Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/323830343a313063633a613030303a3a2f33352d3335203d3e20323633363530.roa
File:                     323830343a313063633a613030303a3a2f33352d3335203d3e20323633363530.roa (raw, json)
Hash identifier:          0xw4l8zzcWxHWpNhXInspzCWoZ4cqAYcBtAcguP6GlU=
Subject key identifier:   47:6D:5B:60:7A:5B:E4:06:9A:50:33:B7:AC:94:10:FC:4B:D5:1C:7F
Certificate issuer:       /CN=A9962FA88F57EBBDA0EB7877C138055B3838BB09
Certificate serial:       76EAE5F21C3138572A1048820EA6734A04860833
Authority key identifier: A9:96:2F:A8:8F:57:EB:BD:A0:EB:78:77:C1:38:05:5B:38:38:BB:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9962FA88F57EBBDA0EB7877C138055B3838BB09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/323830343a313063633a613030303a3a2f33352d3335203d3e20323633363530.roa
Signing time:             Thu 17 Sep 2026 13:32:18 +0000
ROA not before:           Thu 17 Sep 2026 13:27:18 +0000
ROA not after:            Thu 16 Sep 2027 13:32:18 +0000
asID:                     263650
IP address blocks:        2804:10cc:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/A9962FA88F57EBBDA0EB7877C138055B3838BB09.crl
                          rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/A9962FA88F57EBBDA0EB7877C138055B3838BB09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9962FA88F57EBBDA0EB7877C138055B3838BB09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 01:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ea:e5:f2:1c:31:38:57:2a:10:48:82:0e:a6:73:4a:04:86:08:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9962FA88F57EBBDA0EB7877C138055B3838BB09
        Validity
            Not Before: Sep 17 13:27:18 2026 GMT
            Not After : Sep 16 13:32:18 2027 GMT
        Subject: CN=476D5B607A5BE4069A5033B7AC9410FC4BD51C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:09:ab:2c:c4:6b:5d:98:3f:d8:a8:f4:3f:ea:
                    92:c4:61:71:6e:8b:98:10:a3:b0:11:6e:49:67:31:
                    4f:88:b7:9c:d4:14:b0:95:38:7b:93:f6:c6:8f:31:
                    40:52:1e:e5:d1:e0:67:f5:96:c0:29:19:85:56:bd:
                    1d:2e:7f:fd:da:c5:08:75:9b:36:6b:04:1b:04:64:
                    23:32:bb:e1:b7:7b:d4:b2:64:2a:dd:fb:9d:68:9d:
                    40:75:2c:55:95:ad:7b:00:13:37:42:d2:cb:bb:b5:
                    5b:95:79:2c:d1:38:95:53:72:45:90:cc:eb:10:22:
                    6f:a7:f7:2f:37:ed:c2:60:70:89:ba:55:27:5c:68:
                    e2:fd:c3:f4:a4:66:a3:a2:a5:49:64:57:83:31:72:
                    a4:16:e0:00:9c:9f:c8:22:fa:dc:7b:52:11:b5:29:
                    b9:f5:1d:c8:10:0f:d6:06:d2:9f:a1:cf:86:d5:6d:
                    6f:b1:cd:40:2a:d4:a2:70:37:ff:36:d0:f2:0b:71:
                    e7:50:fd:6a:25:4b:9a:69:d7:e2:34:0f:1e:a4:d5:
                    ca:e0:46:9c:8f:d6:43:c4:9f:62:1d:73:d8:aa:e9:
                    fb:20:78:a5:55:5a:43:e1:0d:a4:b4:df:08:a4:7c:
                    b1:5b:ad:95:b5:dc:84:b6:10:b2:1e:57:df:ef:25:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6D:5B:60:7A:5B:E4:06:9A:50:33:B7:AC:94:10:FC:4B:D5:1C:7F
            X509v3 Authority Key Identifier:
                keyid:A9:96:2F:A8:8F:57:EB:BD:A0:EB:78:77:C1:38:05:5B:38:38:BB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/A9962FA88F57EBBDA0EB7877C138055B3838BB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9962FA88F57EBBDA0EB7877C138055B3838BB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/323830343a313063633a613030303a3a2f33352d3335203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10cc:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a8:2d:4d:52:99:6c:75:6b:85:4e:15:d6:26:43:8f:25:6e:46:
         5c:2f:48:b1:2c:96:3e:88:76:63:81:fb:1f:b9:e7:53:8d:fa:
         38:18:8a:08:b2:5d:1d:c9:2a:08:13:20:17:2b:3e:6b:55:13:
         fd:e8:1e:f6:56:d7:72:ef:14:14:b0:e3:31:8a:1e:4f:33:e6:
         69:a9:b1:dc:0e:12:ba:b5:0f:98:73:e4:34:10:c4:80:57:7f:
         54:66:bc:24:22:c0:ac:05:85:45:b9:c9:ad:07:be:94:41:0b:
         2c:e1:d4:b5:0d:3c:5b:7d:ea:a6:d0:b5:6a:b1:b9:73:3d:38:
         6d:aa:61:3b:1e:68:d8:e5:23:14:47:3c:43:5e:9a:0f:36:c7:
         a6:47:62:af:f0:c5:5a:ce:49:3b:30:6a:c2:b9:5d:81:a6:4f:
         28:da:29:d2:d6:60:e8:4a:34:9e:de:f4:94:95:cf:9f:db:e4:
         9d:dc:20:ed:82:b2:fa:02:15:37:23:e2:6d:f7:b7:a1:30:a6:
         27:3a:d9:62:46:2b:ec:11:2b:44:22:29:0b:e2:71:75:27:c4:
         88:a1:af:9c:71:2e:71:07:51:0f:59:45:c6:f6:48:9a:71:4f:
         56:cf:7b:98:2e:e3:7c:d8:4c:6f:38:4d:49:5a:19:c2:08:fd:
         0f:de:c1:33
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdurl8hwxOFcqEEiCDqZzSgSGCDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk5NjJGQTg4RjU3RUJCREEwRUI3ODc3QzEzODA1NUIz
ODM4QkIwOTAeFw0yNjA5MTcxMzI3MThaFw0yNzA5MTYxMzMyMThaMDMxMTAvBgNV
BAMTKDQ3NkQ1QjYwN0E1QkU0MDY5QTUwMzNCN0FDOTQxMEZDNEJENTFDN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUCassxGtdmD/YqPQ/6pLEYXFu
i5gQo7ARbklnMU+It5zUFLCVOHuT9saPMUBSHuXR4Gf1lsApGYVWvR0uf/3axQh1
mzZrBBsEZCMyu+G3e9SyZCrd+51onUB1LFWVrXsAEzdC0su7tVuVeSzROJVTckWQ
zOsQIm+n9y837cJgcIm6VSdcaOL9w/SkZqOipUlkV4MxcqQW4ACcn8gi+tx7UhG1
Kbn1HcgQD9YG0p+hz4bVbW+xzUAq1KJwN/820PILcedQ/WolS5pp1+I0Dx6k1crg
RpyP1kPEn2Idc9iq6fsgeKVVWkPhDaS03wikfLFbrZW13IS2ELIeV9/vJZbVAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUR21bYHpb5AaaUDO3rJQQ/EvVHH8wHwYDVR0j
BBgwFoAUqZYvqI9X672g63h3wTgFWzg4uwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUwxaldOTGlnV1lNOXhtMzl6ZVpZeHlyTGpUWWZ5cWtHQ2VvRTNYWGha
ekwvMC9BOTk2MkZBODhGNTdFQkJEQTBFQjc4NzdDMTM4MDU1QjM4MzhCQjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5OTYyRkE4OEY1N0VCQkRB
MEVCNzg3N0MxMzgwNTVCMzgzOEJCMDkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMMWpXTkxpZ1dZTTl4bTM5emVaWXh5ckxqVFlmeXFrR0Nlb0UzWFhoWnpMLzAv
MzIzODMwMzQzYTMxMzA2MzYzM2E2MTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzMzM2MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEEMygMA0GCSqGSIb3DQEBCwUA
A4IBAQCoLU1SmWx1a4VOFdYmQ48lbkZcL0ixLJY+iHZjgfsfuedTjfo4GIoIsl0d
ySoIEyAXKz5rVRP96B72Vtdy7xQUsOMxih5PM+ZpqbHcDhK6tQ+Yc+Q0EMSAV39U
ZrwkIsCsBYVFucmtB76UQQss4dS1DTxbfeqm0LVqsblzPThtqmE7HmjY5SMURzxD
XpoPNsemR2Kv8MVazkk7MGrCuV2Bpk8o2inS1mDoSjSe3vSUlc+f2+Sd3CDtgrL6
AhU3I+Jt97ehMKYnOtliRivsEStEIikL4nF1J8SIoa+ccS5xB1EPWUXG9kiacU9W
z3uYLuN82ExvOE1JWhnCCP0P3sEz
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:51:29 2026 by rpki-client