Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/323830343a376231303a3a2f33322d3438203d3e20323731343038.roa
File:                     323830343a376231303a3a2f33322d3438203d3e20323731343038.roa (raw, json)
Hash identifier:          MOinlOZ+ScvWD//uWlGSkW23qcMh/UhoMmrYSc90yGo=
Subject key identifier:   BB:F0:13:AA:7C:AD:24:D9:6F:67:87:25:31:87:A3:EC:98:62:32:A4
Certificate issuer:       /CN=556DA4B3C6936E2B01C1448D47A73130CA43D60D
Certificate serial:       7E3BE857584519A812980A9A6857851340E68B9B
Authority key identifier: 55:6D:A4:B3:C6:93:6E:2B:01:C1:44:8D:47:A7:31:30:CA:43:D6:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/556DA4B3C6936E2B01C1448D47A73130CA43D60D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/323830343a376231303a3a2f33322d3438203d3e20323731343038.roa
Signing time:             Mon 05 Oct 2026 20:11:02 +0000
ROA not before:           Mon 05 Oct 2026 20:06:02 +0000
ROA not after:            Mon 04 Oct 2027 20:11:02 +0000
asID:                     271408
IP address blocks:        2804:7b10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/556DA4B3C6936E2B01C1448D47A73130CA43D60D.crl
                          rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/556DA4B3C6936E2B01C1448D47A73130CA43D60D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/556DA4B3C6936E2B01C1448D47A73130CA43D60D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 15:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3b:e8:57:58:45:19:a8:12:98:0a:9a:68:57:85:13:40:e6:8b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556DA4B3C6936E2B01C1448D47A73130CA43D60D
        Validity
            Not Before: Oct  5 20:06:02 2026 GMT
            Not After : Oct  4 20:11:02 2027 GMT
        Subject: CN=BBF013AA7CAD24D96F6787253187A3EC986232A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d3:fc:3f:5a:20:73:74:3c:5b:76:9b:15:5b:
                    0f:04:b4:c1:70:f5:72:fa:2e:16:4a:8b:78:b5:4b:
                    b8:f1:9d:6a:7f:ff:02:68:10:1c:ba:91:a8:d2:56:
                    e1:1a:12:fe:25:5c:04:4f:42:cc:70:92:30:cc:82:
                    e1:5c:ba:dc:5c:dc:53:57:89:94:aa:ce:25:4d:26:
                    eb:38:9b:a6:03:20:97:55:5a:0a:e0:61:68:ac:43:
                    8a:9d:13:ab:d5:7e:4b:de:22:d7:eb:58:65:00:52:
                    00:c4:a0:4b:c6:fc:e5:5f:13:77:c4:ad:83:ef:9a:
                    bf:44:e6:88:bd:31:c1:55:44:30:44:15:54:c8:9f:
                    45:e8:93:d2:2f:d0:a0:50:c0:56:4a:ff:d4:26:e3:
                    00:68:7a:79:68:bb:d4:b4:66:a4:3a:17:3e:8f:23:
                    67:5f:9d:1a:8b:3c:09:c3:3e:dc:c5:af:cd:db:ad:
                    75:8c:fc:67:cf:41:81:44:e6:59:59:20:84:f4:50:
                    5f:11:ae:f1:9d:61:29:2b:3a:de:65:b9:72:73:07:
                    58:1e:05:e8:e9:e1:db:d4:6e:24:77:ce:3e:74:7c:
                    1f:4f:ca:c3:a9:64:3e:b7:04:62:05:14:a7:35:b3:
                    23:ee:51:ac:ab:2c:4a:f5:83:e9:56:7d:9e:04:0d:
                    cb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F0:13:AA:7C:AD:24:D9:6F:67:87:25:31:87:A3:EC:98:62:32:A4
            X509v3 Authority Key Identifier:
                keyid:55:6D:A4:B3:C6:93:6E:2B:01:C1:44:8D:47:A7:31:30:CA:43:D6:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/556DA4B3C6936E2B01C1448D47A73130CA43D60D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/556DA4B3C6936E2B01C1448D47A73130CA43D60D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/66skbxv2u4yZV7gAjXbFh4XcwUWVgtzZSrnDp8c6SGPD/0/323830343a376231303a3a2f33322d3438203d3e20323731343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:32:f5:9a:1c:55:c8:54:cd:a5:a3:fb:65:c5:f5:01:81:8a:
         23:0a:43:f1:30:e5:03:5d:94:b4:c7:fb:32:04:80:31:33:55:
         8a:ea:6b:00:10:62:c8:98:31:82:92:4f:1e:6e:07:58:ca:5b:
         c5:46:0d:79:35:0f:fb:77:0b:0e:b0:5b:88:76:1e:0e:d8:d5:
         6b:13:a9:fe:cb:48:9c:2d:6e:14:29:16:63:46:d3:67:55:6a:
         22:e1:00:f9:6b:ba:41:d5:a0:2c:d3:75:a0:b1:25:e5:fd:cc:
         81:ba:8e:11:55:71:95:f3:62:f4:50:6b:a7:55:25:0b:fc:4f:
         60:8e:0e:49:12:85:8d:d3:5e:9a:d1:cd:6a:60:e7:db:d1:ab:
         1a:64:93:5b:b3:fc:f0:90:1f:86:fa:73:87:6b:6c:7e:de:7c:
         bf:74:3e:0f:a7:23:97:2e:20:8a:ba:5e:72:aa:56:9f:11:e4:
         7a:af:e2:57:9e:ab:a8:29:a6:db:2f:5b:c4:1c:73:72:96:36:
         f5:42:34:f9:db:6b:0f:e7:f9:66:00:95:d8:8d:50:d3:8c:49:
         d2:24:55:57:23:08:83:d2:aa:5a:0c:19:c7:2c:0a:36:60:fe:
         b7:45:bf:ef:cd:28:a2:20:8c:f3:18:c7:75:ee:00:79:ed:1c:
         ae:0c:43:cf
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfjvoV1hFGagSmAqaaFeFE0Dmi5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU2REE0QjNDNjkzNkUyQjAxQzE0NDhENDdBNzMxMzBD
QTQzRDYwRDAeFw0yNjEwMDUyMDA2MDJaFw0yNzEwMDQyMDExMDJaMDMxMTAvBgNV
BAMTKEJCRjAxM0FBN0NBRDI0RDk2RjY3ODcyNTMxODdBM0VDOTg2MjMyQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL0/w/WiBzdDxbdpsVWw8EtMFw
9XL6LhZKi3i1S7jxnWp//wJoEBy6kajSVuEaEv4lXARPQsxwkjDMguFcutxc3FNX
iZSqziVNJus4m6YDIJdVWgrgYWisQ4qdE6vVfkveItfrWGUAUgDEoEvG/OVfE3fE
rYPvmr9E5oi9McFVRDBEFVTIn0Xok9Iv0KBQwFZK/9Qm4wBoenlou9S0ZqQ6Fz6P
I2dfnRqLPAnDPtzFr83brXWM/GfPQYFE5llZIIT0UF8RrvGdYSkrOt5luXJzB1ge
Bejp4dvUbiR3zj50fB9PysOpZD63BGIFFKc1syPuUayrLEr1g+lWfZ4EDctNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUu/ATqnytJNlvZ4clMYej7JhiMqQwHwYDVR0j
BBgwFoAUVW2ks8aTbisBwUSNR6cxMMpD1g0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjZza2J4djJ1NHlaVjdnQWpYYkZoNFhjd1VXVmd0elpTcm5EcDhjNlNH
UEQvMC81NTZEQTRCM0M2OTM2RTJCMDFDMTQ0OEQ0N0E3MzEzMENBNDNENjBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1NkRBNEIzQzY5MzZFMkIw
MUMxNDQ4RDQ3QTczMTMwQ0E0M0Q2MEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY2c2tieHYydTR5WlY3Z0FqWGJGaDRYY3dVV1ZndHpaU3JuRHA4YzZTR1BELzAv
MzIzODMwMzQzYTM3NjIzMTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzQzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR7EDANBgkqhkiG9w0BAQsFAAOCAQEAPjL1mhxV
yFTNpaP7ZcX1AYGKIwpD8TDlA12UtMf7MgSAMTNViuprABBiyJgxgpJPHm4HWMpb
xUYNeTUP+3cLDrBbiHYeDtjVaxOp/stInC1uFCkWY0bTZ1VqIuEA+Wu6QdWgLNN1
oLEl5f3MgbqOEVVxlfNi9FBrp1UlC/xPYI4OSRKFjdNemtHNamDn29GrGmSTW7P8
8JAfhvpzh2tsft58v3Q+D6cjly4girpecqpWnxHkeq/iV56rqCmm2y9bxBxzcpY2
9UI0+dtrD+f5ZgCV2I1Q04xJ0iRVVyMIg9KqWgwZxywKNmD+t0W/780ooiCM8xjH
de4Aee0crgxDzw==
-----END CERTIFICATE-----
Generated at Tue Oct 20 09:02:48 2026 by rpki-client