Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/323830343a326464633a383030303a3a2f33332d3333203d3e20323635333038.roa
File:                     323830343a326464633a383030303a3a2f33332d3333203d3e20323635333038.roa (raw, json)
Hash identifier:          Sin2ESPmSAEtF07Hf/Y9nSItbUj29EfTZQ2tFaSMgSQ=
Subject key identifier:   9E:1C:C2:CE:CA:0A:E9:2A:ED:BA:FD:FE:83:C4:5C:CB:BD:D5:1D:BA
Certificate issuer:       /CN=85F1117C022A5C985E57C0FBF010D5164B1F32C4
Certificate serial:       12DA5EC72C8B5F04F7A778FC48BAEF7C8CD71A89
Authority key identifier: 85:F1:11:7C:02:2A:5C:98:5E:57:C0:FB:F0:10:D5:16:4B:1F:32:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F1117C022A5C985E57C0FBF010D5164B1F32C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/323830343a326464633a383030303a3a2f33332d3333203d3e20323635333038.roa
Signing time:             Wed 03 Jun 2026 20:48:26 +0000
ROA not before:           Wed 03 Jun 2026 20:43:26 +0000
ROA not after:            Wed 02 Jun 2027 20:48:26 +0000
asID:                     265308
IP address blocks:        2804:2ddc:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/85F1117C022A5C985E57C0FBF010D5164B1F32C4.crl
                          rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/85F1117C022A5C985E57C0FBF010D5164B1F32C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F1117C022A5C985E57C0FBF010D5164B1F32C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:da:5e:c7:2c:8b:5f:04:f7:a7:78:fc:48:ba:ef:7c:8c:d7:1a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F1117C022A5C985E57C0FBF010D5164B1F32C4
        Validity
            Not Before: Jun  3 20:43:26 2026 GMT
            Not After : Jun  2 20:48:26 2027 GMT
        Subject: CN=9E1CC2CECA0AE92AEDBAFDFE83C45CCBBDD51DBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:d8:e5:60:de:ba:5a:3d:cc:1a:75:97:7d:ce:
                    a5:0d:80:f4:7a:2f:f0:fa:f8:82:cf:14:46:33:1e:
                    c1:7d:85:bf:c3:5c:43:9f:d8:1e:bf:2e:32:9a:e2:
                    7d:e9:e3:91:b5:b6:b7:4a:a9:b3:b5:e3:de:f7:50:
                    50:77:c9:bc:a8:1f:cf:35:85:5e:a8:62:d5:47:1a:
                    91:7f:c5:96:39:ab:0a:b4:8d:63:0e:dc:97:ac:5c:
                    15:a9:0e:4d:0f:9c:52:d5:12:8d:07:14:16:72:e6:
                    d0:0f:bf:a5:8c:7b:f8:b3:0f:c2:f9:6a:91:db:9d:
                    34:05:6d:c1:d6:18:fa:47:85:66:6b:9b:91:73:3e:
                    64:cb:ef:33:56:1b:82:6c:95:e0:eb:5b:dc:b4:a2:
                    44:ec:96:b3:57:fd:f7:52:61:5d:7b:08:b1:31:4c:
                    0e:d9:13:e5:e4:52:87:f0:cc:06:99:4a:62:5f:ed:
                    db:e5:73:07:67:ee:6e:fd:55:ad:d4:30:3e:46:2e:
                    9a:45:41:6d:a1:35:c4:67:f9:ff:d4:af:87:f1:b8:
                    e1:b1:c7:f8:80:61:bf:4f:bc:20:17:ec:52:8f:33:
                    12:6d:be:36:46:07:4a:19:a9:2b:f9:84:66:45:ac:
                    1e:4b:d5:19:4b:64:2e:50:96:9f:5b:31:1b:46:68:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1C:C2:CE:CA:0A:E9:2A:ED:BA:FD:FE:83:C4:5C:CB:BD:D5:1D:BA
            X509v3 Authority Key Identifier:
