Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5X46p1Ag244d822EsX1PKCpkusAA9zKj2KrVVLjHTq4u/0/323830343a373339383a316330303a3a2f34302d3430203d3e20323730393235.roa
File:                     323830343a373339383a316330303a3a2f34302d3430203d3e20323730393235.roa (raw, json)
Hash identifier:          UPo0vhTU1sLivuN1Sbx7bCXx/jkolkXa8J+ucDig08E=
Subject key identifier:   B2:5B:D3:26:FC:DD:35:A4:CC:01:D9:84:8D:7F:3F:83:FF:F3:34:57
Certificate issuer:       /CN=22DEF27902ED7CBF88C3B6FD059503186714F326
Certificate serial:       25A0FF0560F38613BF9C5D6B1BC60748F1BE00D3
Authority key identifier: 22:DE:F2:79:02:ED:7C:BF:88:C3:B6:FD:05:95:03:18:67:14:F3:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEF27902ED7CBF88C3B6FD059503186714F326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X46p1Ag244d822EsX1PKCpkusAA9zKj2KrVVLjHTq4u/0/323830343a373339383a316330303a3a2f34302d3430203d3e20323730393235.roa
Signing time:             Tue 15 Sep 2026 14:47:53 +0000
ROA not before:           Tue 15 Sep 2026 14:42:53 +0000
ROA not after:            Tue 14 Sep 2027 14:47:53 +0000
asID:                     270925
IP address blocks:        2804:7398:1c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X46p1Ag244d822EsX1PKCpkusAA9zKj2KrVVLjHTq4u/0/22DEF27902ED7CBF88C3B6FD059503186714F326.crl
                          rsync://rpki-repo.registro.br/repo/5X46p1Ag244d822EsX1PKCpkusAA9zKj2KrVVLjHTq4u/0/22DEF27902ED7CBF88C3B6FD059503186714F326.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEF27902ED7CBF88C3B6FD059503186714F326.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 08:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a0:ff:05:60:f3:86:13:bf:9c:5d:6b:1b:c6:07:48:f1:be:00:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22DEF27902ED7CBF88C3B6FD059503186714F326
        Validity
            Not Before: Sep 15 14:42:53 2026 GMT
            Not After : Sep 14 14:47:53 2027 GMT
        Subject: CN=B25BD326FCDD35A4CC01D9848D7F3F83FFF33457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:6b:cf:2e:41:b5:09:ad:65:04:98:bd:dc:
                    68:0b:6e:09:b2:9a:bc:4b:48:0e:16:55:97:f0:01:
                    d0:1c:40:cf:ff:fa:fb:71:3f:cf:10:ed:eb:18:e0:
                    c7:e7:77:29:0e:c5:12:2c:94:e5:fa:e2:59:0c:68:
                    fa:9d:c6:8a:27:f3:49:ab:b4:0a:3f:70:6d:9a:58:
                    38:6b:77:99:c1:cf:20:bd:b6:40:ad:03:53:64:02:
                    46:16:6b:59:26:2d:8a:fc:0b:ad:8d:ce:f9:b7:54:
                    d3:45:13:86:d5:86:06:1e:41:4c:38:98:78:bf:a7:
                    26:6f:37:a2:c3:da:2b:50:16:35:6e:61:14:8a:cc:
                    c1:cc:25:9c:0a:66:a5:77:d0:38:c4:9d:c9:32:27:
                    8b:9c:f4:6c:79:01:bc:50:35:cd:d6:8f:21:9e:a4:
                    51:2a:c8:d4:00:53:d2:7a:a6:8b:d1:04:83:e8:b9:
                    1b:2b:88:bd:a3:00:df:57:74:7e:e7:3c:59:71:95:
                    71:8d:c5:d2:05:3b:bc:dd:6b:e5:a0:6d:38:20:7f:
                    3f:bf:16:f4:56:d3:1c:b9:7a:54:7a:7a:20:46:49:
                    ed:9e:6e:0b:c0:ea:a1:14:f0:4e:81:f8:e0:f3:43:
                    8a:ef:56:68:6d:7a:20:0b:96:92:df:15:84:64:4b:
                    7f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5B:D3:26:FC:DD:35:A4:CC:01:D9:84:8D:7F:3F:83:FF:F3:34:57
            X509v3 Authority Key Identifier:
