Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa
File:                     323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa (raw, json)
Hash identifier:          lEf3nD38rzvArDc679LvkbZXO4qLP9HX/TVtFey+paA=
Subject key identifier:   A5:DA:89:3F:FA:C5:98:70:CD:FB:95:D9:E0:F1:87:60:C1:9C:08:B6
Certificate issuer:       /CN=6295613937297D5F10674AC45D3ACAB7545474C7
Certificate serial:       1A51DEC0E14679DE0F50A7231EA43BF15882FE4E
Authority key identifier: 62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa
Signing time:             Wed 08 Jul 2026 13:08:51 +0000
ROA not before:           Wed 08 Jul 2026 13:03:51 +0000
ROA not after:            Wed 07 Jul 2027 13:08:51 +0000
asID:                     264891
IP address blocks:        2804:2f70:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
                          rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:51:de:c0:e1:46:79:de:0f:50:a7:23:1e:a4:3b:f1:58:82:fe:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6295613937297D5F10674AC45D3ACAB7545474C7
        Validity
            Not Before: Jul  8 13:03:51 2026 GMT
            Not After : Jul  7 13:08:51 2027 GMT
        Subject: CN=A5DA893FFAC59870CDFB95D9E0F18760C19C08B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:37:ca:1c:22:7c:ec:05:80:b9:29:32:59:3c:
                    4e:81:27:80:ca:9c:79:b6:e1:45:e2:1c:94:b1:63:
                    7b:2b:18:93:68:0a:e8:93:f1:83:8d:59:99:3f:35:
                    15:90:c2:62:3b:00:22:df:26:3e:23:7c:6b:a4:68:
                    d0:09:b5:ca:09:5e:55:92:51:7d:53:ae:1b:b4:9b:
                    d1:67:4c:90:cc:34:5d:c1:cf:af:5a:12:2c:fe:03:
                    bd:0b:bf:ee:5f:b4:56:ad:66:b1:a4:82:e6:f6:43:
                    4d:64:ba:cb:6b:c6:85:0d:ee:ba:78:8c:06:b4:dd:
                    06:2c:7c:db:84:13:98:a0:53:a0:cb:1d:0e:9a:e6:
                    c6:9c:95:50:de:83:59:07:53:9a:31:a6:11:3d:cc:
                    d5:57:8b:6e:f4:73:44:1a:be:db:fb:d2:b6:dc:6c:
                    1f:37:79:e1:b4:23:b8:45:83:10:6e:fd:fa:49:32:
                    13:72:92:06:5b:e0:6e:2f:df:1d:92:6a:bd:7c:85:
                    fb:a2:e1:70:5a:93:70:e5:be:31:50:8e:81:34:0c:
                    19:d3:a8:82:7b:36:b7:58:55:cb:67:cb:da:28:f0:
                    86:2d:c0:79:8b:a2:7f:5f:3e:27:6a:ba:7e:23:99:
                    4b:d8:c5:ff:bc:9b:8d:e9:65:d1:bb:54:df:aa:bc:
                    57:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DA:89:3F:FA:C5:98:70:CD:FB:95:D9:E0:F1:87:60:C1:9C:08:B6
            X509v3 Authority Key Identifier:
                keyid:62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f70:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:7b:e8:c3:57:c7:4b:0f:16:25:08:d7:05:91:47:fa:c8:7e:
         5c:7c:40:78:c6:18:4a:e4:16:b4:60:96:63:bd:83:05:3f:cd:
         52:36:99:a1:79:c5:72:d1:0f:d2:1a:2b:ca:9e:30:6a:e9:9f:
         cf:ea:21:83:74:1a:03:9a:26:d9:68:46:9d:a3:93:b5:a3:23:
         8b:b0:2e:d9:70:a8:55:aa:51:36:02:de:b8:70:98:c7:5a:a5:
         85:fc:dc:14:4c:1b:7b:2c:fb:b5:8f:68:32:43:5d:48:08:2e:
         ae:24:b2:0e:c3:a1:20:94:b6:7d:89:06:74:83:96:f5:10:46:
         f9:b8:0f:05:59:8e:02:0e:89:8b:89:05:c1:91:c6:2d:cd:58:
         5b:1d:d6:ca:21:cd:ad:14:c1:1a:82:85:cc:d8:b6:0d:9a:54:
         1a:64:27:ab:6b:0d:dd:e6:07:b7:80:65:9f:78:87:0d:28:5f:
         06:95:14:1c:88:55:46:4e:a7:e9:d2:08:1e:de:85:e5:bb:4f:
         5a:da:05:95:a3:95:db:77:eb:70:e5:7d:60:a0:40:45:59:47:
         f2:9e:03:09:c3:fc:d2:72:79:04:54:8d:0e:1c:73:9f:7d:0d:
         22:76:74:ca:00:9b:5b:81:bf:cd:90:ff:8d:de:8c:c2:d3:16:
         ac:c4:aa:31
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUGlHewOFGed4PUKcjHqQ78ViC/k4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI5NTYxMzkzNzI5N0Q1RjEwNjc0QUM0NUQzQUNBQjc1
NDU0NzRDNzAeFw0yNjA3MDgxMzAzNTFaFw0yNzA3MDcxMzA4NTFaMDMxMTAvBgNV
BAMTKEE1REE4OTNGRkFDNTk4NzBDREZCOTVEOUUwRjE4NzYwQzE5QzA4QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfN8ocInzsBYC5KTJZPE6BJ4DK
nHm24UXiHJSxY3srGJNoCuiT8YONWZk/NRWQwmI7ACLfJj4jfGukaNAJtcoJXlWS
UX1Trhu0m9FnTJDMNF3Bz69aEiz+A70Lv+5ftFatZrGkgub2Q01kustrxoUN7rp4
jAa03QYsfNuEE5igU6DLHQ6a5saclVDeg1kHU5oxphE9zNVXi270c0Qavtv70rbc
bB83eeG0I7hFgxBu/fpJMhNykgZb4G4v3x2Sar18hfui4XBak3DlvjFQjoE0DBnT
qIJ7NrdYVctny9oo8IYtwHmLon9fPidqun4jmUvYxf+8m43pZdG7VN+qvFf3AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUpdqJP/rFmHDN+5XZ4PGHYMGcCLYwHwYDVR0j
BBgwFoAUYpVhOTcpfV8QZ0rEXTrKt1RUdMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnhhYUtCa1JSUEw1QVRHcldCMXdYR0RmVE51QnFWQ1VRWmVtdzhZcXUx
TTEvMC82Mjk1NjEzOTM3Mjk3RDVGMTA2NzRBQzQ1RDNBQ0FCNzU0NTQ3NEM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyOTU2MTM5MzcyOTdENUYx
MDY3NEFDNDVEM0FDQUI3NTQ1NDc0QzcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J4YWFLQmtSUlBMNUFUR3JXQjF3WEdEZlROdUJxVkNVUVplbXc4WXF1MU0xLzAv
MzIzODMwMzQzYTMyNjYzNzMwM2EzNTMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM4MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEL3BQADANBgkqhkiG9w0BAQsF
AAOCAQEAVHvow1fHSw8WJQjXBZFH+sh+XHxAeMYYSuQWtGCWY72DBT/NUjaZoXnF
ctEP0horyp4waumfz+ohg3QaA5om2WhGnaOTtaMji7Au2XCoVapRNgLeuHCYx1ql
hfzcFEwbeyz7tY9oMkNdSAguriSyDsOhIJS2fYkGdIOW9RBG+bgPBVmOAg6Ji4kF
wZHGLc1YWx3WyiHNrRTBGoKFzNi2DZpUGmQnq2sN3eYHt4Bln3iHDShfBpUUHIhV
Rk6n6dIIHt6F5btPWtoFlaOV23frcOV9YKBARVlH8p4DCcP80nJ5BFSNDhxzn30N
InZ0ygCbW4G/zZD/jd6MwtMWrMSqMQ==
-----END CERTIFICATE-----
Generated at Wed Jul 8 17:08:58 2026 by rpki-client