Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/323830343a333965383a3a2f33322d3333203d3e203134383638.roa
File:                     323830343a333965383a3a2f33322d3333203d3e203134383638.roa (raw, json)
Hash identifier:          J80vCOdzi6dBLS5ON91cB/g4LvKL6KQlNCHU4w8bnew=
Subject key identifier:   33:9D:EC:7A:0B:56:1E:2A:35:F3:11:E8:1C:68:59:7A:D6:B5:1B:9F
Certificate issuer:       /CN=1BB2349FFA9FD9E14A0EA6DD15A903829B22479C
Certificate serial:       374B50550857B068B4D28A751AFE518CC1E41895
Authority key identifier: 1B:B2:34:9F:FA:9F:D9:E1:4A:0E:A6:DD:15:A9:03:82:9B:22:47:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/323830343a333965383a3a2f33322d3333203d3e203134383638.roa
Signing time:             Mon 25 May 2026 17:44:51 +0000
ROA not before:           Mon 25 May 2026 17:39:51 +0000
ROA not after:            Mon 24 May 2027 17:44:51 +0000
asID:                     14868
IP address blocks:        2804:39e8::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.crl
                          rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4b:50:55:08:57:b0:68:b4:d2:8a:75:1a:fe:51:8c:c1:e4:18:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BB2349FFA9FD9E14A0EA6DD15A903829B22479C
        Validity
            Not Before: May 25 17:39:51 2026 GMT
            Not After : May 24 17:44:51 2027 GMT
        Subject: CN=339DEC7A0B561E2A35F311E81C68597AD6B51B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e7:ef:94:e6:94:aa:70:20:3b:0d:b6:2a:48:
                    cf:47:86:45:3f:fc:ee:35:7f:bf:03:3a:14:63:9f:
                    9d:08:b0:1f:83:8b:5e:c1:77:e1:52:e0:bb:15:3d:
                    30:e3:14:ee:01:8f:aa:84:ca:2d:77:8b:71:22:84:
                    13:2d:2e:90:53:83:78:93:75:78:84:ef:27:b6:e2:
                    48:53:c0:e8:8b:72:b4:99:cf:36:fa:5e:14:83:36:
                    bf:61:b9:bf:ea:90:f6:f2:ef:c4:ed:5a:6b:00:2f:
                    3d:f8:2f:4c:13:3b:3a:ad:2f:c2:88:24:fd:d3:a5:
                    80:96:04:93:14:38:01:3e:51:56:e8:83:45:d2:7d:
                    04:a1:c7:6e:6e:73:3a:d5:63:01:7a:b9:1f:29:03:
                    d6:55:9d:5e:88:81:67:01:ad:13:e8:8b:96:db:72:
                    7c:74:45:d9:5d:97:61:db:0e:e3:80:55:55:56:62:
                    e2:8b:08:f9:9e:9f:6b:88:70:67:e2:94:d6:8e:83:
                    04:de:2b:8b:e5:59:e4:39:d7:00:76:e7:7a:55:d9:
                    8e:77:b0:14:dd:83:e6:40:d7:3f:b2:1b:c1:d5:6d:
                    12:f3:af:7e:77:5e:f1:ef:23:6f:f6:f9:93:fd:c6:
                    7f:5f:a2:0f:75:d6:da:47:f1:f3:ef:14:97:03:c5:
                    0f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9D:EC:7A:0B:56:1E:2A:35:F3:11:E8:1C:68:59:7A:D6:B5:1B:9F
            X509v3 Authority Key Identifier:
                keyid:1B:B2:34:9F:FA:9F:D9:E1:4A:0E:A6:DD:15:A9:03:82:9B:22:47:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/323830343a333965383a3a2f33322d3333203d3e203134383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:2e:83:f6:61:62:5a:af:7b:79:5d:89:38:54:bc:5b:91:80:
         7f:f3:d5:d7:70:ec:68:65:97:d9:ad:19:4e:7a:75:cc:c0:e5:
         d2:b6:03:6e:19:67:00:cf:a4:28:3a:76:3f:94:3e:db:1b:00:
         3d:33:80:05:6e:be:2b:9c:39:8c:08:c9:ad:79:85:da:c7:87:
         58:8d:da:ce:3d:f4:43:9a:ee:9d:f7:3c:d9:ef:10:4b:18:16:
         83:e8:c7:b1:66:72:99:ea:99:e6:77:cf:db:51:4c:74:27:9c:
         e5:18:b3:66:03:28:2e:36:bd:d2:d3:6d:82:ed:69:df:c5:6e:
         8b:9a:a8:ab:77:48:00:e6:dc:98:9d:e1:95:25:e9:01:4f:d8:
         8b:1f:b5:d1:4d:10:cf:f8:02:4c:52:b1:d4:41:55:da:b7:32:
         5c:22:ef:1f:a9:1f:ec:d7:fb:65:d3:96:c6:fc:c2:06:dd:42:
         bc:89:bd:c0:11:04:9c:49:b4:4b:d2:d2:82:42:52:0f:66:c5:
         51:cc:29:40:4f:0b:3b:47:67:fd:d7:a8:59:4e:5b:55:04:df:
         10:36:52:58:65:b6:a9:45:2a:c1:d8:7e:b4:19:92:34:ef:c9:
         90:18:0a:71:ea:42:a9:06:5a:26:64:27:96:d4:6a:1c:9f:94:
         f9:89:ef:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:33:07 2026 by rpki-client