Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/eSvAjfFfFGiFfEnuGwmWKgNKuscEVLQGUQFkwz9VhdT/0/323830343a3839633a3a2f33322d3438203d3e20323632333831.roa
File:                     323830343a3839633a3a2f33322d3438203d3e20323632333831.roa (raw, json)
Hash identifier:          pAcbEylzZYFnflWD8dU/v21WNeoyYUFKwp0mvvkVzKw=
Subject key identifier:   8A:97:E1:B1:9A:09:D5:41:22:C4:23:65:81:30:55:1B:4B:E8:26:BA
Certificate issuer:       /CN=6D7182544A0A8716FF5B15905AEA2B7AE30563C7
Certificate serial:       530947A09E08370039EE171F18B511E307BEE9F9
Authority key identifier: 6D:71:82:54:4A:0A:87:16:FF:5B:15:90:5A:EA:2B:7A:E3:05:63:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D7182544A0A8716FF5B15905AEA2B7AE30563C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/eSvAjfFfFGiFfEnuGwmWKgNKuscEVLQGUQFkwz9VhdT/0/323830343a3839633a3a2f33322d3438203d3e20323632333831.roa
Signing time:             Wed 02 Sep 2026 15:03:02 +0000
ROA not before:           Wed 02 Sep 2026 14:58:02 +0000
ROA not after:            Wed 01 Sep 2027 15:03:02 +0000
asID:                     262381
IP address blocks:        2804:89c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/eSvAjfFfFGiFfEnuGwmWKgNKuscEVLQGUQFkwz9VhdT/0/6D7182544A0A8716FF5B15905AEA2B7AE30563C7.crl
                          rsync://rpki-repo.registro.br/repo/eSvAjfFfFGiFfEnuGwmWKgNKuscEVLQGUQFkwz9VhdT/0/6D7182544A0A8716FF5B15905AEA2B7AE30563C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D7182544A0A8716FF5B15905AEA2B7AE30563C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 08:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:09:47:a0:9e:08:37:00:39:ee:17:1f:18:b5:11:e3:07:be:e9:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D7182544A0A8716FF5B15905AEA2B7AE30563C7
        Validity
            Not Before: Sep  2 14:58:02 2026 GMT
            Not After : Sep  1 15:03:02 2027 GMT
        Subject: CN=8A97E1B19A09D54122C423658130551B4BE826BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:07:db:5d:b0:20:46:c9:5d:22:ea:9d:49:
                    20:8e:36:66:ae:05:e0:4f:b9:2c:4d:30:8c:c9:0d:
                    d5:89:19:f3:47:03:39:a3:4f:64:34:70:2d:45:f7:
                    95:17:1f:c7:4e:7e:e6:52:8a:30:00:77:4e:77:72:
                    8f:98:ad:95:93:28:5c:dc:10:25:e5:47:e9:4a:8d:
                    b5:cc:50:1a:bd:4d:2c:5a:43:6a:d7:7f:3b:73:3c:
                    f1:3e:99:04:e3:94:f7:15:2d:df:41:0d:6b:a4:4f:
                    7d:e1:be:82:d3:f0:97:05:31:d3:15:fe:38:81:3f:
                    ae:eb:3c:2e:b3:cd:25:fe:3f:3b:51:2d:2f:27:64:
                    a2:0c:68:3a:9f:d5:2f:59:8e:e4:f6:31:36:54:fc:
                    22:8a:9f:29:a4:21:b5:e0:76:c6:be:6e:34:70:6e:
                    8c:98:4a:d5:f4:de:e0:79:a2:ee:6e:c9:9f:59:e3:
                    7e:67:5d:7d:59:36:3e:c2:5d:90:7e:e2:f0:12:3a:
                    ff:a3:ba:5c:aa:31:92:80:a1:d3:5a:79:49:26:58:
                    a0:7c:2b:fa:71:7b:53:8c:54:8f:f7:be:81:15:f6:
                    1b:e5:41:dd:96:5a:6b:c0:71:1b:e2:15:57:ef:7c:
                    4e:70:5c:4e:dd:0e:64:ac:67:ba:5c:96:46:d0:cd:
                    a2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:97:E1:B1:9A:09:D5:41:22:C4:23:65:81:30:55:1B:4B:E8:26:BA
            X509v3 Authority Key Identifier:
