Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a663330303a3a2f34302d3438203d3e20323633323833.roa
File:                     323830343a313635383a663330303a3a2f34302d3438203d3e20323633323833.roa (raw, json)
Hash identifier:          NahdUfH502+js5RiFyLe7GasuVQdUaYhu9XjUrjkczw=
Subject key identifier:   15:8B:3D:6D:9E:80:04:FB:D5:DF:D0:75:61:96:07:01:54:82:9C:66
Certificate issuer:       /CN=41B0D3EA994B3A684602641351C292C7808B50FC
Certificate serial:       7102E3064F11D4AA78602EA900895A10C2D60B0A
Authority key identifier: 41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a663330303a3a2f34302d3438203d3e20323633323833.roa
Signing time:             Mon 12 Jan 2026 18:30:32 +0000
ROA not before:           Mon 12 Jan 2026 18:25:32 +0000
ROA not after:            Mon 11 Jan 2027 18:30:32 +0000
asID:                     263283
IP address blocks:        2804:1658:f300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl
                          rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:02:e3:06:4f:11:d4:aa:78:60:2e:a9:00:89:5a:10:c2:d6:0b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B0D3EA994B3A684602641351C292C7808B50FC
        Validity
            Not Before: Jan 12 18:25:32 2026 GMT
            Not After : Jan 11 18:30:32 2027 GMT
        Subject: CN=158B3D6D9E8004FBD5DFD0756196070154829C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1d:48:85:9c:9a:6e:93:66:50:5a:80:57:ba:
                    ae:9b:f8:b5:27:3c:8f:56:68:de:34:ad:8b:51:7f:
                    5c:17:1d:1c:db:f7:a0:e8:e3:bd:70:d5:1e:83:b2:
                    89:81:39:31:02:f5:94:28:79:4a:99:bc:ee:32:31:
                    72:24:15:5a:91:48:50:65:9a:9c:64:b8:f5:2e:b8:
                    ba:d2:48:b9:9f:55:b1:50:8a:20:98:09:38:ca:15:
                    25:bb:a5:e2:62:48:01:e4:84:20:07:25:84:20:fc:
                    f3:b7:cb:59:bb:ba:7d:1d:32:db:3f:d3:26:e9:00:
                    45:78:4e:20:46:99:4e:c4:9a:60:7b:b2:57:97:7e:
                    10:71:0d:22:be:72:be:82:af:d6:eb:3c:6c:d8:8c:
                    86:48:24:47:c3:2d:3a:1f:f6:a4:1f:c3:cd:01:1b:
                    ba:93:22:ec:1c:aa:42:7c:a2:18:f7:2a:6b:eb:31:
                    dd:74:d0:3b:2d:fa:76:0a:77:4d:78:7b:74:23:c2:
                    44:cd:f6:f6:f8:8e:33:98:7b:0f:3f:2b:5d:41:3b:
                    ed:ed:99:b1:25:c6:c3:61:54:c0:48:cf:d7:5a:e0:
                    ee:f4:c4:c7:ed:2e:ff:33:1f:b3:53:0b:04:0f:a8:
                    51:9b:70:32:30:5b:9e:a8:5e:70:3b:de:72:52:93:
                    07:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8B:3D:6D:9E:80:04:FB:D5:DF:D0:75:61:96:07:01:54:82:9C:66
            X509v3 Authority Key Identifier:
                keyid:41:B0:D3:EA:99:4B:3A:68:46:02:64:13:51:C2:92:C7:80:8B:50:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/41B0D3EA994B3A684602641351C292C7808B50FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41B0D3EA994B3A684602641351C292C7808B50FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/3/323830343a313635383a663330303a3a2f34302d3438203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1658:f300::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:f8:4b:31:db:f0:e0:87:d2:e1:5f:c8:a8:3c:b0:da:46:e2:
         60:fc:ef:9b:6b:19:e3:eb:39:ec:e3:e1:64:2d:29:78:18:d2:
         63:5a:63:e2:f9:12:6b:08:aa:8f:ef:5f:b8:a3:a6:f7:a2:d8:
         33:3c:52:45:09:ec:bc:3e:94:25:75:80:67:26:5c:3b:dd:d4:
         c7:42:5b:84:0a:48:4e:92:31:6d:e0:f2:54:81:1e:e2:e9:35:
         c7:da:a0:41:00:36:00:08:a2:5d:c4:c8:e7:eb:b1:43:f1:18:
         3e:8d:e5:4e:ca:8c:6a:25:34:85:73:fd:0d:68:e4:9c:84:92:
         67:04:eb:31:46:19:6e:ff:11:49:86:5e:d1:af:4d:b8:85:17:
         8b:1e:58:1a:e3:40:b1:55:f0:4a:03:fc:f2:4a:c7:3c:6f:09:
         b4:12:4a:4e:b2:c2:9b:a5:4a:ff:2b:89:27:22:19:b6:0d:15:
         ca:ed:61:87:71:ef:7d:5f:3e:b6:a6:e0:5a:c8:3f:a7:2c:77:
         c6:3a:56:8c:9a:0d:a8:f6:bf:aa:dd:07:01:ce:c5:fe:26:8e:
         f6:ca:c8:3a:11:59:d3:5c:0a:e0:2d:77:90:78:88:0b:37:f3:
         90:57:d8:de:4c:c5:b3:d8:7b:0e:83:5c:29:23:5b:9a:11:37:
         08:04:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:45:38 2026 by rpki-client