Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32322d3232203d3e20323730373630.roa
File:                     3137392e3130392e3131362e302f32322d3232203d3e20323730373630.roa (raw, json)
Hash identifier:          CcEsI8XVfc+Xk2PWZq+91HkQXQtQe4FuNZWiquawWBY=
Subject key identifier:   6F:C1:50:3C:E5:FB:40:91:9A:04:AC:27:08:F8:83:5A:9A:2C:9D:F7
Certificate issuer:       /CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
Certificate serial:       789DC9232AC6EA6BC6F5F382A859D1540D7C78FF
Authority key identifier: 04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32322d3232203d3e20323730373630.roa
Signing time:             Mon 14 Sep 2026 03:11:19 +0000
ROA not before:           Mon 14 Sep 2026 03:06:19 +0000
ROA not after:            Mon 13 Sep 2027 03:11:19 +0000
asID:                     270760
IP address blocks:        179.109.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 21:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9d:c9:23:2a:c6:ea:6b:c6:f5:f3:82:a8:59:d1:54:0d:7c:78:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
        Validity
            Not Before: Sep 14 03:06:19 2026 GMT
            Not After : Sep 13 03:11:19 2027 GMT
        Subject: CN=6FC1503CE5FB40919A04AC2708F8835A9A2C9DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e7:f4:ad:05:f4:01:49:ec:f4:e8:f7:cf:2a:
                    c8:5c:33:97:f8:95:75:2c:d2:86:5f:3e:2b:0e:30:
                    d2:35:70:70:6a:7a:5e:68:8b:38:41:c5:32:83:4f:
                    03:55:3a:c0:23:e3:a3:c7:38:83:08:08:ab:e6:77:
                    cc:d4:c2:92:61:ad:e5:74:c1:ac:16:63:de:f6:f3:
                    ec:d6:c7:37:eb:64:24:24:32:74:ec:5a:9c:f2:23:
                    6e:60:e1:d1:91:a0:70:2d:a3:3d:8f:a8:2f:d5:65:
                    21:35:05:d8:2a:8d:33:52:5d:e4:6c:d5:9f:58:d0:
                    91:65:73:5e:7e:58:eb:8c:c3:c0:27:f1:97:75:8b:
                    d3:8b:14:5f:83:9b:58:7b:13:47:ee:c7:40:d6:0d:
                    17:e4:92:02:a0:8d:3c:b6:46:86:78:57:09:0c:89:
                    b5:b1:c8:8f:4a:3e:57:fd:2c:95:35:12:82:9d:90:
                    48:5a:e8:41:f1:70:a3:57:38:2f:69:9b:d0:11:df:
                    36:a4:1b:d2:13:d5:51:6b:66:b1:20:f8:2e:7f:69:
                    9a:f1:0e:fa:df:3d:3e:5b:25:52:e5:1c:9d:13:6e:
                    37:cd:0a:bc:1d:94:c9:c5:15:16:ad:7d:84:ec:29:
                    c2:5b:9e:a8:7a:d0:a8:3b:5e:45:32:44:43:94:78:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C1:50:3C:E5:FB:40:91:9A:04:AC:27:08:F8:83:5A:9A:2C:9D:F7
            X509v3 Authority Key Identifier:
                keyid:04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32322d3232203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:6a:7c:cf:67:82:02:c1:b7:35:bb:49:54:ac:d2:d2:aa:29:
