Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a383030303a3a2f33342d3334203d3e20323638353333.roa
File:                     323830343a353261633a383030303a3a2f33342d3334203d3e20323638353333.roa (raw, json)
Hash identifier:          bpz7dRfYsJpsWE7ZeeZLq9Glnz+1+YxMYGaFxzM2AVA=
Subject key identifier:   B8:73:B9:16:7D:CE:C4:57:F9:FB:77:A6:7B:DC:CB:B9:F4:85:99:D0
Certificate issuer:       /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
Certificate serial:       69DC01BF77BBDA682EF6F33AD191922479EDE2E5
Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a383030303a3a2f33342d3334203d3e20323638353333.roa
Signing time:             Mon 16 Mar 2026 22:03:06 +0000
ROA not before:           Mon 16 Mar 2026 21:58:06 +0000
ROA not after:            Mon 15 Mar 2027 22:03:06 +0000
asID:                     268533
IP address blocks:        2804:52ac:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl
                          rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 23:14:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:dc:01:bf:77:bb:da:68:2e:f6:f3:3a:d1:91:92:24:79:ed:e2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
        Validity
            Not Before: Mar 16 21:58:06 2026 GMT
            Not After : Mar 15 22:03:06 2027 GMT
        Subject: CN=B873B9167DCEC457F9FB77A67BDCCBB9F48599D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ad:f9:1d:b3:c7:da:cb:88:e0:a4:8e:ff:34:
                    95:3f:32:8f:ba:84:55:82:61:ad:f1:89:25:f7:f4:
                    94:b7:c0:ed:43:02:d8:f6:e0:9c:b1:b8:75:42:01:
                    27:77:fd:80:20:c7:1d:ed:35:ac:79:62:c2:69:38:
                    96:32:a0:c2:2f:1a:92:7e:92:68:e9:ee:1d:9e:66:
                    57:5e:6c:37:91:a0:3b:94:d5:41:7a:ca:04:fe:5e:
                    9b:26:9f:46:d3:38:c4:71:1b:4d:95:bc:4c:58:5c:
                    bf:6a:9e:9b:93:58:e8:2a:28:83:92:c6:31:6b:e6:
                    38:c3:7d:6f:51:e3:80:a5:ab:5a:37:8a:d1:ff:c5:
                    69:b6:c3:77:9c:9e:9b:02:89:1e:7a:d9:19:2b:20:
                    93:7a:cc:09:09:0d:08:62:55:aa:8e:69:a2:90:4c:
                    b1:fa:8d:d8:8f:37:56:6c:b7:ca:ad:7b:7a:42:6a:
                    23:18:5f:c5:ab:5a:c5:b4:70:b9:1f:90:7a:dd:bc:
                    52:99:13:92:5c:77:a7:18:7d:93:1b:cc:50:88:02:
                    87:5a:91:23:45:f2:b7:47:85:28:8b:be:61:e9:ff:
                    a2:38:27:7f:ff:b6:ad:a6:1b:7d:ef:62:36:50:56:
                    f5:10:ca:f8:92:a8:79:ad:e8:2d:53:4b:88:dd:ba:
                    0e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:73:B9:16:7D:CE:C4:57:F9:FB:77:A6:7B:DC:CB:B9:F4:85:99:D0
            X509v3 Authority Key Identifier:
                keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a383030303a3a2f33342d3334203d3e20323638353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52ac:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         72:80:ff:4c:d8:39:95:75:e1:71:06:b0:df:9f:cc:a4:7b:d5:
         48:eb:d0:94:8d:3b:ac:d1:16:73:b4:ab:cb:44:a1:a4:5a:9c:
         55:de:03:51:9a:af:bf:2e:df:d9:a9:33:dc:06:5c:a2:9f:55:
         ea:a0:ca:3d:d2:75:dd:bb:83:c8:ca:4b:d3:67:c5:49:a5:6c:
         d4:47:23:b1:17:e3:4e:22:f2:e4:af:c1:9e:28:b7:72:6d:6e:
         3a:a6:e9:cc:d5:87:9b:f0:02:ec:48:93:56:35:3b:8e:42:e4:
         ad:be:7e:81:85:4b:4d:cf:82:98:49:01:90:65:df:da:60:7e:
         ce:a2:a2:56:aa:f2:f4:f0:84:6c:e3:85:db:08:81:45:2f:49:
         43:3c:87:20:e0:7c:16:9c:29:0e:19:9c:e2:14:92:c3:c6:a1:
         3a:9e:3a:30:c4:76:07:ce:94:3e:a6:83:df:c9:d7:48:19:80:
         65:51:3c:15:ee:e7:22:65:07:b3:84:19:a5:09:52:21:b2:11:
         33:b2:b5:26:5b:8a:5c:9c:13:64:19:21:36:4d:41:61:50:95:
         e5:9a:59:8e:15:18:a3:2d:58:ca:6a:ce:46:dd:75:84:d3:d6:
         f5:00:f9:cc:20:1e:44:58:e3:9b:a1:37:39:ac:cb:57:b1:2c:
         82:dd:47:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:57:45 2026 by rpki-client