Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/323830343a323463303a343030303a3a2f33342d313238203d3e20323632323930.roa
File:                     323830343a323463303a343030303a3a2f33342d313238203d3e20323632323930.roa (raw, json)
Hash identifier:          GzK4LyRrpIIkRQYcha2DutNV7xpeQd2nEHIK0QcOOcA=
Subject key identifier:   14:5D:B9:61:8D:01:8E:48:84:02:56:A9:8B:4E:52:20:F6:9C:E1:6E
Certificate issuer:       /CN=2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9
Certificate serial:       07634AD6527EE8690E877ED1DF7544F9473AE2E7
Authority key identifier: 2A:02:FC:EB:60:E9:7B:9D:F5:AF:17:DB:E6:F2:8D:FB:BD:BB:04:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/323830343a323463303a343030303a3a2f33342d313238203d3e20323632323930.roa
Signing time:             Wed 09 Sep 2026 16:34:13 +0000
ROA not before:           Wed 09 Sep 2026 16:29:13 +0000
ROA not after:            Wed 08 Sep 2027 16:34:13 +0000
asID:                     262290
IP address blocks:        2804:24c0:4000::/34 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9.crl
                          rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 15:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:63:4a:d6:52:7e:e8:69:0e:87:7e:d1:df:75:44:f9:47:3a:e2:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9
        Validity
            Not Before: Sep  9 16:29:13 2026 GMT
            Not After : Sep  8 16:34:13 2027 GMT
        Subject: CN=145DB9618D018E48840256A98B4E5220F69CE16E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:59:bf:d7:99:f0:27:22:00:a0:19:df:16:2e:
                    00:2e:1a:ac:b5:6a:9e:21:f0:a5:cf:d3:59:e9:01:
                    ad:ce:59:b7:ad:b9:05:a3:2a:d2:37:fe:de:e4:23:
                    19:b8:d5:3e:62:f9:1a:d8:51:0b:a0:e5:3f:37:4e:
                    ca:42:a9:3c:be:6d:f3:1d:cc:5f:d5:d3:e9:c8:a2:
                    14:95:53:a8:99:d3:0e:16:57:c7:58:4d:25:bc:13:
                    fc:d8:c2:2b:99:6a:e9:5b:9f:2b:a4:03:12:ca:6c:
                    08:c9:18:2f:2a:19:21:80:b4:4b:e6:11:08:38:61:
                    74:04:f3:a4:2f:28:27:f2:f6:2c:67:c2:92:c9:99:
                    e2:f7:9a:db:00:a9:3d:c5:73:60:34:33:9b:ae:52:
                    95:cd:00:27:b1:fe:02:14:94:09:09:94:c3:d5:29:
                    41:b6:e2:9b:df:de:33:8a:63:24:aa:e1:d8:3e:33:
                    fc:fc:72:a3:8a:38:da:b4:60:c7:00:d7:1c:b0:8e:
                    e5:89:b2:e6:f7:3e:1f:23:0e:ae:0c:cf:d9:e9:a6:
                    4b:06:f2:51:28:d5:97:12:81:5b:2d:eb:24:b5:7b:
                    64:1d:e1:d1:58:83:87:62:a4:b7:6b:41:1d:8a:38:
                    5a:df:cb:4d:57:d0:d5:ea:ed:a5:79:b3:83:cb:58:
                    a0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5D:B9:61:8D:01:8E:48:84:02:56:A9:8B:4E:52:20:F6:9C:E1:6E
            X509v3 Authority Key Identifier:
                keyid:2A:02:FC:EB:60:E9:7B:9D:F5:AF:17:DB:E6:F2:8D:FB:BD:BB:04:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A02FCEB60E97B9DF5AF17DBE6F28DFBBDBB04C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/323830343a323463303a343030303a3a2f33342d313238203d3e20323632323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24c0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         16:95:da:d5:37:d1:77:ad:af:96:dd:8a:57:1b:16:47:0d:5c:
         21:2b:54:5f:8a:d7:f2:15:52:e7:f4:70:f8:4b:02:f1:1d:44:
         34:fc:fd:e1:e8:5b:49:ff:a5:d0:31:d6:ec:67:d0:bc:bd:61:
         e5:2a:90:99:1a:fc:ee:68:1e:31:02:ae:9f:96:7a:b5:ae:1e:
         6a:2a:d6:d7:1c:a6:f0:51:82:00:69:f4:16:fd:9f:19:36:8a:
         84:37:e4:fd:a2:45:ba:9e:c4:ac:c8:be:0d:70:ee:f7:d3:4a:
         ba:fa:bd:f6:68:ef:c4:66:5d:0c:5a:8f:68:4c:55:47:e4:f0:
         cd:1b:00:e0:be:59:96:14:26:5f:4b:b6:41:3a:1d:30:c1:8d:
         fc:6e:3a:c1:43:b7:d9:03:08:50:a5:e9:2a:7d:14:18:fa:0c:
         83:24:24:06:4e:3e:89:1a:91:de:9f:d2:2e:87:66:b4:86:12:
         28:71:7d:7c:bb:aa:de:fb:d2:90:7e:09:a8:eb:1b:07:e3:9d:
         48:62:88:87:11:52:a8:23:88:b0:0f:f0:8f:88:3a:46:1c:f5:
         83:3c:02:53:72:24:c4:a5:bf:26:29:29:42:a6:3a:13:0d:da:
         30:4e:ff:84:1d:9c:63:a0:49:60:0b:90:c6:98:fb:f7:87:c4:
         28:67:06:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:09:52 2026 by rpki-client