Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/323830343a373730383a633030303a3a2f33352d3335203d3e20323731313530.roa
File:                     323830343a373730383a633030303a3a2f33352d3335203d3e20323731313530.roa (raw, json)
Hash identifier:          Tdiqx9lRKa1xpm9qgBugen3jcPuSUuyCjziitQ8bnfA=
Subject key identifier:   6D:26:15:41:92:65:FE:DF:98:E8:84:DD:4C:8B:70:C7:5B:CA:CF:B6
Certificate issuer:       /CN=5B817491752E20162CFEDB5460BEDEA0A560789F
Certificate serial:       692A5667B15F81F82579088D2FC3527ABBF80196
Authority key identifier: 5B:81:74:91:75:2E:20:16:2C:FE:DB:54:60:BE:DE:A0:A5:60:78:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B817491752E20162CFEDB5460BEDEA0A560789F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/323830343a373730383a633030303a3a2f33352d3335203d3e20323731313530.roa
Signing time:             Thu 10 Sep 2026 13:38:53 +0000
ROA not before:           Thu 10 Sep 2026 13:33:53 +0000
ROA not after:            Thu 09 Sep 2027 13:38:53 +0000
asID:                     271150
IP address blocks:        2804:7708:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/5B817491752E20162CFEDB5460BEDEA0A560789F.crl
                          rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/5B817491752E20162CFEDB5460BEDEA0A560789F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B817491752E20162CFEDB5460BEDEA0A560789F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 15:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2a:56:67:b1:5f:81:f8:25:79:08:8d:2f:c3:52:7a:bb:f8:01:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B817491752E20162CFEDB5460BEDEA0A560789F
        Validity
            Not Before: Sep 10 13:33:53 2026 GMT
            Not After : Sep  9 13:38:53 2027 GMT
        Subject: CN=6D2615419265FEDF98E884DD4C8B70C75BCACFB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9d:24:13:64:b8:cf:8a:b2:4f:fe:aa:b3:8e:
                    91:9c:32:4d:c4:72:aa:63:8c:59:58:1f:20:87:2c:
                    2a:eb:21:1d:99:cc:5e:31:2d:32:c5:bf:f8:82:57:
                    9d:7a:42:4c:e1:31:55:e4:fa:18:0b:cf:c7:14:71:
                    1e:aa:49:01:7c:a3:37:2b:66:99:7a:d6:96:a1:fb:
                    c3:17:c7:28:b4:df:4d:44:ca:46:43:29:ae:0b:4a:
                    a4:22:92:43:98:69:c3:ef:15:55:4d:52:c5:12:44:
                    d9:5a:d7:d5:0c:30:a0:09:a1:a3:d6:ad:6c:98:2e:
                    e4:c2:0a:36:9f:f0:05:a7:cf:74:78:4d:81:24:76:
                    f1:12:e2:83:1c:17:e8:69:f0:d1:8b:58:a5:74:cd:
                    ce:52:c1:7f:6d:b6:83:50:1b:48:7c:16:e5:9b:89:
                    71:ce:cf:61:bb:85:14:45:c4:3f:6a:b7:39:ba:1c:
                    f9:f1:42:d8:cf:e8:0a:c2:62:19:f4:5b:18:2a:a7:
                    65:f7:0e:dd:bd:c7:23:45:53:d9:40:27:06:c6:67:
                    51:bd:56:e7:ac:6b:ea:d8:05:1d:ff:ac:dc:89:70:
                    c3:de:51:87:7e:9f:09:f8:2c:b4:88:78:e9:4a:2d:
                    18:97:b7:c1:d6:8f:23:5d:7d:3f:37:82:90:0e:75:
                    8b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:26:15:41:92:65:FE:DF:98:E8:84:DD:4C:8B:70:C7:5B:CA:CF:B6
            X509v3 Authority Key Identifier:
                keyid:5B:81:74:91:75:2E:20:16:2C:FE:DB:54:60:BE:DE:A0:A5:60:78:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/5B817491752E20162CFEDB5460BEDEA0A560789F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B817491752E20162CFEDB5460BEDEA0A560789F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/323830343a373730383a633030303a3a2f33352d3335203d3e20323731313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7708:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         66:5c:50:03:15:c0:87:ff:8b:17:42:10:82:d5:c3:51:1b:0c:
         43:d3:be:6a:07:56:6d:c5:2a:3f:04:26:a5:ab:29:d9:b4:e1:
         fd:cd:2b:24:ab:fe:5d:41:b9:36:41:5e:7e:6c:5c:5d:9a:b5:
         93:8e:6d:0e:89:d6:45:95:22:d8:4b:fd:7f:65:fd:4f:fd:f5:
         69:11:f1:fc:19:f3:5f:d5:28:2a:97:51:82:6d:65:5f:9a:47:
         50:45:e9:e0:5c:cd:a9:3f:3f:4f:42:60:2e:81:ed:b0:3e:0b:
         14:5a:9f:93:35:46:62:7e:b4:72:f0:8a:05:8c:9b:f3:e9:20:
         97:1f:c6:c1:c6:bb:f6:39:a3:5b:0f:c6:fb:c9:de:36:48:b7:
         f2:8f:6b:94:f4:68:68:ba:85:76:6e:b7:fc:d4:1c:09:62:f2:
         24:64:a7:f8:58:54:07:ef:d7:98:8c:1d:90:78:dc:17:d2:cc:
         11:9f:3c:c1:0c:cd:0d:03:6c:64:f9:8f:28:87:7e:fb:5b:c5:
         5d:85:a1:f8:68:20:f5:d4:4a:1e:d9:14:8b:14:0e:45:49:20:
         ae:2d:95:ca:4e:ca:06:33:aa:70:4e:86:49:68:66:fa:41:9d:
         1a:85:d8:90:75:37:5b:28:af:18:92:be:87:7f:b2:9d:87:ec:
         17:23:4a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:52:49 2026 by rpki-client