Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa
File:                     323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa (raw, json)
Hash identifier:          Kgzl9EzfUT2oOHFbVTaJAuuQ1m5NtC93kNhgib0eYQM=
Subject key identifier:   CF:1B:99:7C:05:2B:0F:2F:37:74:E0:DA:3C:83:16:A6:CC:19:E2:26
Certificate issuer:       /CN=6663A4DA72EB04001BC0FEF1C15C5F427A316FBF
Certificate serial:       3F1C5D61AB7C43255B8747757146145FBD78A0C1
Authority key identifier: 66:63:A4:DA:72:EB:04:00:1B:C0:FE:F1:C1:5C:5F:42:7A:31:6F:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6663A4DA72EB04001BC0FEF1C15C5F427A316FBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa
Signing time:             Sat 12 Sep 2026 14:31:24 +0000
ROA not before:           Sat 12 Sep 2026 14:26:24 +0000
ROA not after:            Sat 11 Sep 2027 14:31:24 +0000
asID:                     270440
IP address blocks:        2804:6c04:c800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/6663A4DA72EB04001BC0FEF1C15C5F427A316FBF.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/6663A4DA72EB04001BC0FEF1C15C5F427A316FBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6663A4DA72EB04001BC0FEF1C15C5F427A316FBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 08:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1c:5d:61:ab:7c:43:25:5b:87:47:75:71:46:14:5f:bd:78:a0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6663A4DA72EB04001BC0FEF1C15C5F427A316FBF
        Validity
            Not Before: Sep 12 14:26:24 2026 GMT
            Not After : Sep 11 14:31:24 2027 GMT
        Subject: CN=CF1B997C052B0F2F3774E0DA3C8316A6CC19E226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:99:3c:a8:bb:c5:45:83:29:0b:c7:80:e1:61:
                    1e:92:5c:51:bf:74:c4:bc:73:14:1b:d4:b6:bf:6d:
                    14:bb:fb:88:2f:d0:1a:ca:f7:23:f2:cc:2e:7a:13:
                    38:5b:a5:91:3a:8f:99:e3:0b:af:6a:8f:04:86:ff:
                    66:b5:0c:7d:28:f2:4d:75:34:ff:cd:aa:22:ff:f9:
                    f8:6a:e2:e1:31:cc:d4:6a:5e:14:2e:55:be:b4:65:
                    9e:32:69:9e:d4:ef:ca:58:ce:97:d7:a2:1a:2c:17:
                    42:a0:db:56:1e:6d:e3:e8:5b:82:2b:67:00:64:4d:
                    8b:83:a7:b9:f9:ac:8f:75:47:bd:a7:d1:ea:27:38:
                    29:50:dd:a1:cb:61:72:33:91:8a:5d:47:e4:5e:44:
                    98:2f:d7:08:93:28:ad:33:85:e7:01:c5:b3:13:a9:
                    bb:db:b1:93:5d:d4:f7:94:f4:97:23:d3:73:32:89:
                    88:6c:bb:c2:9b:81:8a:e4:ac:5c:25:42:f3:49:dd:
                    d0:3a:a8:9f:ab:3b:3d:3d:c9:1b:4c:52:72:dc:70:
                    77:8e:03:c6:e2:cd:e6:27:cb:ea:27:61:c5:83:33:
                    f8:f3:53:62:03:16:3c:30:7f:45:ae:53:03:2c:9c:
                    29:ec:cd:12:cf:ef:80:6f:c1:e5:a6:79:7e:3c:89:
                    f9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1B:99:7C:05:2B:0F:2F:37:74:E0:DA:3C:83:16:A6:CC:19:E2:26
            X509v3 Authority Key Identifier:
                keyid:66:63:A4:DA:72:EB:04:00:1B:C0:FE:F1:C1:5C:5F:42:7A:31:6F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/6663A4DA72EB04001BC0FEF1C15C5F427A316FBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6663A4DA72EB04001BC0FEF1C15C5F427A316FBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633830303a3a2f33372d3337203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:c800::/37

    Signature Algorithm: sha256WithRSAEncryption
         11:1c:d6:54:68:b8:df:9c:b4:16:f9:ea:93:0e:1c:39:20:0b:
         37:ba:48:e8:94:4d:a6:d7:25:7a:b5:d5:bd:5e:e2:a3:7f:6d:
         86:97:4c:cf:1f:69:7b:08:c2:e3:ac:09:7b:f1:01:4c:d4:a5:
         35:52:ae:c3:fa:0f:66:c6:9c:d3:41:61:47:6d:7b:c1:46:de:
         a9:65:df:3c:6d:5b:e1:68:ea:ab:e6:06:19:29:ab:4b:55:9d:
         bc:42:56:8b:06:72:72:f6:2b:60:58:6e:de:35:e2:0c:49:ff:
         26:39:7c:7b:c6:cd:82:93:16:5e:3e:8b:40:9a:3f:50:01:f7:
         48:10:ac:f2:06:c0:7d:73:7c:e7:08:f6:95:bd:ea:61:d7:3c:
         5e:77:fb:69:9e:7b:08:7b:e3:1e:11:b2:9a:83:11:dc:1c:ba:
         27:68:42:59:95:d8:d7:40:17:27:4b:de:50:0b:d5:9d:3c:e1:
         ec:55:60:38:51:d2:38:e5:22:30:50:bd:d1:7f:77:41:50:f7:
         25:9d:53:f0:9d:4c:bd:30:8b:91:23:32:ca:dd:20:57:50:2f:
         3b:85:f9:b8:6c:48:01:ac:69:6b:b3:4e:73:54:1c:97:2e:c2:
         49:0b:61:df:38:72:cd:0d:fd:3c:c0:f0:00:93:27:77:5e:c0:
         50:b2:2d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:24:38 2026 by rpki-client