Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a353030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a353030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          2AHfFBxPrYP0p//IvPZFs4V8gVT0Drp6rZIXcpNDBIM=
Subject key identifier:   A3:D8:F7:FE:63:17:BF:5A:E8:CB:B9:4E:F5:D7:30:14:0E:87:23:5D
Certificate issuer:       /CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
Certificate serial:       2227B476C80AAC54A62F77F4197E430D878815F8
Authority key identifier: 04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a353030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Mon 14 Sep 2026 03:11:18 +0000
ROA not before:           Mon 14 Sep 2026 03:06:18 +0000
ROA not after:            Mon 13 Sep 2027 03:11:18 +0000
asID:                     270760
IP address blocks:        2804:70fc:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 04:11:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:27:b4:76:c8:0a:ac:54:a6:2f:77:f4:19:7e:43:0d:87:88:15:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
        Validity
            Not Before: Sep 14 03:06:18 2026 GMT
            Not After : Sep 13 03:11:18 2027 GMT
        Subject: CN=A3D8F7FE6317BF5AE8CBB94EF5D730140E87235D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:16:08:19:25:17:6d:4e:93:13:51:60:fb:0f:
                    bb:0d:ea:ab:3c:c9:4d:2d:b1:94:d0:f0:84:6c:e5:
                    b8:da:07:1e:61:38:61:f0:cb:09:bb:07:d5:18:58:
                    b7:1e:65:e9:2a:f2:d2:f6:11:0d:59:43:fc:e1:c0:
                    75:9d:19:09:70:08:52:17:11:8e:5b:ab:ee:31:c3:
                    e6:b3:db:cc:f5:6e:a2:76:4a:a7:b5:48:a7:af:08:
                    b6:de:88:4f:21:05:ad:60:20:95:98:22:33:01:19:
                    95:dc:7a:30:81:8f:c2:e3:b1:74:05:43:c9:09:96:
                    58:9b:70:4a:23:11:f5:8c:44:b1:e0:21:f4:ce:d0:
                    2d:e0:42:d3:65:0e:35:49:f0:93:88:f5:f3:88:af:
                    30:91:40:a1:13:62:70:28:a7:79:1f:62:01:09:91:
                    1a:05:69:01:8c:b7:8e:44:87:71:65:67:73:fa:41:
                    cd:56:90:69:ed:5c:44:9a:24:8c:0e:0f:5f:76:29:
                    a7:73:fa:ac:62:84:84:33:67:94:60:80:f4:48:44:
                    27:89:92:e1:db:1f:51:5f:ae:be:e8:da:af:8d:00:
                    1a:8f:ab:3d:ea:6a:82:e0:06:34:64:61:a6:c8:90:
                    13:d8:07:b1:af:88:71:b7:d4:bb:ec:63:18:0e:e2:
                    70:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D8:F7:FE:63:17:BF:5A:E8:CB:B9:4E:F5:D7:30:14:0E:87:23:5D
            X509v3 Authority Key Identifier:
                keyid:04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a353030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         66:e2:d9:41:0e:7e:97:e2:44:21:14:c3:ef:6f:e5:22:a5:0f:
         b3:11:f4:35:2d:08:56:d1:3e:5f:0c:4e:53:80:54:2a:b3:e8:
         2a:e8:59:dd:52:d9:04:cd:32:b1:84:b9:e7:37:5a:66:a4:ee:
         d3:43:b4:9e:a0:07:bd:43:aa:13:71:fc:7d:3f:0f:b3:35:e8:
         65:8a:92:53:1e:96:09:30:96:7e:75:aa:55:0a:fe:8e:94:24:
         47:01:b1:21:9b:3f:e4:23:8f:3c:d8:49:60:af:f8:6d:73:11:
         92:85:ab:f3:3e:a8:bd:e6:9b:14:6b:7f:c4:96:ee:4e:81:4f:
         1d:bc:05:e9:70:33:3a:85:2c:11:71:c5:ea:f8:d3:94:06:29:
         a5:73:f7:b6:2b:ac:e3:52:55:01:30:01:31:a7:5d:55:e3:2c:
         44:dd:e0:b8:da:6b:7f:27:42:a1:c2:20:dc:23:d6:62:3d:a0:
         33:17:dd:f0:67:93:1a:92:ec:af:00:e1:02:aa:a9:3b:7e:8c:
         e3:29:90:47:09:25:55:89:af:22:fc:e7:9b:2c:1c:c0:d5:1a:
         1f:e0:a3:26:3b:0c:24:19:b0:fd:57:93:52:2c:9c:f1:6a:cc:
         f2:27:1c:6c:ab:90:77:7b:af:3d:ad:11:09:07:ef:cc:70:53:
         cb:3c:e8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:31:44 2026 by rpki-client