Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a3a2f33342d3334203d3e20323639353734.roa
File:                     323830343a363661383a3a2f33342d3334203d3e20323639353734.roa (raw, json)
Hash identifier:          PwHEmjZVud4NNspMW1iZ4pdSVP6MDoRwczatI4+NPxM=
Subject key identifier:   14:69:E4:B6:CA:E1:EE:AF:8A:E5:1D:1B:AF:CB:F2:42:D8:14:CA:44
Certificate issuer:       /CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
Certificate serial:       7F367334B9B4B85D41727ABC25CFF830D48DA10F
Authority key identifier: 06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a3a2f33342d3334203d3e20323639353734.roa
Signing time:             Sat 11 Apr 2026 15:34:31 +0000
ROA not before:           Sat 11 Apr 2026 15:29:31 +0000
ROA not after:            Sat 10 Apr 2027 15:34:31 +0000
asID:                     269574
IP address blocks:        2804:66a8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl
                          rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 11:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:36:73:34:b9:b4:b8:5d:41:72:7a:bc:25:cf:f8:30:d4:8d:a1:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
        Validity
            Not Before: Apr 11 15:29:31 2026 GMT
            Not After : Apr 10 15:34:31 2027 GMT
        Subject: CN=1469E4B6CAE1EEAF8AE51D1BAFCBF242D814CA44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4f:bb:0d:3f:5b:59:2d:89:1b:07:73:67:e1:
                    ae:50:aa:e3:d0:da:42:d4:26:ba:18:8c:4d:7e:8e:
                    19:20:35:19:6c:35:ee:33:06:a4:00:84:95:36:b2:
                    16:f1:8d:4f:7a:3e:34:68:d0:34:95:28:a0:f3:26:
                    95:68:6b:f6:d2:2b:64:ad:d4:20:40:28:1d:d8:ad:
                    30:fa:0d:03:db:0f:08:97:40:f3:0e:c2:61:e5:3c:
                    f8:e0:4a:46:f3:30:87:d8:43:5c:b3:fe:a8:78:3d:
                    be:f8:38:3b:a8:fa:c8:7b:70:98:f2:78:e9:d8:6b:
                    99:67:57:7c:19:58:6b:71:c8:22:56:6e:82:10:af:
                    94:3f:5f:60:09:9e:f4:32:43:3f:3b:f5:8c:d5:0b:
                    94:10:18:df:e0:60:13:69:0c:77:18:9f:ba:16:67:
                    73:f8:84:15:29:aa:58:63:90:ca:b0:a3:f5:b6:1f:
                    ee:de:08:0a:7d:73:71:e4:09:7a:b5:58:1c:52:37:
                    16:c4:3a:0e:46:8d:f3:9f:06:ed:55:55:49:e2:d2:
                    48:87:b6:91:4b:6b:89:79:13:a3:67:4d:9a:94:d9:
                    65:c4:b1:7a:3a:58:38:47:ba:68:03:1a:2a:ad:59:
                    e8:35:4d:b8:0c:52:6c:41:ba:34:1d:f5:c2:08:dd:
                    ed:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:69:E4:B6:CA:E1:EE:AF:8A:E5:1D:1B:AF:CB:F2:42:D8:14:CA:44
            X509v3 Authority Key Identifier:
                keyid:06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a3a2f33342d3334203d3e20323639353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66a8::/34

