Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33322d3332203d3e20323634323933.roa
File:                     323830343a323561383a3a2f33322d3332203d3e20323634323933.roa (raw, json)
Hash identifier:          F28HR8AF88geKV4HXsQK+wuhC6zXqYpKQeWYCeE9J24=
Subject key identifier:   78:96:72:82:ED:6C:B7:14:14:28:DA:B3:86:A9:6C:2A:BC:CD:6F:D8
Certificate issuer:       /CN=F10026B57CA4D9F259FA4AE52692B1EA34B0897E
Certificate serial:       7FB4A94C1F26E52703E202FA478EB7DEE966A458
Authority key identifier: F1:00:26:B5:7C:A4:D9:F2:59:FA:4A:E5:26:92:B1:EA:34:B0:89:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33322d3332203d3e20323634323933.roa
Signing time:             Mon 06 Apr 2026 19:18:48 +0000
ROA not before:           Mon 06 Apr 2026 19:13:48 +0000
ROA not after:            Mon 05 Apr 2027 19:18:48 +0000
asID:                     264293
IP address blocks:        2804:25a8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.crl
                          rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 09:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b4:a9:4c:1f:26:e5:27:03:e2:02:fa:47:8e:b7:de:e9:66:a4:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F10026B57CA4D9F259FA4AE52692B1EA34B0897E
        Validity
            Not Before: Apr  6 19:13:48 2026 GMT
            Not After : Apr  5 19:18:48 2027 GMT
        Subject: CN=78967282ED6CB7141428DAB386A96C2ABCCD6FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:81:92:5c:31:61:5f:ff:98:91:6f:e8:17:
                    fb:98:28:f3:b0:04:7c:b1:ea:a5:35:d3:51:83:ea:
                    6a:fe:98:e3:0d:d1:20:b6:8e:8b:77:dc:a4:ba:45:
                    2a:c6:ff:31:df:d8:f0:2e:84:81:e0:89:ee:d4:84:
                    81:ed:c0:30:6c:82:d8:00:12:6d:2f:66:77:0b:65:
                    e7:9f:e5:04:42:49:cc:7f:00:c6:3c:cb:e4:6d:fb:
                    31:a1:a5:03:33:09:c5:31:16:1c:2a:d5:b1:43:e7:
                    b2:e7:48:7c:62:c2:9f:00:55:37:a4:a0:8e:ff:c8:
                    40:30:88:16:ac:18:85:f3:05:45:62:63:7d:f7:a7:
                    f5:54:39:ed:b4:fa:62:15:af:f2:f8:75:1a:34:93:
                    de:4c:9c:2d:1d:63:53:10:83:bb:0f:e7:41:22:00:
                    24:d8:be:77:66:ff:1e:68:4f:5e:20:56:67:b2:f1:
                    dc:be:b3:f9:29:d4:79:f7:6f:c8:2c:7e:9e:b7:b0:
                    11:6a:57:b0:a3:26:ec:a7:75:b5:8e:6a:0c:ce:82:
                    3a:59:d7:4c:d9:c8:24:16:0c:d0:fd:88:76:c6:ee:
                    2a:94:b9:ee:36:a6:9a:7f:8a:6b:ad:60:2a:76:49:
                    45:f1:00:d7:21:1e:d4:6d:1b:d4:7b:d0:99:0c:8f:
                    11:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:96:72:82:ED:6C:B7:14:14:28:DA:B3:86:A9:6C:2A:BC:CD:6F:D8
            X509v3 Authority Key Identifier:
                keyid:F1:00:26:B5:7C:A4:D9:F2:59:FA:4A:E5:26:92:B1:EA:34:B0:89:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33322d3332203d3e20323634323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:77:77:9e:b2:9d:d4:6c:95:b5:5c:cc:6d:b5:6f:a8:bc:bf:
         bb:d2:52:40:67:cd:af:48:3a:61:87:bd:7e:48:57:56:95:92:
         8b:56:34:67:c1:aa:a5:68:86:9c:07:09:0a:c2:9b:19:2b:8f:
         5c:9a:83:e7:cf:ee:5b:07:1e:69:b9:3d:69:e3:29:6f:49:85:
         91:4b:22:3d:fd:3a:e3:7a:20:94:4a:c7:0e:de:29:d3:1d:37:
         95:74:89:10:90:02:16:51:ec:c4:94:69:41:fe:9b:c2:8f:f4:
         63:3d:12:82:28:b9:ac:35:ef:f8:b0:c8:18:ec:d1:44:75:a8:
         6f:19:00:1d:23:9c:40:b3:ce:79:2c:8c:14:36:e1:1b:27:55:
         35:48:b3:cd:bf:f2:c7:7e:78:b5:87:e7:13:7f:a6:1e:66:ff:
         68:17:5a:a8:b8:0a:a5:72:ae:09:18:09:7b:22:c4:d0:d6:14:
         d2:e4:21:81:cb:55:5f:33:36:df:19:16:48:8e:b0:da:3d:bc:
         ec:45:f0:77:13:48:c3:e2:3a:0e:90:40:3e:ac:08:b3:e6:e2:
         a6:c0:ba:a0:44:6c:35:b3:d8:40:1b:74:23:1f:66:be:43:28:
         5c:dc:88:c7:78:a3:7f:c0:39:91:db:5f:a8:8e:06:46:2f:54:
         02:ad:e6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:27:59 2026 by rpki-client