                keyid:85:F1:11:7C:02:2A:5C:98:5E:57:C0:FB:F0:10:D5:16:4B:1F:32:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/85F1117C022A5C985E57C0FBF010D5164B1F32C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F1117C022A5C985E57C0FBF010D5164B1F32C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/323830343a326464633a383030303a3a2f33332d3333203d3e20323635333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ddc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0c:16:a7:6c:52:84:bd:e5:f8:d6:3c:6f:5f:c8:75:94:34:74:
         22:6a:35:ce:fc:ad:0b:fd:f0:3c:b3:fd:50:86:25:fd:71:4d:
         d0:00:01:fb:80:99:9e:51:c9:ff:61:ab:9a:0f:6e:8d:fe:87:
         30:7f:a6:bd:44:bc:52:39:1d:f5:cf:eb:cc:18:4f:6e:e2:62:
         07:cf:83:ac:ef:e4:a7:95:fa:72:b6:09:8d:03:61:63:5a:69:
         4f:82:3b:be:46:2b:6e:05:d7:b0:db:38:9a:46:81:2f:00:e7:
         05:ed:3e:d7:f7:80:34:bd:ed:4f:f3:8d:d8:af:57:2d:ae:6d:
         5d:2a:29:22:34:fc:c3:3d:84:b0:5b:78:d6:98:2d:c5:3c:72:
         2c:dd:01:67:60:b9:31:88:75:dd:32:58:ae:3e:77:05:b9:a4:
         1d:25:f2:af:aa:9e:05:84:38:32:98:87:46:be:5d:3f:f8:b2:
         df:f3:5e:91:ab:7a:64:3c:1a:ca:71:8b:9f:4e:89:b5:e6:1f:
         4d:72:20:15:48:eb:6c:96:94:46:a1:9f:59:62:e2:c0:d9:08:
         4b:c0:c9:4b:ef:58:69:3a:57:1c:e2:97:96:b0:13:f7:2e:20:
         0c:40:13:6e:f9:f3:d5:13:ec:ff:99:8c:75:ec:64:92:df:2f:
         3e:14:30:fb
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEtpexyyLXwT3p3j8SLrvfIzXGokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVGMTExN0MwMjJBNUM5ODVFNTdDMEZCRjAxMEQ1MTY0
QjFGMzJDNDAeFw0yNjA2MDMyMDQzMjZaFw0yNzA2MDIyMDQ4MjZaMDMxMTAvBgNV
BAMTKDlFMUNDMkNFQ0EwQUU5MkFFREJBRkRGRTgzQzQ1Q0NCQkRENTFEQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD82OVg3rpaPcwadZd9zqUNgPR6
L/D6+ILPFEYzHsF9hb/DXEOf2B6/LjKa4n3p45G1trdKqbO14973UFB3ybyoH881
hV6oYtVHGpF/xZY5qwq0jWMO3JesXBWpDk0PnFLVEo0HFBZy5tAPv6WMe/izD8L5
apHbnTQFbcHWGPpHhWZrm5FzPmTL7zNWG4JsleDrW9y0okTslrNX/fdSYV17CLEx
TA7ZE+XkUofwzAaZSmJf7dvlcwdn7m79Va3UMD5GLppFQW2hNcRn+f/Ur4fxuOGx
x/iAYb9PvCAX7FKPMxJtvjZGB0oZqSv5hGZFrB5L1RlLZC5Qlp9bMRtGaEmtAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUnhzCzsoK6Srtuv3+g8Rcy73VHbowHwYDVR0j
BBgwFoAUhfERfAIqXJheV8D78BDVFksfMsQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSE5oU2t1eW5WSlNZTEczcW56U0RTZUZjRE02ZG44UzRScm1QdndoeVp6
Y3gvMC84NUYxMTE3QzAyMkE1Qzk4NUU1N0MwRkJGMDEwRDUxNjRCMUYzMkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1RjExMTdDMDIyQTVDOTg1
RTU3QzBGQkYwMTBENTE2NEIxRjMyQzQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hOaFNrdXluVkpTWUxHM3FuelNEU2VGY0RNNmRuOFM0UnJtUHZ3aHlaemN4LzAv
MzIzODMwMzQzYTMyNjQ2NDYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNTMzMzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygELdyAMA0GCSqGSIb3DQEBCwUA
A4IBAQAMFqdsUoS95fjWPG9fyHWUNHQiajXO/K0L/fA8s/1QhiX9cU3QAAH7gJme
Ucn/YauaD26N/ocwf6a9RLxSOR31z+vMGE9u4mIHz4Os7+SnlfpytgmNA2FjWmlP
gju+RituBdew2ziaRoEvAOcF7T7X94A0ve1P843Yr1ctrm1dKikiNPzDPYSwW3jW
mC3FPHIs3QFnYLkxiHXdMliuPncFuaQdJfKvqp4FhDgymIdGvl0/+LLf816Rq3pk
PBrKcYufTom15h9NciAVSOtslpRGoZ9ZYuLA2QhLwMlL71hpOlcc4peWsBP3LiAM
QBNu+fPVE+z/mYx17GSS3y8+FDD7
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:10:42 2026 by rpki-client