Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a383030303a3a2f33342d3334203d3e20323732323532.roa
File:                     323830343a383434633a383030303a3a2f33342d3334203d3e20323732323532.roa (raw, json)
Hash identifier:          RcZmOKy3o3fJWjd7fpVpcgGXOl9/Jz3AtGLeCadrp6s=
Subject key identifier:   CE:4A:B0:21:31:C7:22:87:02:5A:E5:51:F1:BF:20:0B:03:1A:A8:4A
Certificate issuer:       /CN=F1B571ED80FF7C3561B0C963B7D6450B036EC1A9
Certificate serial:       6768EF518A89A667B68EDC4260EE4E865C2FB177
Authority key identifier: F1:B5:71:ED:80:FF:7C:35:61:B0:C9:63:B7:D6:45:0B:03:6E:C1:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1B571ED80FF7C3561B0C963B7D6450B036EC1A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a383030303a3a2f33342d3334203d3e20323732323532.roa
Signing time:             Sat 12 Sep 2026 16:07:00 +0000
ROA not before:           Sat 12 Sep 2026 16:02:00 +0000
ROA not after:            Sat 11 Sep 2027 16:07:00 +0000
asID:                     272252
IP address blocks:        2804:844c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/F1B571ED80FF7C3561B0C963B7D6450B036EC1A9.crl
                          rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/F1B571ED80FF7C3561B0C963B7D6450B036EC1A9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1B571ED80FF7C3561B0C963B7D6450B036EC1A9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:68:ef:51:8a:89:a6:67:b6:8e:dc:42:60:ee:4e:86:5c:2f:b1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1B571ED80FF7C3561B0C963B7D6450B036EC1A9
        Validity
            Not Before: Sep 12 16:02:00 2026 GMT
            Not After : Sep 11 16:07:00 2027 GMT
        Subject: CN=CE4AB02131C72287025AE551F1BF200B031AA84A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:a9:ce:c5:00:3e:24:26:81:c7:7f:2f:93:
                    3b:6a:62:eb:90:a0:38:59:dd:68:47:30:d8:cc:16:
                    03:a3:60:1d:af:ae:67:58:33:b9:ca:ab:4b:d5:dc:
                    cd:61:5c:2b:79:03:2f:64:ba:29:4a:3a:a9:19:5b:
                    40:95:b0:6e:10:25:6d:6e:1c:bc:7b:24:b1:c8:c7:
                    cd:98:72:42:5c:2c:8a:1d:31:6c:c5:94:68:52:80:
                    79:e6:76:0b:de:f5:6c:55:64:97:9a:55:2d:9c:a6:
                    ae:9a:71:90:73:8a:7d:87:81:9c:f8:b0:2a:5c:ce:
                    43:1c:0d:c7:cd:fb:6a:2b:68:98:c6:b0:d5:22:38:
                    79:cf:9e:54:6b:62:33:7f:70:f9:27:03:99:a8:27:
                    0d:30:59:4d:ba:83:2d:f8:ad:14:9b:47:55:1b:a9:
                    57:55:13:21:79:17:63:78:cf:58:e2:09:ea:de:e1:
                    78:3a:a3:7c:ec:a1:34:07:6b:10:90:d2:d1:bf:51:
                    92:38:47:a2:1a:2b:10:8f:4c:ac:32:59:ba:c8:a1:
                    3f:8e:7a:92:ee:b4:94:9a:7e:49:da:8c:24:ff:ff:
                    cc:53:e9:82:13:01:07:98:a8:37:6f:32:3c:ca:bc:
                    30:48:40:72:1b:c1:d3:08:fc:97:d4:e1:d8:6b:ff:
                    f4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4A:B0:21:31:C7:22:87:02:5A:E5:51:F1:BF:20:0B:03:1A:A8:4A
            X509v3 Authority Key Identifier:
