Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/3/323830343a353930633a3a2f33322d3334203d3e20323638313636.roa
File:                     323830343a353930633a3a2f33322d3334203d3e20323638313636.roa (raw, json)
Hash identifier:          D6TW3LmZg8EKO0IP0vK1SLdHE4B/L8y97A/8r0uNojQ=
Subject key identifier:   06:0D:85:07:D8:B5:5E:ED:35:EB:F0:6A:E2:35:EF:50:09:3C:14:12
Certificate issuer:       /CN=B721195F0B8AC6BF27AB5D8CC141E9315D5225C6
Certificate serial:       2A2BC391029E7B9896C58E009FE92B38DEE6DE18
Authority key identifier: B7:21:19:5F:0B:8A:C6:BF:27:AB:5D:8C:C1:41:E9:31:5D:52:25:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B721195F0B8AC6BF27AB5D8CC141E9315D5225C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/3/323830343a353930633a3a2f33322d3334203d3e20323638313636.roa
Signing time:             Thu 11 Jun 2026 10:14:29 +0000
ROA not before:           Thu 11 Jun 2026 10:09:29 +0000
ROA not after:            Thu 10 Jun 2027 10:14:29 +0000
asID:                     268166
IP address blocks:        2804:590c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/3/B721195F0B8AC6BF27AB5D8CC141E9315D5225C6.crl
                          rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/3/B721195F0B8AC6BF27AB5D8CC141E9315D5225C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B721195F0B8AC6BF27AB5D8CC141E9315D5225C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 17:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2b:c3:91:02:9e:7b:98:96:c5:8e:00:9f:e9:2b:38:de:e6:de:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B721195F0B8AC6BF27AB5D8CC141E9315D5225C6
        Validity
            Not Before: Jun 11 10:09:29 2026 GMT
            Not After : Jun 10 10:14:29 2027 GMT
        Subject: CN=060D8507D8B55EED35EBF06AE235EF50093C1412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:96:d4:96:d7:43:97:01:88:c8:bd:54:82:
                    b9:aa:7d:2d:27:4f:a4:bd:0b:35:f7:cf:42:a4:b9:
                    5a:c5:49:9e:2b:19:a3:68:7c:24:b9:eb:2b:bb:1d:
                    b4:00:c5:42:2a:4d:8f:c5:83:d0:f0:af:d6:00:8c:
                    33:ac:6d:92:3a:55:f0:e4:8f:43:8a:1f:68:19:a0:
                    64:13:65:76:25:d6:59:42:6f:ea:b0:55:3d:d6:b9:
                    fa:de:f9:22:8d:ba:5c:98:9e:13:bf:9d:cc:4b:65:
                    4e:4d:96:9d:f6:51:48:54:3c:ba:d8:dc:c0:3d:35:
                    ed:f7:13:8f:b0:e7:f4:b3:5b:3a:3a:21:1a:fd:a9:
                    1d:f5:ba:26:25:52:f3:ed:81:db:d9:bf:d4:73:cc:
                    0d:79:18:f0:3a:b4:ca:f3:f0:0f:d8:d1:1e:ba:2a:
                    be:70:1b:d7:1c:56:7a:1d:51:0e:86:30:79:1e:98:
                    22:65:2a:c7:d5:f1:83:d3:a8:23:cf:fb:43:43:9e:
                    3f:fe:fd:e1:54:5c:a8:bb:c8:a2:c5:89:34:38:f6:
                    10:03:29:43:88:b5:97:7d:d6:56:ba:cb:3a:a3:06:
                    20:43:39:f3:b2:30:56:ad:53:d4:16:16:01:85:71:
                    57:ff:8f:26:78:ae:4e:64:50:5d:87:22:83:28:5e:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0D:85:07:D8:B5:5E:ED:35:EB:F0:6A:E2:35:EF:50:09:3C:14:12
            X509v3 Authority Key Identifier:
                keyid:B7:21:19:5F:0B:8A:C6:BF:27:AB:5D:8C:C1:41:E9:31:5D:52:25:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/3/B721195F0B8AC6BF27AB5D8CC141E9315D5225C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B721195F0B8AC6BF27AB5D8CC141E9315D5225C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/3/323830343a353930633a3a2f33322d3334203d3e20323638313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:590c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:c5:7f:6f:f0:42:4b:ea:5a:72:52:21:65:af:8f:a2:30:17:
         c7:a6:73:89:bf:84:89:46:66:a9:27:ab:ee:eb:02:a0:e6:82:
         b1:cb:52:a7:d1:e2:81:02:de:7c:d2:b3:2f:23:6a:4a:6e:c3:
         12:b8:0b:6f:3a:44:60:18:9b:2b:cb:05:2d:4c:b5:1c:d7:f1:
         95:1a:6c:bd:aa:3f:fb:12:01:de:b1:68:38:b2:8f:c2:b0:59:
         2c:fd:e4:76:53:b4:38:16:a1:0e:da:c2:b6:42:bf:5c:d5:4e:
         25:96:cd:5d:ec:c4:28:95:61:04:70:c2:07:ba:a6:b8:52:a1:
         7c:0b:44:01:cb:b8:d6:f7:74:d3:b6:d8:ee:2c:76:d7:7e:a2:
         20:de:37:39:cd:95:5a:5b:0e:69:60:8f:dc:10:32:de:c5:03:
         3c:c5:8c:bd:2e:90:23:af:cc:16:95:71:a5:6b:cf:92:40:e7:
         26:bd:b5:04:61:fa:d1:95:1b:96:ea:2d:93:ee:cd:cd:74:2e:
         d5:87:9b:03:9d:19:6c:76:d6:5e:fa:1e:44:3e:e3:da:00:be:
         eb:fb:f4:15:a0:90:cb:5f:e3:14:dd:fb:a1:ff:d0:52:18:6e:
         0b:5f:b1:be:54:47:eb:35:07:78:23:8a:27:38:a6:99:4d:d0:
         aa:06:ba:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:47:33 2026 by rpki-client