Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/0/323830343a353266303a323030303a3a2f34382d3438203d3e20323638353531.roa
File:                     323830343a353266303a323030303a3a2f34382d3438203d3e20323638353531.roa (raw, json)
Hash identifier:          RVWjPQhWmV++bpcR3NgHmn5CFDdjjX6x6/c/FLSh0zo=
Subject key identifier:   66:2F:4F:50:59:55:1B:E3:0B:68:C4:E3:86:37:91:70:CF:71:41:20
Certificate issuer:       /CN=ADF430D553AB6533A4BFC960AFE55DF807ABBDAB
Certificate serial:       2EE1711EC0E1D6C2D5C12336963F5E9353DD37B0
Authority key identifier: AD:F4:30:D5:53:AB:65:33:A4:BF:C9:60:AF:E5:5D:F8:07:AB:BD:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF430D553AB6533A4BFC960AFE55DF807ABBDAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/0/323830343a353266303a323030303a3a2f34382d3438203d3e20323638353531.roa
Signing time:             Tue 15 Sep 2026 04:41:29 +0000
ROA not before:           Tue 15 Sep 2026 04:36:29 +0000
ROA not after:            Tue 14 Sep 2027 04:41:29 +0000
asID:                     268551
IP address blocks:        2804:52f0:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/0/ADF430D553AB6533A4BFC960AFE55DF807ABBDAB.crl
                          rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/0/ADF430D553AB6533A4BFC960AFE55DF807ABBDAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF430D553AB6533A4BFC960AFE55DF807ABBDAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:13:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e1:71:1e:c0:e1:d6:c2:d5:c1:23:36:96:3f:5e:93:53:dd:37:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADF430D553AB6533A4BFC960AFE55DF807ABBDAB
        Validity
            Not Before: Sep 15 04:36:29 2026 GMT
            Not After : Sep 14 04:41:29 2027 GMT
        Subject: CN=662F4F5059551BE30B68C4E386379170CF714120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:f9:8c:11:17:c0:5a:ac:05:fc:80:c3:f4:
                    54:d8:58:b3:d0:f1:de:18:45:2d:3b:29:93:1e:9e:
                    20:88:1d:4d:2e:d8:c7:71:3c:5f:a4:4a:c6:0e:96:
                    8c:53:e7:80:c3:86:7b:7d:bd:9b:5f:00:80:c9:a1:
                    11:63:4f:86:93:a6:b7:3d:d8:bf:86:54:2f:62:f8:
                    61:7f:6e:b3:96:d8:e4:64:95:d8:69:31:d3:7a:a4:
                    d2:83:53:fc:42:13:6b:28:44:b7:88:08:20:83:1a:
                    0b:6f:a1:e6:22:cd:1e:8e:f6:47:87:72:2b:06:ef:
                    cb:77:c4:c8:03:a2:ce:a4:e6:d8:3b:c6:18:de:11:
                    38:00:38:be:50:30:21:9e:a7:f8:a0:1f:f0:15:8d:
                    6f:9e:6a:54:03:90:45:21:64:dd:c9:11:7b:b6:05:
                    d0:61:79:8c:e6:b2:26:d7:e1:41:c8:82:7c:40:39:
                    32:f6:04:86:8a:39:7c:49:92:b3:42:fd:e3:24:b0:
                    e0:8e:6e:17:b8:7e:16:b3:b7:52:af:3a:f0:46:5e:
                    17:e0:46:54:a5:68:a2:e8:d0:34:73:04:c9:b2:6d:
                    cb:0b:e8:cf:92:7e:8b:56:ce:b0:cc:76:c5:53:f8:
                    93:df:bf:7b:c6:7c:39:c9:ed:ca:9e:52:84:5a:44:
                    77:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2F:4F:50:59:55:1B:E3:0B:68:C4:E3:86:37:91:70:CF:71:41:20
            X509v3 Authority Key Identifier:
                keyid:AD:F4:30:D5:53:AB:65:33:A4:BF:C9:60:AF:E5:5D:F8:07:AB:BD:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/0/ADF430D553AB6533A4BFC960AFE55DF807ABBDAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADF430D553AB6533A4BFC960AFE55DF807ABBDAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUTAKbGJesnmV6bf723kBsJwEUExK2n2J3yX6TdjcMXt/0/323830343a353266303a323030303a3a2f34382d3438203d3e20323638353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52f0:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:a0:bd:b6:5a:33:a0:e2:8c:83:08:6f:fe:3e:4c:3b:4a:27:
         2a:3c:89:38:e6:28:c1:67:be:97:33:8b:64:24:f6:a7:fd:7b:
         43:80:8a:e4:cf:d0:5b:78:f8:32:f5:a0:4f:cd:36:2d:e4:cd:
         fd:19:dc:f1:ab:79:7a:8b:5f:f6:eb:89:fa:47:16:f9:63:05:
         82:d5:64:34:78:ff:ce:f6:a6:55:2a:18:66:29:83:85:14:4f:
         44:f1:29:5d:09:1c:22:a0:eb:d3:f7:b2:9c:96:f3:45:ef:4f:
         c1:bb:ad:e4:e3:93:ff:3a:01:6e:d7:16:83:99:1a:b6:d4:e9:
         04:3e:99:f7:6d:af:8f:75:af:ff:81:cd:2d:e8:19:57:9f:d2:
         93:e2:89:1e:fe:ca:c5:5c:95:0a:ed:b8:3f:73:bd:17:d6:da:
         74:1d:11:e2:b0:7b:e0:27:c6:88:db:c1:15:34:2f:39:fa:a6:
         f3:d9:1c:d6:2a:9d:bf:d5:09:69:4f:5c:e3:a1:90:b2:77:19:
         9f:01:75:40:0f:78:2d:79:4d:17:28:0f:93:f1:45:a6:a9:e2:
         3a:5b:1e:72:dc:02:d0:8c:50:67:38:69:57:ce:ea:72:43:89:
         3d:9e:95:52:72:34:2b:9f:ed:15:fb:b0:8c:87:e7:a2:d3:88:
         f8:df:72:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:27:50 2026 by rpki-client