Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHeWiBPB6eKVEXUXM8DLtyRGrJV4M6nPHUqvuDkxiStz/0/323830343a383666383a3a2f33322d313238203d3e20323732363738.roa
File:                     323830343a383666383a3a2f33322d313238203d3e20323732363738.roa (raw, json)
Hash identifier:          jeDwiOAP2JjwhkSAlguBQVAVEu2yWSCo8mFJ2N1Dx8w=
Subject key identifier:   11:05:5F:69:C3:68:58:15:21:91:60:51:05:2B:28:6F:2F:EE:74:F2
Certificate issuer:       /CN=B53087C66824E64CCA83C64D376B99B85A640C47
Certificate serial:       704848085EBC243A1FC56DA8222DDBD9D7D7A73C
Authority key identifier: B5:30:87:C6:68:24:E6:4C:CA:83:C6:4D:37:6B:99:B8:5A:64:0C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53087C66824E64CCA83C64D376B99B85A640C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHeWiBPB6eKVEXUXM8DLtyRGrJV4M6nPHUqvuDkxiStz/0/323830343a383666383a3a2f33322d313238203d3e20323732363738.roa
Signing time:             Mon 27 Jul 2026 12:43:38 +0000
ROA not before:           Mon 27 Jul 2026 12:38:38 +0000
ROA not after:            Mon 26 Jul 2027 12:43:38 +0000
asID:                     272678
IP address blocks:        2804:86f8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HHeWiBPB6eKVEXUXM8DLtyRGrJV4M6nPHUqvuDkxiStz/0/B53087C66824E64CCA83C64D376B99B85A640C47.crl
                          rsync://rpki-repo.registro.br/repo/HHeWiBPB6eKVEXUXM8DLtyRGrJV4M6nPHUqvuDkxiStz/0/B53087C66824E64CCA83C64D376B99B85A640C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53087C66824E64CCA83C64D376B99B85A640C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 Jul 2026 01:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:48:48:08:5e:bc:24:3a:1f:c5:6d:a8:22:2d:db:d9:d7:d7:a7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B53087C66824E64CCA83C64D376B99B85A640C47
        Validity
            Not Before: Jul 27 12:38:38 2026 GMT
            Not After : Jul 26 12:43:38 2027 GMT
        Subject: CN=11055F69C368581521916051052B286F2FEE74F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:f8:97:31:9c:6a:6c:75:d7:93:bc:56:24:
                    86:03:8e:e8:0f:ae:b2:99:a5:2a:03:a3:35:af:b6:
                    de:69:07:cc:de:c5:64:f7:f2:a5:3f:63:dd:28:4f:
                    44:6c:32:b7:4b:60:2b:d6:ff:45:29:3f:61:82:2a:
                    1c:a8:62:90:a9:fa:fe:27:34:06:35:78:67:f4:f2:
                    28:d6:2a:2e:9a:8b:09:58:d3:31:ee:20:96:29:5a:
                    70:2a:ee:81:6e:6f:83:82:33:dc:e6:fd:fa:fd:ed:
                    5d:a5:16:0a:68:0f:2d:8e:b5:f6:24:b7:1a:17:77:
                    47:8e:c4:ec:34:e2:f8:65:44:43:fe:90:63:cc:65:
                    8f:57:99:2a:5b:53:47:59:e5:51:ae:23:6a:2d:d7:
                    a3:47:34:09:38:2b:81:cf:93:ad:55:c3:a7:30:58:
                    1b:47:eb:5b:64:a5:1f:af:c6:e2:33:06:91:20:1d:
                    1c:78:3d:bd:7b:c2:f9:11:8e:79:49:36:04:3e:44:
                    ac:8e:88:4e:b1:89:97:74:34:de:60:d6:ba:46:86:
                    6b:e9:66:28:98:42:ec:e7:9f:c4:21:84:0d:fc:5e:
                    4b:ee:7c:a9:b9:03:3b:25:26:c2:15:f5:21:07:88:
                    c3:b9:6c:02:af:b4:2b:75:88:a6:ae:92:77:26:c8:
                    69:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:05:5F:69:C3:68:58:15:21:91:60:51:05:2B:28:6F:2F:EE:74:F2
