Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/323830343a6563303a3a2f33322d3332203d3e20323632393732.roa
File:                     323830343a6563303a3a2f33322d3332203d3e20323632393732.roa (raw, json)
Hash identifier:          PY5F5GQx8k1fdC2OlB6F4v+pVzJ62h4znb+M1yjTrjY=
Subject key identifier:   C8:96:34:05:3B:37:4A:4E:DB:8B:51:9C:6A:E1:6F:83:15:90:D9:43
Certificate issuer:       /CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
Certificate serial:       4D39160E18701063057E19015B3AEF40D6B32372
Authority key identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/323830343a6563303a3a2f33322d3332203d3e20323632393732.roa
Signing time:             Mon 08 Jun 2026 11:53:00 +0000
ROA not before:           Mon 08 Jun 2026 11:48:00 +0000
ROA not after:            Mon 07 Jun 2027 11:53:00 +0000
asID:                     262972
IP address blocks:        2804:ec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl
                          rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:39:16:0e:18:70:10:63:05:7e:19:01:5b:3a:ef:40:d6:b3:23:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
        Validity
            Not Before: Jun  8 11:48:00 2026 GMT
            Not After : Jun  7 11:53:00 2027 GMT
        Subject: CN=C89634053B374A4EDB8B519C6AE16F831590D943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:31:50:8b:a1:19:7c:0d:99:37:88:d6:29:
                    17:95:43:c0:ce:bc:20:b1:b2:65:93:00:a9:02:9b:
                    94:54:46:96:cc:e2:82:ec:11:dd:7e:e6:ec:df:d0:
                    e7:0d:b3:a6:76:7a:b1:1e:c0:84:e0:54:1d:dd:ae:
                    f4:95:da:93:45:68:8f:5e:17:62:77:b2:bc:9f:4c:
                    98:28:da:f6:c8:b7:6f:e4:b9:c6:88:a6:c4:b6:a8:
                    2d:13:c9:30:20:ab:93:f7:ea:94:4b:f3:a3:f7:6e:
                    18:24:0f:1f:39:95:0d:d6:5e:93:6b:af:4d:b7:69:
                    1c:17:4d:39:cd:cf:0e:5f:3b:d0:79:a6:74:58:6a:
                    ac:9d:31:54:c8:f0:83:08:56:80:ec:1d:cb:29:0f:
                    88:54:c2:41:42:3a:bf:27:bf:78:4b:2a:5d:5f:e9:
                    20:e6:35:d8:8a:3a:5f:aa:c8:1c:8d:53:90:39:48:
                    90:4f:41:1e:75:bc:12:cc:32:2a:32:c2:26:93:a0:
                    28:55:8f:ad:c6:5b:9f:a7:84:a9:67:35:d0:08:83:
                    9c:48:17:a5:b0:ca:43:21:0c:d4:11:7c:46:b2:2d:
                    5c:e6:70:2f:cd:1f:a9:2c:60:53:e5:89:db:06:92:
                    95:25:f2:81:9f:35:6a:dd:e8:52:44:06:22:84:01:
                    d3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:96:34:05:3B:37:4A:4E:DB:8B:51:9C:6A:E1:6F:83:15:90:D9:43
            X509v3 Authority Key Identifier:
                keyid:56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/323830343a6563303a3a2f33322d3332203d3e20323632393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:a0:2e:05:b0:7a:7a:81:a7:86:e6:cd:d8:1d:ca:72:7c:3a:
         8d:bb:22:ec:63:d7:f5:5f:fc:7f:2f:a1:d1:a7:af:cf:7c:40:
         f1:9f:c7:2e:b7:1f:2d:b5:d3:9a:64:2a:36:22:39:ab:1c:0c:
         e1:58:52:dd:e6:94:fa:d9:1d:d1:84:a3:49:5d:12:72:63:86:
         bc:a7:ec:b8:74:d2:54:e1:7c:a1:41:e7:3b:21:91:fd:d1:4e:
         a9:f5:4a:9e:bc:41:43:60:40:1a:ec:eb:75:b1:d6:9f:d5:34:
         2a:1f:cf:25:00:cb:1f:c8:36:43:88:e8:2d:90:cc:f9:14:c7:
         89:b8:0d:55:57:7d:6a:96:b2:45:77:d3:34:3c:68:59:af:b4:
         e9:eb:2b:d8:2f:dc:16:63:b5:2c:58:6d:08:74:b0:05:d6:ea:
         c5:10:ac:7d:51:ac:a7:60:dd:f0:0d:3b:34:68:b1:34:67:7f:
         3f:f9:57:ca:1f:d3:28:35:5e:57:d4:c7:d3:a4:c0:fc:75:de:
         e4:63:c3:78:7f:0c:15:26:4b:6a:e1:84:4f:bf:a0:94:13:ff:
         2e:1e:94:bf:1f:b4:a1:95:af:cd:84:10:62:fe:03:55:8a:02:
         c6:e0:1e:49:a0:2d:62:9a:fc:ce:25:5e:7d:3b:de:76:7a:d6:
         5b:da:2c:5f
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUTTkWDhhwEGMFfhkBWzrvQNazI3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY4MTg1MzIwQkJCRTU0RjlFNEIyRUIwNkE1REIzMzRC
MURBNjg4OTAeFw0yNjA2MDgxMTQ4MDBaFw0yNzA2MDcxMTUzMDBaMDMxMTAvBgNV
BAMTKEM4OTYzNDA1M0IzNzRBNEVEQjhCNTE5QzZBRTE2RjgzMTU5MEQ5NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJTFQi6EZfA2ZN4jWKReVQ8DO
vCCxsmWTAKkCm5RURpbM4oLsEd1+5uzf0OcNs6Z2erEewITgVB3drvSV2pNFaI9e
F2J3sryfTJgo2vbIt2/kucaIpsS2qC0TyTAgq5P36pRL86P3bhgkDx85lQ3WXpNr
r023aRwXTTnNzw5fO9B5pnRYaqydMVTI8IMIVoDsHcspD4hUwkFCOr8nv3hLKl1f
6SDmNdiKOl+qyByNU5A5SJBPQR51vBLMMioywiaToChVj63GW5+nhKlnNdAIg5xI
F6WwykMhDNQRfEayLVzmcC/NH6ksYFPlidsGkpUl8oGfNWrd6FJEBiKEAdOFAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUyJY0BTs3Sk7bi1GcauFvgxWQ2UMwHwYDVR0j
BBgwFoAUVoGFMgu75U+eSy6wal2zNLHaaIkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVUaDZOb3Zub1E5OTV4akVFMVROcGJVcWRmRzdQV2l5allQZU42bmJ1
Rm4vMC81NjgxODUzMjBCQkJFNTRGOUU0QjJFQjA2QTVEQjMzNEIxREE2ODg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2ODE4NTMyMEJCQkU1NEY5
RTRCMkVCMDZBNURCMzM0QjFEQTY4ODkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1VGg2Tm92bm9ROTk1eGpFRTFUTnBiVXFkZkc3UFdpeWpZUGVONm5idUZuLzAv
MzIzODMwMzQzYTY1NjMzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMjM5
MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEDsAwDQYJKoZIhvcNAQELBQADggEBADqgLgWwenqB
p4bmzdgdynJ8Oo27Iuxj1/Vf/H8vodGnr898QPGfxy63Hy2105pkKjYiOascDOFY
Ut3mlPrZHdGEo0ldEnJjhryn7Lh00lThfKFB5zshkf3RTqn1Sp68QUNgQBrs63Wx
1p/VNCofzyUAyx/INkOI6C2QzPkUx4m4DVVXfWqWskV30zQ8aFmvtOnrK9gv3BZj
tSxYbQh0sAXW6sUQrH1RrKdg3fANOzRosTRnfz/5V8of0yg1XlfUx9OkwPx13uRj
w3h/DBUmS2rhhE+/oJQT/y4elL8ftKGVr82EEGL+A1WKAsbgHkmgLWKa/M4lXn07
3nZ61lvaLF8=
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:32:32 2026 by rpki-client