Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3a2f33322d3438203d3e20323637343538.roa
File:                     323830343a343164303a3a2f33322d3438203d3e20323637343538.roa (raw, json)
Hash identifier:          261mKU1JLuowgf2tsdKclzv8udPnTiRDEJoSvaRPvf0=
Subject key identifier:   93:F8:20:B4:C9:94:03:80:1E:B4:69:B4:32:58:7E:3F:C3:26:0F:AF
Certificate issuer:       /CN=97EB87250CDB37835B9AF35618A9519CB0A05CF0
Certificate serial:       71B219A26B557E504CDE78C0C0DF526F23DBFE5E
Authority key identifier: 97:EB:87:25:0C:DB:37:83:5B:9A:F3:56:18:A9:51:9C:B0:A0:5C:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97EB87250CDB37835B9AF35618A9519CB0A05CF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3a2f33322d3438203d3e20323637343538.roa
Signing time:             Thu 18 Jun 2026 17:44:55 +0000
ROA not before:           Thu 18 Jun 2026 17:39:55 +0000
ROA not after:            Thu 17 Jun 2027 17:44:55 +0000
asID:                     267458
IP address blocks:        2804:41d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/97EB87250CDB37835B9AF35618A9519CB0A05CF0.crl
                          rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/97EB87250CDB37835B9AF35618A9519CB0A05CF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97EB87250CDB37835B9AF35618A9519CB0A05CF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b2:19:a2:6b:55:7e:50:4c:de:78:c0:c0:df:52:6f:23:db:fe:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97EB87250CDB37835B9AF35618A9519CB0A05CF0
        Validity
            Not Before: Jun 18 17:39:55 2026 GMT
            Not After : Jun 17 17:44:55 2027 GMT
        Subject: CN=93F820B4C99403801EB469B432587E3FC3260FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:97:6a:12:85:05:12:83:c3:19:96:66:4c:
                    94:0f:db:e1:0a:2b:8d:4c:b9:be:4f:84:f3:3f:ae:
                    13:e7:9a:c5:55:32:25:b0:6e:1b:bc:80:ea:74:ad:
                    e2:c4:c4:89:43:0b:7a:f3:a3:00:5f:eb:64:b9:d4:
                    bd:ad:1a:78:9a:03:0a:fa:ce:1f:84:e9:95:45:23:
                    0a:0c:4d:e5:d5:ce:69:4e:80:f3:95:77:d8:0a:bf:
                    a4:70:3d:59:39:e4:ae:1a:de:ef:51:bb:14:e1:4e:
                    54:96:c7:e0:a2:c7:6d:4f:11:9a:6d:49:00:b6:77:
                    f5:8f:a5:ea:98:2b:dc:4c:01:37:e9:0a:08:a6:b8:
                    f7:ee:cc:b1:5e:61:b8:76:11:bc:54:72:6b:10:83:
                    2a:15:0e:c3:39:41:43:64:7b:89:75:38:13:da:af:
                    77:fb:0e:5a:9f:cc:be:3e:14:ea:cb:18:ec:ef:9e:
                    36:06:32:f6:35:fb:31:89:a9:12:d4:54:65:6b:a0:
                    2d:5f:2a:6b:e8:9e:5c:93:64:0b:64:de:51:26:82:
                    54:1b:ef:75:07:9a:f0:84:16:74:7f:dd:33:94:17:
                    7a:af:f4:95:ff:0f:c7:76:c5:de:6f:44:a8:f5:3c:
                    9e:07:ea:7d:a8:eb:aa:85:06:96:bc:6e:7b:84:de:
                    69:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F8:20:B4:C9:94:03:80:1E:B4:69:B4:32:58:7E:3F:C3:26:0F:AF
            X509v3 Authority Key Identifier:
                keyid:97:EB:87:25:0C:DB:37:83:5B:9A:F3:56:18:A9:51:9C:B0:A0:5C:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/97EB87250CDB37835B9AF35618A9519CB0A05CF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97EB87250CDB37835B9AF35618A9519CB0A05CF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/0/323830343a343164303a3a2f33322d3438203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:d7:39:71:af:0d:4e:59:45:a8:bd:76:de:0c:dd:4e:1f:46:
         fb:4d:b8:26:fe:bf:9a:38:2b:a8:68:8d:f3:96:3d:e7:c9:0c:
         a1:d8:c1:e9:29:89:d1:fd:0f:ca:c5:ae:19:d9:5f:3a:7a:6c:
         47:36:8f:d1:03:c5:8a:27:2f:a4:9f:a0:24:ad:b9:f5:d1:7f:
         e4:7f:2f:15:73:c4:4e:ed:05:ad:38:05:1d:09:04:0a:31:36:
         b1:7f:d9:65:63:4a:41:ab:51:b7:1d:76:f1:e0:b8:3a:27:a1:
         da:09:4c:40:1e:6c:d5:4e:f1:1f:92:4d:f9:b8:4c:4d:a4:09:
         d2:8b:14:d2:b3:13:a3:04:2d:44:bb:d2:6a:5a:fc:c3:f5:eb:
         e0:6f:8b:17:03:49:3d:90:06:04:af:e6:33:1b:d6:9f:c3:c9:
         c8:3d:84:65:a0:33:20:0f:d2:4b:47:93:2a:cc:f0:0f:79:d6:
         24:86:35:95:28:ea:13:84:e4:07:1d:4b:ce:30:7a:ee:55:71:
         7d:3c:c5:ef:6a:8e:6d:d7:b1:b0:30:dd:3d:2b:7b:d8:86:11:
         48:52:1c:c0:f5:8b:60:1f:f7:a3:ad:17:e1:a4:c2:ed:ff:be:
         1a:15:cd:f5:2c:55:d2:7f:3a:ed:92:2f:da:d1:a8:1c:85:47:
         c4:5d:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:59:23 2026 by rpki-client