Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/323830343a356434303a3a2f33322d3334203d3e20323638393630.roa
File:                     323830343a356434303a3a2f33322d3334203d3e20323638393630.roa (raw, json)
Hash identifier:          SLg2Kfi9pFPfblbRMK9MMMestUDY+wKGEpbwtEWpIyg=
Subject key identifier:   ED:C0:BB:D5:21:9F:23:D5:6E:A9:A9:38:50:7A:1D:94:F0:38:E2:30
Certificate issuer:       /CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
Certificate serial:       6212312AB801936FD80265E5D8B60E45DF5F2032
Authority key identifier: E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/323830343a356434303a3a2f33322d3334203d3e20323638393630.roa
Signing time:             Fri 15 May 2026 15:04:00 +0000
ROA not before:           Fri 15 May 2026 14:59:00 +0000
ROA not after:            Fri 14 May 2027 15:04:00 +0000
asID:                     268960
IP address blocks:        2804:5d40::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl
                          rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 07:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:12:31:2a:b8:01:93:6f:d8:02:65:e5:d8:b6:0e:45:df:5f:20:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68D8AFF33E9846F7D024674CA13BD85A5518335
        Validity
            Not Before: May 15 14:59:00 2026 GMT
            Not After : May 14 15:04:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:c1:b2:66:c1:62:0f:a1:42:41:b9:5d:05:
                    c4:a5:0f:6c:0e:87:65:32:69:99:76:fd:45:5a:70:
                    2e:55:ff:1e:ea:84:6e:21:39:ef:b3:b9:a5:3d:d1:
                    3f:73:97:e5:67:d3:7c:05:1d:e1:94:4d:3d:e0:32:
                    ef:b0:d2:9c:c4:80:cb:f5:70:ff:f2:af:32:95:1e:
                    71:36:c6:2f:2f:26:9d:3d:6a:04:42:1b:56:6a:7e:
                    d9:9f:9d:44:f0:d7:db:23:e6:ad:ed:9b:cf:77:2f:
                    6e:6f:b6:ad:4e:07:44:44:aa:6c:19:9f:1d:d3:d4:
                    9c:36:31:5c:72:d1:af:95:06:0e:e7:17:1c:1f:a6:
                    b3:45:2e:d2:b4:06:26:06:30:75:43:40:ef:d9:77:
                    39:c7:8a:44:f3:5e:a2:0d:18:62:e7:a6:44:5f:cb:
                    22:00:f4:76:6f:bf:be:c3:3f:a3:03:6e:43:e7:0e:
                    33:ba:f6:85:65:7b:6f:d2:69:58:d5:bd:98:19:9f:
                    bd:f1:36:4c:33:26:e5:2c:9c:5d:2c:14:88:06:af:
                    d3:e3:0b:40:76:90:35:0f:ea:4d:c5:84:20:c4:00:
                    50:28:a2:ef:17:31:47:8d:92:95:cd:a1:ea:27:00:
                    53:13:cd:c5:fe:31:7f:c8:2c:96:e7:06:17:41:c8:
                    16:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C0:BB:D5:21:9F:23:D5:6E:A9:A9:38:50:7A:1D:94:F0:38:E2:30
            X509v3 Authority Key Identifier:
                keyid:E6:8D:8A:FF:33:E9:84:6F:7D:02:46:74:CA:13:BD:85:A5:51:83:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68D8AFF33E9846F7D024674CA13BD85A5518335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GicoYrihmkT1xZB6vDiiXh2AhDd1QwP7xiQhVADS37Ve/1/323830343a356434303a3a2f33322d3334203d3e20323638393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:aa:e2:8e:5b:5f:ad:86:1b:e4:df:24:37:09:14:82:7a:2f:
         01:59:e8:5c:51:3b:98:e9:a5:d6:d9:1a:ca:a3:38:3b:e0:8f:
         e8:62:87:87:7c:6b:ea:dc:2d:0f:57:ef:1d:94:c4:07:c5:fc:
