Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          xMi3Gf+7QarHG7A/1lV9z7Gmn2maSWOxPmgYKkDyDrg=
Subject key identifier:   BE:47:4B:96:86:E6:65:4D:23:AF:D8:F3:14:74:CB:F8:6D:1A:57:37
Certificate issuer:       /CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
Certificate serial:       71B15E23621577576C1D62AC0C37C325A265B489
Authority key identifier: 04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Mon 14 Sep 2026 03:11:20 +0000
ROA not before:           Mon 14 Sep 2026 03:06:20 +0000
ROA not after:            Mon 13 Sep 2027 03:11:20 +0000
asID:                     270760
IP address blocks:        2804:70fc::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 04:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b1:5e:23:62:15:77:57:6c:1d:62:ac:0c:37:c3:25:a2:65:b4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
        Validity
            Not Before: Sep 14 03:06:20 2026 GMT
            Not After : Sep 13 03:11:20 2027 GMT
        Subject: CN=BE474B9686E6654D23AFD8F31474CBF86D1A5737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:50:41:4d:76:26:3d:9e:4d:ea:8d:58:88:e8:
                    28:97:c9:e9:ca:42:32:0e:a0:dc:f9:0a:ab:8f:f9:
                    ed:5f:70:4b:17:3c:aa:b5:c2:d9:0c:7c:02:68:9a:
                    ef:fb:7c:63:f3:eb:3b:61:7c:25:8b:e7:9d:d4:0e:
                    ae:1c:9e:db:17:d3:b7:3d:fd:54:24:39:05:ae:91:
                    1c:29:7f:a7:5c:62:84:2d:bb:b5:59:67:5e:12:a3:
                    a7:79:0e:96:66:43:a4:6f:7d:1b:86:c4:ee:a0:26:
                    83:cf:27:0f:3b:12:12:1e:64:f4:10:26:a4:26:97:
                    96:e6:25:65:5a:a5:35:a7:d7:98:86:5a:2b:b9:5a:
                    7a:76:56:0d:94:03:b2:8a:80:ca:ba:2c:ca:1b:ed:
                    4e:a7:62:a9:ec:1a:d1:2a:df:bc:67:0d:cb:9f:cc:
                    ae:87:0a:83:ab:c4:95:78:a6:f4:e2:2c:b9:10:4d:
                    e2:b3:b5:9a:0e:05:fb:b4:7a:96:7b:51:8e:45:cf:
                    6e:3a:c1:9b:3c:4e:fa:26:dd:4a:fd:f2:42:e5:cf:
                    d8:2d:33:e4:49:ab:7c:a8:21:57:38:72:65:7b:53:
                    fd:49:de:93:34:da:d1:13:61:7c:d1:ff:b7:96:21:
                    e2:bd:2f:a1:c7:21:40:ed:f7:56:72:14:92:cd:9a:
                    7d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:47:4B:96:86:E6:65:4D:23:AF:D8:F3:14:74:CB:F8:6D:1A:57:37
            X509v3 Authority Key Identifier:
                keyid:04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc::/36

    Signature Algorithm: sha256WithRSAEncryption
         2f:14:5e:44:bf:3b:2b:82:a5:a7:5a:84:15:8c:02:da:0b:f0:
         1b:70:01:a4:ea:a5:47:9c:ac:01:5e:1f:29:d3:9c:27:84:fe:
         8e:53:c4:0d:fc:d3:3c:2f:64:35:a8:4d:7a:91:bb:f4:ae:3d:
         0f:ad:4a:5e:ae:11:4d:82:08:63:8d:4a:bd:3a:20:b7:63:26:
         06:53:e9:11:89:9d:b2:e3:75:ec:72:0c:ef:27:8e:87:b5:fb:
         96:3d:8f:5e:d8:9b:10:f0:e8:00:fa:7a:ba:f1:d9:17:83:44:
         c2:50:c5:64:85:ed:48:45:3a:0c:9a:f4:e6:ed:53:6e:93:fe:
         c5:8a:0c:b7:06:7f:7d:d5:ca:d2:64:cc:0a:42:51:86:6d:c9:
         1a:b2:5c:f5:11:2d:8f:3f:ae:cc:be:85:d0:1c:1d:43:b6:b5:
         22:18:a9:5a:1b:07:e3:8d:03:cc:b8:94:60:74:1a:37:25:a7:
         2f:c5:d4:39:38:0b:cc:b9:2a:7f:24:51:82:c5:e7:00:04:03:
         89:58:60:29:df:bc:4a:c8:25:70:c6:4a:c5:67:8a:db:5e:4f:
         5b:51:05:6b:22:65:33:5a:97:6f:05:c0:4e:00:55:77:4d:fe:
         bf:db:b1:5f:43:16:46:bd:1b:3b:d8:ed:a0:0b:43:01:15:53:
         2b:ec:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:36:01 2026 by rpki-client