Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a3a2f33322d3332203d3e20323637333630.roa
File:                     323830343a346334343a3a2f33322d3332203d3e20323637333630.roa (raw, json)
Hash identifier:          zkyRH8r8Ly/m2qR93oBKNispiEX9sDNQn9gSto3bv4w=
Subject key identifier:   2F:2B:46:8C:7D:24:CE:33:08:16:8A:E6:1B:E4:70:F8:12:1F:04:91
Certificate issuer:       /CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
Certificate serial:       0DA4EF1966990A50E757138C69AC46C80DCE0ED7
Authority key identifier: 29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a3a2f33322d3332203d3e20323637333630.roa
Signing time:             Tue 08 Sep 2026 20:19:47 +0000
ROA not before:           Tue 08 Sep 2026 20:14:47 +0000
ROA not after:            Tue 07 Sep 2027 20:19:47 +0000
asID:                     267360
IP address blocks:        2804:4c44::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl
                          rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 11:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a4:ef:19:66:99:0a:50:e7:57:13:8c:69:ac:46:c8:0d:ce:0e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
        Validity
            Not Before: Sep  8 20:14:47 2026 GMT
            Not After : Sep  7 20:19:47 2027 GMT
        Subject: CN=2F2B468C7D24CE3308168AE61BE470F8121F0491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:a0:6b:d2:39:dd:6b:0d:21:80:87:12:e0:
                    7a:51:99:c4:c0:e1:24:76:8c:7e:84:14:bf:d9:93:
                    c8:5b:58:89:eb:67:3a:1a:cd:19:13:4c:3f:cd:c8:
                    91:bd:15:a2:c6:7f:6a:95:ea:84:47:cb:8f:e2:ca:
                    7c:4e:5a:7e:15:53:8b:96:14:12:08:90:31:4c:7d:
                    d7:d2:2f:63:74:ad:fa:13:1f:59:90:a3:80:49:b0:
                    89:36:3c:77:ba:1c:a5:c8:4c:93:71:20:67:ec:60:
                    49:db:31:25:b0:d8:b7:29:ef:d2:ed:e1:75:ae:65:
                    27:f2:38:a2:3c:dd:32:b6:ff:2c:1d:40:0b:b0:38:
                    4f:3b:bd:ae:80:ab:5d:0e:dc:14:9b:8b:2e:82:5d:
                    3c:62:11:06:1d:e4:8f:46:ac:3f:c6:75:ad:fe:67:
                    35:3d:16:06:e1:cf:c0:67:d3:53:d5:05:60:eb:2d:
                    d2:88:bb:91:5c:00:32:a0:27:9d:e3:11:96:79:77:
                    04:55:fb:ee:46:b8:34:6e:66:c5:5a:a5:13:c4:d7:
                    87:04:f2:6d:a4:c2:da:18:85:78:d8:77:25:ec:88:
                    87:90:1c:4c:ce:7b:55:de:8e:fd:ab:ce:2d:b2:2e:
                    89:fb:0f:eb:24:74:bd:3d:58:36:84:30:0e:0c:72:
                    bc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2B:46:8C:7D:24:CE:33:08:16:8A:E6:1B:E4:70:F8:12:1F:04:91
            X509v3 Authority Key Identifier:
