Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/323830343a326135383a3a2f33322d3332203d3e20323634303730.roa
File:                     323830343a326135383a3a2f33322d3332203d3e20323634303730.roa (raw, json)
Hash identifier:          qToEGddEu7H4uDl3W9XtyfH/Ik4TGURZqgudAOoEeCo=
Subject key identifier:   3E:A2:43:6E:47:4F:99:36:16:53:9E:84:B4:EA:C6:34:18:86:57:8E
Certificate issuer:       /CN=5E72277821EE1BF3B5BD02ED6F872129008C5D53
Certificate serial:       755CE2DBE679DA27F55FBC1E200F25500C98A849
Authority key identifier: 5E:72:27:78:21:EE:1B:F3:B5:BD:02:ED:6F:87:21:29:00:8C:5D:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E72277821EE1BF3B5BD02ED6F872129008C5D53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/323830343a326135383a3a2f33322d3332203d3e20323634303730.roa
Signing time:             Tue 08 Sep 2026 12:44:52 +0000
ROA not before:           Tue 08 Sep 2026 12:39:52 +0000
ROA not after:            Tue 07 Sep 2027 12:44:52 +0000
asID:                     264070
IP address blocks:        2804:2a58::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/5E72277821EE1BF3B5BD02ED6F872129008C5D53.crl
                          rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/5E72277821EE1BF3B5BD02ED6F872129008C5D53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E72277821EE1BF3B5BD02ED6F872129008C5D53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 16:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5c:e2:db:e6:79:da:27:f5:5f:bc:1e:20:0f:25:50:0c:98:a8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E72277821EE1BF3B5BD02ED6F872129008C5D53
        Validity
            Not Before: Sep  8 12:39:52 2026 GMT
            Not After : Sep  7 12:44:52 2027 GMT
        Subject: CN=3EA2436E474F993616539E84B4EAC6341886578E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:01:f5:5c:8a:bc:f5:5e:a8:b0:ce:1e:5c:44:
                    9f:e1:93:4d:c8:b2:9e:80:ab:93:40:43:23:df:bd:
                    da:80:84:56:00:da:4f:c8:b0:c9:ab:91:81:be:e2:
                    4e:e0:4e:29:a1:36:4e:f3:01:af:9c:50:e1:c2:3a:
                    ee:4f:9a:13:ff:7f:fa:35:e7:6d:77:91:38:af:b3:
                    d9:22:66:09:ac:68:89:a9:07:24:60:62:48:b2:58:
                    35:c7:37:8b:0a:48:35:0b:de:cf:e7:b5:6b:f7:02:
                    cd:e1:b7:d4:74:e1:99:00:58:f2:4d:32:51:e5:8e:
                    ea:f0:cb:2e:18:0c:82:da:1c:b3:bc:80:71:40:cb:
                    81:5d:53:66:3f:63:98:d2:ac:40:f5:2a:52:65:16:
                    3c:ff:8f:71:64:5e:83:fa:3f:2d:9c:a9:ca:df:1d:
                    ed:61:32:15:86:a2:40:6d:ef:1e:3e:98:f7:60:54:
                    b3:2c:98:ae:d6:50:3a:37:4c:cd:56:d1:7b:06:2f:
                    d7:68:38:b9:2e:22:9f:f0:14:fb:49:1a:81:2e:45:
                    d1:25:98:79:e0:67:c3:69:0d:4e:8c:8e:09:9f:d0:
                    94:37:28:6c:94:21:17:44:4f:0b:d7:e9:89:e2:5c:
                    dd:0a:1d:0a:9b:16:87:c0:bd:ee:27:50:1e:96:c6:
                    26:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A2:43:6E:47:4F:99:36:16:53:9E:84:B4:EA:C6:34:18:86:57:8E
            X509v3 Authority Key Identifier:
