Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a353030303a3a2f33362d3336203d3e20323632353835.roa
File:                     323830343a386637303a353030303a3a2f33362d3336203d3e20323632353835.roa (raw, json)
Hash identifier:          dYsONznwV7MWBL4laVnuKlatdxQ3aWiJrPPt5EG3ZXQ=
Subject key identifier:   67:9B:FB:AB:BA:45:80:CF:66:71:5E:56:FD:1F:82:92:7E:36:EC:83
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       75B112E2D9A6333AF38FEC9E42D26FA63A3A0B51
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a353030303a3a2f33362d3336203d3e20323632353835.roa
Signing time:             Thu 17 Sep 2026 17:00:34 +0000
ROA not before:           Thu 17 Sep 2026 16:55:34 +0000
ROA not after:            Thu 16 Sep 2027 17:00:34 +0000
asID:                     262585
IP address blocks:        2804:8f70:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 11:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b1:12:e2:d9:a6:33:3a:f3:8f:ec:9e:42:d2:6f:a6:3a:3a:0b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Sep 17 16:55:34 2026 GMT
            Not After : Sep 16 17:00:34 2027 GMT
        Subject: CN=679BFBABBA4580CF66715E56FD1F82927E36EC83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:45:44:3f:02:ac:d2:58:5a:a3:70:7f:00:2c:
                    97:58:f8:fc:1c:02:13:81:91:3c:c5:9d:af:9d:1e:
                    6d:f7:ee:29:29:51:42:d7:52:b2:01:b5:3a:74:d1:
                    a3:b8:34:ee:ee:6c:56:55:d2:21:f2:0e:9b:93:79:
                    1a:48:47:67:5e:fb:e0:53:85:e4:54:36:2e:02:04:
                    c5:8d:3f:78:a6:ec:02:33:34:cf:54:57:fd:49:86:
                    80:0c:eb:45:d9:f2:46:7b:77:e9:23:67:05:45:47:
                    5f:cb:54:9a:c3:b3:da:11:dc:d9:59:b4:da:10:29:
                    02:33:dc:9e:43:cc:00:17:ea:84:38:23:88:d6:20:
                    bd:0b:db:9e:77:e4:eb:5c:7a:d0:95:a2:b2:6b:2e:
                    82:e4:cf:6d:2b:c7:95:9a:19:05:66:48:f8:79:81:
                    fd:67:32:49:b4:0a:ea:ce:06:53:1b:8c:fd:95:1c:
                    fd:cf:49:c3:ad:8d:d6:5a:ca:2e:25:82:0c:b6:e8:
                    59:93:a2:ce:e8:a2:20:19:65:e0:e4:d2:66:fb:ab:
                    d0:cf:7d:d6:2f:8a:51:99:07:c7:89:e5:61:1b:5e:
                    88:82:ee:25:a3:e5:4a:4b:fe:ca:ba:16:25:9f:bb:
                    73:f0:68:d0:d4:77:40:76:b8:3b:41:31:d4:53:08:
                    3d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9B:FB:AB:BA:45:80:CF:66:71:5E:56:FD:1F:82:92:7E:36:EC:83
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a353030303a3a2f33362d3336203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f70:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bd:dd:a5:b5:6e:98:85:26:ac:2a:4a:d4:67:a7:46:52:10:02:
