Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a383230303a3a2f34302d3430203d3e20323733343433.roa
File:                     323830343a386562343a383230303a3a2f34302d3430203d3e20323733343433.roa (raw, json)
Hash identifier:          Icy+/kO3sIyxl/hhVx2z46VwZc3NZHqFiJMdPPmNcDA=
Subject key identifier:   37:0D:2D:F3:BA:59:D3:4D:77:63:0E:C9:6C:64:53:C9:A5:6C:3F:E3
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       52163A406B76C1EEDF2539AF0FEEB9414F2F8EDA
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a383230303a3a2f34302d3430203d3e20323733343433.roa
Signing time:             Sun 25 Oct 2026 23:59:23 +0000
ROA not before:           Sun 25 Oct 2026 23:54:23 +0000
ROA not after:            Sun 24 Oct 2027 23:59:23 +0000
asID:                     273443
IP address blocks:        2804:8eb4:8200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 19:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:16:3a:40:6b:76:c1:ee:df:25:39:af:0f:ee:b9:41:4f:2f:8e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: Oct 25 23:54:23 2026 GMT
            Not After : Oct 24 23:59:23 2027 GMT
        Subject: CN=370D2DF3BA59D34D77630EC96C6453C9A56C3FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:88:a9:83:88:85:12:8d:60:5a:0c:b9:17:6e:
                    cf:00:2a:d9:6f:3a:e8:9c:75:e2:40:09:c4:80:03:
                    2e:ad:29:81:02:55:ff:c7:a6:73:9c:1e:69:ad:ca:
                    91:db:99:9c:9c:01:99:4d:94:93:f7:26:d9:04:32:
                    77:18:90:40:71:41:f9:ca:a6:58:63:d9:f8:f2:85:
                    ca:a9:be:fa:2c:b8:18:eb:1d:ee:85:b4:ae:5f:09:
                    0c:8e:8f:dc:39:f2:c7:c5:3b:42:f7:ad:09:63:2f:
                    b4:13:bd:56:6e:92:82:62:59:3c:32:a2:2a:2b:06:
                    46:16:3f:b5:48:fe:31:a5:22:f3:74:ee:ad:91:14:
                    3f:2a:6f:3c:96:be:95:91:f5:6a:8a:9d:3a:31:dc:
                    36:45:29:a5:3e:83:ad:3f:45:01:41:4e:3f:06:58:
                    99:1a:c5:2f:a7:e8:2d:c5:87:f2:6b:0a:1b:e6:2f:
                    70:f4:1c:39:25:83:38:54:ac:66:00:25:7a:ba:5d:
                    23:b8:3f:2f:d9:88:24:ae:3c:e9:6c:80:0d:c7:cf:
                    37:aa:c4:0c:2a:e7:68:e6:10:f8:41:21:72:ad:19:
                    61:fa:3d:e3:e4:a6:20:a0:22:73:20:48:28:0d:42:
                    90:c5:f1:50:33:cd:81:cd:02:7c:dd:ef:98:51:2b:
                    13:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0D:2D:F3:BA:59:D3:4D:77:63:0E:C9:6C:64:53:C9:A5:6C:3F:E3
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a383230303a3a2f34302d3430203d3e20323733343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8eb4:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:07:41:7c:85:61:04:b5:dd:7e:e5:66:76:59:8c:db:03:df:
