Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a383133303a3a2f34382d3438203d3e203238353731.roa
File:                     323030313a313264303a383133303a3a2f34382d3438203d3e203238353731.roa (raw, json)
Hash identifier:          UFpfVeNs2m8ClD0aw/AVK3RJVb74va3RGOGzV1by/Zg=
Subject key identifier:   5F:25:A4:41:3D:BD:A5:52:09:CE:8C:28:7A:73:F3:7C:23:30:B1:26
Certificate issuer:       /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial:       53052C9684B8D9B475FD5E6518C675C4ACEECF92
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a383133303a3a2f34382d3438203d3e203238353731.roa
Signing time:             Wed 07 Oct 2026 20:46:06 +0000
ROA not before:           Wed 07 Oct 2026 20:41:06 +0000
ROA not after:            Wed 06 Oct 2027 20:46:06 +0000
asID:                     28571
IP address blocks:        2001:12d0:8130::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
                          rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 08:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:05:2c:96:84:b8:d9:b4:75:fd:5e:65:18:c6:75:c4:ac:ee:cf:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
        Validity
            Not Before: Oct  7 20:41:06 2026 GMT
            Not After : Oct  6 20:46:06 2027 GMT
        Subject: CN=5F25A4413DBDA55209CE8C287A73F37C2330B126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5d:21:8d:47:fd:d6:40:5b:ea:d7:75:c5:71:
                    fb:55:6a:90:02:b5:98:14:47:87:16:11:51:91:3e:
                    e6:36:51:50:43:3f:ed:01:0e:f8:60:b8:50:7b:2e:
                    55:b7:f4:64:48:18:97:7c:33:17:91:f1:5c:c7:38:
                    96:35:ca:bf:8f:ba:82:d2:e1:7d:53:80:c4:37:76:
                    44:15:0d:ce:76:79:bf:7c:6e:9c:ea:74:7c:b8:aa:
                    48:e8:94:5f:ee:1a:c5:14:25:d4:28:1b:af:b1:11:
                    ce:88:8f:55:79:52:7e:a1:8d:df:20:d4:7d:a2:04:
                    c1:ed:db:ca:b1:13:de:9d:59:60:02:ce:27:42:d5:
                    b5:c6:46:a5:6e:2b:f2:b9:e3:52:4b:51:2f:20:fb:
                    96:bb:2a:06:a6:85:ae:35:5a:56:04:c5:40:a4:61:
                    da:1f:d2:c8:c0:60:9b:69:6a:1f:ae:b7:99:48:f4:
                    10:2d:38:65:2d:bf:0d:ea:aa:8f:fb:54:40:2a:49:
                    b1:60:62:54:62:d3:5f:c4:30:e2:ce:a1:0f:e6:5b:
                    8f:de:51:a1:db:7d:1b:1a:f8:cb:9c:6c:16:98:7f:
                    83:92:53:60:75:81:24:ab:0e:4a:cb:90:06:5a:ca:
                    2d:cd:42:c7:39:d2:37:f9:41:1f:fc:ff:f9:e2:f8:
                    da:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:25:A4:41:3D:BD:A5:52:09:CE:8C:28:7A:73:F3:7C:23:30:B1:26
            X509v3 Authority Key Identifier:
                keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/323030313a313264303a383133303a3a2f34382d3438203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12d0:8130::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:06:d5:c5:78:4c:28:c4:c8:61:04:fe:a6:9c:71:53:24:17:
