Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/323830343a353062633a633030303a3a2f33342d3334203d3e20323638343037.roa
File:                     323830343a353062633a633030303a3a2f33342d3334203d3e20323638343037.roa (raw, json)
Hash identifier:          JDEjTnHofTumm7UvO/8FUpaXSy6+rsa/kPsUoRIrF7Q=
Subject key identifier:   0B:97:E6:6B:32:C9:3C:71:38:D1:54:AB:87:8F:E4:D5:B6:B1:C4:5E
Certificate issuer:       /CN=EF19B846B3F7AC14DCE54C7D713543D804F55578
Certificate serial:       41F6542D4CA8BC541AB6A72F5B4048049F322AC0
Authority key identifier: EF:19:B8:46:B3:F7:AC:14:DC:E5:4C:7D:71:35:43:D8:04:F5:55:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF19B846B3F7AC14DCE54C7D713543D804F55578.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/323830343a353062633a633030303a3a2f33342d3334203d3e20323638343037.roa
Signing time:             Wed 28 Jan 2026 14:01:09 +0000
ROA not before:           Wed 28 Jan 2026 13:56:09 +0000
ROA not after:            Wed 27 Jan 2027 14:01:09 +0000
asID:                     268407
IP address blocks:        2804:50bc:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/EF19B846B3F7AC14DCE54C7D713543D804F55578.crl
                          rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/EF19B846B3F7AC14DCE54C7D713543D804F55578.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF19B846B3F7AC14DCE54C7D713543D804F55578.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 00:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f6:54:2d:4c:a8:bc:54:1a:b6:a7:2f:5b:40:48:04:9f:32:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF19B846B3F7AC14DCE54C7D713543D804F55578
        Validity
            Not Before: Jan 28 13:56:09 2026 GMT
            Not After : Jan 27 14:01:09 2027 GMT
        Subject: CN=0B97E66B32C93C7138D154AB878FE4D5B6B1C45E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:da:c2:f5:c8:cc:b8:15:7e:ec:06:7f:18:
                    11:de:b3:be:f7:0b:d3:cf:68:fe:cb:41:4e:61:71:
                    64:1b:d5:fc:2e:bc:47:c7:51:45:a6:85:bb:67:2d:
                    30:fd:6e:63:51:a7:d4:31:aa:2b:4e:df:81:e9:b4:
                    50:da:a4:67:e4:d7:13:98:9f:2d:3d:74:9f:ee:9d:
                    5d:77:ae:ba:3d:40:98:75:f1:7c:cd:4f:fc:44:81:
                    31:2a:cf:3f:ad:e9:81:fd:dc:54:13:28:24:80:de:
                    3a:e2:2b:64:7b:15:25:e7:90:ce:31:07:36:08:3e:
                    cd:4c:bf:29:90:6a:e1:c6:9d:9c:97:23:37:60:4b:
                    44:6d:32:22:37:99:a1:d9:1b:8f:f8:1d:fa:b3:ab:
                    23:a7:94:17:98:ca:ae:95:7d:a9:b0:c6:69:d8:a9:
                    4d:3a:20:cd:c4:23:39:91:fc:a3:f3:a8:87:b9:98:
                    2b:d0:3f:c8:5d:f8:f9:fc:39:85:99:32:ae:49:f0:
                    20:0e:df:16:73:cb:c3:68:d9:71:f6:af:90:63:58:
                    12:c6:87:f0:48:e3:18:09:9c:2b:21:0c:f1:69:55:
                    8c:4a:dc:78:94:c8:7f:eb:3f:6e:ac:80:9f:e0:cc:
                    8e:1f:ec:c1:3b:dd:69:d0:d6:aa:4f:26:77:f6:62:
                    4e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:97:E6:6B:32:C9:3C:71:38:D1:54:AB:87:8F:E4:D5:B6:B1:C4:5E
            X509v3 Authority Key Identifier:
