Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3130303a3a2f34302d3430203d3e20323639313434.roa
File:                     323830343a363031343a3130303a3a2f34302d3430203d3e20323639313434.roa (raw, json)
Hash identifier:          uGEJ1fBMZnz5OzZsagEdNbfx1t6rimZEB60bJC+Nh3s=
Subject key identifier:   A8:D8:EC:5C:8F:8C:6A:BD:F7:5E:41:52:6E:6F:D3:7F:11:F9:59:86
Certificate issuer:       /CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
Certificate serial:       18EDF6425875F3994FD7E8DB62A6184A1F65A562
Authority key identifier: 47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3130303a3a2f34302d3430203d3e20323639313434.roa
Signing time:             Mon 01 Jun 2026 18:15:04 +0000
ROA not before:           Mon 01 Jun 2026 18:10:04 +0000
ROA not after:            Mon 31 May 2027 18:15:04 +0000
asID:                     269144
IP address blocks:        2804:6014:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl
                          rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:39:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ed:f6:42:58:75:f3:99:4f:d7:e8:db:62:a6:18:4a:1f:65:a5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
        Validity
            Not Before: Jun  1 18:10:04 2026 GMT
            Not After : May 31 18:15:04 2027 GMT
        Subject: CN=A8D8EC5C8F8C6ABDF75E41526E6FD37F11F95986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:10:62:ce:2e:8b:01:1e:08:8e:ee:2f:84:4b:
                    3c:58:19:74:2a:68:1a:8f:9b:fc:2d:e0:6c:b6:f0:
                    d2:dc:04:16:dd:0e:14:08:46:ee:a8:1b:fe:ea:65:
                    04:5e:b3:3b:90:5f:a7:c0:0e:1e:5a:64:73:aa:e0:
                    c5:94:b1:3a:58:e9:08:6b:e3:6f:66:04:12:61:1d:
                    b5:31:45:10:52:88:e8:2d:6b:ca:43:99:8a:8f:a5:
                    a0:06:bd:d6:67:ec:ef:af:ff:49:8f:e1:9b:4e:be:
                    3f:d5:a5:09:bf:fe:16:64:45:4f:0c:49:d1:0b:4d:
                    ca:31:2c:62:76:8f:b6:e8:09:99:45:3d:78:b0:57:
                    e6:7b:52:7a:9e:28:9b:37:40:42:50:e0:81:03:87:
                    3e:a9:93:2f:25:49:84:57:27:09:37:60:b4:ed:0a:
                    55:31:a2:91:fe:a0:08:f5:e4:ec:65:da:a1:ef:11:
                    be:d3:ac:82:00:d9:50:38:5c:cf:8c:e8:14:4d:62:
                    c4:65:16:bb:a8:ec:1e:89:fd:a7:f0:5c:a0:a2:bf:
                    74:e7:e3:26:0f:b7:f7:17:24:e7:e1:34:f8:7f:76:
                    f7:0b:d5:73:14:8e:49:68:d3:82:8f:0c:ef:6e:74:
                    fb:a6:c9:23:e7:d6:33:2c:24:1a:99:c0:46:a4:23:
                    df:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D8:EC:5C:8F:8C:6A:BD:F7:5E:41:52:6E:6F:D3:7F:11:F9:59:86
            X509v3 Authority Key Identifier:
                keyid:47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3130303a3a2f34302d3430203d3e20323639313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6014:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:3c:67:48:db:9b:ae:0e:4e:db:88:22:82:40:d5:71:83:2f:
         61:a7:65:e2:c4:54:21:dd:b6:60:9a:3a:95:c9:26:5a:c4:97:
         54:64:ba:cf:9e:fc:b3:7e:ee:54:03:81:a4:65:48:e9:9f:63:
         1a:79:59:ef:8e:90:a9:ec:91:e6:e9:15:70:9a:69:f0:d7:9e:
         1c:17:89:18:e4:d1:f4:a4:e8:9b:da:61:6f:7f:00:43:8d:60:
         8d:8d:4e:c9:8b:04:0c:8c:75:44:14:92:cc:61:a2:42:76:8e:
         b1:ea:af:86:fc:1c:18:ae:cc:4f:5a:9e:0f:84:5a:47:ac:93:
         90:55:e3:92:9f:dd:a0:07:72:01:f5:16:ad:fa:b1:34:56:95:
         ed:58:bb:7a:1e:19:3e:5d:97:d3:2e:98:ba:3a:f5:cc:86:18:
         61:30:96:02:fc:83:65:30:ab:c8:9d:77:91:45:da:4f:ae:d7:
         0b:74:72:71:b2:0b:1e:24:c2:15:b0:42:90:a1:0d:ce:d1:8b:
         68:9b:09:3c:bc:4c:31:36:a2:8f:4e:ca:d7:a4:e6:2a:59:5e:
         3f:96:ae:84:6c:ae:f4:8b:31:a0:1b:67:c6:d7:08:14:a0:4e:
         a8:04:15:f1:d0:b9:ab:a9:20:5f:7b:33:f6:56:84:71:b3:d1:
         62:8a:5b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:24:51 2026 by rpki-client