         6f:a9:2b:13:78:0c:80:e3:b7:c8:fc:3c:2b:c8:24:d4:29:0f:
         9c:6a:52:f5:f7:da:df:6c:98:81:65:37:fa:2c:07:2f:e3:f4:
         f7:33:13:23:02:8a:5d:e4:9b:e2:34:52:af:38:1c:d5:80:e2:
         6d:fa:be:68:8f:ad:60:47:47:ee:4a:fd:b8:c6:db:f0:1d:b1:
         10:1c:70:e0:59:a0:bb:78:c4:a4:ca:91:73:fb:24:a8:ba:6c:
         1f:fe:cf:93:26:d3:fe:61:50:81:ed:6b:51:37:33:42:e2:a5:
         cf:a4:a3:81:6a:59:51:1d:d1:a1:f2:f6:14:bf:57:c2:92:e5:
         63:c5:65:3f:8c:17:8b:c2:71:e9:5d:95:bd:f5:83:bb:0b:c6:
         a4:81:2b:1d:93:98:16:9b:5a:df:ef:b2:78:99:d3:7e:cc:f4:
         af:35:81:9d:ab:fa:a2:0d:5f:dd:60:d5:50:6f:0b:a8:d4:82:
         32:fa:2e:a7:f6:8f:cf:50:cd:94:9f:b4:00:12:64:e6:6a:f0:
         ee:b2:4f:ed:c3:e8:28:f7:56:13:48:09:16:10:37:9e:d8:28:
         83:e9:8b:93:88:45:e3:1d:3e:28:5b:5e:77:ff:a2:97:b4:35:
         1b:e5:0a:ad
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUUwUsloS42bR1/V5lGMZ1xKzuz5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNBRkQ5RDhBNzlBRUMyNzdFQUJBNzA3NEQ3QkIyQjk5
REVGOUE0NDAeFw0yNjEwMDcyMDQxMDZaFw0yNzEwMDYyMDQ2MDZaMDMxMTAvBgNV
BAMTKDVGMjVBNDQxM0RCREE1NTIwOUNFOEMyODdBNzNGMzdDMjMzMEIxMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWXSGNR/3WQFvq13XFcftVapAC
tZgUR4cWEVGRPuY2UVBDP+0BDvhguFB7LlW39GRIGJd8MxeR8VzHOJY1yr+PuoLS
4X1TgMQ3dkQVDc52eb98bpzqdHy4qkjolF/uGsUUJdQoG6+xEc6Ij1V5Un6hjd8g
1H2iBMHt28qxE96dWWACzidC1bXGRqVuK/K541JLUS8g+5a7Kgamha41WlYExUCk
Ydof0sjAYJtpah+ut5lI9BAtOGUtvw3qqo/7VEAqSbFgYlRi01/EMOLOoQ/mW4/e
UaHbfRsa+MucbBaYf4OSU2B1gSSrDkrLkAZayi3NQsc50jf5QR/8//ni+NrLAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUXyWkQT29pVIJzowoenPzfCMwsSYwHwYDVR0j
BBgwFoAULK/Z2Kea7Cd+q6cHTXuyuZ3vmkQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmNkZTk2WWdYUE5nNVVuYTdtdWZWVUg0cWtqb3FzdHZHaG94UnYzR1Ni
Z3ovMC8yQ0FGRDlEOEE3OUFFQzI3N0VBQkE3MDc0RDdCQjJCOTlERUY5QTQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQUZEOUQ4QTc5QUVDMjc3
RUFCQTcwNzREN0JCMkI5OURFRjlBNDQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZjZGU5NllnWFBOZzVVbmE3bXVmVlVINHFram9xc3R2R2hveFJ2M0dTYmd6LzAv
MzIzMDMwMzEzYTMxMzI2NDMwM2EzODMxMzMzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzgzNTM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgARLQgTAwDQYJKoZIhvcNAQELBQAD
ggEBAGgG1cV4TCjEyGEE/qaccVMkF2+pKxN4DIDjt8j8PCvIJNQpD5xqUvX32t9s
mIFlN/osBy/j9PczEyMCil3km+I0Uq84HNWA4m36vmiPrWBHR+5K/bjG2/AdsRAc
cOBZoLt4xKTKkXP7JKi6bB/+z5Mm0/5hUIHta1E3M0Lipc+ko4FqWVEd0aHy9hS/
V8KS5WPFZT+MF4vCceldlb31g7sLxqSBKx2TmBabWt/vsniZ037M9K81gZ2r+qIN
X91g1VBvC6jUgjL6Lqf2j89QzZSftAASZOZq8O6yT+3D6Cj3VhNICRYQN57YKIPp
i5OIReMdPihbXnf/ope0NRvlCq0=
-----END CERTIFICATE-----
Generated at Thu Oct 29 15:10:25 2026 by rpki-client