Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a313730303a3a2f34302d3430203d3e20323633303938.roa
File:                     323830343a313736633a313730303a3a2f34302d3430203d3e20323633303938.roa (raw, json)
Hash identifier:          vhn4Rw9M/Bggl27MK0vGnO78pMCpKdR26ijT6kH2R9k=
Subject key identifier:   A5:B2:95:5E:DE:CE:1A:4A:49:E2:78:81:49:07:D3:95:C4:9A:80:4D
Certificate issuer:       /CN=74F9C88A4F4F16E11392F600961CE950348548CB
Certificate serial:       229E756FC6DC60F8ABE3444B88ECAAD91728EA7F
Authority key identifier: 74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a313730303a3a2f34302d3430203d3e20323633303938.roa
Signing time:             Wed 03 Jun 2026 16:11:24 +0000
ROA not before:           Wed 03 Jun 2026 16:06:24 +0000
ROA not after:            Wed 02 Jun 2027 16:11:24 +0000
asID:                     263098
IP address blocks:        2804:176c:1700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 09:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9e:75:6f:c6:dc:60:f8:ab:e3:44:4b:88:ec:aa:d9:17:28:ea:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74F9C88A4F4F16E11392F600961CE950348548CB
        Validity
            Not Before: Jun  3 16:06:24 2026 GMT
            Not After : Jun  2 16:11:24 2027 GMT
        Subject: CN=A5B2955EDECE1A4A49E278814907D395C49A804D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:40:fc:3e:d0:75:6b:90:c7:97:a0:5d:b8:b7:
                    a1:6b:43:c6:48:5f:1e:a8:e2:ce:56:55:bb:e2:8d:
                    a6:c9:4e:87:7f:2a:cb:1d:5c:3e:bc:cf:0e:07:0c:
                    d7:76:3f:44:89:c0:0e:39:c9:13:af:05:43:3d:b6:
                    a3:c8:02:5d:89:85:01:a9:61:2a:a8:c9:04:d6:da:
                    e6:7a:15:b3:5c:2c:f1:5c:da:3a:70:40:66:b8:3d:
                    72:28:fd:d2:78:04:0c:0d:a3:45:d1:37:8a:05:30:
                    12:fd:8f:e6:20:f1:35:25:a7:94:f6:45:73:ba:3c:
                    5f:86:d9:d4:f6:84:c7:bb:13:04:f9:89:a1:32:04:
                    e9:de:b4:93:3a:74:9c:3a:5d:b6:48:ca:4e:94:7b:
                    61:55:cc:9a:93:0c:93:a4:14:c4:61:9a:4b:f6:3e:
                    1c:86:79:23:ed:76:00:49:2c:52:89:01:6c:10:75:
                    39:ec:08:12:53:be:c8:2d:73:e4:7e:22:fe:bb:1c:
                    1a:72:13:d1:1c:a7:76:39:00:84:aa:a5:93:1d:5f:
                    7b:5e:87:ce:44:52:7c:f5:25:9b:ad:b5:8f:2d:02:
                    aa:43:be:43:55:9e:73:00:e6:4b:75:ba:f3:de:42:
                    74:ca:64:e1:d4:ae:c7:61:44:fe:42:67:ae:8a:a4:
                    95:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B2:95:5E:DE:CE:1A:4A:49:E2:78:81:49:07:D3:95:C4:9A:80:4D
            X509v3 Authority Key Identifier:
                keyid:74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a313730303a3a2f34302d3430203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:176c:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:6c:45:b9:ed:f6:ae:a1:e8:1e:db:44:f1:9c:1f:61:50:4f:
         9e:7f:11:73:97:9d:12:33:7c:13:32:00:c5:39:81:9c:e0:d1:
         1d:e0:8d:25:49:eb:b3:96:af:b9:a0:fa:e8:e2:55:03:4b:46:
         5b:53:bb:36:ed:b1:21:13:9d:79:c5:fb:c0:ea:1f:35:8c:50:
         47:61:ff:55:18:94:e2:26:bc:af:b7:e2:1a:95:f4:df:97:85:
         20:7b:e6:d5:ef:aa:5b:ed:11:db:aa:ba:6b:17:1b:65:1e:e6:
         44:94:b3:55:ab:ed:3c:88:25:45:7d:08:06:bd:29:ae:92:34:
         45:62:57:2f:f5:2f:49:c6:33:c4:7d:70:4d:5b:4c:ec:5c:98:
         a1:82:a3:22:8a:77:b0:5d:17:d5:07:0d:47:0e:55:a7:50:6d:
         83:58:80:8f:b9:43:cb:3c:7d:3b:a8:0b:0e:d3:ce:93:a2:76:
         54:a8:68:30:be:8e:4f:73:84:61:fe:fe:50:2f:5d:4f:8a:9c:
         66:dd:b5:59:1b:97:3c:55:af:fc:8e:ac:b8:53:78:1f:b8:e2:
         da:90:35:2d:20:0f:1c:a8:a0:5b:ea:ed:c2:32:d2:fe:6f:87:
         d1:a7:db:85:ea:f9:0f:4e:eb:b3:16:14:2c:32:ec:37:2e:d7:
         57:66:72:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:02 2026 by rpki-client