Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GbiiAxZ55to4iyXGx73jFV8fakmZEBjguXUgB8qymW9y/0/323830313a38303a326330303a3a2f34302d3431203d3e20323638343630.roa
File:                     323830313a38303a326330303a3a2f34302d3431203d3e20323638343630.roa (raw, json)
Hash identifier:          fm+II9hX9/ODcgKfo3+5fceD0K+b5+8g1RjYuVwxzO8=
Subject key identifier:   7F:C3:49:AA:E1:CD:1A:CD:29:F7:D2:B4:58:E1:D4:F4:E0:D5:88:E4
Certificate issuer:       /CN=C404FEAECE36659B2818B2F2718ECEBFAA0FE412
Certificate serial:       32BC4B1DB0972EDD5B667E3821A720A8EDD5C78D
Authority key identifier: C4:04:FE:AE:CE:36:65:9B:28:18:B2:F2:71:8E:CE:BF:AA:0F:E4:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C404FEAECE36659B2818B2F2718ECEBFAA0FE412.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GbiiAxZ55to4iyXGx73jFV8fakmZEBjguXUgB8qymW9y/0/323830313a38303a326330303a3a2f34302d3431203d3e20323638343630.roa
Signing time:             Wed 24 Jun 2026 12:07:51 +0000
ROA not before:           Wed 24 Jun 2026 12:02:51 +0000
ROA not after:            Wed 23 Jun 2027 12:07:51 +0000
asID:                     268460
IP address blocks:        2801:80:2c00::/40 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GbiiAxZ55to4iyXGx73jFV8fakmZEBjguXUgB8qymW9y/0/C404FEAECE36659B2818B2F2718ECEBFAA0FE412.crl
                          rsync://rpki-repo.registro.br/repo/GbiiAxZ55to4iyXGx73jFV8fakmZEBjguXUgB8qymW9y/0/C404FEAECE36659B2818B2F2718ECEBFAA0FE412.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C404FEAECE36659B2818B2F2718ECEBFAA0FE412.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 06:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:bc:4b:1d:b0:97:2e:dd:5b:66:7e:38:21:a7:20:a8:ed:d5:c7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C404FEAECE36659B2818B2F2718ECEBFAA0FE412
        Validity
            Not Before: Jun 24 12:02:51 2026 GMT
            Not After : Jun 23 12:07:51 2027 GMT
        Subject: CN=7FC349AAE1CD1ACD29F7D2B458E1D4F4E0D588E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:81:ba:4c:70:0f:03:b6:97:3b:30:4c:fa:26:
                    5c:a4:00:59:cd:60:f2:5b:dd:d2:76:f2:d5:33:a8:
                    2b:4d:de:48:a6:65:ca:6b:28:91:91:03:2e:ed:44:
                    8c:5a:3a:5c:63:ce:90:db:fe:d7:a3:f2:e5:68:0d:
                    87:7e:be:09:42:8d:15:a1:e1:b0:68:c8:4e:75:60:
                    b9:2d:64:f9:4e:e8:be:f8:71:b7:5d:c3:24:8a:a9:
                    c4:ff:52:cf:76:c8:02:37:99:d3:0a:26:ad:6f:6b:
                    da:87:c1:f8:6c:53:61:8c:1b:ed:16:1e:03:c3:77:
                    48:f9:e8:0d:a0:8a:92:10:3c:ba:74:bc:06:6e:75:
                    41:39:5c:80:29:e4:72:89:32:06:62:ad:d8:90:9b:
                    c8:1f:05:63:45:19:26:f3:c2:b6:50:58:79:46:9b:
                    3a:c9:c7:d0:34:0e:56:b1:79:92:5e:c6:9c:c7:02:
                    3c:fa:09:03:24:2f:a5:38:7f:9c:e3:17:24:e3:ee:
                    70:3e:83:e3:d6:a0:d4:3a:59:ee:e9:75:97:fe:80:
                    56:44:c9:b2:8c:5c:0c:50:e4:c4:bc:84:90:94:fa:
                    0e:8e:f0:4f:66:a9:f8:9a:91:47:c4:a7:4b:fb:f5:
                    b7:ce:5b:11:06:b4:84:d4:2a:b5:86:e5:16:0b:82:
                    03:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C3:49:AA:E1:CD:1A:CD:29:F7:D2:B4:58:E1:D4:F4:E0:D5:88:E4
            X509v3 Authority Key Identifier:
                keyid:C4:04:FE:AE:CE:36:65:9B:28:18:B2:F2:71:8E:CE:BF:AA:0F:E4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GbiiAxZ55to4iyXGx73jFV8fakmZEBjguXUgB8qymW9y/0/C404FEAECE36659B2818B2F2718ECEBFAA0FE412.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C404FEAECE36659B2818B2F2718ECEBFAA0FE412.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbiiAxZ55to4iyXGx73jFV8fakmZEBjguXUgB8qymW9y/0/323830313a38303a326330303a3a2f34302d3431203d3e20323638343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:2c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:df:8d:b2:10:78:92:fc:39:bb:8f:8d:21:c2:bf:1f:87:f1:
         f3:e0:cc:16:ee:d4:e1:64:1a:88:d1:41:16:e5:da:5a:b1:5f:
         df:a8:44:1f:93:12:5e:1b:25:f1:f5:ed:43:84:94:e4:73:bf:
         96:8f:19:b0:a0:d0:70:38:7f:b5:7d:a1:0f:28:bd:83:84:77:
         78:59:50:53:02:bf:5f:17:7d:73:6c:bf:91:0e:5c:23:43:38:
         1e:3f:9b:1e:f7:d8:d3:90:0a:7a:e6:e3:ff:87:2f:7e:59:2a:
         45:5a:10:2e:b2:31:ba:60:e9:b2:12:05:a4:6d:27:70:21:52:
         6f:a5:44:ce:31:ae:4f:ec:96:b0:db:50:2d:86:5e:3e:11:52:
         7f:2d:f9:75:99:0e:e9:b7:f0:2a:e1:63:e6:df:95:a8:4a:86:
         5c:a0:78:fb:ef:2d:d2:59:b7:96:ff:25:55:d1:c9:65:cf:b0:
         de:f6:53:7a:64:4a:a8:c5:ea:50:d5:06:10:3d:92:15:97:25:
         a2:45:d0:2d:ab:e6:9a:37:30:9b:f9:6b:51:2c:3b:0d:df:4a:
         3e:f1:2f:43:77:61:d3:8a:14:f8:79:9a:00:1f:92:52:3f:19:
         7c:f7:e0:0b:0f:b5:6b:8b:7f:29:b5:1c:f8:77:06:e2:33:3d:
         bf:f9:61:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:20 2026 by rpki-client