Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3330303a3a2f34302d3430203d3e20323639313434.roa
File:                     323830343a363031343a3330303a3a2f34302d3430203d3e20323639313434.roa (raw, json)
Hash identifier:          NPUuLJrxmSj6IN9gh1KXl3TGK5RZkuzunPS0pZ+8nU8=
Subject key identifier:   A3:C1:D6:29:43:E5:F1:EB:53:72:87:67:51:B4:30:56:83:3B:28:06
Certificate issuer:       /CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
Certificate serial:       050214C8EAD377D9B9182FB498EB7A0413FBCFE2
Authority key identifier: 47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3330303a3a2f34302d3430203d3e20323639313434.roa
Signing time:             Mon 01 Jun 2026 18:15:04 +0000
ROA not before:           Mon 01 Jun 2026 18:10:04 +0000
ROA not after:            Mon 31 May 2027 18:15:04 +0000
asID:                     269144
IP address blocks:        2804:6014:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl
                          rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:39:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:02:14:c8:ea:d3:77:d9:b9:18:2f:b4:98:eb:7a:04:13:fb:cf:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
        Validity
            Not Before: Jun  1 18:10:04 2026 GMT
            Not After : May 31 18:15:04 2027 GMT
        Subject: CN=A3C1D62943E5F1EB5372876751B43056833B2806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:06:0e:e7:5e:7f:7d:ff:30:19:25:b9:2c:bd:
                    ee:c1:8c:69:36:ba:6c:98:30:7e:f4:0c:72:6f:e4:
                    e8:0a:90:61:98:94:69:46:4f:23:7c:23:c6:97:a8:
                    1b:59:be:97:27:f2:0f:af:65:d9:bc:72:e2:76:aa:
                    39:45:c7:51:5e:a8:46:59:bb:f2:ac:ae:41:63:99:
                    b3:74:a7:af:0b:2d:6e:a0:68:65:69:fc:dd:51:36:
                    52:8e:d4:a7:5a:8c:79:cf:74:c5:7f:87:1e:d8:dd:
                    13:47:8d:dd:e9:43:57:69:49:b7:f4:dd:1d:97:88:
                    2b:2e:6f:65:db:9e:26:fd:b0:b2:8c:73:cd:a6:70:
                    a7:db:a8:be:75:d5:38:f8:dd:f9:7b:a8:ec:17:22:
                    40:ba:a2:53:a2:d8:1e:83:36:3c:1d:3a:e2:65:72:
                    7b:a8:5d:95:0b:14:73:a5:88:55:ea:f9:77:a1:82:
                    9f:b3:30:a2:b5:45:7a:e5:e9:3a:2d:32:b5:a7:80:
                    0e:a3:2c:06:28:1e:21:ce:4a:be:64:a5:71:ad:46:
                    9c:2d:a6:e9:42:09:a2:5b:ab:b3:ff:ee:a0:cd:18:
                    03:72:05:19:8f:bf:02:da:78:e4:31:56:03:c6:6b:
                    5c:83:4f:24:cb:ce:fa:be:8c:04:60:9c:00:ee:e6:
                    bb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C1:D6:29:43:E5:F1:EB:53:72:87:67:51:B4:30:56:83:3B:28:06
            X509v3 Authority Key Identifier:
                keyid:47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3330303a3a2f34302d3430203d3e20323639313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6014:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:2a:1c:dd:a7:3d:97:e7:f0:5c:76:73:fa:9e:5b:a3:4e:f1:
         ed:83:fe:6d:b8:8d:22:d2:3c:88:f3:d0:ad:f1:a6:c9:b3:58:
         85:9f:26:a1:25:8a:18:44:f8:e7:e6:2a:17:1c:6d:2c:02:4f:
         45:2b:70:d6:51:53:82:1e:ab:eb:c1:75:87:4b:6a:fa:fb:0b:
         d2:dc:be:7d:06:1e:d4:74:3f:7b:ca:c9:fa:90:8f:4c:a8:a7:
         9c:9e:31:27:b1:28:87:a5:4d:87:62:e6:ee:3f:8f:6d:3e:23:
         07:28:ce:d0:90:15:ba:5e:16:ac:f2:5f:26:5b:6c:e6:75:01:
         02:52:9e:3a:66:b0:bd:7b:08:a4:2a:d5:87:7a:ef:99:d9:aa:
         73:6e:c1:a9:1a:78:5b:4f:48:c6:6e:3e:c6:8d:51:0b:3a:43:
         7f:f5:56:6b:00:fe:2c:22:fd:21:1c:46:1b:66:7d:de:62:4e:
         1a:f7:09:2d:15:cf:2e:88:7a:cb:bc:f8:83:f5:93:d6:ea:a5:
         21:e5:a4:e6:4b:8a:a1:d4:d5:05:aa:32:df:6b:0a:56:da:f9:
         68:d1:78:31:54:e9:37:94:bb:27:79:08:53:53:5a:96:60:d5:
         4b:d2:69:ce:22:fb:62:01:06:33:7c:9e:2d:78:f8:fb:6a:14:
         fc:b9:ff:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:01:44 2026 by rpki-client