Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/323830343a353939343a3a2f33322d313238203d3e20323638373131.roa
File:                     323830343a353939343a3a2f33322d313238203d3e20323638373131.roa (raw, json)
Hash identifier:          mvfY6JLgLMKoAB5EkNjjR3HToyl+5xK/3yUqJfZbXsc=
Subject key identifier:   A1:AA:A8:03:54:86:56:86:87:6D:BB:3C:21:87:57:B0:07:41:F3:FF
Certificate issuer:       /CN=57D88BED66EFA598F0EDBC36B55FB7C02FE7F681
Certificate serial:       116648ED9BEC048660FDBA0E2A40071F743C1D3E
Authority key identifier: 57:D8:8B:ED:66:EF:A5:98:F0:ED:BC:36:B5:5F:B7:C0:2F:E7:F6:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D88BED66EFA598F0EDBC36B55FB7C02FE7F681.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/323830343a353939343a3a2f33322d313238203d3e20323638373131.roa
Signing time:             Wed 23 Sep 2026 14:00:43 +0000
ROA not before:           Wed 23 Sep 2026 13:55:43 +0000
ROA not after:            Wed 22 Sep 2027 14:00:43 +0000
asID:                     268711
IP address blocks:        2804:5994::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/57D88BED66EFA598F0EDBC36B55FB7C02FE7F681.crl
                          rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/57D88BED66EFA598F0EDBC36B55FB7C02FE7F681.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D88BED66EFA598F0EDBC36B55FB7C02FE7F681.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 06:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:66:48:ed:9b:ec:04:86:60:fd:ba:0e:2a:40:07:1f:74:3c:1d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57D88BED66EFA598F0EDBC36B55FB7C02FE7F681
        Validity
            Not Before: Sep 23 13:55:43 2026 GMT
            Not After : Sep 22 14:00:43 2027 GMT
        Subject: CN=A1AAA80354865686876DBB3C218757B00741F3FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ca:22:87:44:52:73:c0:26:83:96:b6:11:33:
                    ab:01:c2:d5:6a:17:bc:98:e7:7d:01:59:3c:c6:c5:
                    9f:4c:96:16:d5:4f:f3:92:47:26:14:f0:b2:8c:31:
                    af:1f:0d:a8:d8:49:d7:5e:99:3a:07:e5:5b:10:5f:
                    82:f5:2e:d3:62:bd:0d:c8:5b:bc:07:13:9e:28:00:
                    ec:12:c3:23:fc:cf:50:90:24:8d:40:ac:1f:e0:0f:
                    95:8c:39:2a:f0:9a:54:b4:66:3f:d7:c1:b5:ba:7a:
                    69:96:fe:93:e6:f4:92:5f:59:b8:5e:77:c5:0e:3b:
                    09:cf:80:46:94:c2:bd:75:fd:a6:cf:75:60:de:7a:
                    ad:2f:e1:54:6d:7c:ee:bf:78:2e:06:a7:87:39:77:
                    17:91:a5:a3:22:e8:58:1e:82:cd:a5:ed:ec:b3:b1:
                    63:50:05:11:0c:25:7f:86:26:0d:b2:68:fe:89:c2:
                    c0:f7:06:57:d5:1f:ba:40:8e:9c:f1:03:46:e1:99:
                    8f:db:83:db:39:0c:06:91:34:cd:ed:5e:27:04:83:
                    05:27:f4:0c:a3:33:63:44:72:2a:da:9a:5c:70:61:
                    19:10:7b:2f:11:fd:37:f1:c7:1b:8b:bb:75:0c:a1:
                    23:28:7d:9d:e2:8b:d4:ca:7e:0c:63:7c:f9:04:40:
                    35:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AA:A8:03:54:86:56:86:87:6D:BB:3C:21:87:57:B0:07:41:F3:FF
            X509v3 Authority Key Identifier:
                keyid:57:D8:8B:ED:66:EF:A5:98:F0:ED:BC:36:B5:5F:B7:C0:2F:E7:F6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/57D88BED66EFA598F0EDBC36B55FB7C02FE7F681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D88BED66EFA598F0EDBC36B55FB7C02FE7F681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaRPUEPnHHjHChQ7EshbgWHHPAoRoqtagNXxPW4CEa/0/323830343a353939343a3a2f33322d313238203d3e20323638373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5994::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:67:c9:87:38:cc:79:50:39:6d:fa:e0:7f:5d:a8:4e:73:28:
         7e:92:85:d0:a2:92:88:c1:d0:64:a1:06:59:3c:35:b7:6c:32:
         e4:03:92:48:2c:2c:85:57:ed:fe:22:8c:23:d2:8b:5c:06:39:
         35:35:5c:f4:80:05:eb:79:13:a3:49:12:7a:de:64:e7:82:3c:
         b4:19:ce:39:9b:bb:a3:36:ea:e2:b4:9f:5f:5b:4d:b5:71:d2:
         b1:81:bb:67:9d:10:b6:10:72:41:49:29:5e:cd:c9:d9:64:ef:
         d8:9f:6d:14:06:c1:dd:ed:7c:12:17:6f:9b:08:84:41:ac:5a:
         bc:3e:3c:8b:19:06:d7:30:eb:af:8a:51:20:1d:dc:0f:b1:4f:
         ca:f1:c8:41:23:37:89:08:4c:7e:2d:ff:ee:9e:5b:43:19:39:
         78:ac:e1:c3:af:f4:8b:e5:c3:b7:97:11:5d:2c:16:c6:ab:4c:
         56:ed:9e:85:3b:15:59:73:68:e5:b3:6d:68:f7:a8:99:94:91:
         0c:56:5d:4e:5b:94:04:a0:3f:c9:9e:fb:7e:b5:c4:86:c3:ce:
         2f:45:2c:7b:36:4d:1b:d4:9f:e6:b6:7f:af:b6:36:01:1b:77:
         fa:02:c6:d6:48:26:ac:6b:dc:13:ea:a3:87:4d:a1:31:07:d3:
         4b:d6:83:e5
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUEWZI7ZvsBIZg/boOKkAHH3Q8HT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdEODhCRUQ2NkVGQTU5OEYwRURCQzM2QjU1RkI3QzAy
RkU3RjY4MTAeFw0yNjA5MjMxMzU1NDNaFw0yNzA5MjIxNDAwNDNaMDMxMTAvBgNV
BAMTKEExQUFBODAzNTQ4NjU2ODY4NzZEQkIzQzIxODc1N0IwMDc0MUYzRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQyiKHRFJzwCaDlrYRM6sBwtVq
F7yY530BWTzGxZ9MlhbVT/OSRyYU8LKMMa8fDajYSddemToH5VsQX4L1LtNivQ3I
W7wHE54oAOwSwyP8z1CQJI1ArB/gD5WMOSrwmlS0Zj/XwbW6emmW/pPm9JJfWbhe
d8UOOwnPgEaUwr11/abPdWDeeq0v4VRtfO6/eC4Gp4c5dxeRpaMi6Fgegs2l7eyz
sWNQBREMJX+GJg2yaP6JwsD3BlfVH7pAjpzxA0bhmY/bg9s5DAaRNM3tXicEgwUn
9AyjM2NEciramlxwYRkQey8R/TfxxxuLu3UMoSMofZ3ii9TKfgxjfPkEQDUXAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUoaqoA1SGVoaHbbs8IYdXsAdB8/8wHwYDVR0j
BBgwFoAUV9iL7WbvpZjw7bw2tV+3wC/n9oEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHhpYVJQVUVQbkhIakhDaFE3RXNoYmdXSEhQQW9Sb3F0YWdOWHhQVzRD
RWEvMC81N0Q4OEJFRDY2RUZBNTk4RjBFREJDMzZCNTVGQjdDMDJGRTdGNjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3RDg4QkVENjZFRkE1OThG
MEVEQkMzNkI1NUZCN0MwMkZFN0Y2ODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R4aWFSUFVFUG5ISGpIQ2hRN0VzaGJnV0hIUEFvUm9xdGFnTlh4UFc0Q0VhLzAv
MzIzODMwMzQzYTM1MzkzOTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzNzMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFmUMA0GCSqGSIb3DQEBCwUAA4IBAQBFZ8mH
OMx5UDlt+uB/XahOcyh+koXQopKIwdBkoQZZPDW3bDLkA5JILCyFV+3+Iowj0otc
Bjk1NVz0gAXreROjSRJ63mTngjy0Gc45m7ujNuritJ9fW021cdKxgbtnnRC2EHJB
SSlezcnZZO/Yn20UBsHd7XwSF2+bCIRBrFq8PjyLGQbXMOuvilEgHdwPsU/K8chB
IzeJCEx+Lf/unltDGTl4rOHDr/SL5cO3lxFdLBbGq0xW7Z6FOxVZc2jls21o96iZ
lJEMVl1OW5QEoD/Jnvt+tcSGw84vRSx7Nk0b1J/mtn+vtjYBG3f6AsbWSCasa9wT
6qOHTaExB9NL1oPl
-----END CERTIFICATE-----
Generated at Tue Oct 13 09:07:27 2026 by rpki-client