         5a:bf:0e:ed:b3:27:46:f2:d8:49:e8:29:0d:03:8c:37:4a:59:
         f2:06:ce:20:a6:a1:c5:2d:f1:ac:fe:e0:28:81:6a:0d:16:33:
         66:a6:64:c7:43:17:70:8e:10:18:02:88:ab:54:03:eb:b7:96:
         bc:c5:41:59:00:f8:e6:72:97:4b:2a:23:cd:81:26:5d:93:ad:
         f0:ce:c1:84:5d:23:fd:2b:12:0b:08:3f:36:6d:92:0c:bf:f9:
         69:d6:61:fd:ef:ec:d2:a4:85:dc:fa:ce:38:bc:fd:fc:06:fa:
         dd:c8:7d:6e:a7:da:64:7d:56:40:4f:96:37:7a:bf:4b:80:d4:
         a9:c4:49:d2:cc:14:84:2f:8b:bd:f9:36:99:aa:03:f1:8c:10:
         4a:d1:61:30:02:d3:c8:e9:d3:50:5a:ba:c8:5b:3f:96:ee:3f:
         cc:7e:2e:eb:d1:a8:00:3f:d1:53:5d:88:4f:d4:a5:a8:00:72:
         de:dd:94:97:9b:23:2f:52:e1:47:0c:33:ff:d3:59:21:c3:8e:
         b2:75:cd:df:75:ed:a9:17:7f:0e:fd:8b:61:ad:27:c5:49:11:
         90:c2:5f:36:17:1b:a8:4a:bf:f9:37:d2:81:ba:26:be:1e:e6:
         86:b8:93:e9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdbES4tmmMzrzj+yeQtJvpjo6C1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFDODUzQUUzRjlDQjYyQ0MwMUJBRjQzNzlCRjgwNzI5
MjZCMDdBNzAeFw0yNjA5MTcxNjU1MzRaFw0yNzA5MTYxNzAwMzRaMDMxMTAvBgNV
BAMTKDY3OUJGQkFCQkE0NTgwQ0Y2NjcxNUU1NkZEMUY4MjkyN0UzNkVDODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiRUQ/AqzSWFqjcH8ALJdY+Pwc
AhOBkTzFna+dHm337ikpUULXUrIBtTp00aO4NO7ubFZV0iHyDpuTeRpIR2de++BT
heRUNi4CBMWNP3im7AIzNM9UV/1JhoAM60XZ8kZ7d+kjZwVFR1/LVJrDs9oR3NlZ
tNoQKQIz3J5DzAAX6oQ4I4jWIL0L25535OtcetCVorJrLoLkz20rx5WaGQVmSPh5
gf1nMkm0CurOBlMbjP2VHP3PScOtjdZayi4lggy26FmTos7ooiAZZeDk0mb7q9DP
fdYvilGZB8eJ5WEbXoiC7iWj5UpL/sq6FiWfu3PwaNDUd0B2uDtBMdRTCD1dAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUZ5v7q7pFgM9mcV5W/R+Ckn427IMwHwYDVR0j
BBgwFoAUWshTrj+ctizAG69Deb+AcpJrB6cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR21uUmM2Q1BwSkxDeEdORGUxeEFybmVIelpvRDJYMlA4NE1HVHZwRWta
ZnQvMC81QUM4NTNBRTNGOUNCNjJDQzAxQkFGNDM3OUJGODA3MjkyNkIwN0E3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBQzg1M0FFM0Y5Q0I2MkND
MDFCQUY0Mzc5QkY4MDcyOTI2QjA3QTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dtblJjNkNQcEpMQ3hHTkRlMXhBcm5lSHpab0QyWDJQODRNR1R2cEVrWmZ0LzAv
MzIzODMwMzQzYTM4NjYzNzMwM2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzMjM1MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEj3BQMA0GCSqGSIb3DQEBCwUA
A4IBAQC93aW1bpiFJqwqStRnp0ZSEAJavw7tsydG8thJ6CkNA4w3SlnyBs4gpqHF
LfGs/uAogWoNFjNmpmTHQxdwjhAYAoirVAPrt5a8xUFZAPjmcpdLKiPNgSZdk63w
zsGEXSP9KxILCD82bZIMv/lp1mH97+zSpIXc+s44vP38BvrdyH1up9pkfVZAT5Y3
er9LgNSpxEnSzBSEL4u9+TaZqgPxjBBK0WEwAtPI6dNQWrrIWz+W7j/Mfi7r0agA
P9FTXYhP1KWoAHLe3ZSXmyMvUuFHDDP/01khw46ydc3fde2pF38O/YthrSfFSRGQ
wl82FxuoSr/5N9KBuia+HuaGuJPp
-----END CERTIFICATE-----
Generated at Fri Oct 30 03:00:16 2026 by rpki-client