            X509v3 Authority Key Identifier:
                keyid:B5:30:87:C6:68:24:E6:4C:CA:83:C6:4D:37:6B:99:B8:5A:64:0C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHeWiBPB6eKVEXUXM8DLtyRGrJV4M6nPHUqvuDkxiStz/0/B53087C66824E64CCA83C64D376B99B85A640C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53087C66824E64CCA83C64D376B99B85A640C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHeWiBPB6eKVEXUXM8DLtyRGrJV4M6nPHUqvuDkxiStz/0/323830343a383666383a3a2f33322d313238203d3e20323732363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:b2:3d:f0:14:2b:bc:03:d9:28:02:e0:91:7b:d9:eb:b8:b8:
         27:cb:6d:26:76:0c:ae:3e:f2:0d:04:2f:be:78:2d:38:fd:52:
         11:12:e6:9a:b9:b3:a3:e2:47:36:26:c5:e2:5f:d8:3b:02:06:
         72:9d:48:22:b0:bd:d0:81:9c:68:aa:9e:67:3c:6e:e8:df:d2:
         cb:a7:71:9e:d5:76:b1:b6:7b:b3:a2:86:c7:15:ea:97:34:87:
         ee:d6:30:c4:af:65:0e:3d:d1:57:2b:a9:8c:c3:d0:ba:62:61:
         48:97:4d:e9:b6:9d:9e:fd:99:91:0d:a5:79:22:93:56:02:03:
         83:7f:ad:c5:67:31:c1:ad:a7:5b:2e:71:9c:5d:44:2c:b0:19:
         89:ff:29:65:73:2d:96:a2:16:3b:26:b3:ec:c9:20:66:4f:a8:
         5e:cc:1c:b6:6a:1b:d6:66:dd:8d:6b:05:5e:dd:a5:79:3a:3a:
         4f:2e:1d:ce:af:e8:64:6e:7e:8e:b4:87:20:bc:97:10:d7:c2:
         f9:29:f1:8a:27:de:ab:fc:56:66:c3:e0:80:99:b9:06:ec:31:
         87:14:40:57:1d:6a:7a:ec:89:f8:1d:19:81:dc:b6:f0:bb:31:
         7b:da:38:77:cc:73:32:49:0a:85:eb:05:98:df:8f:12:2a:9c:
         49:51:5a:e4
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUcEhICF68JDofxW2oIi3b2dfXpzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUzMDg3QzY2ODI0RTY0Q0NBODNDNjREMzc2Qjk5Qjg1
QTY0MEM0NzAeFw0yNjA3MjcxMjM4MzhaFw0yNzA3MjYxMjQzMzhaMDMxMTAvBgNV
BAMTKDExMDU1RjY5QzM2ODU4MTUyMTkxNjA1MTA1MkIyODZGMkZFRTc0RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm5/iXMZxqbHXXk7xWJIYDjugP
rrKZpSoDozWvtt5pB8zexWT38qU/Y90oT0RsMrdLYCvW/0UpP2GCKhyoYpCp+v4n
NAY1eGf08ijWKi6aiwlY0zHuIJYpWnAq7oFub4OCM9zm/fr97V2lFgpoDy2OtfYk
txoXd0eOxOw04vhlREP+kGPMZY9XmSpbU0dZ5VGuI2ot16NHNAk4K4HPk61Vw6cw
WBtH61tkpR+vxuIzBpEgHRx4Pb17wvkRjnlJNgQ+RKyOiE6xiZd0NN5g1rpGhmvp
ZiiYQuznn8QhhA38XkvufKm5AzslJsIV9SEHiMO5bAKvtCt1iKaukncmyGnBAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUEQVfacNoWBUhkWBRBSsoby/udPIwHwYDVR0j
BBgwFoAUtTCHxmgk5kzKg8ZNN2uZuFpkDEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEhlV2lCUEI2ZUtWRVhVWE04REx0eVJHckpWNE02blBIVXF2dURreGlT
dHovMC9CNTMwODdDNjY4MjRFNjRDQ0E4M0M2NEQzNzZCOTlCODVBNjQwQzQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1MzA4N0M2NjgyNEU2NEND
QTgzQzY0RDM3NkI5OUI4NUE2NDBDNDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hIZVdpQlBCNmVLVkVYVVhNOERMdHlSR3JKVjRNNm5QSFVxdnVEa3hpU3R6LzAv
MzIzODMwMzQzYTM4MzY2NjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzIzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBIb4MA0GCSqGSIb3DQEBCwUAA4IBAQA9sj3w
FCu8A9koAuCRe9nruLgny20mdgyuPvINBC++eC04/VIREuaaubOj4kc2JsXiX9g7
AgZynUgisL3QgZxoqp5nPG7o39LLp3Ge1XaxtnuzoobHFeqXNIfu1jDEr2UOPdFX
K6mMw9C6YmFIl03ptp2e/ZmRDaV5IpNWAgODf63FZzHBradbLnGcXUQssBmJ/yll
cy2WohY7JrPsySBmT6hezBy2ahvWZt2NawVe3aV5OjpPLh3Or+hkbn6OtIcgvJcQ
18L5KfGKJ96r/FZmw+CAmbkG7DGHFEBXHWp67In4HRmB3LbwuzF72jh3zHMySQqF
6wWY348SKpxJUVrk
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:57:00 2026 by rpki-client