Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a343030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a343030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          U8N9PCZ3+iffdyvg986FmSBaqftUDJgW3tLSnvbEO2g=
Subject key identifier:   D8:E4:22:19:B0:4D:84:6C:1B:B2:AF:96:C4:83:2C:6F:3A:28:08:E0
Certificate issuer:       /CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
Certificate serial:       40E4C1E09AD1792AEB3F87468A4D91B987195290
Authority key identifier: 04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a343030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Mon 13 Oct 2025 02:25:13 +0000
ROA not before:           Mon 13 Oct 2025 02:20:13 +0000
ROA not after:            Mon 12 Oct 2026 02:25:13 +0000
asID:                     270760
IP address blocks:        2804:70fc:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 09:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e4:c1:e0:9a:d1:79:2a:eb:3f:87:46:8a:4d:91:b9:87:19:52:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
        Validity
            Not Before: Oct 13 02:20:13 2025 GMT
            Not After : Oct 12 02:25:13 2026 GMT
        Subject: CN=D8E42219B04D846C1BB2AF96C4832C6F3A2808E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:24:89:33:24:4c:d7:5d:4c:ff:34:3d:22:e9:
                    a0:a2:38:b6:b6:42:a6:d6:90:77:86:c6:fe:18:63:
                    d5:b3:1b:e0:b0:7a:94:22:45:1b:35:f8:71:95:48:
                    ef:78:91:ba:60:cf:e3:b6:fe:b4:1a:86:b9:0b:56:
                    e1:64:29:ab:e3:98:08:34:49:ed:57:1b:43:36:36:
                    34:78:a8:5e:59:6e:59:d3:cd:4e:c2:40:6f:af:a9:
                    66:0f:80:b5:a4:1e:e0:06:cc:93:8a:99:ae:77:f2:
                    a9:62:59:c2:27:d1:86:a1:47:61:81:24:f8:15:0c:
                    e0:3b:ce:bf:90:37:f2:26:3a:8e:11:48:cb:a9:16:
                    b6:77:c4:b0:96:80:f6:c8:cd:0a:d1:db:c4:80:b5:
                    71:2b:93:e0:ea:dc:90:f0:5e:3b:28:a9:b5:19:a6:
                    a1:8c:65:58:6c:b4:36:92:de:0a:3a:eb:74:a6:eb:
                    51:fa:92:80:76:37:c4:ec:2b:a6:fc:dd:42:24:6e:
                    19:06:7b:92:e3:97:db:69:12:7f:b9:6c:f4:ba:dd:
                    69:5b:bc:b7:b9:bc:f3:f2:41:54:3d:f1:ac:3b:77:
                    17:7b:09:9c:fd:e4:4d:60:65:96:24:e5:20:e7:68:
                    d1:c1:da:85:e2:4f:5f:f8:75:f1:b8:f8:49:a6:d2:
                    a0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E4:22:19:B0:4D:84:6C:1B:B2:AF:96:C4:83:2C:6F:3A:28:08:E0
            X509v3 Authority Key Identifier:
                keyid:04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a343030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9e:58:51:50:cb:44:48:2b:44:9e:ad:21:c6:8b:b1:67:cd:6e:
         ee:fd:d8:8b:6e:c3:50:ce:ee:0e:a4:a5:25:53:99:bf:96:03:
         1e:d9:a8:bd:9a:7a:f7:4a:a5:3d:0e:41:c4:b8:3f:52:03:35:
         17:60:22:24:cf:57:d0:04:ac:27:4b:8a:61:b7:2f:87:53:2e:
         e0:05:7b:e8:c4:88:c4:da:4c:57:0d:87:d9:ec:13:28:8a:fc:
         bc:3e:b6:7e:69:33:3f:1e:d2:13:4f:f8:fc:e7:d1:fa:be:1f:
         f9:37:67:f0:d2:67:ae:dc:77:70:d1:35:24:8a:9b:94:f6:d9:
         16:9f:81:3e:33:83:aa:6a:99:0c:18:cb:87:b3:5a:55:f1:89:
         80:06:c7:a9:ae:8f:b0:32:11:bb:19:c9:6e:32:04:a7:61:0e:
         b3:a4:e8:94:78:a7:fa:8f:2a:53:22:03:17:72:7c:3c:d3:aa:
         15:2f:3e:d7:a2:91:42:f3:b0:40:6c:ec:2f:52:e7:78:87:8a:
         fa:78:49:6d:26:cf:9d:b2:7f:f1:ce:80:41:7d:dc:d3:93:82:
         dc:7a:16:c6:e4:68:5d:a3:3a:38:12:ea:b2:e6:34:2a:f2:6c:
         b6:7a:c1:0b:72:7b:70:16:42:e2:89:e0:30:a9:79:e3:b2:12:
         b2:28:f4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:09:42 2025 by rpki-client