    Signature Algorithm: sha256WithRSAEncryption
         58:ca:d1:6f:81:fe:57:1d:a7:a3:32:59:16:9e:c0:f2:ab:59:
         c6:77:cb:78:b6:01:94:46:ef:ec:e6:69:15:4c:3c:8c:1f:89:
         1a:de:97:91:8e:58:09:c8:d2:d0:b4:a5:14:16:43:ff:b6:b7:
         50:93:15:a9:59:9e:12:a8:e8:58:27:d7:bb:25:86:01:75:54:
         af:92:bb:75:ce:1e:2d:16:c0:42:6c:29:04:3b:30:cc:9f:38:
         f8:24:2b:e6:de:88:90:01:c5:72:1c:ab:a2:d8:24:64:3f:09:
         20:00:ae:5b:75:ec:bf:41:c0:fb:67:f5:60:01:42:fa:49:14:
         f1:97:e8:c0:d1:bf:d2:dd:39:f6:69:0d:c4:03:f7:ce:8f:1e:
         06:72:b3:4a:81:ff:04:4c:76:3e:fb:7b:f7:46:c4:7a:5a:1f:
         12:b2:2e:ce:57:1e:95:8d:f3:28:ba:b5:34:3d:ad:74:e2:56:
         8a:94:db:40:68:8e:9e:ca:e5:53:02:f0:72:4a:67:a8:44:df:
         87:5c:85:b7:81:e2:58:d9:8d:ae:cf:ec:9a:d1:9f:51:51:a0:
         f5:e3:62:6f:12:01:1d:85:91:eb:84:23:59:fb:ad:44:7b:b8:
         ca:0f:16:6b:72:69:b6:a9:69:14:f6:09:50:3c:59:e5:c7:74:
         a6:07:ad:12
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfzZzNLm0uF1Bcnq8Jc/4MNSNoQ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxRDAzQzQ0MjMyRkRDQ0IwMTE2RUY0NjVGNjhBQkRB
OTREMjg1ODAeFw0yNjA0MTExNTI5MzFaFw0yNzA0MTAxNTM0MzFaMDMxMTAvBgNV
BAMTKDE0NjlFNEI2Q0FFMUVFQUY4QUU1MUQxQkFGQ0JGMjQyRDgxNENBNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmT7sNP1tZLYkbB3Nn4a5QquPQ
2kLUJroYjE1+jhkgNRlsNe4zBqQAhJU2shbxjU96PjRo0DSVKKDzJpVoa/bSK2St
1CBAKB3YrTD6DQPbDwiXQPMOwmHlPPjgSkbzMIfYQ1yz/qh4Pb74ODuo+sh7cJjy
eOnYa5lnV3wZWGtxyCJWboIQr5Q/X2AJnvQyQz879YzVC5QQGN/gYBNpDHcYn7oW
Z3P4hBUpqlhjkMqwo/W2H+7eCAp9c3HkCXq1WBxSNxbEOg5GjfOfBu1VVUni0kiH
tpFLa4l5E6NnTZqU2WXEsXo6WDhHumgDGiqtWeg1TbgMUmxBujQd9cII3e3bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFGnktsrh7q+K5R0br8vyQtgUykQwHwYDVR0j
BBgwFoAUBh0DxEIy/cywEW70ZfaKvalNKFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2dCcU5BeFh4bWFDbk03ZVA2ekd6ZUMxRGp3NDF6YThUTko2SDU1ZlI0
QlAvMC8wNjFEMDNDNDQyMzJGRENDQjAxMTZFRjQ2NUY2OEFCREE5NEQyODU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2MUQwM0M0NDIzMkZEQ0NC
MDExNkVGNDY1RjY4QUJEQTk0RDI4NTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dnQnFOQXhYeG1hQ25NN2VQNnpHemVDMURqdzQxemE4VE5KNkg1NWZSNEJQLzAv
MzIzODMwMzQzYTM2MzY2MTM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM5
MzUzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARmqAAwDQYJKoZIhvcNAQELBQADggEBAFjK0W+B
/lcdp6MyWRaewPKrWcZ3y3i2AZRG7+zmaRVMPIwfiRrel5GOWAnI0tC0pRQWQ/+2
t1CTFalZnhKo6Fgn17slhgF1VK+Su3XOHi0WwEJsKQQ7MMyfOPgkK+beiJABxXIc
q6LYJGQ/CSAArlt17L9BwPtn9WABQvpJFPGX6MDRv9LdOfZpDcQD986PHgZys0qB
/wRMdj77e/dGxHpaHxKyLs5XHpWN8yi6tTQ9rXTiVoqU20Bojp7K5VMC8HJKZ6hE
34dchbeB4ljZja7P7JrRn1FRoPXjYm8SAR2FkeuEI1n7rUR7uMoPFmtyabapaRT2
CVA8WeXHdKYHrRI=
-----END CERTIFICATE-----
Generated at Mon Apr 13 01:59:04 2026 by rpki-client