Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/323830343a343334383a3530303a3a2f34302d3430203d3e20323637353630.roa
File:                     323830343a343334383a3530303a3a2f34302d3430203d3e20323637353630.roa (raw, json)
Hash identifier:          tk1XKnzokZAIAmkUcLkgDvBra4O0IzUKwnE/bUFGnLU=
Subject key identifier:   E1:EF:49:02:E5:65:E9:7E:C7:DA:43:26:C6:55:9F:81:1F:DA:14:3F
Certificate issuer:       /CN=F114ED2B0D889B3BC5C887C81681FF931A2B7FD3
Certificate serial:       602B9426EB9A8CC986F6D5E8896FFD40199B6A2E
Authority key identifier: F1:14:ED:2B:0D:88:9B:3B:C5:C8:87:C8:16:81:FF:93:1A:2B:7F:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F114ED2B0D889B3BC5C887C81681FF931A2B7FD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/323830343a343334383a3530303a3a2f34302d3430203d3e20323637353630.roa
Signing time:             Tue 30 Jun 2026 17:20:19 +0000
ROA not before:           Tue 30 Jun 2026 17:15:19 +0000
ROA not after:            Tue 29 Jun 2027 17:20:19 +0000
asID:                     267560
IP address blocks:        2804:4348:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/F114ED2B0D889B3BC5C887C81681FF931A2B7FD3.crl
                          rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/F114ED2B0D889B3BC5C887C81681FF931A2B7FD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F114ED2B0D889B3BC5C887C81681FF931A2B7FD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:2b:94:26:eb:9a:8c:c9:86:f6:d5:e8:89:6f:fd:40:19:9b:6a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F114ED2B0D889B3BC5C887C81681FF931A2B7FD3
        Validity
            Not Before: Jun 30 17:15:19 2026 GMT
            Not After : Jun 29 17:20:19 2027 GMT
        Subject: CN=E1EF4902E565E97EC7DA4326C6559F811FDA143F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:27:5a:c6:1c:90:78:c6:4a:92:ac:76:4c:bc:
                    70:92:9b:75:54:fb:b5:88:04:73:de:0d:e0:ba:fa:
                    ff:c7:a1:da:1d:1a:51:b1:04:b5:38:53:27:82:ea:
                    6e:bf:50:1d:3d:b3:07:07:21:a2:56:c1:fc:ba:d2:
                    ad:b3:b7:62:d4:e6:5e:dc:71:d0:c7:03:36:ef:c0:
                    8d:50:0e:02:86:63:79:31:12:2e:46:69:96:1e:91:
                    c7:d5:d5:3c:db:4e:dc:e6:40:a7:aa:c5:e9:e3:81:
                    83:18:70:08:e8:c9:f5:07:e2:33:bb:1d:e5:34:e4:
                    68:7d:68:eb:50:96:e6:dd:bc:7e:fa:f0:e9:0c:6c:
                    2a:ff:c4:01:03:35:dd:25:ac:bc:5d:a1:65:38:aa:
                    62:fc:ec:89:9c:ef:13:2a:6e:83:87:d3:1b:11:1a:
                    e7:3c:4e:d1:b3:fc:77:bc:68:bb:f1:e8:1a:8e:5e:
                    7c:42:b3:db:8a:3b:db:a0:ab:80:cc:2c:cf:13:ef:
                    38:82:85:cf:92:8e:ae:a4:6c:5e:78:74:eb:42:e6:
                    4c:8d:1e:0e:e9:1f:85:c0:80:38:b4:c9:55:8e:af:
                    83:b4:5b:06:76:f6:20:68:82:12:d3:a2:44:44:35:
                    21:89:c3:26:5b:99:5b:e7:f4:26:82:8e:34:de:23:
                    91:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EF:49:02:E5:65:E9:7E:C7:DA:43:26:C6:55:9F:81:1F:DA:14:3F
            X509v3 Authority Key Identifier:
                keyid:F1:14:ED:2B:0D:88:9B:3B:C5:C8:87:C8:16:81:FF:93:1A:2B:7F:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/F114ED2B0D889B3BC5C887C81681FF931A2B7FD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F114ED2B0D889B3BC5C887C81681FF931A2B7FD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/1/323830343a343334383a3530303a3a2f34302d3430203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4348:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:f2:e5:98:8a:be:d0:57:f8:4b:c2:cd:ed:ba:0a:a1:09:10:
         14:51:98:fd:4b:b2:00:b8:cc:7c:c2:fe:44:5a:b4:e2:6b:c0:
         b8:f6:6e:2b:95:0d:53:4e:53:eb:fd:d9:78:41:37:06:4e:ac:
         a3:89:81:dc:28:36:9e:dc:1d:21:ee:ef:45:10:3a:bd:40:6e:
         1d:76:fa:85:da:de:6e:57:a6:7a:f7:c2:04:7d:9c:54:b8:2b:
         df:cd:a2:70:36:c9:87:9a:1a:d5:22:91:3a:43:43:58:33:33:
         a7:7a:bf:54:0d:7a:b4:7d:6c:4d:bf:29:95:d6:1c:37:81:43:
         a2:28:81:da:d1:ba:64:fc:cf:eb:b8:80:11:96:ea:4e:f9:2e:
         ce:f9:59:69:e1:28:f5:76:07:88:cd:1e:b2:c9:73:5f:b2:d1:
         86:a9:10:f7:4c:f6:b5:46:91:3a:d3:fe:4b:76:45:b7:38:d1:
         aa:5b:44:5c:36:43:e5:e3:5e:15:95:0b:a7:98:52:1a:b4:60:
         10:59:05:fa:26:ae:27:e5:2e:f1:6f:a9:bd:57:2e:3c:b4:e3:
         8f:05:a0:78:97:11:94:05:04:a6:18:2e:e8:a6:a9:3a:7c:fd:
         ed:54:39:73:62:e5:cc:f4:e5:12:8b:b6:af:24:e1:71:43:be:
         6c:19:f3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:52:06 2026 by rpki-client