                keyid:F1:B5:71:ED:80:FF:7C:35:61:B0:C9:63:B7:D6:45:0B:03:6E:C1:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/F1B571ED80FF7C3561B0C963B7D6450B036EC1A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1B571ED80FF7C3561B0C963B7D6450B036EC1A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a383030303a3a2f33342d3334203d3e20323732323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:844c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         43:8d:e6:e5:66:1d:ec:90:6a:9e:da:fd:c4:e1:9d:a4:4d:99:
         7f:ad:de:43:ec:b8:d8:64:66:83:6a:55:61:75:e9:df:51:78:
         8c:2e:74:d7:38:3d:e7:39:09:ac:9c:e6:c8:94:b3:4f:5b:5c:
         f9:08:ea:6b:c6:c5:fa:9e:40:b8:76:b2:47:90:b2:15:1d:67:
         12:45:7c:0e:f2:1f:d1:8f:ab:bc:b5:2c:9b:6e:00:18:3a:9f:
         42:8e:8f:dc:fc:89:99:a8:c4:37:3a:f8:0a:7f:75:38:5c:8d:
         87:03:ff:f8:eb:2e:78:a3:bc:78:0a:a7:19:e2:fd:1e:6d:ba:
         93:c6:c8:89:5b:81:41:d9:fa:f8:5f:38:e6:72:1f:c5:8b:bd:
         d8:83:28:8c:1f:a4:3f:e5:e8:30:c0:70:33:58:a3:0a:99:9c:
         fa:b4:42:52:3b:f3:a7:10:5c:ab:bc:cf:13:d7:bc:98:8a:e4:
         56:29:09:6e:03:b0:96:c0:1c:d0:9d:1c:dd:57:a3:cf:63:37:
         9f:4f:21:0b:e2:31:ab:14:eb:81:b0:a0:39:a2:2f:3b:cb:70:
         eb:f3:74:48:e4:b0:67:19:a4:58:00:45:19:da:e9:7e:79:5c:
         07:8a:6a:44:fb:b8:1f:fc:5f:95:cb:21:94:46:da:d8:44:12:
         0e:6e:91:51
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZ2jvUYqJpme2jtxCYO5OhlwvsXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFCNTcxRUQ4MEZGN0MzNTYxQjBDOTYzQjdENjQ1MEIw
MzZFQzFBOTAeFw0yNjA5MTIxNjAyMDBaFw0yNzA5MTExNjA3MDBaMDMxMTAvBgNV
BAMTKENFNEFCMDIxMzFDNzIyODcwMjVBRTU1MUYxQkYyMDBCMDMxQUE4NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnyKnOxQA+JCaBx38vkztqYuuQ
oDhZ3WhHMNjMFgOjYB2vrmdYM7nKq0vV3M1hXCt5Ay9kuilKOqkZW0CVsG4QJW1u
HLx7JLHIx82YckJcLIodMWzFlGhSgHnmdgve9WxVZJeaVS2cpq6acZBzin2HgZz4
sCpczkMcDcfN+2oraJjGsNUiOHnPnlRrYjN/cPknA5moJw0wWU26gy34rRSbR1Ub
qVdVEyF5F2N4z1jiCere4Xg6o3zsoTQHaxCQ0tG/UZI4R6IaKxCPTKwyWbrIoT+O
epLutJSafknajCT//8xT6YITAQeYqDdvMjzKvDBIQHIbwdMI/JfU4dhr//Q5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUzkqwITHHIocCWuVR8b8gCwMaqEowHwYDVR0j
BBgwFoAU8bVx7YD/fDVhsMljt9ZFCwNuwakwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTFNWkZKTXM3U3Q4Q1pqM2JKa1c2NmdZcWZ0eFJKM1ZrRkdzMWM3ZVM3
NkMvMC9GMUI1NzFFRDgwRkY3QzM1NjFCMEM5NjNCN0Q2NDUwQjAzNkVDMUE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxQjU3MUVEODBGRjdDMzU2
MUIwQzk2M0I3RDY0NTBCMDM2RUMxQTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUxTVpGSk1zN1N0OENaajNiSmtXNjZnWXFmdHhSSjNWa0ZHczFjN2VTNzZDLzAv
MzIzODMwMzQzYTM4MzQzNDYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjMyMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEhEyAMA0GCSqGSIb3DQEBCwUA
A4IBAQBDjeblZh3skGqe2v3E4Z2kTZl/rd5D7LjYZGaDalVhdenfUXiMLnTXOD3n
OQmsnObIlLNPW1z5COprxsX6nkC4drJHkLIVHWcSRXwO8h/Rj6u8tSybbgAYOp9C
jo/c/ImZqMQ3OvgKf3U4XI2HA//46y54o7x4CqcZ4v0ebbqTxsiJW4FB2fr4Xzjm
ch/Fi73YgyiMH6Q/5egwwHAzWKMKmZz6tEJSO/OnEFyrvM8T17yYiuRWKQluA7CW
wBzQnRzdV6PPYzefTyEL4jGrFOuBsKA5oi87y3Dr83RI5LBnGaRYAEUZ2ul+eVwH
impE+7gf/F+VyyGURtrYRBIObpFR
-----END CERTIFICATE-----
Generated at Thu Oct 15 03:26:05 2026 by rpki-client