Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3230303a3a2f34302d3430203d3e20323639313434.roa
File:                     323830343a363031343a3230303a3a2f34302d3430203d3e20323639313434.roa (raw, json)
Hash identifier:          MNrPyrJzRLmeryNqxB6sOEW449cJxoMWKHzfemXwkwk=
Subject key identifier:   ED:E8:C3:31:B9:2B:BD:8B:DD:6E:CF:90:8A:F8:8A:1D:7B:10:51:52
Certificate issuer:       /CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
Certificate serial:       43F21C1047B0B59FF275046043A5817093AE1F6A
Authority key identifier: 47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3230303a3a2f34302d3430203d3e20323639313434.roa
Signing time:             Mon 01 Jun 2026 18:15:04 +0000
ROA not before:           Mon 01 Jun 2026 18:10:04 +0000
ROA not after:            Mon 31 May 2027 18:15:04 +0000
asID:                     269144
IP address blocks:        2804:6014:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl
                          rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:39:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f2:1c:10:47:b0:b5:9f:f2:75:04:60:43:a5:81:70:93:ae:1f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
        Validity
            Not Before: Jun  1 18:10:04 2026 GMT
            Not After : May 31 18:15:04 2027 GMT
        Subject: CN=EDE8C331B92BBD8BDD6ECF908AF88A1D7B105152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a8:72:f1:ff:0d:2d:af:79:93:a2:ba:fd:21:
                    2e:26:05:61:2a:c0:20:3d:76:5e:34:92:99:50:c4:
                    55:19:af:e0:48:3b:2b:33:f1:d4:26:d3:15:22:25:
                    97:86:f1:04:42:f4:dd:29:c0:1b:49:70:bc:ba:22:
                    4e:53:1d:7a:e8:6b:84:25:e6:bb:66:06:64:2d:30:
                    40:80:68:ad:a4:ec:99:c4:a8:35:81:5c:cb:5e:fd:
                    fb:64:8e:67:59:03:bb:b5:43:99:70:a0:e1:fc:b8:
                    18:99:c4:92:2c:77:7a:e3:e5:39:c4:6b:c8:36:8e:
                    de:cf:76:d8:3f:81:25:d9:99:2c:78:f9:c8:e0:22:
                    89:6d:24:15:cd:b0:de:e4:c2:05:7e:20:d7:36:dc:
                    fb:c7:d2:de:4a:26:28:25:9b:ce:e1:d9:88:57:f3:
                    40:25:cd:18:fd:e2:f3:1d:e7:6e:9f:46:55:89:32:
                    57:40:44:55:94:8c:99:62:79:72:9d:a2:d7:f7:5e:
                    41:88:b1:52:e0:e1:5a:40:57:a8:70:a7:cd:33:41:
                    10:36:87:8b:0b:fc:07:8c:ee:a4:11:31:00:f1:fe:
                    9f:af:4c:36:da:32:9d:75:ef:19:90:46:77:d9:88:
                    c2:e5:aa:79:30:ca:43:98:d8:5c:91:c5:b0:63:46:
                    1e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E8:C3:31:B9:2B:BD:8B:DD:6E:CF:90:8A:F8:8A:1D:7B:10:51:52
            X509v3 Authority Key Identifier:
                keyid:47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3230303a3a2f34302d3430203d3e20323639313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6014:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:8a:6a:c1:a0:d3:27:7b:29:38:31:ce:bf:f2:39:85:4c:f3:
         e0:d2:12:75:e4:fa:c7:24:09:c8:e3:d3:c6:09:a1:9b:ca:88:
         e7:36:aa:a4:87:dd:cd:2e:9b:b6:81:c5:ea:08:65:9e:ba:9b:
         5a:49:78:11:32:7c:02:2a:46:c4:66:5b:27:95:29:cb:b2:54:
         ea:20:d2:c6:67:25:9c:33:7c:1e:af:90:c3:b9:0f:5a:13:f9:
         8e:9a:ad:52:08:9a:de:be:a4:1c:3c:4a:81:90:fb:2f:93:f2:
         24:81:0f:84:17:18:f4:96:79:30:a3:bc:b6:aa:a7:59:05:68:
         c7:9d:86:f1:84:2e:6d:8f:7c:b4:19:cd:30:d8:ec:43:8e:87:
         c2:95:cc:8e:06:b2:7e:95:9e:e4:9a:54:79:73:c1:7d:7d:b3:
         9d:c5:cc:5d:a0:17:02:4f:0c:65:f8:b5:cc:d2:ca:20:f9:97:
         2e:40:ce:ae:f8:c4:c8:7b:8e:8f:55:cf:c5:87:1a:5e:71:a1:
         85:08:37:88:38:6f:98:46:27:e9:c1:2f:24:7a:ad:35:c3:d4:
         28:85:6d:00:8a:64:d3:a3:04:74:33:3f:0f:c4:77:5b:eb:bd:
         25:d2:64:47:1f:48:52:1d:ea:1c:7d:b4:de:7b:d3:14:86:d2:
         a7:35:fb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:01:51 2026 by rpki-client