Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa
File:                     323830343a333536633a3a2f33322d3332203d3e20323636323835.roa (raw, json)
Hash identifier:          5hcP31ythRsBvMDlM4DDGo1acG3M0YlB2VZhWsKO+EU=
Subject key identifier:   5F:A1:53:43:DA:A6:B4:34:3C:31:CD:04:C2:61:01:8A:E4:F7:F9:08
Certificate issuer:       /CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
Certificate serial:       0B0E322876DBEC83C77902CDCC0F75134654E912
Authority key identifier: 4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa
Signing time:             Wed 07 Oct 2026 12:29:29 +0000
ROA not before:           Wed 07 Oct 2026 12:24:29 +0000
ROA not after:            Wed 06 Oct 2027 12:29:29 +0000
asID:                     266285
IP address blocks:        2804:356c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl
                          rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 10:49:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0e:32:28:76:db:ec:83:c7:79:02:cd:cc:0f:75:13:46:54:e9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
        Validity
            Not Before: Oct  7 12:24:29 2026 GMT
            Not After : Oct  6 12:29:29 2027 GMT
        Subject: CN=5FA15343DAA6B4343C31CD04C261018AE4F7F908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9e:f9:32:99:4b:ab:11:63:b7:39:d7:b3:38:
                    7f:2a:e7:0f:4d:b2:7d:d7:b6:f2:b3:a3:42:37:b4:
                    f9:80:fb:27:ab:ab:40:3c:8a:09:9c:8b:09:e5:11:
                    bc:23:6a:f6:8b:9c:f4:7e:33:e8:32:67:f1:4e:b7:
                    29:cf:45:55:5f:25:9f:77:9b:d7:70:fc:77:df:65:
                    23:d8:83:c2:64:3a:1d:0c:42:eb:51:19:32:a2:4e:
                    fe:1c:af:7a:67:78:22:2d:35:4b:a9:bf:00:5f:47:
                    cd:d7:53:c1:d9:60:7d:63:81:7b:d1:b4:e6:3a:09:
                    73:2e:e5:66:fb:18:82:3e:ca:99:85:1e:e4:ab:41:
                    f3:94:65:c3:ba:9f:0d:24:ed:dc:98:d5:c4:f8:27:
                    bb:3f:aa:09:55:d9:43:89:22:09:d4:d1:65:40:a2:
                    09:c7:5f:17:e5:c4:94:e5:d7:fc:ac:da:63:5c:88:
                    c1:e0:28:b3:ef:11:21:1c:96:34:83:60:f4:7f:bf:
                    94:8a:d2:9b:34:0b:3b:8e:ec:df:b0:a1:48:23:2b:
                    57:54:ae:d3:e9:f4:1a:8c:fd:bd:ad:8c:e3:3a:65:
                    a3:78:21:b9:e9:dc:a5:de:51:45:3c:b0:ee:d3:64:
                    f7:17:f3:fb:17:05:9c:e0:d3:63:95:22:76:2b:0f:
                    3c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A1:53:43:DA:A6:B4:34:3C:31:CD:04:C2:61:01:8A:E4:F7:F9:08
            X509v3 Authority Key Identifier:
                keyid:4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:356c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:e4:52:60:71:9a:3b:2d:a7:01:18:8b:3d:37:92:3c:41:37:
         d8:66:5d:a9:8f:b9:6e:35:9e:78:42:ad:46:63:f2:8a:11:1f:
         a6:5e:1d:8d:3f:2a:79:80:76:d3:a3:58:e5:46:62:07:ba:36:
         dd:98:06:c3:0b:76:74:69:ba:c8:67:b8:06:6e:c1:9b:48:ad:
         f8:1c:db:df:4c:f1:42:9a:e1:8b:1e:9d:12:d1:97:bd:3d:e8:
         5f:16:03:9c:1b:4e:59:89:15:c8:96:d4:5d:fe:4d:d0:f7:73:
         55:12:3d:55:9f:44:6d:52:12:92:7d:48:a5:48:d8:89:33:6e:
         e0:55:23:02:09:01:7a:7d:c0:80:02:8e:f0:30:4a:bb:ee:ca:
         9f:02:8a:3e:19:47:91:74:ac:f7:20:ae:7c:cc:39:86:4f:99:
         f8:bb:c9:08:24:15:58:56:68:ec:16:b0:1d:e7:bf:11:2c:a5:
         ec:7e:3c:ba:e4:f5:83:73:55:dc:00:9b:e2:b4:c6:cf:11:a8:
         78:14:a3:2e:cf:12:01:23:65:58:b2:9e:68:e0:a2:f8:e2:e0:
         2b:3f:f5:b9:c4:7f:13:26:1d:84:84:04:1b:dd:57:7e:e8:a5:
         16:8e:53:21:e3:6a:61:de:80:d1:fd:f9:07:c6:43:da:f9:63:
         be:0e:4b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:05:21 2026 by rpki-client