Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a383030303a3a2f33342d3334203d3e20323639353734.roa
File:                     323830343a363661383a383030303a3a2f33342d3334203d3e20323639353734.roa (raw, json)
Hash identifier:          NqEuuJpF2Q+9tr47BJ7zy7kRDXlnLof4AcdPp6OQepU=
Subject key identifier:   4F:7B:CA:95:28:59:44:65:7A:77:40:F7:21:3A:AE:E7:7F:63:24:A4
Certificate issuer:       /CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
Certificate serial:       1B645BBCB53845D1F802FF4F9BC18A7CA5957186
Authority key identifier: 06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a383030303a3a2f33342d3334203d3e20323639353734.roa
Signing time:             Sat 11 Apr 2026 15:34:28 +0000
ROA not before:           Sat 11 Apr 2026 15:29:28 +0000
ROA not after:            Sat 10 Apr 2027 15:34:28 +0000
asID:                     269574
IP address blocks:        2804:66a8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl
                          rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 11:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:64:5b:bc:b5:38:45:d1:f8:02:ff:4f:9b:c1:8a:7c:a5:95:71:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
        Validity
            Not Before: Apr 11 15:29:28 2026 GMT
            Not After : Apr 10 15:34:28 2027 GMT
        Subject: CN=4F7BCA95285944657A7740F7213AAEE77F6324A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:e2:e5:e0:55:9e:ce:c8:93:20:af:93:12:
                    3d:cb:62:c9:16:68:7c:c2:49:35:0d:dc:a2:36:c3:
                    5f:14:c8:d9:f1:46:bc:47:3c:0d:c8:8c:fc:4e:14:
                    24:03:8f:43:5a:0f:db:01:03:5e:34:9e:53:3e:22:
                    ef:b8:7c:c7:c9:3e:48:93:e8:e5:c2:4b:1f:31:00:
                    f6:cc:ec:86:f9:2a:a2:51:95:1e:ef:d8:61:0d:6a:
                    f7:b8:3a:c8:65:89:1e:bd:46:f9:5a:ac:a6:af:53:
                    af:1e:b4:4d:cb:0b:fa:4a:c0:14:c2:30:41:33:ab:
                    cd:0f:36:f9:83:55:fb:bf:67:6c:f8:a8:07:42:24:
                    8c:32:15:98:45:2e:9d:12:13:ad:c0:41:06:2d:ba:
                    e2:7f:bd:26:82:7a:66:8a:de:e9:f3:26:25:63:d2:
                    ec:6b:b8:04:5b:09:6f:f5:6d:f2:b7:d1:a9:a7:0d:
                    6f:c9:f5:9b:88:d1:20:a3:7c:79:61:74:8a:32:32:
                    5f:eb:0d:d0:b1:c6:b4:66:84:6e:9b:b6:29:f7:4c:
                    cb:1e:0c:5d:13:b0:17:82:66:a6:22:ce:79:fa:b0:
                    bd:f3:8e:4c:1a:ca:ae:7b:6f:77:d7:7f:d7:99:17:
                    b6:0f:7e:a7:a2:4b:1d:dd:d6:e4:c3:13:1d:4f:af:
                    b3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7B:CA:95:28:59:44:65:7A:77:40:F7:21:3A:AE:E7:7F:63:24:A4
            X509v3 Authority Key Identifier:
                keyid:06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a383030303a3a2f33342d3334203d3e20323639353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66a8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8a:c5:b7:a2:ab:ed:c3:89:ef:a9:0a:f0:09:62:0d:09:12:f7:
         fa:18:2d:03:15:bc:b1:30:c5:f7:b0:f8:65:bf:fc:02:bc:b3:
         61:46:79:0b:2c:af:8e:6b:6c:de:33:e0:e3:20:cf:f7:4b:bf:
         c1:a8:e4:b7:62:52:ef:86:ff:50:60:9e:ee:06:43:e1:3c:2f:
         02:a2:82:3d:a7:48:2c:e7:3a:0b:8d:e2:fd:18:83:20:b1:a8:
         be:cb:33:89:a1:b1:a9:6d:a9:34:70:08:4c:a5:5b:96:8e:3c:
         1e:60:06:ee:14:ba:f1:26:fc:6d:79:87:9b:bf:12:c7:38:a1:
         b6:bc:28:a7:61:8a:9f:41:7e:9a:cd:d0:04:5e:35:2d:eb:dc:
         e5:01:fa:ff:a5:c0:a2:bf:c9:05:b7:6e:b9:d4:e2:4b:ef:24:
         55:23:84:88:0a:e3:29:ea:7c:7f:51:06:ea:ca:da:75:fd:8d:
         06:7a:1c:b7:73:fe:f0:ed:15:b9:d0:bd:a7:ed:0c:ba:5a:3d:
         b0:6a:67:66:a1:84:8c:c9:03:17:9f:48:46:84:b4:00:69:8d:
         3f:ad:82:40:b9:f5:5f:c7:43:1a:45:67:c6:a5:9f:3b:ca:ff:
         70:33:ef:cc:f7:59:96:75:53:f4:a3:99:e4:5c:94:23:09:71:
         14:3e:8a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 02:04:55 2026 by rpki-client