Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/323830343a366337303a3a2f33322d3332203d3e20323730343638.roa
File:                     323830343a366337303a3a2f33322d3332203d3e20323730343638.roa (raw, json)
Hash identifier:          h1i+TwzDNtmhUddkPj9oxI/RYK0DK0b2ykrUWYzDBLY=
Subject key identifier:   7A:E9:44:18:DB:C1:35:69:B3:F8:AD:B9:F9:09:4D:12:99:CC:15:06
Certificate issuer:       /CN=870D313405780E71067BEC204B12CFE5F0268816
Certificate serial:       684AA5772F41CA59A93B10A2781EAD366AD0B39D
Authority key identifier: 87:0D:31:34:05:78:0E:71:06:7B:EC:20:4B:12:CF:E5:F0:26:88:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870D313405780E71067BEC204B12CFE5F0268816.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/323830343a366337303a3a2f33322d3332203d3e20323730343638.roa
Signing time:             Thu 27 Aug 2026 09:48:27 +0000
ROA not before:           Thu 27 Aug 2026 09:43:27 +0000
ROA not after:            Thu 26 Aug 2027 09:48:27 +0000
asID:                     270468
IP address blocks:        2804:6c70::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/870D313405780E71067BEC204B12CFE5F0268816.crl
                          rsync://rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/870D313405780E71067BEC204B12CFE5F0268816.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870D313405780E71067BEC204B12CFE5F0268816.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 00:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4a:a5:77:2f:41:ca:59:a9:3b:10:a2:78:1e:ad:36:6a:d0:b3:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870D313405780E71067BEC204B12CFE5F0268816
        Validity
            Not Before: Aug 27 09:43:27 2026 GMT
            Not After : Aug 26 09:48:27 2027 GMT
        Subject: CN=7AE94418DBC13569B3F8ADB9F9094D1299CC1506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b7:3c:4b:ad:9c:df:fa:fc:13:31:75:8a:48:
                    79:2e:02:3b:f5:b7:c6:38:4c:60:7e:35:2e:40:ff:
                    54:50:b1:52:96:4a:fe:5b:dc:fc:4e:76:8c:5c:ff:
                    cf:82:ae:8e:ca:98:c3:c8:56:0c:44:a1:88:b8:d4:
                    c5:2c:de:e9:9c:ca:2b:87:7a:04:dd:e8:2e:a4:b2:
                    f4:ca:68:b4:85:c7:86:63:e3:d3:c6:af:64:c9:a9:
                    93:4d:92:a9:ec:58:8a:76:ed:48:8e:d6:9c:a5:92:
                    e6:4f:a9:4d:60:5a:09:9c:ab:e6:e2:8b:a9:e8:89:
                    24:d5:7c:15:c3:9d:6e:b9:38:b9:61:38:dc:41:d7:
                    e9:5b:64:b2:63:ae:d6:ce:f2:11:50:af:3f:e8:bf:
                    f7:7a:9e:f2:66:77:70:ba:11:b3:7e:60:62:73:8a:
                    15:4e:c6:72:b3:6e:fb:81:ec:e2:41:28:56:cf:2a:
                    b8:ad:8b:7c:f0:7f:a2:de:5d:78:f9:5f:56:df:2c:
                    ce:74:fb:50:99:c4:a7:3c:d2:80:6d:f7:66:8c:bf:
                    a1:01:d9:58:70:36:ec:d3:88:d5:d9:1d:20:22:6d:
                    92:77:e7:86:0b:42:82:02:ca:ee:8c:17:ca:59:23:
                    2f:f8:4d:53:a0:40:7d:b8:8e:36:ab:e7:2a:e9:12:
                    11:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E9:44:18:DB:C1:35:69:B3:F8:AD:B9:F9:09:4D:12:99:CC:15:06
            X509v3 Authority Key Identifier:
                keyid:87:0D:31:34:05:78:0E:71:06:7B:EC:20:4B:12:CF:E5:F0:26:88:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/870D313405780E71067BEC204B12CFE5F0268816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870D313405780E71067BEC204B12CFE5F0268816.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/323830343a366337303a3a2f33322d3332203d3e20323730343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c70::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:a3:d4:da:e1:fc:9a:90:a2:ac:92:25:be:f8:20:fe:55:36:
         78:df:bf:e2:17:b2:08:1f:b9:9c:54:19:14:d7:3c:e5:bd:3f:
         a6:10:dc:b3:05:15:87:5d:8b:91:ec:4c:b2:c4:aa:5a:3e:0a:
         e5:bf:0a:93:c2:cf:bb:7f:4e:84:cd:46:c1:d5:6f:2a:a7:fe:
         8c:79:28:bc:75:25:09:9f:e5:ec:1d:a5:de:93:0a:46:f5:f5:
         2c:10:67:d4:8d:7f:82:92:db:6b:01:e3:f7:09:9d:4d:14:68:
         0c:ef:81:63:6b:83:6e:1c:82:2a:10:a2:ce:24:45:8e:85:c3:
         b5:ce:3f:63:1c:85:b1:1e:47:75:60:d2:ee:65:7e:4f:24:11:
         56:3e:4d:04:c0:5c:26:de:5e:90:ed:a3:cf:f0:b1:3e:eb:e3:
         4a:6b:0c:51:08:80:8d:ac:b1:eb:da:c6:7e:e6:0b:05:78:62:
         a6:51:35:f6:f2:35:a6:18:05:c2:44:91:1a:c3:21:94:6d:56:
         b8:b4:fd:0a:68:fd:92:47:cd:4e:5d:91:c3:21:59:48:e7:05:
         2c:0d:c0:7a:1d:63:26:60:1d:03:14:30:84:a9:3b:c5:62:d5:
         0b:c3:a3:2a:47:51:b5:bb:fd:88:36:0a:a6:20:81:5c:b1:24:
         fe:25:87:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:24:49 2026 by rpki-client