Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33332d3333203d3e20323634323933.roa
File:                     323830343a323561383a3a2f33332d3333203d3e20323634323933.roa (raw, json)
Hash identifier:          5LvpAMgE4Y4k0cjCgnmgXdD8j40CLZXH+eo4oWOtzNk=
Subject key identifier:   F2:21:08:6D:C6:B3:B3:50:B0:95:5F:D1:28:8F:9D:4F:B6:80:87:BC
Certificate issuer:       /CN=F10026B57CA4D9F259FA4AE52692B1EA34B0897E
Certificate serial:       1FC30AF47AF32513F383EFAF91B3481E01F5D7DF
Authority key identifier: F1:00:26:B5:7C:A4:D9:F2:59:FA:4A:E5:26:92:B1:EA:34:B0:89:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33332d3333203d3e20323634323933.roa
Signing time:             Mon 06 Apr 2026 19:18:48 +0000
ROA not before:           Mon 06 Apr 2026 19:13:48 +0000
ROA not after:            Mon 05 Apr 2027 19:18:48 +0000
asID:                     264293
IP address blocks:        2804:25a8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.crl
                          rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 09:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c3:0a:f4:7a:f3:25:13:f3:83:ef:af:91:b3:48:1e:01:f5:d7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F10026B57CA4D9F259FA4AE52692B1EA34B0897E
        Validity
            Not Before: Apr  6 19:13:48 2026 GMT
            Not After : Apr  5 19:18:48 2027 GMT
        Subject: CN=F221086DC6B3B350B0955FD1288F9D4FB68087BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:63:06:f9:fc:a7:ac:11:bd:00:a9:ac:a2:
                    7c:cf:cf:38:5f:29:04:bd:dd:13:04:e1:8e:f1:fd:
                    b2:a7:8d:11:0c:2a:d1:d0:77:dc:c0:eb:1e:1a:e8:
                    2a:dd:02:89:be:07:65:7d:63:89:bd:79:b9:f5:23:
                    69:97:3f:27:ec:84:e5:78:fe:72:df:5f:dc:8f:53:
                    98:ae:ec:9d:0f:29:0d:8d:bd:fc:59:00:12:e8:97:
                    8e:35:64:6e:ce:c3:99:3c:b9:d9:ed:00:2f:6b:8c:
                    e3:c8:27:75:86:66:70:ba:3f:b7:4f:e7:83:2c:42:
                    7e:c4:e4:b3:21:59:8f:d9:c1:9a:4a:01:8f:94:55:
                    84:84:b1:44:9c:66:b2:0e:d5:7e:20:41:fb:3f:9f:
                    dd:b3:87:1f:bf:e2:dc:f2:fb:fd:72:7a:59:9a:69:
                    d5:8e:25:6a:2c:7c:d1:81:f9:aa:8a:fc:6b:48:e9:
                    fe:a7:6c:a6:28:38:f2:cd:61:2b:92:a3:a2:63:64:
                    3f:3a:cc:a2:db:a5:c4:44:4e:ae:fc:14:4e:44:5d:
                    92:25:f0:c1:4e:0f:f1:e9:ad:e5:c1:19:d9:d6:aa:
                    cd:3e:d2:32:79:ed:63:d6:72:84:95:e3:63:3a:52:
                    ac:61:ff:69:ec:49:10:98:89:04:b2:a4:9e:eb:5f:
                    af:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:21:08:6D:C6:B3:B3:50:B0:95:5F:D1:28:8F:9D:4F:B6:80:87:BC
            X509v3 Authority Key Identifier:
                keyid:F1:00:26:B5:7C:A4:D9:F2:59:FA:4A:E5:26:92:B1:EA:34:B0:89:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10026B57CA4D9F259FA4AE52692B1EA34B0897E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33332d3333203d3e20323634323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25a8::/33

    Signature Algorithm: sha256WithRSAEncryption
         84:e9:24:6f:6b:10:00:62:29:59:1b:94:ba:15:3d:53:4b:4a:
         84:6b:ac:6c:ed:04:9d:42:4a:01:ff:ca:d5:c8:5c:7a:39:39:
         e6:cd:6f:95:89:9b:1b:a0:dc:a7:0a:2d:6e:2d:db:80:77:d0:
         bf:39:1f:dc:81:54:a5:ae:a9:b8:0f:7c:bb:bc:10:fc:98:65:
         b4:54:d4:3c:63:86:56:16:fd:61:2a:02:fc:23:12:83:03:8a:
         b7:f1:93:0d:9e:ed:1f:8e:97:89:ea:6e:42:55:10:0a:b1:10:
         21:ee:81:87:5a:2f:10:53:85:42:ac:cc:f8:3d:d0:af:5b:3a:
         65:6f:e0:a8:01:f8:98:6b:61:08:1c:6a:ef:f5:bd:56:9d:b8:
         16:25:6b:b9:80:d3:c5:3d:e5:5a:53:da:20:cb:15:49:a5:e9:
         ba:a9:e4:e7:0e:15:6f:3b:c1:30:a1:52:46:c7:88:82:6e:fd:
         0b:31:04:4c:c9:a7:7b:f5:bf:ab:0c:65:64:4c:3a:71:75:da:
         39:00:c7:ae:50:b8:cd:a1:ac:1c:45:dd:39:d8:57:52:2f:52:
         5a:e3:c7:48:d5:82:7e:28:12:4b:73:ea:91:50:12:dc:b0:01:
         d8:96:e4:07:aa:bc:c8:ff:1d:0e:15:f1:8a:8e:54:84:4a:57:
         76:a4:1f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 09:32:33 2026 by rpki-client