                keyid:EF:19:B8:46:B3:F7:AC:14:DC:E5:4C:7D:71:35:43:D8:04:F5:55:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/EF19B846B3F7AC14DCE54C7D713543D804F55578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF19B846B3F7AC14DCE54C7D713543D804F55578.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/323830343a353062633a633030303a3a2f33342d3334203d3e20323638343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:50bc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         13:1b:ac:7b:5c:67:77:6b:96:9d:58:e9:ce:14:88:78:63:72:
         5e:f3:5b:6e:5c:7a:79:82:69:eb:98:93:c2:6f:07:d4:cb:37:
         82:26:d7:22:10:ad:e4:10:68:c4:a5:fb:d8:1a:f1:cb:39:73:
         6e:92:e7:e2:49:29:8c:c3:c8:c7:c5:3c:d3:81:ec:3d:ba:a1:
         bc:92:79:15:e7:00:38:8e:fa:73:3f:89:90:e0:b1:84:e0:bd:
         a3:89:12:42:b7:4d:67:a0:82:a4:e4:d4:c5:34:cd:3b:cf:55:
         46:e6:2c:11:19:7b:cb:ed:45:04:26:9a:ab:db:f2:25:2f:f6:
         dd:d2:37:51:da:24:85:56:ec:92:c7:05:62:c8:ed:2b:fe:b4:
         73:29:e9:f1:05:58:dc:2e:5c:a0:1a:87:18:89:cd:79:82:6e:
         70:3e:04:8f:12:a9:26:ae:e2:ea:b9:01:23:0b:c8:7f:c8:ea:
         a7:63:8a:13:45:3b:ed:a4:5d:6d:9b:9f:b5:1c:71:e5:2a:7e:
         78:47:e7:e6:a0:c4:a0:b8:47:e0:58:fb:e1:33:ac:5f:5a:8c:
         e4:f7:b3:c8:3d:d9:91:d2:19:cb:64:b6:0f:7b:dc:a7:1f:19:
         54:57:ab:17:ac:b1:a5:e1:c4:5e:53:45:f4:d9:06:69:23:de:
         24:83:e4:6f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQfZULUyovFQatqcvW0BIBJ8yKsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYxOUI4NDZCM0Y3QUMxNERDRTU0QzdENzEzNTQzRDgw
NEY1NTU3ODAeFw0yNjAxMjgxMzU2MDlaFw0yNzAxMjcxNDAxMDlaMDMxMTAvBgNV
BAMTKDBCOTdFNjZCMzJDOTNDNzEzOEQxNTRBQjg3OEZFNEQ1QjZCMUM0NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0i9rC9cjMuBV+7AZ/GBHes773
C9PPaP7LQU5hcWQb1fwuvEfHUUWmhbtnLTD9bmNRp9QxqitO34HptFDapGfk1xOY
ny09dJ/unV13rro9QJh18XzNT/xEgTEqzz+t6YH93FQTKCSA3jriK2R7FSXnkM4x
BzYIPs1MvymQauHGnZyXIzdgS0RtMiI3maHZG4/4HfqzqyOnlBeYyq6VfamwxmnY
qU06IM3EIzmR/KPzqIe5mCvQP8hd+Pn8OYWZMq5J8CAO3xZzy8No2XH2r5BjWBLG
h/BI4xgJnCshDPFpVYxK3HiUyH/rP26sgJ/gzI4f7ME73WnQ1qpPJnf2Yk4TAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUC5fmazLJPHE40VSrh4/k1baxxF4wHwYDVR0j
BBgwFoAU7xm4RrP3rBTc5Ux9cTVD2AT1VXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2tRMVNHVVZlcHhwS1VrR1hSdVY5eTZicjhURDVueVhMOXNhWGNtazZQ
a2MvMC9FRjE5Qjg0NkIzRjdBQzE0RENFNTRDN0Q3MTM1NDNEODA0RjU1NTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGMTlCODQ2QjNGN0FDMTRE
Q0U1NEM3RDcxMzU0M0Q4MDRGNTU1NzguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0drUTFTR1VWZXB4cEtVa0dYUnVWOXk2YnI4VEQ1bnlYTDlzYVhjbWs2UGtjLzAv
MzIzODMwMzQzYTM1MzA2MjYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM0MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEULzAMA0GCSqGSIb3DQEBCwUA
A4IBAQATG6x7XGd3a5adWOnOFIh4Y3Je81tuXHp5gmnrmJPCbwfUyzeCJtciEK3k
EGjEpfvYGvHLOXNukufiSSmMw8jHxTzTgew9uqG8knkV5wA4jvpzP4mQ4LGE4L2j
iRJCt01noIKk5NTFNM07z1VG5iwRGXvL7UUEJpqr2/IlL/bd0jdR2iSFVuySxwVi
yO0r/rRzKenxBVjcLlygGocYic15gm5wPgSPEqkmruLquQEjC8h/yOqnY4oTRTvt
pF1tm5+1HHHlKn54R+fmoMSguEfgWPvhM6xfWozk97PIPdmR0hnLZLYPe9ynHxlU
V6sXrLGl4cReU0X02QZpI94kg+Rv
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:54:46 2026 by rpki-client