Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/323830343a383035343a3a2f33322d3332203d3e20323731373434.roa
File:                     323830343a383035343a3a2f33322d3332203d3e20323731373434.roa (raw, json)
Hash identifier:          bidTpxcTPOuioRG232kskgZmk/HYSevz0neRxBqbvR4=
Subject key identifier:   A5:6E:BD:FF:8F:39:74:51:23:C0:69:82:D1:7B:42:5A:63:EA:74:3A
Certificate issuer:       /CN=2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A
Certificate serial:       7EA39BCD414DB95D1586013FB8DD2EBBB36EC41C
Authority key identifier: 2F:B9:E5:4A:07:0B:DE:B6:47:5B:8A:F6:DF:9B:8E:98:3C:39:38:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/323830343a383035343a3a2f33322d3332203d3e20323731373434.roa
Signing time:             Tue 24 Feb 2026 16:21:50 +0000
ROA not before:           Tue 24 Feb 2026 16:16:50 +0000
ROA not after:            Tue 23 Feb 2027 16:21:50 +0000
asID:                     271744
IP address blocks:        2804:8054::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.crl
                          rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 12:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a3:9b:cd:41:4d:b9:5d:15:86:01:3f:b8:dd:2e:bb:b3:6e:c4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A
        Validity
            Not Before: Feb 24 16:16:50 2026 GMT
            Not After : Feb 23 16:21:50 2027 GMT
        Subject: CN=A56EBDFF8F39745123C06982D17B425A63EA743A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:86:26:d3:31:5b:7d:08:23:ba:07:20:e8:
                    72:57:d2:57:db:83:a6:ad:5b:fe:83:61:fa:f6:fe:
                    85:05:c8:dc:ba:a1:e8:37:48:02:d8:89:47:f7:8b:
                    bd:9f:4e:2e:93:cb:5e:b9:40:5f:e9:6f:71:8f:fe:
                    8c:71:06:ff:ff:6f:14:4a:0e:65:ae:0c:03:ea:c2:
                    d9:a0:87:f2:1b:79:2a:be:b5:4c:e3:6a:d2:d6:bf:
                    16:da:98:85:ec:d4:0c:29:41:13:5c:48:45:f6:67:
                    04:65:0a:20:11:ca:b8:c6:b6:e4:86:93:49:91:ed:
                    9a:d5:4e:db:f9:04:6a:f2:91:de:80:2e:30:95:54:
                    c3:fc:d4:56:3f:bd:d3:f8:e2:a4:55:2b:af:8d:b5:
                    76:78:e3:ad:ae:9e:1d:55:f4:00:29:d1:9e:36:4e:
                    14:93:03:8c:3c:ae:67:8a:e5:d5:35:03:54:04:3a:
                    d1:40:bc:96:68:07:5c:90:15:d2:89:1d:a3:ee:82:
                    3c:98:96:ae:69:a4:4b:e3:3f:db:2f:5e:34:bf:c9:
                    d4:a1:65:2c:54:34:d7:2b:25:37:05:04:f8:8c:83:
                    22:18:cb:92:91:4e:1d:b0:fd:41:ec:8a:59:ab:13:
                    31:20:cb:df:e7:ab:a3:b5:5e:82:f1:7a:82:a1:36:
                    1b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6E:BD:FF:8F:39:74:51:23:C0:69:82:D1:7B:42:5A:63:EA:74:3A
            X509v3 Authority Key Identifier:
                keyid:2F:B9:E5:4A:07:0B:DE:B6:47:5B:8A:F6:DF:9B:8E:98:3C:39:38:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/323830343a383035343a3a2f33322d3332203d3e20323731373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8054::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:e1:77:da:a8:d9:0a:44:ba:41:9b:a0:10:8d:8e:9f:47:d0:
         1b:85:ef:a5:61:86:07:03:92:e6:7f:4a:31:a5:a9:41:ac:ab:
         06:fb:5a:cf:2c:11:0e:d6:9e:5a:40:c9:e3:e0:13:ba:6c:f0:
         1b:c8:51:96:4d:58:6a:98:94:6c:dc:cd:df:2f:22:bc:41:23:
         91:50:e2:e5:27:17:f5:48:09:05:44:19:ca:67:8b:57:38:84:
         a5:85:c9:bd:97:86:a2:b9:e9:59:63:31:21:5c:2d:3a:01:e3:
         81:ce:1e:6b:bb:c4:3d:9e:bf:51:93:dd:61:e4:89:c1:03:e6:
         1e:19:71:78:b4:85:43:e2:cc:48:cc:ee:87:a6:3c:a1:0d:7a:
         c4:c3:81:9e:71:7a:ef:0c:a3:ef:37:0b:fa:0e:77:bc:d5:cc:
         d7:ed:d3:c0:19:e5:7f:08:9a:06:25:69:b0:be:e3:40:36:53:
         52:e5:34:d8:5c:e0:2b:5b:18:b3:05:73:3a:27:a8:e3:73:b8:
         06:e8:4a:9a:3e:72:1c:d3:07:ce:51:8a:df:53:95:c7:c2:68:
         d6:1a:b9:aa:e2:d7:89:11:66:78:c4:77:40:3c:95:ef:d6:07:
         c4:43:84:6c:a4:5d:2e:80:44:ce:cb:ea:76:ba:70:85:34:2a:
         6a:ad:6b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:36:53 2026 by rpki-client