         a6:41:01:88:11:c0:96:a8:0f:76:65:0a:f7:f3:63:10:29:06:
         1d:5f:46:ba:30:6d:94:ae:4e:b5:3e:1b:99:3c:af:f1:6f:28:
         90:f4:b3:66:a8:05:0e:30:f7:8e:5d:4b:56:ed:0d:c1:e2:53:
         12:ad:e1:51:14:70:c0:3d:92:a4:65:c5:6c:9b:26:8a:07:a5:
         c5:97:d9:b6:32:37:32:ca:f8:a9:e4:e1:5c:c3:c5:09:b5:64:
         0e:9d:80:3f:d8:75:b0:df:71:c4:af:82:b6:8b:3d:bc:8e:f2:
         fb:97:eb:ee:ea:2c:17:3c:63:0d:25:45:ae:5d:f0:76:52:0b:
         84:83:4d:b4:8d:ff:43:95:dd:78:bf:97:35:bb:b0:6c:04:10:
         62:df:2b:5f:57:4f:a1:aa:ff:ab:bf:ff:fe:89:e5:e0:d5:4a:
         a8:8b:ca:04:2b:94:c8:5b:b9:84:f8:10:86:56:de:98:60:73:
         58:e4:16:a3:75:69:f8:71:6b:b1:79:f7:09:3c:18:ec:da:3d:
         5b:82:88:ab:46:75:73:c8:58:d2:3b:ae:91:41:f9:43:53:25:
         c5:82:ed:ab:fb:a8:80:e8:0e:6f:3c:ce:f2:88:cb:ea:24:f7:
         a5:b8:aa:16
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUhY6QGt2we7fJTmvD+65QU8vjtowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAxQUI0QzJDQjI3Njk4QTdFRjA2ODQzMjRENDE2Qjg2
NDZBOUI3NTAeFw0yNjEwMjUyMzU0MjNaFw0yNzEwMjQyMzU5MjNaMDMxMTAvBgNV
BAMTKDM3MEQyREYzQkE1OUQzNEQ3NzYzMEVDOTZDNjQ1M0M5QTU2QzNGRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCviKmDiIUSjWBaDLkXbs8AKtlv
OuicdeJACcSAAy6tKYECVf/HpnOcHmmtypHbmZycAZlNlJP3JtkEMncYkEBxQfnK
plhj2fjyhcqpvvosuBjrHe6FtK5fCQyOj9w58sfFO0L3rQljL7QTvVZukoJiWTwy
oiorBkYWP7VI/jGlIvN07q2RFD8qbzyWvpWR9WqKnTox3DZFKaU+g60/RQFBTj8G
WJkaxS+n6C3Fh/JrChvmL3D0HDklgzhUrGYAJXq6XSO4Py/ZiCSuPOlsgA3Hzzeq
xAwq52jmEPhBIXKtGWH6PePkpiCgInMgSCgNQpDF8VAzzYHNAnzd75hRKxObAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUNw0t87pZ0013Yw7JbGRTyaVsP+MwHwYDVR0j
BBgwFoAUYBq0wssnaYp+8GhDJNQWuGRqm3UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDh3VDJWcFJMeTdHUWVxRFdyWVh4aG04cndDQ2dhYWNaNmZ6Q2RpaUNm
RzUvMC82MDFBQjRDMkNCMjc2OThBN0VGMDY4NDMyNEQ0MTZCODY0NkE5Qjc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMUFCNEMyQ0IyNzY5OEE3
RUYwNjg0MzI0RDQxNkI4NjQ2QTlCNzUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g4d1QyVnBSTHk3R1FlcURXcllYeGhtOHJ3Q0NnYWFjWjZmekNkaWlDZkc1LzAv
MzIzODMwMzQzYTM4NjU2MjM0M2EzODMyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMzM0MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEjrSCMA0GCSqGSIb3DQEBCwUA
A4IBAQBqB0F8hWEEtd1+5WZ2WYzbA9+mQQGIEcCWqA92ZQr382MQKQYdX0a6MG2U
rk61PhuZPK/xbyiQ9LNmqAUOMPeOXUtW7Q3B4lMSreFRFHDAPZKkZcVsmyaKB6XF
l9m2Mjcyyvip5OFcw8UJtWQOnYA/2HWw33HEr4K2iz28jvL7l+vu6iwXPGMNJUWu
XfB2UguEg020jf9Dld14v5c1u7BsBBBi3ytfV0+hqv+rv//+ieXg1Uqoi8oEK5TI
W7mE+BCGVt6YYHNY5BajdWn4cWuxefcJPBjs2j1bgoirRnVzyFjSO66RQflDUyXF
gu2r+6iA6A5vPM7yiMvqJPeluKoW
-----END CERTIFICATE-----
Generated at Sun Nov 1 06:04:17 2026 by rpki-client