Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/323830343a343062303a31303a3a2f34382d3438203d3e20323635393735.roa
File:                     323830343a343062303a31303a3a2f34382d3438203d3e20323635393735.roa (raw, json)
Hash identifier:          EJOpwsoLsYFlllC0MiMKp7r8mT5JUQKo8rJOipnsUG4=
Subject key identifier:   54:04:5A:CA:B3:FC:FF:66:E2:A5:F5:F4:8F:C6:D9:D5:E1:14:70:97
Certificate issuer:       /CN=2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1
Certificate serial:       0D2009305140C097195CEF4A7592361CD719C76F
Authority key identifier: 2C:D1:1F:1C:63:9F:B5:D4:95:F1:A5:BA:66:FC:73:3D:44:CB:97:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/323830343a343062303a31303a3a2f34382d3438203d3e20323635393735.roa
Signing time:             Fri 18 Sep 2026 14:37:16 +0000
ROA not before:           Fri 18 Sep 2026 14:32:16 +0000
ROA not after:            Fri 17 Sep 2027 14:37:16 +0000
asID:                     265975
IP address blocks:        2804:40b0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.crl
                          rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 22:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:20:09:30:51:40:c0:97:19:5c:ef:4a:75:92:36:1c:d7:19:c7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1
        Validity
            Not Before: Sep 18 14:32:16 2026 GMT
            Not After : Sep 17 14:37:16 2027 GMT
        Subject: CN=54045ACAB3FCFF66E2A5F5F48FC6D9D5E1147097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:37:a0:56:58:0f:36:26:cf:be:79:73:6d:db:
                    02:7c:b0:05:f5:8e:ee:b0:60:1c:51:8f:68:bf:5a:
                    5e:96:4e:3c:2e:20:5e:3c:e1:8d:07:47:54:54:2b:
                    76:f9:5e:33:81:ac:6c:3e:1f:8d:df:b7:60:6f:9d:
                    f6:c9:6d:ad:a3:30:ad:63:0a:4c:4d:e5:0c:40:53:
                    f6:e6:88:ce:06:17:d1:7e:c0:32:cf:00:85:8d:ff:
                    bc:35:8e:40:1f:ea:d4:89:77:cf:1e:38:47:f9:a3:
                    ab:7f:d0:fb:7a:3f:da:b8:4e:c1:e9:f8:84:82:3e:
                    10:1c:ce:0f:34:8b:98:39:a6:21:6d:c8:53:b2:da:
                    84:69:69:62:cd:e5:fe:8b:78:12:9d:d5:b4:07:4f:
                    fa:52:9b:dd:6e:a6:f4:a0:cf:72:19:80:b2:89:08:
                    35:5e:68:15:84:f1:2e:f0:fe:81:bf:58:ef:c0:80:
                    e4:8c:af:13:2a:82:44:11:a9:6c:29:4b:06:9a:ce:
                    9d:de:d3:6e:64:f7:da:ed:b4:9f:60:a6:a5:5e:25:
                    17:27:fd:da:f9:88:c6:69:e3:1e:e0:2a:f2:2a:f5:
                    57:3a:8c:92:fa:66:48:ab:96:73:69:a7:cb:f2:79:
                    19:43:35:95:14:91:1a:22:1d:9b:c4:46:21:62:52:
                    87:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:04:5A:CA:B3:FC:FF:66:E2:A5:F5:F4:8F:C6:D9:D5:E1:14:70:97
            X509v3 Authority Key Identifier:
                keyid:2C:D1:1F:1C:63:9F:B5:D4:95:F1:A5:BA:66:FC:73:3D:44:CB:97:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/323830343a343062303a31303a3a2f34382d3438203d3e20323635393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40b0:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:2b:b2:5c:1e:cb:51:8d:a9:d1:34:e5:4b:9e:24:f7:2c:55:
         cd:6a:c5:2f:c7:35:64:77:c5:64:2e:c7:4c:46:bd:57:9a:6b:
         56:93:57:7f:20:3f:f5:93:14:64:9d:18:89:1c:42:39:f5:8e:
         3b:00:e9:8f:d9:a9:ad:82:09:fc:e8:26:b8:a7:db:a8:8c:a2:
         f6:6c:a5:22:62:3a:7e:ab:5b:3a:79:99:af:65:32:3f:cc:01:
         82:52:a6:fa:14:82:59:77:fe:71:92:b6:f6:66:13:b3:3c:47:
         9b:a5:f0:4a:ff:a6:40:96:7f:60:df:3d:5e:ae:85:2e:fb:7c:
         91:d3:0c:34:f0:39:f8:1d:40:4d:64:14:e6:0c:db:3f:bf:03:
         39:ee:db:68:31:8a:ef:59:d4:2e:09:37:3f:27:97:d3:15:e4:
         c5:a5:cd:2a:c4:09:94:13:92:33:53:28:3d:19:78:fc:2e:d4:
         96:f5:5e:3c:d4:ae:28:d7:75:41:61:c9:f1:32:64:64:0c:5b:
         68:e6:22:02:c2:a9:ac:29:34:b4:4c:e2:42:be:15:b2:d7:57:
         cb:2f:0b:cc:e0:af:0b:cb:02:f7:2c:df:29:ba:4d:15:76:cd:
         1f:68:36:07:ee:27:17:37:be:0c:31:6b:70:ff:85:4d:74:49:
         4c:b4:85:ba
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUDSAJMFFAwJcZXO9KdZI2HNcZx28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNEMTFGMUM2MzlGQjVENDk1RjFBNUJBNjZGQzczM0Q0
NENCOTdFMTAeFw0yNjA5MTgxNDMyMTZaFw0yNzA5MTcxNDM3MTZaMDMxMTAvBgNV
BAMTKDU0MDQ1QUNBQjNGQ0ZGNjZFMkE1RjVGNDhGQzZEOUQ1RTExNDcwOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiN6BWWA82Js++eXNt2wJ8sAX1
ju6wYBxRj2i/Wl6WTjwuIF484Y0HR1RUK3b5XjOBrGw+H43ft2BvnfbJba2jMK1j
CkxN5QxAU/bmiM4GF9F+wDLPAIWN/7w1jkAf6tSJd88eOEf5o6t/0Pt6P9q4TsHp
+ISCPhAczg80i5g5piFtyFOy2oRpaWLN5f6LeBKd1bQHT/pSm91upvSgz3IZgLKJ
CDVeaBWE8S7w/oG/WO/AgOSMrxMqgkQRqWwpSwaazp3e025k99rttJ9gpqVeJRcn
/dr5iMZp4x7gKvIq9Vc6jJL6ZkirlnNpp8vyeRlDNZUUkRoiHZvERiFiUod3AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUVARayrP8/2bipfX0j8bZ1eEUcJcwHwYDVR0j
BBgwFoAULNEfHGOftdSV8aW6ZvxzPUTLl+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3BWclVpaFphTHh4Z1FpMWNaOEM5c0Nja1JyYXdqVW0xUXRBN3NZNjJw
ZkYvMC8yQ0QxMUYxQzYzOUZCNUQ0OTVGMUE1QkE2NkZDNzMzRDQ0Q0I5N0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDRDExRjFDNjM5RkI1RDQ5
NUYxQTVCQTY2RkM3MzNENDRDQjk3RTEuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dwVnJVaWhaYUx4eGdRaTFjWjhDOXNDY2tScmF3alVtMVF0QTdzWTYycGZGLzAv
MzIzODMwMzQzYTM0MzA2MjMwM2EzMTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzNjM1MzkzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKARAsAAQMA0GCSqGSIb3DQEBCwUAA4IB
AQAMK7JcHstRjanRNOVLniT3LFXNasUvxzVkd8VkLsdMRr1XmmtWk1d/ID/1kxRk
nRiJHEI59Y47AOmP2amtggn86Ca4p9uojKL2bKUiYjp+q1s6eZmvZTI/zAGCUqb6
FIJZd/5xkrb2ZhOzPEebpfBK/6ZAln9g3z1eroUu+3yR0ww08Dn4HUBNZBTmDNs/
vwM57ttoMYrvWdQuCTc/J5fTFeTFpc0qxAmUE5IzUyg9GXj8LtSW9V481K4o13VB
YcnxMmRkDFto5iICwqmsKTS0TOJCvhWy11fLLwvM4K8LywL3LN8puk0Vds0faDYH
7icXN74MMWtw/4VNdElMtIW6
-----END CERTIFICATE-----
Generated at Mon Nov 2 08:17:58 2026 by rpki-client