                keyid:29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a3a2f33322d3332203d3e20323637333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c44::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:cf:df:bf:c9:73:a0:4f:64:cc:d1:95:17:c1:21:e0:b8:74:
         d3:fd:63:f7:91:cf:71:b0:7a:6d:4f:fe:c9:f6:01:97:4e:32:
         54:ce:eb:3d:1d:37:3d:12:da:01:90:c5:d2:82:40:f0:c4:f0:
         00:50:17:08:b8:35:f2:6d:03:ea:b6:b3:21:0c:b0:bc:39:07:
         86:bf:09:a0:80:e9:31:40:a9:1b:13:d5:94:b5:db:77:ec:76:
         22:0a:e9:61:07:a1:73:5b:85:f2:ba:ea:d7:03:4e:a9:e9:2d:
         93:33:d9:e0:90:34:7e:53:cf:8e:fd:ec:34:e7:64:bc:50:cb:
         28:1d:d3:f1:b4:50:07:f8:86:c2:34:a5:d8:34:5c:a8:3d:c1:
         2b:eb:0e:c8:45:79:1f:83:66:fc:86:ce:b4:79:1d:2f:e6:2e:
         83:8f:fa:81:04:6b:59:bf:e2:70:74:c8:d4:d4:2b:eb:33:15:
         d8:10:76:89:af:92:a1:5f:bd:82:36:e3:fc:21:ec:c6:de:f8:
         5e:0e:37:2a:7a:6c:16:dc:1e:d8:e9:44:22:51:1c:32:c4:b5:
         e8:e9:87:0e:e4:38:0f:2a:7a:28:6e:b3:24:08:97:27:e1:b5:
         8d:5c:24:85:9d:86:5c:38:21:65:94:33:28:8a:f4:b2:fd:af:
         fb:2b:3e:a0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDaTvGWaZClDnVxOMaaxGyA3ODtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk0NTg4MzBGMDY1QTE4ODhCNTEzQkE4RjQ4Q0YwQUNC
MEM0OTlFQTAeFw0yNjA5MDgyMDE0NDdaFw0yNzA5MDcyMDE5NDdaMDMxMTAvBgNV
BAMTKDJGMkI0NjhDN0QyNENFMzMwODE2OEFFNjFCRTQ3MEY4MTIxRjA0OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGaBr0jndaw0hgIcS4HpRmcTA
4SR2jH6EFL/Zk8hbWInrZzoazRkTTD/NyJG9FaLGf2qV6oRHy4/iynxOWn4VU4uW
FBIIkDFMfdfSL2N0rfoTH1mQo4BJsIk2PHe6HKXITJNxIGfsYEnbMSWw2Lcp79Lt
4XWuZSfyOKI83TK2/ywdQAuwOE87va6Aq10O3BSbiy6CXTxiEQYd5I9GrD/Gda3+
ZzU9Fgbhz8Bn01PVBWDrLdKIu5FcADKgJ53jEZZ5dwRV++5GuDRuZsVapRPE14cE
8m2kwtoYhXjYdyXsiIeQHEzOe1Xejv2rzi2yLon7D+skdL09WDaEMA4Mcrw/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQULytGjH0kzjMIFormG+Rw+BIfBJEwHwYDVR0j
BBgwFoAUKUWIMPBloYiLUTuo9IzwrLDEmeowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2g3UG5lY2tHZWNjWG83WDNmZXdITG5iMlRiUWJGUDhvOVR0QjhrdTJC
aUIvMC8yOTQ1ODgzMEYwNjVBMTg4OEI1MTNCQThGNDhDRjBBQ0IwQzQ5OUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NDU4ODMwRjA2NUExODg4
QjUxM0JBOEY0OENGMEFDQjBDNDk5RUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0doN1BuZWNrR2VjY1hvN1gzZmV3SExuYjJUYlFiRlA4bzlUdEI4a3UyQmlCLzAv
MzIzODMwMzQzYTM0NjMzNDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzMzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARMRDANBgkqhkiG9w0BAQsFAAOCAQEAlM/fv8lz
oE9kzNGVF8Eh4Lh00/1j95HPcbB6bU/+yfYBl04yVM7rPR03PRLaAZDF0oJA8MTw
AFAXCLg18m0D6razIQywvDkHhr8JoIDpMUCpGxPVlLXbd+x2IgrpYQehc1uF8rrq
1wNOqektkzPZ4JA0flPPjv3sNOdkvFDLKB3T8bRQB/iGwjSl2DRcqD3BK+sOyEV5
H4Nm/IbOtHkdL+Yug4/6gQRrWb/icHTI1NQr6zMV2BB2ia+SoV+9gjbj/CHsxt74
Xg43KnpsFtwe2OlEIlEcMsS16OmHDuQ4Dyp6KG6zJAiXJ+G1jVwkhZ2GXDghZZQz
KIr0sv2v+ys+oA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:24:47 2026 by rpki-client