                keyid:6D:71:82:54:4A:0A:87:16:FF:5B:15:90:5A:EA:2B:7A:E3:05:63:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/eSvAjfFfFGiFfEnuGwmWKgNKuscEVLQGUQFkwz9VhdT/0/6D7182544A0A8716FF5B15905AEA2B7AE30563C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D7182544A0A8716FF5B15905AEA2B7AE30563C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/eSvAjfFfFGiFfEnuGwmWKgNKuscEVLQGUQFkwz9VhdT/0/323830343a3839633a3a2f33322d3438203d3e20323632333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:89c::/32

    Signature Algorithm: sha256WithRSAEncryption
         e2:54:6c:95:19:92:10:c6:f7:43:c3:8e:e6:3c:55:a1:96:03:
         fd:68:4e:31:bb:eb:7f:e2:87:77:b9:f6:e8:9f:0d:40:31:cc:
         13:0e:ff:b0:c3:a5:c0:8d:66:30:54:4c:5b:68:da:fc:cf:40:
         45:ca:6c:84:bc:9d:cc:e1:27:54:1d:12:89:41:03:55:bb:6b:
         41:7a:32:ed:10:88:56:2c:8d:fa:b8:ff:b2:c9:df:b6:8b:45:
         f2:98:0c:e4:95:f9:3c:d1:9c:24:bf:99:ff:c7:cd:5f:89:48:
         2f:63:8c:0e:3b:7a:38:c2:5e:86:8d:f5:69:63:28:67:7d:2d:
         7a:ba:36:cb:0b:34:df:77:8c:3b:8c:92:92:7c:42:81:ef:61:
         fe:2f:8f:d8:d6:88:8a:4a:3e:a0:39:64:3a:e3:e2:10:ed:c0:
         f1:47:75:af:cc:f9:0c:4b:22:92:bf:35:98:14:1f:ce:0c:62:
         e9:0a:0c:da:21:4f:9c:19:61:ff:28:84:15:a9:b5:04:23:3c:
         be:3b:bb:fa:31:32:5e:fb:30:04:a8:07:9f:4c:4a:13:4c:e7:
         02:01:bc:2f:b1:63:80:62:47:6b:f8:8a:a6:d4:ce:cb:46:23:
         c5:51:08:b8:3d:c9:4b:d7:9a:ac:51:13:f7:a4:eb:db:0f:32:
         c9:de:fe:4e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUUwlHoJ4INwA57hcfGLUR4we+6fkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ3MTgyNTQ0QTBBODcxNkZGNUIxNTkwNUFFQTJCN0FF
MzA1NjNDNzAeFw0yNjA5MDIxNDU4MDJaFw0yNzA5MDExNTAzMDJaMDMxMTAvBgNV
BAMTKDhBOTdFMUIxOUEwOUQ1NDEyMkM0MjM2NTgxMzA1NTFCNEJFODI2QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqngfbXbAgRsldIuqdSSCONmau
BeBPuSxNMIzJDdWJGfNHAzmjT2Q0cC1F95UXH8dOfuZSijAAd053co+YrZWTKFzc
ECXlR+lKjbXMUBq9TSxaQ2rXfztzPPE+mQTjlPcVLd9BDWukT33hvoLT8JcFMdMV
/jiBP67rPC6zzSX+PztRLS8nZKIMaDqf1S9ZjuT2MTZU/CKKnymkIbXgdsa+bjRw
boyYStX03uB5ou5uyZ9Z435nXX1ZNj7CXZB+4vASOv+julyqMZKAodNaeUkmWKB8
K/pxe1OMVI/3voEV9hvlQd2WWmvAcRviFVfvfE5wXE7dDmSsZ7pclkbQzaJNAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUipfhsZoJ1UEixCNlgTBVG0voJrowHwYDVR0j
BBgwFoAUbXGCVEoKhxb/WxWQWuoreuMFY8cwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9lU3ZBamZGZkZHaUZmRW51R3dtV0tnTkt1c2NFVkxRR1VRRmt3ejlWaGRU
LzAvNkQ3MTgyNTQ0QTBBODcxNkZGNUIxNTkwNUFFQTJCN0FFMzA1NjNDNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82RDcxODI1NDRBMEE4NzE2RkY1
QjE1OTA1QUVBMkI3QUUzMDU2M0M3LmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9l
U3ZBamZGZkZHaUZmRW51R3dtV0tnTkt1c2NFVkxRR1VRRmt3ejlWaGRULzAvMzIz
ODMwMzQzYTM4Mzk2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjMzMzgz
MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgECJwwDQYJKoZIhvcNAQELBQADggEBAOJUbJUZkhDG90PD
juY8VaGWA/1oTjG763/ih3e59uifDUAxzBMO/7DDpcCNZjBUTFto2vzPQEXKbIS8
nczhJ1QdEolBA1W7a0F6Mu0QiFYsjfq4/7LJ37aLRfKYDOSV+TzRnCS/mf/HzV+J
SC9jjA47ejjCXoaN9WljKGd9LXq6NssLNN93jDuMkpJ8QoHvYf4vj9jWiIpKPqA5
ZDrj4hDtwPFHda/M+QxLIpK/NZgUH84MYukKDNohT5wZYf8ohBWptQQjPL47u/ox
Ml77MASoB59MShNM5wIBvC+xY4BiR2v4iqbUzstGI8VRCLg9yUvXmqxRE/ek69sP
Msne/k4=
-----END CERTIFICATE-----
Generated at Mon Nov 2 02:05:24 2026 by rpki-client