Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/323830343a376162383a3a2f33322d3438203d3e20323731333838.roa
File:                     323830343a376162383a3a2f33322d3438203d3e20323731333838.roa (raw, json)
Hash identifier:          f5AsbapwtxyxKV8OOJ1xrFYxu1GeGIqwcqlqv6xjank=
Subject key identifier:   B1:F6:E5:40:CE:08:80:40:B7:C2:B9:E2:95:3A:B8:03:E2:8C:15:6E
Certificate issuer:       /CN=D15F1C5EAD15FBAE8E480C1C766B191ED12881AE
Certificate serial:       36FC0E843FB6BCAD0FBCCEF2B5BE9F6128E7006B
Authority key identifier: D1:5F:1C:5E:AD:15:FB:AE:8E:48:0C:1C:76:6B:19:1E:D1:28:81:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15F1C5EAD15FBAE8E480C1C766B191ED12881AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/323830343a376162383a3a2f33322d3438203d3e20323731333838.roa
Signing time:             Tue 28 Apr 2026 19:36:29 +0000
ROA not before:           Tue 28 Apr 2026 19:31:29 +0000
ROA not after:            Tue 27 Apr 2027 19:36:29 +0000
asID:                     271388
IP address blocks:        2804:7ab8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/D15F1C5EAD15FBAE8E480C1C766B191ED12881AE.crl
                          rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/D15F1C5EAD15FBAE8E480C1C766B191ED12881AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15F1C5EAD15FBAE8E480C1C766B191ED12881AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:fc:0e:84:3f:b6:bc:ad:0f:bc:ce:f2:b5:be:9f:61:28:e7:00:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D15F1C5EAD15FBAE8E480C1C766B191ED12881AE
        Validity
            Not Before: Apr 28 19:31:29 2026 GMT
            Not After : Apr 27 19:36:29 2027 GMT
        Subject: CN=B1F6E540CE088040B7C2B9E2953AB803E28C156E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:73:c0:6b:7f:bb:5b:0f:41:d3:1a:15:f4:
                    a5:e7:88:ed:df:2d:8e:31:73:9a:67:3e:54:a4:95:
                    42:65:a7:e7:2f:03:49:03:b0:5a:ae:1b:d4:a8:31:
                    b1:56:17:5f:20:76:f0:ca:45:64:51:ee:6d:75:e5:
                    9f:a7:c4:08:f5:d2:c3:8c:c4:ed:60:c7:c1:ba:68:
                    eb:2b:7d:55:86:d2:b0:7c:5d:ed:c5:21:a2:ea:4d:
                    d8:87:05:17:93:e8:8e:85:3c:3f:ad:bb:40:02:73:
                    c4:0d:e8:b9:ad:41:e1:72:f3:00:d6:5d:95:bc:b3:
                    71:05:56:fe:e0:e4:35:19:31:0d:a2:8c:68:95:9a:
                    47:12:30:ef:ec:7a:fc:a7:fe:ca:a3:2a:79:4d:95:
                    65:db:f7:33:a5:b3:d1:13:eb:a2:6f:6f:fa:a7:6b:
                    c4:dc:1f:95:32:46:85:43:48:b6:df:17:70:84:a8:
                    6d:59:13:52:63:e0:12:0f:09:90:b3:cf:12:04:41:
                    d0:88:84:ba:0a:c0:7b:7a:77:52:f7:ac:35:67:61:
                    13:14:90:d3:a1:4a:f6:44:bf:12:22:0b:86:22:4d:
                    35:dd:c1:92:28:4e:25:b2:38:71:1f:9a:b5:eb:0a:
                    ad:6b:74:4d:c7:08:9a:e1:42:ba:51:49:f4:b4:8e:
                    00:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F6:E5:40:CE:08:80:40:B7:C2:B9:E2:95:3A:B8:03:E2:8C:15:6E
            X509v3 Authority Key Identifier:
                keyid:D1:5F:1C:5E:AD:15:FB:AE:8E:48:0C:1C:76:6B:19:1E:D1:28:81:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/D15F1C5EAD15FBAE8E480C1C766B191ED12881AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15F1C5EAD15FBAE8E480C1C766B191ED12881AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/323830343a376162383a3a2f33322d3438203d3e20323731333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ab8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:a3:11:b4:c5:5a:bf:24:62:36:2c:f6:e0:f1:62:5b:62:74:
         f4:fe:6c:dd:00:25:50:64:f8:7b:30:96:ee:48:32:5b:ef:f8:
         03:7a:c3:59:3f:21:94:20:d8:59:e5:5d:94:f8:36:fa:2e:ff:
         76:77:bf:7e:fb:f2:27:4f:c6:f2:c9:39:1d:ff:59:89:c8:3a:
         2e:ab:6a:e1:e9:96:70:9f:af:a0:06:c8:4e:3c:f7:59:b6:fe:
         c6:66:d4:5f:98:70:9b:67:6e:dc:1f:a3:48:d5:66:c2:6e:f8:
         f5:86:e8:da:30:dc:0c:77:db:fd:56:12:91:72:1e:6c:50:c6:
         be:31:e5:8b:29:3b:4d:db:24:78:ad:59:37:d1:f6:28:45:d3:
         a9:81:75:e8:7a:3f:70:ac:08:fc:dc:0a:47:20:9e:83:a1:6d:
         c5:4b:40:04:af:81:74:ad:c2:01:7d:81:89:32:7b:e1:7f:1a:
         90:0d:0c:5a:cf:38:13:b1:c1:f7:34:9b:77:bf:91:f5:ae:d0:
         55:e9:b4:4c:05:3c:81:91:bb:61:32:39:ba:39:ef:3c:ae:f0:
         81:81:07:33:a3:0f:a0:bb:74:bf:f6:1c:8e:92:15:27:cd:f5:
         85:29:82:b3:c3:d5:9e:e7:7e:21:37:20:6c:26:b7:58:c6:b6:
         0e:cf:6e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:44:57 2026 by rpki-client