Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a373030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a373030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          iHYTofS6YW0++f0kwIz+L/EInZ1RN6TI4K75bHTPGOM=
Subject key identifier:   32:70:12:56:50:29:2F:81:F6:66:3C:EE:56:C9:E1:C7:1B:9D:E2:FF
Certificate issuer:       /CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
Certificate serial:       1729671636FEB36A6D28454C38DE5736102B551E
Authority key identifier: 04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a373030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Mon 14 Sep 2026 03:11:18 +0000
ROA not before:           Mon 14 Sep 2026 03:06:18 +0000
ROA not after:            Mon 13 Sep 2027 03:11:18 +0000
asID:                     270760
IP address blocks:        2804:70fc:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 21:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:29:67:16:36:fe:b3:6a:6d:28:45:4c:38:de:57:36:10:2b:55:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
        Validity
            Not Before: Sep 14 03:06:18 2026 GMT
            Not After : Sep 13 03:11:18 2027 GMT
        Subject: CN=3270125650292F81F6663CEE56C9E1C71B9DE2FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:6a:4e:4e:cf:a2:20:3c:d9:56:6b:82:0c:
                    f8:71:b4:ec:58:26:79:05:23:e6:73:39:cb:1a:28:
                    73:e2:1f:4a:90:0e:fe:51:ae:21:d7:f1:66:e3:90:
                    0e:bb:21:85:47:2d:eb:05:6b:60:b7:32:06:c5:88:
                    68:7b:b2:2f:29:a5:2e:b9:12:51:c0:51:86:d7:6d:
                    a9:70:be:a2:ba:c4:ae:35:a9:56:5e:d0:1d:ac:c5:
                    27:8c:1e:84:05:1f:47:09:db:a6:36:ed:85:20:c0:
                    96:17:c0:10:09:08:5f:b3:2e:fa:26:b6:f7:79:7c:
                    58:0c:71:33:a5:39:e7:02:25:3c:9c:a5:6e:14:d2:
                    36:d7:26:83:30:99:0e:40:b1:93:26:0f:35:ac:94:
                    9d:8d:b8:9f:8a:fb:64:72:c1:a4:e0:10:4d:6b:c5:
                    20:70:f3:0b:83:0e:7a:21:50:2e:62:8e:9a:00:58:
                    02:6d:04:ce:e1:33:37:13:03:b3:8f:85:4c:22:37:
                    d2:2c:5f:41:d5:f1:a9:8e:88:0e:58:77:8c:34:9f:
                    a8:83:de:83:84:bc:36:f2:f4:21:ee:98:71:b5:ec:
                    41:e3:4d:82:8d:51:59:ee:57:ba:3f:2c:e5:1e:6c:
                    62:fd:6f:58:49:57:9b:a7:f6:bb:5d:9b:d5:be:f4:
                    5d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:70:12:56:50:29:2F:81:F6:66:3C:EE:56:C9:E1:C7:1B:9D:E2:FF
            X509v3 Authority Key Identifier:
                keyid:04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a373030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c7:d9:f9:e5:c2:19:7a:ab:ba:92:2f:d6:91:42:c0:7a:c5:01:
