Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a383030303a3a2f33352d3335203d3e20323639353734.roa
File:                     323830343a363661383a383030303a3a2f33352d3335203d3e20323639353734.roa (raw, json)
Hash identifier:          8L6snKnPTz09k8yri5Vf+FHshEWPukzW1/iBdR96Qus=
Subject key identifier:   2F:3E:0D:39:91:CB:97:3F:14:A6:F0:58:F3:D5:4C:A1:01:1C:AC:3A
Certificate issuer:       /CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
Certificate serial:       4D1690FB4541FD81164917749B375CDBD7BC70B4
Authority key identifier: 06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a383030303a3a2f33352d3335203d3e20323639353734.roa
Signing time:             Sat 11 Apr 2026 15:34:33 +0000
ROA not before:           Sat 11 Apr 2026 15:29:33 +0000
ROA not after:            Sat 10 Apr 2027 15:34:33 +0000
asID:                     269574
IP address blocks:        2804:66a8:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl
                          rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 11:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:16:90:fb:45:41:fd:81:16:49:17:74:9b:37:5c:db:d7:bc:70:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
        Validity
            Not Before: Apr 11 15:29:33 2026 GMT
            Not After : Apr 10 15:34:33 2027 GMT
        Subject: CN=2F3E0D3991CB973F14A6F058F3D54CA1011CAC3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3a:07:85:b6:21:32:a9:28:39:24:db:60:e9:
                    7f:30:aa:43:2e:d5:84:bf:c4:b9:02:a3:19:99:be:
                    90:70:a7:e0:f1:94:23:52:2c:aa:6f:6e:df:c1:c7:
                    2a:9f:29:73:86:9c:7a:00:5b:48:5f:98:22:24:22:
                    da:27:b0:56:f8:d9:4d:91:9a:44:80:16:83:96:18:
                    1e:5b:92:9b:99:3c:0f:e0:03:89:fa:29:0b:19:5a:
                    97:0e:3f:9c:b5:5a:4b:71:64:ae:ef:17:3e:fe:a9:
                    b1:03:23:bf:b2:3a:72:2a:52:d7:d8:82:30:1f:78:
                    5b:b9:78:ee:e8:99:f6:a5:5d:6c:9c:40:11:92:66:
                    1d:c1:a6:eb:a4:3f:51:f3:85:35:b9:94:65:87:13:
                    1d:3b:f0:51:8f:a8:3c:46:b1:35:71:98:67:db:0d:
                    a3:16:10:af:f4:f9:60:ab:bc:74:f0:89:29:6c:2f:
                    5e:d7:95:da:5d:a1:87:f6:ba:9f:9b:6a:1d:28:42:
                    00:43:81:d7:da:2a:8d:f3:55:64:a2:07:c5:74:04:
                    ec:08:1c:12:e7:df:7e:d8:ed:e1:5b:07:4e:10:9c:
                    6b:70:b9:a3:f5:22:92:08:d8:40:8e:cd:ba:c5:09:
                    3b:aa:23:34:b1:12:86:08:94:6a:e6:ec:ff:f0:e7:
                    e6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3E:0D:39:91:CB:97:3F:14:A6:F0:58:F3:D5:4C:A1:01:1C:AC:3A
            X509v3 Authority Key Identifier:
                keyid:06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a383030303a3a2f33352d3335203d3e20323639353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66a8:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         19:c1:50:94:ed:9b:47:47:cc:ab:20:19:30:c9:84:63:27:d9:
         da:9e:5b:c9:83:3e:43:9d:78:35:f0:f7:21:e8:5e:c8:a7:20:
         4e:e3:0d:f4:fc:15:38:43:73:83:3a:d9:06:fa:c9:e2:ea:d6:
         9a:be:6c:99:3d:f5:01:7b:37:68:1d:d2:f3:4b:95:71:d4:8c:
         41:ad:75:5a:a9:75:03:d4:be:ee:a6:5e:01:c6:83:26:82:f7:
         06:dc:6f:75:d9:d2:50:1a:2e:1b:e8:2b:1f:b9:3b:26:c4:f1:
         b6:ad:77:20:01:9d:bf:77:70:67:4b:22:69:0c:59:f3:3b:3a:
         52:98:cb:01:8f:59:ab:ae:d1:1f:58:8d:0d:2a:5b:72:99:4c:
         8d:8a:f6:b2:9e:1d:dd:40:23:ae:fa:8e:4a:89:c2:54:09:c2:
         96:ed:3b:68:43:b4:93:38:7e:39:cb:a4:bc:e0:18:0a:e4:2e:
         1c:40:cf:a7:40:35:6a:ff:d0:35:b4:3d:cc:c3:39:23:8e:de:
         7e:52:73:05:f7:9d:93:4b:9a:53:65:6f:80:7f:e3:f8:74:ed:
         3f:ce:68:4e:7e:89:60:60:13:a3:8b:ba:ac:68:06:3e:14:c0:
         b6:18:5c:92:5b:95:31:01:a2:ae:7a:a4:7d:70:a7:0c:e3:04:
         f7:3f:de:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 02:04:55 2026 by rpki-client