Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a373030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a373030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          DLfi8LZ+6ywB4zp7jXdLAWJJgABHKQ4E4cP+7pNxBT8=
Subject key identifier:   B2:3C:34:06:76:75:71:D3:87:F7:31:FA:B8:F8:17:DF:54:98:1D:07
Certificate issuer:       /CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
Certificate serial:       43602B9B96778F1148BE640F7ECC2EF25E1743AF
Authority key identifier: 04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a373030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Mon 13 Oct 2025 02:25:13 +0000
ROA not before:           Mon 13 Oct 2025 02:20:13 +0000
ROA not after:            Mon 12 Oct 2026 02:25:13 +0000
asID:                     270760
IP address blocks:        2804:70fc:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 09:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:60:2b:9b:96:77:8f:11:48:be:64:0f:7e:cc:2e:f2:5e:17:43:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
        Validity
            Not Before: Oct 13 02:20:13 2025 GMT
            Not After : Oct 12 02:25:13 2026 GMT
        Subject: CN=B23C3406767571D387F731FAB8F817DF54981D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:4e:0f:62:ea:ad:d9:93:e4:84:f4:9a:c2:
                    5a:50:cd:4c:38:f5:5e:59:63:31:39:b5:d2:7b:93:
                    62:1b:38:59:75:5d:b5:33:9c:a6:41:4b:7a:65:cd:
                    0e:39:d6:6c:d0:89:2f:ba:56:e4:9a:8f:a1:0e:bc:
                    27:56:33:67:00:1f:bb:b0:eb:e3:56:12:b1:1a:d8:
                    aa:7c:28:95:11:ec:48:96:6d:13:b0:c9:b6:e8:2b:
                    cf:a7:1a:8f:2f:7f:a9:1c:d3:38:4d:44:3f:bf:11:
                    13:1b:f0:c4:3f:3c:66:5b:9a:c0:26:58:30:87:f0:
                    0c:d8:ba:30:dd:1d:96:0e:95:e3:d0:3c:ce:d9:c9:
                    95:91:6e:02:5f:a0:04:0b:49:1c:2f:4a:70:f3:6b:
                    42:11:c1:ba:bb:c1:31:e8:30:45:f2:8f:af:1d:15:
                    5f:a7:c0:90:8e:8f:dd:88:72:a6:4d:55:20:e1:bd:
                    cc:24:1b:03:ad:98:b4:4d:39:b2:77:69:bc:55:a1:
                    c2:8d:32:86:1f:b6:24:54:52:44:7f:c4:9f:b9:0f:
                    48:95:f7:60:3f:ad:be:1d:00:81:14:f5:c5:af:b1:
                    43:09:b7:17:91:dd:4a:a1:c8:51:15:5d:43:6c:84:
                    03:73:3c:8f:e8:aa:fb:30:3b:d5:a3:79:e4:53:b3:
                    34:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3C:34:06:76:75:71:D3:87:F7:31:FA:B8:F8:17:DF:54:98:1D:07
            X509v3 Authority Key Identifier:
                keyid:04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a373030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0e:d5:f7:6c:d6:c9:7e:1a:d8:95:a5:14:65:e3:4e:23:f5:a6:
         cf:5c:bf:0e:c7:71:95:b0:35:37:99:c6:e2:d3:2e:a9:83:f3:
         00:be:62:c2:f9:0a:a7:02:04:59:97:b8:08:04:41:4e:89:02:
         ff:79:b4:b3:95:57:1d:3a:ea:ef:68:7f:28:f1:d4:15:53:22:
         c3:f4:a5:8c:cd:3e:0b:47:d8:96:29:55:04:a3:08:22:6c:0d:
         3f:60:af:db:ef:a8:49:22:a0:31:a9:7c:8a:aa:54:88:19:46:
         f5:22:1b:e4:66:58:bc:f1:6c:63:28:32:da:45:25:21:1d:4b:
         b9:33:07:7b:de:d6:64:ae:1f:15:eb:b1:8b:54:0f:d2:93:1c:
         49:11:19:56:6f:f0:98:e5:5e:85:65:f1:11:fc:84:e0:82:3a:
         27:aa:f0:06:e3:71:9a:96:62:7a:e6:88:ee:f5:12:ae:f8:ab:
         00:d0:9b:3d:11:2e:1a:14:13:dd:de:c6:ac:9e:39:d8:91:86:
         ac:03:ae:ef:c0:fe:fc:8f:34:fc:68:a7:3e:7b:6f:89:ef:ba:
         ea:b6:52:fd:88:16:5a:00:fe:5f:80:97:a0:4e:9f:36:ff:19:
         3f:f4:e9:62:b1:5c:6c:04:ff:15:d5:72:eb:1a:2a:ba:28:55:
         35:5b:65:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:09:42 2025 by rpki-client