Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/323830343a386335343a3a2f33322d3438203d3e20323733373936.roa
File:                     323830343a386335343a3a2f33322d3438203d3e20323733373936.roa (raw, json)
Hash identifier:          Bsm10JCjVdYJiQ/MObFoO8rQCpvCL6AE4Ycj3RpQ3RQ=
Subject key identifier:   40:B8:9A:A8:E6:B1:B0:CB:4F:84:FD:6D:1C:C0:79:D0:A0:1E:58:17
Certificate issuer:       /CN=1384276F75D360EFCBAAAF9FB493DF045DE4D26B
Certificate serial:       7536A2BD94C4A82B94543E1ED7D35DC1BD5FB7DE
Authority key identifier: 13:84:27:6F:75:D3:60:EF:CB:AA:AF:9F:B4:93:DF:04:5D:E4:D2:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/323830343a386335343a3a2f33322d3438203d3e20323733373936.roa
Signing time:             Mon 20 Apr 2026 20:30:24 +0000
ROA not before:           Mon 20 Apr 2026 20:25:24 +0000
ROA not after:            Mon 19 Apr 2027 20:30:24 +0000
asID:                     273796
IP address blocks:        2804:8c54::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.crl
                          rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 16:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:36:a2:bd:94:c4:a8:2b:94:54:3e:1e:d7:d3:5d:c1:bd:5f:b7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1384276F75D360EFCBAAAF9FB493DF045DE4D26B
        Validity
            Not Before: Apr 20 20:25:24 2026 GMT
            Not After : Apr 19 20:30:24 2027 GMT
        Subject: CN=40B89AA8E6B1B0CB4F84FD6D1CC079D0A01E5817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:62:f7:41:c8:f9:d7:56:c3:5d:33:70:8e:
                    0a:a3:0f:2a:c0:b6:d5:e2:c1:1c:17:90:0e:bd:fd:
                    d3:97:3b:90:d6:06:7d:75:b1:0d:ca:67:4f:38:dd:
                    0d:f4:ca:cd:ea:bb:dd:cc:0f:85:a2:61:64:48:20:
                    cd:8e:24:1b:19:64:15:f2:7f:05:3d:43:da:b1:eb:
                    d5:fc:c2:f1:b4:80:b9:96:f7:80:b8:66:b5:42:ad:
                    77:95:86:87:a6:03:f1:68:b7:09:76:4d:6a:a0:40:
                    34:2e:a6:ff:fc:c8:9c:f2:15:5c:83:8a:12:cc:9b:
                    cb:6a:31:d6:c7:21:de:15:3b:de:e5:4f:86:e1:a3:
                    b5:35:f3:d2:4c:73:71:86:a5:8a:d9:30:0e:ea:6a:
                    87:88:b1:be:22:b3:aa:67:7a:96:b7:d3:e2:c5:fb:
                    72:63:57:04:0a:a9:08:64:51:1e:96:51:60:e3:99:
                    19:14:4f:75:16:6a:ea:0d:9d:2e:d6:7e:80:90:03:
                    76:28:e2:77:92:5f:c5:bc:12:76:8f:03:f9:4b:7d:
                    45:bf:c6:7a:4c:6a:c3:d4:5b:eb:3f:44:fc:c6:8c:
                    3c:10:15:82:f7:22:08:e2:95:ce:46:6a:e4:23:f2:
                    c9:66:ed:0b:48:57:99:3b:05:52:0e:5a:f0:5f:3a:
                    53:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B8:9A:A8:E6:B1:B0:CB:4F:84:FD:6D:1C:C0:79:D0:A0:1E:58:17
            X509v3 Authority Key Identifier:
                keyid:13:84:27:6F:75:D3:60:EF:CB:AA:AF:9F:B4:93:DF:04:5D:E4:D2:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1384276F75D360EFCBAAAF9FB493DF045DE4D26B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GssWMTYyKwJPzK4VHgVxpaaLoPjTEmYgNC95rq9Tbf1i/0/323830343a386335343a3a2f33322d3438203d3e20323733373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c54::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:45:9e:33:95:1a:1d:92:2a:4d:43:3c:89:c0:d5:ec:b1:3f:
         7c:ea:2b:c0:09:79:14:b5:53:0c:ad:75:fb:3e:f0:3b:f7:56:
         b9:24:cf:14:83:01:37:9a:54:c7:ba:cf:f4:00:57:0b:07:5d:
         a5:e4:10:77:7c:23:77:ba:94:e6:2c:17:19:a9:67:78:ce:5b:
         0f:22:9f:7c:31:7d:50:35:3d:2f:21:55:e2:bf:6d:e8:88:96:
         e7:6c:b8:12:f2:f0:1e:be:92:13:6a:f2:43:2e:2f:c6:b7:89:
         10:3a:a1:4d:f9:02:9a:a0:1b:6e:ad:c3:31:a8:a8:47:1a:3c:
         a7:aa:ee:ab:05:ca:7a:61:ac:dc:79:bf:dc:94:3f:df:24:7a:
         c8:fa:c2:b0:0f:5c:e0:4e:d1:77:32:66:9d:ce:22:db:0e:1f:
         92:d5:dc:7d:bf:02:76:75:89:03:5f:b1:bb:e6:84:4d:29:5a:
         31:ab:fe:a5:92:65:fa:42:c7:69:61:95:d4:6d:bc:ce:a3:f1:
         f1:89:04:52:00:74:84:3b:7a:53:3a:af:77:b9:48:01:e1:1e:
         6d:e7:ac:86:e0:07:2e:90:12:d5:4b:e8:30:b4:db:73:c2:ad:
         45:d2:45:d5:64:cc:bd:ea:82:0c:74:c2:ab:a5:f9:60:fd:bc:
         c8:9d:94:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:44:16 2026 by rpki-client