Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/323830343a336562343a3a2f33322d313238203d3e20323636363136.roa
File:                     323830343a336562343a3a2f33322d313238203d3e20323636363136.roa (raw, json)
Hash identifier:          kdPVsvogAsoAUE2bOzxHSAjRMHGnmbYfbcF3eefmqqs=
Subject key identifier:   A1:C6:1E:41:45:17:B7:93:F9:AE:7A:BB:FC:9D:1D:26:E2:41:C7:25
Certificate issuer:       /CN=DCD0AC7BFC7050AB9765A5BACF0665C66B9E105B
Certificate serial:       0F3B82958FEE8BE6BDBD6ECAD07AA45B9FE43E6D
Authority key identifier: DC:D0:AC:7B:FC:70:50:AB:97:65:A5:BA:CF:06:65:C6:6B:9E:10:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD0AC7BFC7050AB9765A5BACF0665C66B9E105B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/323830343a336562343a3a2f33322d313238203d3e20323636363136.roa
Signing time:             Tue 01 Sep 2026 01:29:10 +0000
ROA not before:           Tue 01 Sep 2026 01:24:10 +0000
ROA not after:            Tue 31 Aug 2027 01:29:10 +0000
asID:                     266616
IP address blocks:        2804:3eb4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/DCD0AC7BFC7050AB9765A5BACF0665C66B9E105B.crl
                          rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/DCD0AC7BFC7050AB9765A5BACF0665C66B9E105B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD0AC7BFC7050AB9765A5BACF0665C66B9E105B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 00:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3b:82:95:8f:ee:8b:e6:bd:bd:6e:ca:d0:7a:a4:5b:9f:e4:3e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCD0AC7BFC7050AB9765A5BACF0665C66B9E105B
        Validity
            Not Before: Sep  1 01:24:10 2026 GMT
            Not After : Aug 31 01:29:10 2027 GMT
        Subject: CN=A1C61E414517B793F9AE7ABBFC9D1D26E241C725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:2b:24:14:8b:43:20:51:f1:bc:0f:c6:70:
                    6e:b0:25:ad:59:2f:5a:ec:64:20:e0:1a:af:d6:02:
                    77:2d:cf:f5:a9:3c:a6:6d:26:04:cb:55:4b:d0:e9:
                    98:9d:8e:b9:3c:07:43:37:57:82:95:09:07:c7:49:
                    9a:d3:08:1a:82:26:4b:a5:db:98:45:d1:70:e5:dc:
                    e8:d9:eb:0b:5b:25:ec:26:6a:3a:3c:50:c7:da:2d:
                    1a:ec:89:0b:a0:4c:87:11:02:a3:e4:5e:83:fe:ce:
                    57:29:d2:43:59:cc:46:25:a4:03:a0:48:61:c9:28:
                    5d:c1:6e:61:56:23:35:71:86:76:d8:5c:33:0a:c4:
                    63:d6:75:55:ad:89:2f:9e:d6:ac:e3:09:8f:36:c6:
                    86:5c:d4:46:7a:bc:f6:3f:99:9b:91:f3:e0:b1:b7:
                    8e:00:02:64:a5:ac:54:ac:3c:3e:23:d1:22:99:cf:
                    d6:d2:2a:d6:78:ac:c1:44:db:66:69:a1:57:5f:b3:
                    ca:25:1c:13:95:b2:c0:cf:b2:3c:b4:2c:49:f8:ee:
                    aa:8c:f3:7f:ac:08:0e:aa:62:fd:9f:87:59:fd:16:
                    6e:6b:dc:bd:d7:c8:75:d6:c6:da:a4:3b:92:62:c8:
                    4b:e2:91:65:eb:11:84:61:44:84:67:d7:79:4d:50:
                    e2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C6:1E:41:45:17:B7:93:F9:AE:7A:BB:FC:9D:1D:26:E2:41:C7:25
            X509v3 Authority Key Identifier:
                keyid:DC:D0:AC:7B:FC:70:50:AB:97:65:A5:BA:CF:06:65:C6:6B:9E:10:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/DCD0AC7BFC7050AB9765A5BACF0665C66B9E105B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD0AC7BFC7050AB9765A5BACF0665C66B9E105B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/323830343a336562343a3a2f33322d313238203d3e20323636363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3eb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:44:94:7e:1d:c8:d1:56:2f:f0:34:63:ed:96:03:68:d9:d7:
         bc:c5:25:bf:89:1d:b0:88:f1:ae:b6:31:92:8f:2a:87:b6:bc:
         36:d8:e3:76:fa:36:5e:92:3c:e0:c1:05:fd:a3:6e:e8:7b:b1:
         3d:4f:df:89:61:29:b4:75:35:ba:d5:d4:a0:29:11:24:b9:fd:
         97:25:80:0f:3a:70:2a:4c:3d:ea:af:d3:3a:c4:b4:1c:bc:9a:
         88:e4:b1:15:e9:da:09:f5:01:7e:b1:9f:19:3d:1e:c0:55:06:
         42:d6:cc:90:9b:94:09:80:10:9f:94:1d:cc:8d:9f:b5:c0:a6:
         75:59:37:fb:3c:d8:ca:48:3f:ae:b3:e3:b5:83:44:66:26:ae:
         35:a2:17:bd:25:d4:55:c8:91:5b:7a:5d:fa:ad:40:44:19:f1:
         7b:6b:ef:dd:c7:99:5a:97:9c:f6:8d:60:08:5c:53:8c:2e:61:
         71:15:6d:68:ef:78:43:f7:01:e7:4e:21:de:48:be:74:59:a8:
         33:60:3c:a7:c1:78:79:61:a7:91:e4:e8:cc:7a:82:e2:00:1e:
         7a:93:37:19:83:e4:8c:8a:81:01:bc:03:45:d3:aa:40:2b:a9:
         dc:cb:19:6e:21:10:ab:50:ca:11:b0:48:f8:7f:1d:a4:4e:57:
         2f:9d:4d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:06:13 2026 by rpki-client