         e7:be:25:95:20:12:22:21:49:f5:b1:ce:6b:a3:d5:f1:c4:89:
         47:8f:e4:e4:15:a9:32:39:c0:33:db:3c:cf:03:b5:e4:03:e3:
         d3:b3:ee:fc:74:95:57:2d:4a:e1:e2:97:4c:53:d7:b1:27:9c:
         39:20:93:76:7f:63:36:62:f3:5a:14:c8:35:4e:04:7e:1b:a0:
         a8:a4:39:07:79:33:4b:ed:24:bd:4e:54:41:08:fb:7f:fe:ca:
         42:8c:50:41:9d:7a:40:27:6b:b2:b3:f5:fd:31:2a:ef:71:b5:
         2c:44:74:69:20:ff:b1:6b:b1:4b:52:5a:5b:fa:6c:a9:1f:bc:
         bd:79:eb:33:3e:2a:04:2f:30:44:2f:77:e6:61:ae:cd:0d:49:
         9b:33:08:25:4f:55:ab:a6:66:b0:44:6a:a1:63:b4:ab:ed:49:
         17:54:1c:c7:02:fd:fd:20:ad:29:6e:f0:99:4b:9e:cd:a6:8d:
         98:72:c9:1d:11:9e:28:7e:f0:3d:1e:ee:d2:c1:6d:1d:0b:19:
         eb:cb:aa:aa:99:18:50:b8:95:79:31:d1:8c:41:c7:aa:b1:a0:
         da:4e:99:5c:80:41:86:ee:0d:45:89:26:29:40:6f:c9:93:a6:
         06:41:1e:0d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUFylnFjb+s2ptKEVMON5XNhArVR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4NTUxQzNEQzZFOURFNjU1MERCMTJGMzRENUUzREZC
NjY1MDk0QTAeFw0yNjA5MTQwMzA2MThaFw0yNzA5MTMwMzExMThaMDMxMTAvBgNV
BAMTKDMyNzAxMjU2NTAyOTJGODFGNjY2M0NFRTU2QzlFMUM3MUI5REUyRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xGpOTs+iIDzZVmuCDPhxtOxY
JnkFI+ZzOcsaKHPiH0qQDv5RriHX8WbjkA67IYVHLesFa2C3MgbFiGh7si8ppS65
ElHAUYbXbalwvqK6xK41qVZe0B2sxSeMHoQFH0cJ26Y27YUgwJYXwBAJCF+zLvom
tvd5fFgMcTOlOecCJTycpW4U0jbXJoMwmQ5AsZMmDzWslJ2NuJ+K+2RywaTgEE1r
xSBw8wuDDnohUC5ijpoAWAJtBM7hMzcTA7OPhUwiN9IsX0HV8amOiA5Yd4w0n6iD
3oOEvDby9CHumHG17EHjTYKNUVnuV7o/LOUebGL9b1hJV5un9rtdm9W+9F2ZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUMnASVlApL4H2ZjzuVsnhxxud4v8wHwYDVR0j
BBgwFoAUBIVRw9xuneZVDbEvNNXj37ZlCUowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXgxREJyNXVpajlyVXVjMzlwSlRpMlBCWXpFaXlCalhtWlBpY0t5NUFl
VU0vMC8wNDg1NTFDM0RDNkU5REU2NTUwREIxMkYzNEQ1RTNERkI2NjUwOTRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0ODU1MUMzREM2RTlERTY1
NTBEQjEyRjM0RDVFM0RGQjY2NTA5NEEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV4MURCcjV1aWo5clV1YzM5cEpUaTJQQll6RWl5QmpYbVpQaWNLeTVBZVVNLzAv
MzIzODMwMzQzYTM3MzA2NjYzM2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMDM3MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEcPxwMA0GCSqGSIb3DQEBCwUA
A4IBAQDH2fnlwhl6q7qSL9aRQsB6xQHnviWVIBIiIUn1sc5ro9XxxIlHj+TkFaky
OcAz2zzPA7XkA+PTs+78dJVXLUrh4pdMU9exJ5w5IJN2f2M2YvNaFMg1TgR+G6Co
pDkHeTNL7SS9TlRBCPt//spCjFBBnXpAJ2uys/X9MSrvcbUsRHRpIP+xa7FLUlpb
+mypH7y9eeszPioELzBEL3fmYa7NDUmbMwglT1WrpmawRGqhY7Sr7UkXVBzHAv39
IK0pbvCZS57Npo2YcskdEZ4ofvA9Hu7SwW0dCxnry6qqmRhQuJV5MdGMQceqsaDa
TplcgEGG7g1FiSYpQG/Jk6YGQR4N
-----END CERTIFICATE-----
Generated at Wed Oct 14 10:16:49 2026 by rpki-client