         ed:68:87:c8:9e:e2:a0:41:87:ab:49:79:d5:10:89:6b:a1:4c:
         ae:11:f8:99:87:58:62:0b:7b:d5:5f:71:49:24:24:da:b3:9f:
         ac:01:fd:ca:7e:6c:c3:c6:d1:58:20:6d:42:01:53:20:46:be:
         25:66:c6:f8:5d:1a:6c:ae:d6:4f:18:43:a7:5d:e9:5d:17:e9:
         30:d3:6c:89:89:43:21:9b:53:bb:b4:91:d7:68:81:3f:d6:c0:
         56:0e:5a:4b:16:12:40:d1:4d:84:34:81:be:3e:7b:2a:5b:5c:
         fb:ed:6c:8a:4f:94:bb:0e:88:f0:77:33:c6:12:4d:88:39:2c:
         aa:4b:b0:07:54:cb:88:35:67:72:e7:94:e9:bc:1b:a7:33:61:
         2e:01:84:00:f3:3d:1b:3c:5a:4a:d2:2b:19:f1:93:69:86:3c:
         6f:ca:7c:e2:3d:01:c9:a9:fa:14:47:a2:d8:71:a4:fa:29:e2:
         2a:c9:70:52:b1:03:82:45:19:79:18:f4:d1:b2:f3:9a:6f:98:
         76:56:52:11
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUYhIxKrgBk2/YAmXl2LYORd9fIDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY4RDhBRkYzM0U5ODQ2RjdEMDI0Njc0Q0ExM0JEODVB
NTUxODMzNTAeFw0yNjA1MTUxNDU5MDBaFw0yNzA1MTQxNTA0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzA4QUMxQjI2NkMxNjIwRkEx
NDI0MUI5NUQwNUM0QTUwRjZDMEU4NzY1MzI2OTk5NzZGRDQ1NUE3MDJFNTVGRjFF
RUE4NDZFMjEzOUVGQjNCOUE1M0REMTNGNzM5N0U1NjdEMzdDMDUxREUxOTQ0RDNE
RTAzMkVGQjBEMjlDQzQ4MENCRjU3MEZGRjJBRjMyOTUxRTcxMzZDNjJGMkYyNjlE
M0Q2QTA0NDIxQjU2NkE3RUQ5OUY5RDQ0RjBEN0RCMjNFNkFERUQ5QkNGNzcyRjZF
NkZCNkFENEUwNzQ0NDRBQTZDMTk5RjFERDNENDlDMzYzMTVDNzJEMUFGOTUwNjBF
RTcxNzFDMUZBNkIzNDUyRUQyQjQwNjI2MDYzMDc1NDM0MEVGRDk3NzM5Qzc4QTQ0
RjM1RUEyMEQxODYyRTdBNjQ0NUZDQjIyMDBGNDc2NkZCRkJFQzMzRkEzMDM2RTQz
RTcwRTMzQkFGNjg1NjU3QjZGRDI2OTU4RDVCRDk4MTk5RkJERjEzNjRDMzMyNkU1
MkM5QzVEMkMxNDg4MDZBRkQzRTMwQjQwNzY5MDM1MEZFQTREQzU4NDIwQzQwMDUw
MjhBMkVGMTczMTQ3OEQ5Mjk1Q0RBMUVBMjcwMDUzMTNDREM1RkUzMTdGQzgyQzk2
RTcwNjE3NDFDODE2NzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwIrBsmbBYg+hQkG5XQXEpQ9sDodlMmmZdv1FWnAuVf8e6oRuITnv
s7mlPdE/c5flZ9N8BR3hlE094DLvsNKcxIDL9XD/8q8ylR5xNsYvLyadPWoEQhtW
an7Zn51E8NfbI+at7ZvPdy9ub7atTgdERKpsGZ8d09ScNjFcctGvlQYO5xccH6az
RS7StAYmBjB1Q0Dv2Xc5x4pE816iDRhi56ZEX8siAPR2b7++wz+jA25D5w4zuvaF
ZXtv0mlY1b2YGZ+98TZMMyblLJxdLBSIBq/T4wtAdpA1D+pNxYQgxABQKKLvFzFH
jZKVzaHqJwBTE83F/jF/yCyW5wYXQcgWeQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FO3Au9UhnyPVbqmpOFB6HZTwOOIwMB8GA1UdIwQYMBaAFOaNiv8z6YRvfQJGdMoT
vYWlUYM1MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dpY29ZcmlobWtUMXha
QjZ2RGlpWGgyQWhEZDFRd1A3eGlRaFZBRFMzN1ZlLzEvRTY4RDhBRkYzM0U5ODQ2
RjdEMDI0Njc0Q0ExM0JEODVBNTUxODMzNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FNjhEOEFGRjMzRTk4NDZGN0QwMjQ2NzRDQTEzQkQ4NUE1NTE4
MzM1LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HaWNvWXJpaG1rVDF4WkI2dkRp
aVhoMkFoRGQxUXdQN3hpUWhWQURTMzdWZS8xLzMyMzgzMDM0M2EzNTY0MzQzMDNh
M2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzODM5MzYzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
XUAwDQYJKoZIhvcNAQELBQADggEBAMeq4o5bX62GG+TfJDcJFIJ6LwFZ6FxRO5jp
pdbZGsqjODvgj+hih4d8a+rcLQ9X7x2UxAfF/O1oh8ie4qBBh6tJedUQiWuhTK4R
+JmHWGILe9VfcUkkJNqzn6wB/cp+bMPG0VggbUIBUyBGviVmxvhdGmyu1k8YQ6dd
6V0X6TDTbImJQyGbU7u0kddogT/WwFYOWksWEkDRTYQ0gb4+eypbXPvtbIpPlLsO
iPB3M8YSTYg5LKpLsAdUy4g1Z3LnlOm8G6czYS4BhADzPRs8WkrSKxnxk2mGPG/K
fOI9Acmp+hRHothxpPop4irJcFKxA4JFGXkY9NGy85pvmHZWUhE=
-----END CERTIFICATE-----
Generated at Sun May 24 17:27:37 2026 by rpki-client