Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a323030303a3a2f33352d3335203d3e20323639353734.roa
File:                     323830343a363661383a323030303a3a2f33352d3335203d3e20323639353734.roa (raw, json)
Hash identifier:          8rRPm5bmGkVbFMKxCwZ1sfTI3pqYji11CBUbRNHqNNM=
Subject key identifier:   B8:8A:ED:09:EA:74:C1:A0:83:BD:66:06:5C:42:6B:A9:A2:DE:CF:77
Certificate issuer:       /CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
Certificate serial:       627E7A307880E7280E55D0E807BC82DEBE181AEE
Authority key identifier: 06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a323030303a3a2f33352d3335203d3e20323639353734.roa
Signing time:             Sat 11 Apr 2026 15:34:32 +0000
ROA not before:           Sat 11 Apr 2026 15:29:32 +0000
ROA not after:            Sat 10 Apr 2027 15:34:32 +0000
asID:                     269574
IP address blocks:        2804:66a8:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl
                          rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 11:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7e:7a:30:78:80:e7:28:0e:55:d0:e8:07:bc:82:de:be:18:1a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
        Validity
            Not Before: Apr 11 15:29:32 2026 GMT
            Not After : Apr 10 15:34:32 2027 GMT
        Subject: CN=B88AED09EA74C1A083BD66065C426BA9A2DECF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:f8:cf:d5:a8:22:53:20:ff:ea:56:fd:d6:
                    48:c3:50:e0:88:67:57:9e:07:cd:f4:d7:26:4f:71:
                    6e:98:87:05:65:ca:5b:28:91:1f:50:2b:1b:ef:a3:
                    3f:cc:c7:ed:ce:a9:8d:3c:a9:f9:98:5a:01:78:a4:
                    e9:f8:38:04:84:fe:61:c6:10:b0:81:ad:c5:50:cd:
                    77:96:d2:b1:cb:a3:c9:46:bd:f2:10:5c:ed:13:d9:
                    25:6a:16:33:72:2b:bf:65:d6:84:cf:ab:04:64:f3:
                    ff:e9:d4:c7:38:ba:57:9d:47:ab:a7:a3:1e:30:e7:
                    7e:2f:aa:0c:6f:28:d2:f6:77:0b:89:43:5e:74:69:
                    14:e3:53:e9:ac:f8:d7:b5:62:18:9f:d2:b4:e1:ee:
                    c9:4d:20:38:60:eb:73:74:73:e9:e6:0c:0b:8e:2d:
                    f6:95:cf:47:81:a6:5b:ec:03:ee:63:9c:95:55:fd:
                    dc:04:31:44:34:5d:a8:d5:4d:b6:a7:01:23:08:29:
                    03:d5:42:0f:98:bb:b8:41:30:45:38:72:50:3c:cb:
                    44:7d:14:c6:21:7f:3e:08:6b:a8:ea:bb:f0:76:f9:
                    10:86:c0:bd:4a:dd:e9:e5:a3:3a:2a:19:5e:ca:e0:
                    b7:50:79:87:d8:67:e7:7f:87:8c:e6:13:ec:5d:90:
                    dd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8A:ED:09:EA:74:C1:A0:83:BD:66:06:5C:42:6B:A9:A2:DE:CF:77
            X509v3 Authority Key Identifier:
                keyid:06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a323030303a3a2f33352d3335203d3e20323639353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66a8:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         50:75:70:96:bd:36:13:3e:77:e7:0d:e3:78:16:c9:e0:11:fc:
         ac:62:23:7a:8e:fa:23:47:cf:a1:04:a5:1a:28:b1:02:a6:a4:
         fc:6f:09:11:3b:95:fd:10:80:53:44:d6:6e:60:8d:47:b6:30:
         fa:d4:0b:0f:bc:ad:5e:a3:22:6e:80:63:90:d2:f7:dc:a3:04:
         9b:70:39:fd:ee:50:0c:0c:0e:37:02:4f:1a:95:0a:ed:93:eb:
         33:6f:db:ed:cc:5c:d0:b4:73:78:da:d8:04:ab:89:63:9c:5a:
         38:98:7f:6f:61:8b:d8:4d:ab:a9:7c:3d:f2:f1:23:0a:cb:80:
         f2:d2:00:22:68:7e:c3:9f:b4:df:f6:52:d8:03:32:1c:56:a7:
         38:b0:1a:48:b7:63:17:25:b7:ad:d4:8c:15:d3:0a:ac:30:b2:
         fc:79:a2:5b:fb:ec:62:3a:b4:c3:76:8d:1e:22:09:b1:ea:7d:
         6d:77:d5:70:b0:51:f0:90:ee:84:80:85:29:d2:51:65:38:53:
         3a:c4:0d:8a:82:12:eb:14:83:30:d8:b1:7f:c9:9e:8c:0f:5f:
         60:12:83:58:bf:bf:76:e1:19:2d:ad:f5:68:27:7c:20:d9:d7:
         85:c0:4f:bb:5a:e0:09:81:62:97:0f:99:09:03:40:28:08:4b:
         bd:15:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 01:59:00 2026 by rpki-client