         44:1b:42:fa:60:75:26:8b:50:f7:ee:2b:da:f6:db:54:21:70:
         17:3d:fc:46:7d:5d:c8:db:13:6e:15:45:75:31:73:7b:bc:9f:
         be:f0:98:75:4c:25:14:7c:21:03:01:59:fd:3a:41:aa:10:8a:
         29:18:c4:31:19:cb:8c:98:42:c0:7c:9f:22:24:7a:66:b7:6c:
         0e:b4:bc:95:fb:bb:37:5c:d4:a2:dd:a7:53:ab:8d:f7:f0:e2:
         26:be:6d:88:df:c1:04:78:f1:20:d0:d4:02:5c:e1:c8:15:e4:
         ec:14:13:68:21:4c:87:f7:3d:6b:55:23:4b:d9:c0:be:03:72:
         71:fd:0c:2d:5e:2f:76:f7:76:f9:37:eb:12:bd:5d:09:bf:b1:
         c4:ab:d4:03:d8:23:a6:11:55:53:3f:62:e9:7d:70:12:3e:1a:
         74:12:ff:e3:8d:83:5a:a1:68:5b:dc:df:d7:0a:7c:61:72:2e:
         b7:78:19:09:62:7c:3b:61:33:5a:16:05:5c:2a:40:ef:75:30:
         fb:7d:be:c9:df:36:26:f7:ac:06:59:63:7c:97:57:3d:c7:58:
         5c:b8:17:63:b7:50:a4:98:3c:b9:0d:df:8e:b7:ea:35:49:e8:
         ef:ab:46:37
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeJ3JIyrG6mvG9fOCqFnRVA18eP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4NTUxQzNEQzZFOURFNjU1MERCMTJGMzRENUUzREZC
NjY1MDk0QTAeFw0yNjA5MTQwMzA2MTlaFw0yNzA5MTMwMzExMTlaMDMxMTAvBgNV
BAMTKDZGQzE1MDNDRTVGQjQwOTE5QTA0QUMyNzA4Rjg4MzVBOUEyQzlERjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV5/StBfQBSez06PfPKshcM5f4
lXUs0oZfPisOMNI1cHBqel5oizhBxTKDTwNVOsAj46PHOIMICKvmd8zUwpJhreV0
wawWY9728+zWxzfrZCQkMnTsWpzyI25g4dGRoHAtoz2PqC/VZSE1BdgqjTNSXeRs
1Z9Y0JFlc15+WOuMw8An8Zd1i9OLFF+Dm1h7E0fux0DWDRfkkgKgjTy2RoZ4VwkM
ibWxyI9KPlf9LJU1EoKdkEha6EHxcKNXOC9pm9AR3zakG9IT1VFrZrEg+C5/aZrx
DvrfPT5bJVLlHJ0TbjfNCrwdlMnFFRatfYTsKcJbnqh60Kg7XkUyREOUeEYhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUb8FQPOX7QJGaBKwnCPiDWposnfcwHwYDVR0j
BBgwFoAUBIVRw9xuneZVDbEvNNXj37ZlCUowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXgxREJyNXVpajlyVXVjMzlwSlRpMlBCWXpFaXlCalhtWlBpY0t5NUFl
VU0vMC8wNDg1NTFDM0RDNkU5REU2NTUwREIxMkYzNEQ1RTNERkI2NjUwOTRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0ODU1MUMzREM2RTlERTY1
NTBEQjEyRjM0RDVFM0RGQjY2NTA5NEEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV4MURCcjV1aWo5clV1YzM5cEpUaTJQQll6RWl5QmpYbVpQaWNLeTVBZVVNLzAv
MzEzNzM5MmUzMTMwMzkyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMDM3MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArNtdDANBgkqhkiG9w0BAQsFAAOCAQEAXGp8
z2eCAsG3NbtJVKzS0qopRBtC+mB1JotQ9+4r2vbbVCFwFz38Rn1dyNsTbhVFdTFz
e7yfvvCYdUwlFHwhAwFZ/TpBqhCKKRjEMRnLjJhCwHyfIiR6ZrdsDrS8lfu7N1zU
ot2nU6uN9/DiJr5tiN/BBHjxINDUAlzhyBXk7BQTaCFMh/c9a1UjS9nAvgNycf0M
LV4vdvd2+TfrEr1dCb+xxKvUA9gjphFVUz9i6X1wEj4adBL/442DWqFoW9zf1wp8
YXIut3gZCWJ8O2EzWhYFXCpA73Uw+32+yd82JvesBlljfJdXPcdYXLgXY7dQpJg8
uQ3fjrfqNUno76tGNw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 12:50:19 2026 by rpki-client