Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a646330313a3a2f34382d3438203d3e203631363039.roa
File:                     323830343a383762633a646330313a3a2f34382d3438203d3e203631363039.roa (raw, json)
Hash identifier:          j2gqnVLtFbcsFXz0b1b+yN4Jzk6KynIbLx2Jjsog3k4=
Subject key identifier:   2A:8A:B2:30:8A:F0:2E:29:5B:BA:90:D2:04:A1:DA:EE:EA:00:CA:CD
Certificate issuer:       /CN=9E3215C480F080F897B1BC29041417B2B2F0668D
Certificate serial:       483E02F7D976458A18051A8EFAC53F55126BFBF3
Authority key identifier: 9E:32:15:C4:80:F0:80:F8:97:B1:BC:29:04:14:17:B2:B2:F0:66:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E3215C480F080F897B1BC29041417B2B2F0668D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a646330313a3a2f34382d3438203d3e203631363039.roa
Signing time:             Thu 09 Jul 2026 13:35:47 +0000
ROA not before:           Thu 09 Jul 2026 13:30:47 +0000
ROA not after:            Thu 08 Jul 2027 13:35:47 +0000
asID:                     61609
IP address blocks:        2804:87bc:dc01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/9E3215C480F080F897B1BC29041417B2B2F0668D.crl
                          rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/9E3215C480F080F897B1BC29041417B2B2F0668D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E3215C480F080F897B1BC29041417B2B2F0668D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3e:02:f7:d9:76:45:8a:18:05:1a:8e:fa:c5:3f:55:12:6b:fb:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E3215C480F080F897B1BC29041417B2B2F0668D
        Validity
            Not Before: Jul  9 13:30:47 2026 GMT
            Not After : Jul  8 13:35:47 2027 GMT
        Subject: CN=2A8AB2308AF02E295BBA90D204A1DAEEEA00CACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:ce:08:db:02:fe:43:fb:fc:e7:ff:51:d6:
                    1e:bd:f1:3d:7a:3b:ab:6f:49:56:9e:ba:d8:f7:cc:
                    8a:46:0f:f8:57:01:d6:34:45:d3:59:ae:48:02:4a:
                    94:28:10:d0:ac:8a:42:ae:da:92:e7:8f:52:ef:e3:
                    d1:fe:50:f6:93:ac:fc:26:9d:8e:e2:73:f7:d5:e0:
                    78:83:20:fc:10:47:9b:0b:ec:17:a7:eb:c8:92:74:
                    8e:8f:ce:5a:f6:20:b8:94:64:ca:d5:c7:a1:42:31:
                    c2:a6:99:3c:e5:63:f4:2f:b5:f0:fd:6e:4c:03:2c:
                    a0:22:b3:70:b3:5e:53:5e:1e:16:d8:c3:98:ae:b9:
                    58:0a:0f:ff:9e:b9:15:f5:7a:46:f4:89:96:cb:44:
                    ee:34:be:6a:d0:b4:b5:c8:68:75:54:bd:00:a3:69:
                    36:7e:48:3b:56:eb:1f:22:4c:82:a1:2e:23:7a:da:
                    74:70:bf:ca:28:6e:e8:0a:ed:71:e4:39:0e:d5:28:
                    2a:c8:38:19:db:c4:c7:24:3e:59:56:e6:09:a4:27:
                    81:c1:87:3b:61:03:7d:82:37:29:f7:34:6d:2a:73:
                    c2:55:c9:b8:4d:14:a0:d9:2f:41:f0:61:ea:c9:aa:
                    29:54:12:49:f7:46:75:13:0e:a9:9b:08:26:c4:29:
                    ca:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8A:B2:30:8A:F0:2E:29:5B:BA:90:D2:04:A1:DA:EE:EA:00:CA:CD
            X509v3 Authority Key Identifier:
                keyid:9E:32:15:C4:80:F0:80:F8:97:B1:BC:29:04:14:17:B2:B2:F0:66:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/9E3215C480F080F897B1BC29041417B2B2F0668D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E3215C480F080F897B1BC29041417B2B2F0668D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a646330313a3a2f34382d3438203d3e203631363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87bc:dc01::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:b1:65:59:be:14:e1:08:3b:8e:1d:c5:cd:f1:60:65:2b:d8:
         1e:ff:81:d6:5f:0b:7f:3e:d3:c2:42:3f:fb:34:90:ee:a2:e2:
         7a:d3:07:e6:58:f8:fe:a6:e6:db:a9:d2:44:32:e9:7b:26:5b:
         cd:bc:2e:df:0c:8e:0d:d3:39:d6:7a:1a:74:35:a6:71:6d:8f:
         b1:1c:fb:e9:f1:a9:f5:80:6b:2b:7a:a0:a9:b3:d3:c4:1a:75:
         83:94:74:67:3c:ca:0e:d4:2c:da:39:85:ee:7e:1d:33:ac:02:
         10:b8:73:82:db:f7:f8:2c:52:9f:11:fd:90:1a:d5:7a:b0:c3:
         7e:32:10:54:96:89:dc:08:4e:0a:52:27:01:f8:c9:42:ee:8d:
         5e:80:b6:6e:01:83:b0:c2:37:a8:11:ba:35:86:5a:89:78:6c:
         bd:35:32:7f:a0:40:ab:7a:84:53:b8:a5:83:2f:1a:4f:c0:97:
         12:e2:ae:77:da:42:cc:74:2b:01:40:85:98:27:58:64:69:6c:
         4a:c9:45:86:f9:58:ce:b8:e7:73:4b:5a:8a:49:66:ea:3b:f6:
         30:49:3e:22:16:46:48:35:9a:ca:81:08:fe:60:2e:9b:48:29:
         d6:bf:a4:37:01:40:d9:61:1a:15:84:46:95:18:22:17:6c:07:
         f5:49:45:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:05:05 2026 by rpki-client