Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a383030303a3a2f33332d3333203d3e20323639353734.roa
File:                     323830343a363661383a383030303a3a2f33332d3333203d3e20323639353734.roa (raw, json)
Hash identifier:          zpxeqdsF45/9F4J9pyJ2NDhcMSKHN9cpV9NUiMleaHE=
Subject key identifier:   0C:EB:EC:C4:C4:EE:C8:54:6F:0C:78:FD:1E:47:A5:D1:07:F3:C1:AF
Certificate issuer:       /CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
Certificate serial:       026573A562BDBE5774340B8AB8EBA18F75448F80
Authority key identifier: 06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a383030303a3a2f33332d3333203d3e20323639353734.roa
Signing time:             Sat 11 Apr 2026 15:34:28 +0000
ROA not before:           Sat 11 Apr 2026 15:29:28 +0000
ROA not after:            Sat 10 Apr 2027 15:34:28 +0000
asID:                     269574
IP address blocks:        2804:66a8:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl
                          rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 11:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:65:73:a5:62:bd:be:57:74:34:0b:8a:b8:eb:a1:8f:75:44:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
        Validity
            Not Before: Apr 11 15:29:28 2026 GMT
            Not After : Apr 10 15:34:28 2027 GMT
        Subject: CN=0CEBECC4C4EEC8546F0C78FD1E47A5D107F3C1AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:e3:64:58:9e:5f:2f:1f:c6:b1:a3:f5:b3:
                    ea:dc:bb:c0:0b:6f:48:a1:5e:6d:90:5b:f0:67:30:
                    b9:cf:85:a0:16:22:bc:57:05:98:51:8f:c1:93:e4:
                    27:fc:bc:f5:f8:41:01:f2:53:72:4a:b7:38:90:1d:
                    28:d2:09:64:5a:f0:14:a8:4b:8d:a2:df:92:5d:6a:
                    21:24:b0:53:8e:11:42:0c:18:0d:b3:8c:36:15:22:
                    7e:28:51:3e:9d:e7:75:db:d2:b6:26:0a:46:e8:c6:
                    a3:f4:49:5d:97:52:f3:ab:0c:59:75:7d:6c:9b:d0:
                    d2:28:60:14:b6:3c:0d:46:f9:f3:e5:9e:8a:4b:90:
                    97:93:62:40:52:b5:b8:4e:34:4d:35:47:19:87:c2:
                    fd:b7:6f:a0:92:06:33:0e:02:77:65:65:44:56:6f:
                    55:0e:fc:d8:ba:13:4c:c4:7b:a9:c3:30:c6:d2:71:
                    77:2e:e2:75:36:92:e7:da:8b:e5:f4:83:c9:15:3b:
                    14:c1:dd:fc:e3:e4:9d:0a:c3:a7:40:bb:8d:57:7e:
                    78:33:1d:4c:a1:a2:62:c0:80:d3:bf:62:60:1e:34:
                    60:f2:94:44:c8:06:bf:63:c4:9b:93:7b:fd:48:d5:
                    b6:39:77:9d:7e:db:29:ec:61:72:00:1e:ac:3e:49:
                    86:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EB:EC:C4:C4:EE:C8:54:6F:0C:78:FD:1E:47:A5:D1:07:F3:C1:AF
            X509v3 Authority Key Identifier:
                keyid:06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a383030303a3a2f33332d3333203d3e20323639353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66a8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8f:b6:da:ee:21:29:ac:3a:e1:f0:8f:e7:80:90:2a:53:df:d0:
         51:5d:f9:85:0a:e0:4f:35:d3:70:0c:3d:95:13:be:cf:85:8f:
         93:93:82:36:0d:cc:23:6f:53:16:fb:71:c0:09:9c:c2:3e:37:
         b4:00:bd:4b:60:12:c5:6b:d8:de:a8:b3:cd:16:dc:d0:10:c8:
         56:b2:ae:82:11:27:0d:55:f3:3a:6d:df:06:0a:21:04:2a:96:
         8b:e0:b6:f4:ac:fe:aa:a8:47:41:70:a8:d1:4d:56:4e:61:4c:
         a4:1c:35:7d:60:bb:a4:ef:70:9d:44:a5:bd:63:af:07:84:ae:
         17:9a:11:0c:0f:26:ac:57:3b:a7:f2:98:82:e8:55:b6:20:55:
         a1:53:ac:98:e4:22:20:5c:83:94:de:b3:c7:56:54:d6:92:04:
         a1:0e:a0:38:c3:86:9a:93:c9:6d:f7:25:70:91:9e:e0:92:91:
         d7:1a:40:de:0c:8b:10:d0:3e:71:c7:8e:b5:93:e3:46:3d:46:
         4a:58:ee:56:89:78:6d:2a:15:10:d6:14:cc:bd:d5:84:61:f7:
         13:d8:f2:08:4b:a6:bc:2b:40:89:f2:e9:8d:81:58:96:40:c9:
         b8:3c:b3:1f:e1:ba:fd:f6:44:62:ca:f5:ca:bf:49:1e:04:41:
         95:31:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 02:04:51 2026 by rpki-client