                keyid:5E:72:27:78:21:EE:1B:F3:B5:BD:02:ED:6F:87:21:29:00:8C:5D:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/5E72277821EE1BF3B5BD02ED6F872129008C5D53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E72277821EE1BF3B5BD02ED6F872129008C5D53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/323830343a326135383a3a2f33322d3332203d3e20323634303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a58::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:b1:46:8d:90:87:a7:ed:99:71:93:13:33:09:4f:ac:e9:5b:
         04:1a:5b:37:75:2e:62:55:04:fd:6e:59:3a:54:01:ef:37:50:
         88:4f:4c:b7:67:c8:96:c0:9b:ca:82:32:ec:3b:e2:79:af:42:
         c5:f2:43:1e:94:5d:53:ee:e8:71:c6:07:08:6d:95:66:1f:a1:
         1d:a1:d6:32:8b:ce:e4:75:20:4e:4a:59:7d:04:52:f7:42:31:
         d4:cc:ec:e8:c7:df:b4:39:7b:37:f3:a0:d2:60:ab:60:37:6b:
         60:87:df:e3:52:3e:94:f3:0d:96:e4:bc:bc:de:2c:81:ec:f2:
         bb:04:3d:ef:20:a7:37:a2:ef:07:70:0f:3e:86:db:26:45:ea:
         f9:8a:39:87:1f:a1:61:25:99:0d:c9:37:67:88:bb:de:1d:6e:
         98:f2:b8:4e:bd:6f:f4:3d:57:fa:12:e4:df:37:eb:e0:e9:13:
         33:de:e4:22:32:cb:39:e7:98:81:90:c5:5c:2f:81:6a:dc:99:
         b7:36:3a:2d:33:8f:6e:63:e2:37:cc:27:9e:cc:82:56:3d:0c:
         89:61:7a:cf:52:f1:2a:b7:7d:bb:1a:ea:23:af:c9:11:ab:56:
         4a:4a:5d:2a:0c:c9:03:8c:43:72:ed:79:3e:af:36:c6:a4:b7:
         f8:ca:a0:9d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdVzi2+Z52if1X7weIA8lUAyYqEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU3MjI3NzgyMUVFMUJGM0I1QkQwMkVENkY4NzIxMjkw
MDhDNUQ1MzAeFw0yNjA5MDgxMjM5NTJaFw0yNzA5MDcxMjQ0NTJaMDMxMTAvBgNV
BAMTKDNFQTI0MzZFNDc0Rjk5MzYxNjUzOUU4NEI0RUFDNjM0MTg4NjU3OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXAfVcirz1Xqiwzh5cRJ/hk03I
sp6Aq5NAQyPfvdqAhFYA2k/IsMmrkYG+4k7gTimhNk7zAa+cUOHCOu5PmhP/f/o1
5213kTivs9kiZgmsaImpByRgYkiyWDXHN4sKSDUL3s/ntWv3As3ht9R04ZkAWPJN
MlHljurwyy4YDILaHLO8gHFAy4FdU2Y/Y5jSrED1KlJlFjz/j3FkXoP6Py2cqcrf
He1hMhWGokBt7x4+mPdgVLMsmK7WUDo3TM1W0XsGL9doOLkuIp/wFPtJGoEuRdEl
mHngZ8NpDU6Mjgmf0JQ3KGyUIRdETwvX6YniXN0KHQqbFofAve4nUB6WxibdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPqJDbkdPmTYWU56EtOrGNBiGV44wHwYDVR0j
BBgwFoAUXnIneCHuG/O1vQLtb4chKQCMXVMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnZGN0w3S0xkenJ6d204Z1RTWnN4QmQxRm1Vd2NzaFM2d2dOdWZ0bnc1
RUUvMC81RTcyMjc3ODIxRUUxQkYzQjVCRDAyRUQ2Rjg3MjEyOTAwOEM1RDUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFNzIyNzc4MjFFRTFCRjNC
NUJEMDJFRDZGODcyMTI5MDA4QzVENTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J2RjdMN0tMZHpyendtOGdUU1pzeEJkMUZtVXdjc2hTNndnTnVmdG53NUVFLzAv
MzIzODMwMzQzYTMyNjEzNTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzAzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQqWDANBgkqhkiG9w0BAQsFAAOCAQEAi7FGjZCH
p+2ZcZMTMwlPrOlbBBpbN3UuYlUE/W5ZOlQB7zdQiE9Mt2fIlsCbyoIy7Dviea9C
xfJDHpRdU+7occYHCG2VZh+hHaHWMovO5HUgTkpZfQRS90Ix1Mzs6MfftDl7N/Og
0mCrYDdrYIff41I+lPMNluS8vN4sgezyuwQ97yCnN6LvB3APPobbJkXq+Yo5hx+h
YSWZDck3Z4i73h1umPK4Tr1v9D1X+hLk3zfr4OkTM97kIjLLOeeYgZDFXC+BatyZ
tzY6LTOPbmPiN8wnnsyCVj0MiWF6z1LxKrd9uxrqI6/JEatWSkpdKgzJA4xDcu15
Pq82xqS3+MqgnQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 01:39:10 2026 by rpki-client