Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a613030303a3a2f33352d3335203d3e20323639353734.roa
File:                     323830343a363661383a613030303a3a2f33352d3335203d3e20323639353734.roa (raw, json)
Hash identifier:          riAuNSUom1IqJ2dy+k7wkTBu20iAsi51cRdGAiIwhxw=
Subject key identifier:   D2:07:E8:A4:06:A2:5C:B7:14:C8:5C:5D:2A:F1:64:07:FE:44:EC:65
Certificate issuer:       /CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
Certificate serial:       62076475F04549AE85723A7F200DE0887A607DAE
Authority key identifier: 06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a613030303a3a2f33352d3335203d3e20323639353734.roa
Signing time:             Sat 11 Apr 2026 15:34:30 +0000
ROA not before:           Sat 11 Apr 2026 15:29:30 +0000
ROA not after:            Sat 10 Apr 2027 15:34:30 +0000
asID:                     269574
IP address blocks:        2804:66a8:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl
                          rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 Apr 2026 11:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:07:64:75:f0:45:49:ae:85:72:3a:7f:20:0d:e0:88:7a:60:7d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061D03C44232FDCCB0116EF465F68ABDA94D2858
        Validity
            Not Before: Apr 11 15:29:30 2026 GMT
            Not After : Apr 10 15:34:30 2027 GMT
        Subject: CN=D207E8A406A25CB714C85C5D2AF16407FE44EC65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:16:0e:73:f9:6e:a5:42:ed:85:f1:a6:bd:41:
                    92:b7:d3:b1:a3:4c:d1:97:0e:87:ee:74:61:e6:f9:
                    8d:79:8c:ab:89:ec:d2:7f:e0:06:cc:d5:12:61:17:
                    70:f1:da:76:1c:77:ef:9a:92:4b:c1:c8:05:e8:fc:
                    cb:1e:c3:45:58:89:1b:04:b4:e5:fe:c8:e5:5a:61:
                    0a:66:2b:9f:b4:f2:59:ea:f7:c4:8a:86:6c:1a:7e:
                    ed:15:6d:bc:11:08:ee:9d:d1:14:c4:a2:a2:e5:cd:
                    a7:e0:2e:d9:5c:a0:c4:0b:fe:4f:1b:3e:26:78:55:
                    69:3e:c2:f7:97:45:a4:12:d5:78:92:8f:8b:3d:a6:
                    e3:b5:36:01:8f:bf:9d:72:2c:58:fb:7c:ea:52:6c:
                    68:36:2c:9e:b9:5c:a5:91:88:1e:e0:c1:0c:95:08:
                    96:4d:06:2a:2e:8b:a7:f5:1d:48:01:7a:68:75:dc:
                    fd:1d:21:e2:3b:3a:07:f6:56:59:3b:ee:7a:90:48:
                    4d:f9:cd:4b:a7:2c:84:29:be:d1:51:c3:ff:b4:bd:
                    00:be:a3:4d:87:12:ce:2c:9c:0c:9c:6a:11:5e:cc:
                    a7:85:8f:66:b7:c2:33:03:b6:79:d0:75:06:02:5f:
                    c8:be:d6:84:5d:85:da:73:f6:26:1d:40:04:05:90:
                    07:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:07:E8:A4:06:A2:5C:B7:14:C8:5C:5D:2A:F1:64:07:FE:44:EC:65
            X509v3 Authority Key Identifier:
                keyid:06:1D:03:C4:42:32:FD:CC:B0:11:6E:F4:65:F6:8A:BD:A9:4D:28:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/061D03C44232FDCCB0116EF465F68ABDA94D2858.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061D03C44232FDCCB0116EF465F68ABDA94D2858.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/323830343a363661383a613030303a3a2f33352d3335203d3e20323639353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66a8:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         b9:8b:be:c3:7f:85:48:ad:dd:b2:69:23:fd:fc:51:69:4f:0b:
         a9:42:e5:9d:3a:a7:cc:f5:07:17:07:2c:ec:d0:47:1c:ae:19:
         3b:9c:10:d8:e7:20:ed:e4:7e:9a:47:51:17:7f:95:c2:1a:1c:
         e5:72:f5:9c:8e:a8:91:5f:9f:5d:76:da:80:e5:7f:08:19:08:
         ce:51:9c:db:0f:ab:d1:df:b7:b0:77:09:bb:01:ef:0c:bf:ec:
         68:07:57:7e:ca:0f:13:72:00:48:27:6e:d1:1d:f2:77:4b:77:
         01:9a:14:d1:6c:da:2c:0b:31:8d:66:ae:86:c4:0e:71:90:a4:
         f8:9d:c5:2d:7d:43:3d:ec:32:67:b1:c4:da:0a:8a:90:36:04:
         44:5d:3d:1e:3f:6e:04:a3:c0:13:f4:36:bd:17:8c:6d:a6:e5:
         24:ee:28:26:b0:33:d3:59:69:dc:22:e1:56:71:38:42:4a:16:
         ff:0d:a3:3a:a4:b8:e6:ba:8f:54:8e:ff:16:64:f8:2e:3e:0a:
         a3:df:3c:6c:0b:b1:71:15:ae:5b:1b:33:d2:c7:ef:ba:04:35:
         9f:58:66:29:f8:f1:62:1a:7f:60:1e:cd:bf:ab:53:eb:55:26:
         2e:9d:da:47:9d:5f:54:8b:26:d4:05:38:09:c5:6d:7a:06:bb:
         b6:52:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 02:04:55 2026 by rpki-client