Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/323830343a346534633a3a2f33322d3332203d3e20323638323532.roa
File:                     323830343a346534633a3a2f33322d3332203d3e20323638323532.roa (raw, json)
Hash identifier:          1ueOxg5gx5cXOrdcVlMrqkQFVQnRZbR/SupmdoO/WLI=
Subject key identifier:   CE:5F:C9:C9:26:4F:3C:D0:21:51:0C:9C:84:45:0D:12:BC:78:E4:76
Certificate issuer:       /CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
Certificate serial:       75FCEED91BC47BA984A357E8B4AF514E515E604A
Authority key identifier: 54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/323830343a346534633a3a2f33322d3332203d3e20323638323532.roa
Signing time:             Mon 04 May 2026 18:45:13 +0000
ROA not before:           Mon 04 May 2026 18:40:13 +0000
ROA not after:            Mon 03 May 2027 18:45:13 +0000
asID:                     268252
IP address blocks:        2804:4e4c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl
                          rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fc:ee:d9:1b:c4:7b:a9:84:a3:57:e8:b4:af:51:4e:51:5e:60:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54395A545D0008C7F4CB034DD9D90CDC41D95AE4
        Validity
            Not Before: May  4 18:40:13 2026 GMT
            Not After : May  3 18:45:13 2027 GMT
        Subject: CN=CE5FC9C9264F3CD021510C9C84450D12BC78E476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fe:dd:81:6d:ba:aa:fd:1f:63:1b:61:07:f8:
                    5c:9a:e7:f8:d6:e3:6d:7b:05:ab:8a:16:bf:95:dd:
                    86:61:a9:92:d2:52:e8:75:17:97:f6:c2:8f:0b:b6:
                    38:0f:39:98:7e:bd:7a:28:83:e5:fe:de:ee:08:75:
                    f2:6c:69:ff:d3:7d:35:f3:5b:ef:8f:4b:58:f3:98:
                    4b:7c:f7:25:81:37:16:10:fc:20:f4:ea:f9:02:e0:
                    24:e8:c5:ae:81:77:23:69:4b:ec:4c:24:7a:9d:1a:
                    78:5a:d2:80:59:58:17:ec:4f:96:70:e3:70:94:6b:
                    06:79:2e:6e:c9:ff:bf:9d:d1:c3:15:10:e7:ce:a8:
                    42:3a:97:e1:11:58:28:72:36:92:92:e2:38:4d:09:
                    b3:33:72:32:9c:ef:bd:bb:60:74:7c:9d:26:5d:71:
                    ec:f6:f3:62:fe:5f:8a:e7:f4:3c:f0:cf:b7:b7:6e:
                    b7:d1:17:d0:ee:f9:3e:c6:d9:ac:95:46:ac:49:20:
                    9f:9e:de:be:95:56:bb:d5:d5:63:07:53:e4:e9:ff:
                    26:e4:b5:75:c3:9a:9f:f1:78:95:d6:8d:ea:a6:09:
                    b2:26:76:5d:ee:c9:ea:aa:6f:3d:0e:70:76:6f:76:
                    36:66:a5:00:47:ec:68:9e:d9:b3:0d:d5:c8:7a:d7:
                    cc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5F:C9:C9:26:4F:3C:D0:21:51:0C:9C:84:45:0D:12:BC:78:E4:76
            X509v3 Authority Key Identifier:
                keyid:54:39:5A:54:5D:00:08:C7:F4:CB:03:4D:D9:D9:0C:DC:41:D9:5A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54395A545D0008C7F4CB034DD9D90CDC41D95AE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPCVS3vEfXuqFCR6a2GHzYSp9UXZYTYGFJ8UNbcvLTJv/0/323830343a346534633a3a2f33322d3332203d3e20323638323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:8f:ab:31:ef:43:16:ab:02:12:a3:1c:e3:6d:09:7f:e9:7f:
         b4:39:df:ef:b4:1c:4d:54:b9:35:83:fc:a5:19:c0:8e:27:f6:
         ca:d7:00:35:1d:4e:5d:74:39:58:d1:00:28:1e:50:92:74:c4:
         f4:bd:5f:7f:b2:48:31:82:0c:f0:c1:61:8c:a4:ac:4a:4a:80:
         48:8f:68:eb:f1:4e:41:ae:c2:e6:bc:6a:c6:80:a4:26:3d:62:
         aa:37:bc:86:80:4d:f3:1f:27:e7:c1:13:2c:7c:9b:bd:43:11:
         9a:c4:d3:2f:f8:30:73:d7:7d:76:17:7f:63:57:37:ec:78:81:
         b6:67:72:39:bc:cd:4e:55:92:f4:4c:6c:c4:e6:b5:6d:29:17:
         f4:a3:45:db:33:ca:db:42:36:e1:e3:8f:da:4b:e4:38:ad:88:
         e1:a1:92:32:32:d8:c2:ef:77:ed:14:5e:b8:38:49:2f:dc:fb:
         73:26:90:f4:cd:d1:02:ae:bf:41:38:8e:e1:93:59:5b:03:72:
         30:a1:1f:eb:30:d0:93:e4:40:6c:10:a0:83:4f:13:89:40:07:
         dd:aa:71:ce:4b:72:83:38:3e:d6:96:2b:a7:a9:9f:01:ab:fc:
         67:6d:b9:22:f0:c1:46:d1:f4:9f:02:ff:1e:51:e0:bb:0f:47:
         cc:36:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:59:46 2026 by rpki-client