Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a3a2f33342d3334203d3e20323638353333.roa
File:                     323830343a353261633a3a2f33342d3334203d3e20323638353333.roa (raw, json)
Hash identifier:          xWNhvp/3QMZOspSzF3KUpPc7sE2tiQbL/ve7NBZtTYE=
Subject key identifier:   1D:5C:24:55:0D:87:26:51:A2:33:2D:98:32:01:F0:50:A8:8E:B0:16
Certificate issuer:       /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
Certificate serial:       09FA3EDBA11D6C848631A3C7A2F2294F162B4309
Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a3a2f33342d3334203d3e20323638353333.roa
Signing time:             Mon 16 Mar 2026 22:03:07 +0000
ROA not before:           Mon 16 Mar 2026 21:58:07 +0000
ROA not after:            Mon 15 Mar 2027 22:03:07 +0000
asID:                     268533
IP address blocks:        2804:52ac::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl
                          rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 23:14:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fa:3e:db:a1:1d:6c:84:86:31:a3:c7:a2:f2:29:4f:16:2b:43:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
        Validity
            Not Before: Mar 16 21:58:07 2026 GMT
            Not After : Mar 15 22:03:07 2027 GMT
        Subject: CN=1D5C24550D872651A2332D983201F050A88EB016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:52:fa:ce:2b:2a:05:70:c7:fc:83:63:84:8a:
                    54:ef:08:02:5f:62:ba:9b:7a:55:00:ad:ee:f1:43:
                    ca:5a:13:62:0f:98:40:c9:b4:c7:38:de:5d:16:e6:
                    f3:16:72:6b:1b:5e:0b:a0:e9:5d:f6:9c:46:64:e3:
                    c9:f3:0f:33:07:f2:e4:b6:ed:53:d0:62:30:1c:3d:
                    27:6f:ce:5e:0b:32:54:76:b6:d4:54:0f:6f:71:af:
                    cd:bf:a2:84:2e:cd:44:3d:7f:4c:e9:8c:12:bc:01:
                    07:5b:c4:ce:f5:43:32:6d:48:54:e5:9e:6f:41:89:
                    8a:4d:a7:9f:4a:2f:e6:be:0c:2d:31:86:69:02:8e:
                    ac:3e:72:a0:0f:c6:40:c6:03:50:04:7a:37:90:ac:
                    dc:46:7a:8f:93:c0:94:c0:6c:ad:5d:aa:e3:95:15:
                    21:70:e1:6c:73:bc:14:35:f6:b2:52:07:13:e3:e2:
                    dc:d6:04:dc:28:62:87:64:40:7a:96:fb:e3:2a:2d:
                    70:46:75:1d:54:c0:1e:d6:e2:32:51:82:28:02:a9:
                    36:21:33:b8:0a:1e:7f:b5:77:55:56:6c:d4:f7:ea:
                    1e:5d:0b:f7:14:7c:f1:e9:d5:08:26:b0:4f:07:8f:
                    c7:6f:d4:05:27:1b:1e:ad:f7:15:4c:d3:83:dc:31:
                    05:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5C:24:55:0D:87:26:51:A2:33:2D:98:32:01:F0:50:A8:8E:B0:16
            X509v3 Authority Key Identifier:
                keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a3a2f33342d3334203d3e20323638353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52ac::/34

    Signature Algorithm: sha256WithRSAEncryption
         7c:95:51:0d:a7:c0:20:fe:2a:ce:c3:e4:07:e8:ab:f9:82:bf:
         dd:cc:7a:35:ef:4d:26:99:c4:67:03:c2:73:e5:78:49:82:51:
         25:c4:27:45:73:42:1c:fd:d9:09:1c:37:5c:80:c8:de:1d:6b:
         5e:68:b3:93:2b:53:be:4f:eb:f5:17:0e:fc:71:28:68:34:4c:
         c9:20:51:35:04:67:5a:d7:9b:40:50:d9:78:35:4f:fa:46:a2:
         e2:96:fc:19:46:73:aa:5d:ed:4a:da:dc:23:c6:e1:40:ca:2f:
         9c:8c:0a:64:8b:aa:55:2f:b9:b7:5e:99:a0:d0:88:23:24:bb:
         0e:ed:0d:d5:73:63:11:ef:56:45:10:22:74:be:b2:6a:08:e9:
         32:4e:15:da:0f:c6:64:b0:94:0e:f9:bf:0a:da:dc:10:3f:64:
         2c:13:e5:0f:5d:1c:20:c2:07:5f:17:45:9c:e3:9c:48:e4:1c:
         e6:b1:23:ad:63:b8:ca:c2:01:2e:b5:2b:6b:f1:00:f1:dc:4f:
         81:c0:fb:3b:4c:3d:32:a8:12:5b:02:b3:a2:a8:6b:5e:c3:b9:
         15:a3:58:83:63:b2:2d:83:d5:88:81:2e:e3:07:6f:e7:a0:b8:
         cb:27:8a:3c:e3:64:fb:08:4c:75:8a:7c:69:17:e8:08:4b:97:
         7a:98:3c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:52:35 2026 by rpki-client