzVGMUMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFMEVGQjU1NzVGQzYxRjc2
OTA4RDVBQ0I2NTM5RDNGOEZDNUYxQzAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZUbzRxcHJLSHN0UG1FbVVWMjVIQXRxRnVTWXBEOUFCc3VaYWdrZ1NYWDd4LzAv
MzIzODMwMzQzYTMyMzkzMzM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNDMwMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEKTiAMA0GCSqGSIb3DQEBCwUA
A4IBAQDsmc/ggIJjsnae/ER3oVqMnlRyrH8hoGX9YPg328d0yn1xMPWE8ac6MMI9
Xt/UUr7Qm42kOLzx+UtkA/W9/6RQjotEQb5BgooVfy+HOHcGC156NpgQw5glRtWf
o1fAE/ey3KH+MQjMVmt+UNy9VGbbhyWzJJui59jladBOui9bRIUu0Nt+gspAzuzf
8p8koZF4KsgAipScz6NA8jZc+ErEX+3CNqd7JHd8o1KHeHmYuYZGtNx5SGdPOgrt
s5Poo+W784VECiAk1+Cjj2seLxM3jhSS/Ms/fyI29myWojhaCemGWGyjkCQ4Q8wU
xgj5DZwZcJfR3VedeUpuOZGCsqBz
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:59:59 2026 by rpki-client