Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a663230303a3a2f34302d3430203d3e20323633323833.roa
File:                     323830343a313635383a663230303a3a2f34302d3430203d3e20323633323833.roa (raw, json)
Hash identifier:          havesde6ieFjy95ThfkHGMQ6BAfWEa2/7FnRt0+3UkM=
Subject key identifier:   12:5D:E6:C3:BC:4B:E2:AB:15:42:BE:B0:DA:E6:22:F1:06:CA:5F:BF
Certificate issuer:       /CN=41B0D3EA994B3A684602641351C292C7808B50FC
Certificate serial:       3FE54420F81D37115D565BC304C53EA207ED21F7
Authority key identifier: 41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a663230303a3a2f34302d3430203d3e20323633323833.roa
Signing time:             Mon 12 Jan 2026 18:30:32 +0000
ROA not before:           Mon 12 Jan 2026 18:25:32 +0000
ROA not after:            Mon 11 Jan 2027 18:30:32 +0000
asID:                     263283
IP address blocks:        2804:1658:f200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl
                          rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e5:44:20:f8:1d:37:11:5d:56:5b:c3:04:c5:3e:a2:07:ed:21:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B0D3EA994B3A684602641351C292C7808B50FC
        Validity
            Not Before: Jan 12 18:25:32 2026 GMT
            Not After : Jan 11 18:30:32 2027 GMT
        Subject: CN=125DE6C3BC4BE2AB1542BEB0DAE622F106CA5FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:77:6e:eb:b7:f2:cb:b0:7b:11:3f:76:e6:7a:
                    0a:99:5e:e3:cb:6c:6b:3c:7b:11:52:32:aa:b0:1c:
                    bf:dc:b4:d8:6e:7f:1a:77:ff:46:21:58:e7:af:7c:
                    12:09:b1:29:e9:25:19:25:cd:49:9f:77:55:fd:23:
                    0d:2e:a4:2d:48:5f:af:5c:8f:90:9d:51:93:72:34:
                    09:cb:bc:ad:ef:ae:fc:91:08:ee:ab:f1:1b:76:8d:
                    3a:41:7a:c3:d5:fc:f9:ea:91:1c:dd:e8:24:52:4b:
                    7e:b3:72:4e:ce:47:b8:ca:67:db:54:42:10:24:28:
                    44:7a:2e:e6:58:d2:16:04:40:3a:28:29:3c:e4:32:
                    7e:35:27:83:c4:0d:d6:e8:4f:df:e0:03:15:ac:0b:
                    54:e0:3b:10:fc:ab:cf:ef:8a:54:4a:7d:45:71:f6:
                    69:86:0f:68:bb:bc:aa:5a:6f:49:0b:51:0d:69:19:
                    9e:b6:68:f1:7a:9f:e4:5e:56:58:79:dd:f7:17:36:
                    92:24:79:bd:55:a9:e1:a1:86:0b:8a:87:48:5d:b3:
                    58:26:dd:08:ef:22:03:41:11:30:ac:0f:f1:6d:18:
                    10:55:e4:4c:78:01:44:c3:ca:7c:af:2a:96:6c:4d:
                    3b:6f:a4:22:fd:2e:1e:e8:8d:6c:b6:5b:6d:73:9e:
                    b2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5D:E6:C3:BC:4B:E2:AB:15:42:BE:B0:DA:E6:22:F1:06:CA:5F:BF
            X509v3 Authority Key Identifier:
                keyid:41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a663230303a3a2f34302d3430203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1658:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:9c:14:90:c3:07:1f:79:3d:1f:34:f9:d2:4a:cb:9a:3a:86:
         1d:df:5a:26:8d:a2:9f:5f:55:3a:c2:cf:00:ea:72:48:b7:9b:
         f4:60:80:b7:2c:b2:5b:5a:37:83:d2:06:d3:54:ad:7e:45:90:
         17:4b:b1:18:20:33:ee:36:6b:f2:e3:d5:b7:ed:f4:9e:c4:51:
         3f:36:b1:f3:71:83:cc:7e:df:94:69:7b:63:07:e7:43:b6:30:
         b4:d3:91:7c:bc:9c:d1:03:41:c9:e7:ae:ad:fe:14:14:5e:12:
         0d:77:3c:49:8a:4d:27:6f:52:78:e6:fc:af:3e:1d:b1:98:b1:
         0f:7c:ed:33:d4:2b:25:17:56:92:5f:26:09:2d:29:17:3b:35:
         5f:2c:77:7f:35:ac:dd:f6:57:af:63:50:93:69:e1:bc:4c:b4:
         92:dd:6e:72:9b:88:6b:30:09:08:0e:71:93:db:c2:1e:ea:ee:
         62:ff:ad:59:46:09:93:04:66:c0:f7:e6:4a:72:60:5b:78:7e:
         1b:a9:c0:81:af:c2:5d:e6:51:d9:bd:77:ec:7b:58:34:fa:42:
         71:06:4c:8f:31:d4:f1:56:ae:09:99:82:a6:b0:d3:b5:b8:a0:
         0e:d2:13:48:c1:d5:d4:22:d6:41:b8:a5:c5:46:6f:95:a8:04:
         e2:9d:91:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:42:04 2026 by rpki-client