Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/323830343a313934303a3a2f33322d3332203d3e203631373832.roa
File:                     323830343a313934303a3a2f33322d3332203d3e203631373832.roa (raw, json)
Hash identifier:          hx0dAUvoQexBLg8HKUPwFX21UOJBTSayRDGba5NSimQ=
Subject key identifier:   A9:34:52:D4:B1:D4:A9:06:A5:2C:01:BC:58:33:A7:B7:DD:DB:73:56
Certificate issuer:       /CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
Certificate serial:       458C6FB6FBAFC4AEF96D3344474649CFAB428F6B
Authority key identifier: 79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/323830343a313934303a3a2f33322d3332203d3e203631373832.roa
Signing time:             Mon 30 Mar 2026 19:45:05 +0000
ROA not before:           Mon 30 Mar 2026 19:40:05 +0000
ROA not after:            Mon 29 Mar 2027 19:45:05 +0000
asID:                     61782
IP address blocks:        2804:1940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8c:6f:b6:fb:af:c4:ae:f9:6d:33:44:47:46:49:cf:ab:42:8f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
        Validity
            Not Before: Mar 30 19:40:05 2026 GMT
            Not After : Mar 29 19:45:05 2027 GMT
        Subject: CN=A93452D4B1D4A906A52C01BC5833A7B7DDDB7356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:91:02:f4:4b:3b:25:5b:54:cf:2a:30:bf:
                    e7:53:00:6f:22:e3:17:22:bd:e0:bf:d8:ad:4d:a6:
                    13:0c:c1:97:64:a1:10:a5:35:36:4c:57:a6:30:e7:
                    f0:45:22:c5:21:b8:2a:31:a0:99:c6:87:54:48:ff:
                    4f:09:28:22:42:be:f3:0a:ad:f1:6f:63:74:f8:1c:
                    5b:01:21:8c:5d:93:79:b7:d3:d4:ae:a3:a3:6f:3a:
                    10:5a:33:b9:ee:d0:ae:e7:64:f8:71:b1:30:da:7f:
                    74:10:a6:00:50:c7:92:0d:ed:c7:8d:8f:0a:cc:81:
                    38:3d:b0:25:0a:ee:8f:be:b7:ed:2b:d6:b1:ab:cd:
                    2e:d9:6c:c8:12:11:2c:5a:4a:b3:f6:2c:1f:4e:09:
                    43:7c:58:69:07:80:5b:d7:c1:86:e7:93:ca:92:00:
                    ce:af:d2:bb:e8:8e:92:5b:6e:fb:d7:15:4e:eb:7b:
                    84:f9:4a:35:28:8e:7a:fc:bb:7b:b1:0a:fd:e7:d4:
                    b3:54:64:f7:c5:1b:01:3d:2e:0c:22:ce:04:55:a3:
                    bd:a7:37:f9:ba:33:86:7a:3f:12:42:d2:a5:87:a4:
                    74:70:4b:6b:28:29:b2:03:b6:bc:97:16:6e:51:24:
                    6b:19:02:15:de:02:01:32:07:68:a3:8c:d1:ee:71:
                    69:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:34:52:D4:B1:D4:A9:06:A5:2C:01:BC:58:33:A7:B7:DD:DB:73:56
            X509v3 Authority Key Identifier:
                keyid:79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/323830343a313934303a3a2f33322d3332203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1940::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:c7:a8:85:09:45:02:9e:6e:43:d8:8e:18:9b:c8:26:e2:a5:
         a5:ab:58:77:fb:a8:1a:a0:b5:51:9f:a1:92:c0:2d:e3:db:ba:
         66:38:cc:49:c7:cd:97:31:32:9f:23:18:cf:f2:7e:51:86:1c:
         c8:4c:bf:b1:7c:5d:76:87:95:2f:b8:9e:ba:b8:22:06:df:7e:
         96:34:46:31:e4:ec:10:84:2f:1d:28:2d:5d:d7:5b:9a:af:d1:
         e5:fc:05:c0:76:53:b6:58:1e:15:bf:43:f3:5d:65:61:a7:85:
         58:85:c1:be:5c:30:e9:a8:5d:10:c1:50:ac:49:02:f6:42:65:
         45:87:59:df:0f:59:1e:f0:f5:cc:62:53:a3:23:b8:a5:38:c7:
         e7:19:b3:13:d0:08:14:fa:80:f8:64:9e:18:a3:ed:12:dc:e7:
         af:e0:5f:26:b4:47:25:d1:55:1c:f0:bd:c0:77:49:dc:64:09:
         de:ec:fa:27:21:aa:f5:4b:e7:81:7c:65:31:a4:b0:40:e3:88:
         b2:4a:50:42:b3:c7:1d:0b:61:c3:75:d5:94:bf:d0:50:62:f5:
         1d:3c:34:ea:5b:ae:23:f8:f6:75:06:8a:c4:bd:40:28:ad:4d:
         2c:4e:95:b5:1b:d9:8e:36:29:6c:e0:a3:5c:87:4a:d5:a0:27:
         78:d7:1c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:58:37 2026 by rpki-client