Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a353030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a353030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          aKXKsGwmB+PUulssu1gT4fh0V9inskS3b8nQaRoONQc=
Subject key identifier:   A1:A5:22:37:95:F5:CD:FB:6A:8B:20:0F:97:E3:5A:94:BF:D3:BA:58
Certificate issuer:       /CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
Certificate serial:       50A50BD629644CD12BCE4C7CA89EE4315DCE772D
Authority key identifier: 04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a353030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Mon 13 Oct 2025 02:25:17 +0000
ROA not before:           Mon 13 Oct 2025 02:20:17 +0000
ROA not after:            Mon 12 Oct 2026 02:25:17 +0000
asID:                     270760
IP address blocks:        2804:70fc:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 09:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a5:0b:d6:29:64:4c:d1:2b:ce:4c:7c:a8:9e:e4:31:5d:ce:77:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
        Validity
            Not Before: Oct 13 02:20:17 2025 GMT
            Not After : Oct 12 02:25:17 2026 GMT
        Subject: CN=A1A5223795F5CDFB6A8B200F97E35A94BFD3BA58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:46:cc:09:ff:99:2b:ec:f2:7c:45:97:d2:7d:
                    a5:92:f1:aa:f0:84:3e:ff:83:15:67:5f:bb:56:2a:
                    e8:7e:c9:c6:ed:42:37:20:4d:29:31:ab:b9:ca:86:
                    f2:e7:67:d9:d2:11:84:72:bc:89:97:9d:d0:c3:17:
                    40:22:30:0f:9b:b8:e6:86:5c:5e:07:11:36:77:29:
                    0b:44:6b:77:d1:44:ba:3a:08:0e:5f:16:2c:cc:c4:
                    2e:82:49:4b:37:7a:55:da:82:b0:d2:19:70:11:00:
                    8a:46:04:88:f7:73:7a:b1:ce:44:56:47:34:67:84:
                    34:05:49:6f:91:f0:59:e6:05:14:62:d0:90:04:dd:
                    74:48:b6:9b:5f:df:5a:b3:73:88:3f:83:b8:5a:2e:
                    0e:dc:3d:87:34:eb:96:2d:a8:6c:47:91:16:56:fa:
                    b9:bf:91:81:56:12:0a:07:79:97:49:5f:0d:a2:46:
                    26:95:54:7d:18:e8:1c:7f:f2:6f:a7:77:62:c6:b7:
                    5f:07:0a:99:4d:fb:dd:1b:c2:34:50:74:55:04:be:
                    c4:7a:16:99:84:17:92:9f:52:e7:3b:7a:21:cf:67:
                    9c:32:8a:ec:13:d7:30:eb:eb:20:50:61:01:85:5a:
                    80:26:ee:f2:20:60:93:5f:03:c9:7e:11:32:ec:57:
                    fc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A5:22:37:95:F5:CD:FB:6A:8B:20:0F:97:E3:5A:94:BF:D3:BA:58
            X509v3 Authority Key Identifier:
                keyid:04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a353030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         08:20:4f:2e:22:5c:d0:bc:83:5b:c1:58:40:21:c1:b7:cf:d6:
         4f:dc:e6:30:c7:95:e8:76:10:3d:2c:84:9c:ac:b4:17:8c:6a:
         1a:de:e7:f1:dc:66:0c:96:87:44:a8:d3:0b:5d:25:c0:ec:62:
         eb:24:f9:95:1e:b6:fd:ab:ee:e6:8e:ff:6a:ec:95:19:17:c7:
         2a:14:d7:5f:ef:40:49:4e:9e:db:ba:07:66:18:eb:1f:d9:76:
         62:69:a8:ed:9f:a9:a3:f3:f7:8a:97:8d:69:3b:12:e2:44:c9:
         53:45:e6:9e:90:36:a2:5b:a8:aa:8f:27:d0:14:70:53:5f:b5:
         d6:50:93:d5:2b:ff:b1:1c:bf:5f:ce:84:82:68:13:7b:e9:6c:
         28:86:ce:23:77:2d:a6:8b:99:d0:ac:e7:06:25:e5:06:9e:03:
         58:c6:d6:c1:74:8d:94:76:e4:f5:ae:ec:9f:43:8f:71:7b:22:
         95:06:39:e7:d9:26:f0:64:0a:1f:9a:78:ea:58:2e:69:32:dd:
         72:7b:fb:ea:ae:ce:44:55:27:1d:4c:a5:e1:aa:33:7f:ac:9f:
         ec:aa:53:50:7d:0d:5a:db:63:a8:94:b1:4b:1a:8a:7c:4b:9b:
         a1:b8:23:6a:8e:fa:02:09:66:74:d3:cd:be:c8:ec:61:28:45:
         d4:76:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:09:42 2025 by rpki-client