                keyid:22:DE:F2:79:02:ED:7C:BF:88:C3:B6:FD:05:95:03:18:67:14:F3:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X46p1Ag244d822EsX1PKCpkusAA9zKj2KrVVLjHTq4u/0/22DEF27902ED7CBF88C3B6FD059503186714F326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEF27902ED7CBF88C3B6FD059503186714F326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X46p1Ag244d822EsX1PKCpkusAA9zKj2KrVVLjHTq4u/0/323830343a373339383a316330303a3a2f34302d3430203d3e20323730393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7398:1c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:d8:3a:c7:59:1e:3e:a2:51:cd:ed:fa:78:cf:69:7f:88:d4:
         1d:3f:6f:c0:b6:2f:2e:41:cf:9a:36:14:a5:28:b7:aa:6a:4d:
         ba:7c:7d:eb:54:e1:50:19:41:f4:f0:de:6f:42:59:3c:45:40:
         b5:81:aa:d7:74:28:1e:24:53:e4:6e:cc:da:a9:f6:e6:bb:6d:
         b5:d9:9a:3d:e1:4e:47:97:1d:f2:7f:6d:be:06:36:1f:05:4a:
         fc:aa:2c:64:a6:88:b6:99:9d:19:7e:dd:78:b9:c1:37:a0:c0:
         ca:37:ab:35:31:fe:0c:57:22:a3:4e:9d:67:a1:07:6e:13:c4:
         f2:33:0b:61:66:00:a4:b1:7a:70:5a:43:23:68:5c:35:76:2a:
         4c:ef:78:3d:48:42:29:7b:6c:71:4a:47:fe:67:22:b5:a2:c4:
         8d:9d:91:de:80:8a:1b:07:e7:ac:ad:6f:f5:9a:59:be:21:09:
         46:28:6b:b0:02:95:90:07:c0:c8:5d:55:5e:cc:59:dc:2b:e5:
         b6:a3:77:e5:0c:86:7e:83:ce:3c:cd:00:b7:27:88:8f:0d:d7:
         90:80:e3:f7:63:b1:3c:de:91:a3:98:21:bc:ae:7f:b4:43:94:
         62:86:68:18:4c:89:31:cb:66:93:22:2f:8f:67:43:6f:59:c5:
         2f:b8:c3:25
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJaD/BWDzhhO/nF1rG8YHSPG+ANMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJERUYyNzkwMkVEN0NCRjg4QzNCNkZEMDU5NTAzMTg2
NzE0RjMyNjAeFw0yNjA5MTUxNDQyNTNaFw0yNzA5MTQxNDQ3NTNaMDMxMTAvBgNV
BAMTKEIyNUJEMzI2RkNERDM1QTRDQzAxRDk4NDhEN0YzRjgzRkZGMzM0NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN82vPLkG1Ca1lBJi93GgLbgmy
mrxLSA4WVZfwAdAcQM//+vtxP88Q7esY4MfndykOxRIslOX64lkMaPqdxoon80mr
tAo/cG2aWDhrd5nBzyC9tkCtA1NkAkYWa1kmLYr8C62Nzvm3VNNFE4bVhgYeQUw4
mHi/pyZvN6LD2itQFjVuYRSKzMHMJZwKZqV30DjEnckyJ4uc9Gx5AbxQNc3WjyGe
pFEqyNQAU9J6povRBIPouRsriL2jAN9XdH7nPFlxlXGNxdIFO7zda+WgbTggfz+/
FvRW0xy5elR6eiBGSe2ebgvA6qEU8E6B+ODzQ4rvVmhteiALlpLfFYRkS3/BAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUslvTJvzdNaTMAdmEjX8/g//zNFcwHwYDVR0j
BBgwFoAUIt7yeQLtfL+Iw7b9BZUDGGcU8yYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVg0NnAxQWcyNDRkODIyRXNYMVBLQ3BrdXNBQTl6S2oyS3JWVkxqSFRx
NHUvMC8yMkRFRjI3OTAyRUQ3Q0JGODhDM0I2RkQwNTk1MDMxODY3MTRGMzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyREVGMjc5MDJFRDdDQkY4
OEMzQjZGRDA1OTUwMzE4NjcxNEYzMjYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVYNDZwMUFnMjQ0ZDgyMkVzWDFQS0Nwa3VzQUE5ektqMktyVlZMakhUcTR1LzAv
MzIzODMwMzQzYTM3MzMzOTM4M2EzMTYzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMDM5MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEc5gcMA0GCSqGSIb3DQEBCwUA
A4IBAQBi2DrHWR4+olHN7fp4z2l/iNQdP2/Ati8uQc+aNhSlKLeqak26fH3rVOFQ
GUH08N5vQlk8RUC1garXdCgeJFPkbszaqfbmu2212Zo94U5Hlx3yf22+BjYfBUr8
qixkpoi2mZ0Zft14ucE3oMDKN6s1Mf4MVyKjTp1noQduE8TyMwthZgCksXpwWkMj
aFw1dipM73g9SEIpe2xxSkf+ZyK1osSNnZHegIobB+esrW/1mlm+IQlGKGuwApWQ
B8DIXVVezFncK+W2o3flDIZ+g848zQC3J4iPDdeQgOP3Y7E83pGjmCG8rn+0Q5Ri
hmgYTIkxy2aTIi+PZ0NvWcUvuMMl
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:55:57 2026 by rpki-client