Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a3a2f33332d3333203d3e20323639353734.roa
File:                     323830343a363661383a3a2f33332d3333203d3e20323639353734.roa (raw, json)
Hash identifier:          jeiqGE7CdTd0OJDuEia9kkM3cbWcN2RhtXhdhcEM5ww=
Subject key identifier:   B5:5C:0D:32:67:A6:3E:E3:2A:DF:67:39:F7:38:E1:4F:2F:3B:18:3A
Certificate issuer:       /CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
Certificate serial:       7386209B6FD514894FA95BA3CB1348F3AC8E338F
Authority key identifier: 06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a3a2f33332d3333203d3e20323639353734.roa
Signing time:             Sat 11 Apr 2026 15:34:29 +0000
ROA not before:           Sat 11 Apr 2026 15:29:29 +0000
ROA not after:            Sat 10 Apr 2027 15:34:29 +0000
asID:                     269574
IP address blocks:        2804:66a8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl
                          rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 11:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:86:20:9b:6f:d5:14:89:4f:a9:5b:a3:cb:13:48:f3:ac:8e:33:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
        Validity
            Not Before: Apr 11 15:29:29 2026 GMT
            Not After : Apr 10 15:34:29 2027 GMT
        Subject: CN=B55C0D3267A63EE32ADF6739F738E14F2F3B183A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:47:c7:47:66:6f:81:41:0d:66:be:aa:fc:
                    95:87:76:cb:0e:90:02:cb:2f:55:19:08:05:f7:4c:
                    dc:52:f8:75:e2:53:d6:54:b2:cd:2c:59:37:b0:b1:
                    5f:d6:2e:6e:7a:69:a3:8a:29:6d:4b:6f:47:57:ca:
                    f0:9a:43:62:00:15:73:37:cb:06:c7:e6:13:36:e0:
                    d8:91:2d:6e:f5:fb:f3:0b:0d:85:41:37:13:7a:da:
                    0d:4a:9e:ec:54:3d:2e:5a:01:51:2d:8f:70:21:a7:
                    67:9c:15:ef:2d:fb:18:25:9b:73:31:87:4f:5d:e3:
                    78:bb:28:c4:49:ee:6f:e9:90:87:f1:a0:45:55:3d:
                    dd:9b:5b:34:0a:33:b7:4b:b6:95:6b:41:cf:76:fa:
                    dc:2d:3b:0d:c9:2b:ca:9f:81:de:e3:b0:3c:70:c3:
                    56:77:b4:81:16:28:20:2f:79:eb:36:dc:c6:f7:14:
                    a9:73:62:26:6c:b2:01:2d:e9:b1:40:b5:3b:0f:40:
                    32:3d:ff:aa:ec:8a:49:d2:e0:27:cf:16:b3:e6:a6:
                    af:48:c9:a8:50:ae:62:6c:ac:3d:75:c2:fa:f7:71:
                    ef:76:86:b6:1d:2d:68:87:e2:57:53:70:61:e4:66:
                    db:90:cb:2e:98:6f:e8:d4:1f:c9:65:0b:cc:cb:fa:
                    46:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5C:0D:32:67:A6:3E:E3:2A:DF:67:39:F7:38:E1:4F:2F:3B:18:3A
            X509v3 Authority Key Identifier:
                keyid:06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a3a2f33332d3333203d3e20323639353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66a8::/33

    Signature Algorithm: sha256WithRSAEncryption
         3f:be:8b:01:cd:b9:78:43:91:d4:ff:19:fe:90:c3:90:5b:dd:
         f2:82:4b:92:0d:2d:6e:16:1e:05:40:19:9c:5f:d9:4a:41:4f:
         55:26:73:0e:76:0d:e2:39:78:b2:9b:a9:a8:ba:13:04:6c:47:
         64:e1:42:f9:e2:17:80:9c:1e:3d:ba:4e:0e:4e:35:71:49:48:
         07:05:dc:84:e6:aa:95:44:e2:17:94:c2:f0:15:27:78:83:76:
         c5:55:53:df:b3:c1:3e:db:15:65:b7:12:ad:1a:df:72:36:33:
         19:b3:38:e9:ac:cf:05:c8:52:68:95:d0:c2:9f:4c:12:fb:f0:
         43:1e:fd:cd:46:b2:b1:8c:ab:77:40:ae:28:d3:d7:40:f3:62:
         17:9d:94:85:b9:1e:54:e1:07:41:fe:e9:10:86:5d:9f:ea:aa:
         c2:0c:09:cd:27:21:81:6a:41:97:40:da:98:a3:d4:60:d4:e4:
         8f:15:15:4f:0d:f9:92:7c:cd:38:50:b5:74:67:35:9d:3c:97:
         30:2d:1f:f9:4d:60:56:1d:ff:7e:11:f7:93:66:ab:b2:f2:fd:
         8a:98:15:f2:6c:d3:e1:88:76:55:43:aa:a9:b0:8f:da:d8:de:
         f3:ae:f3:09:2f:02:73:e7:0f:be:bc:c6:1c:13:d7:b4:57:7f:
         77:6a:2b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 01:59:03 2026 by rpki-client