Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a3933303a3a2f34382d3438203d3e20323633303938.roa
File:                     323830343a313736633a3933303a3a2f34382d3438203d3e20323633303938.roa (raw, json)
Hash identifier:          kHdEeDkih++bz7xi1yTLYJ2vwWz4chd55Ed2glbhnME=
Subject key identifier:   0B:2F:AD:8A:A0:01:21:E9:11:91:52:68:06:AA:2C:30:A7:DA:AC:5F
Certificate issuer:       /CN=74F9C88A4F4F16E11392F600961CE950348548CB
Certificate serial:       759B075FEBE4B7AFCC5620F5233D77D091D48B04
Authority key identifier: 74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a3933303a3a2f34382d3438203d3e20323633303938.roa
Signing time:             Wed 03 Jun 2026 16:11:23 +0000
ROA not before:           Wed 03 Jun 2026 16:06:23 +0000
ROA not after:            Wed 02 Jun 2027 16:11:23 +0000
asID:                     263098
IP address blocks:        2804:176c:930::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 09:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9b:07:5f:eb:e4:b7:af:cc:56:20:f5:23:3d:77:d0:91:d4:8b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74F9C88A4F4F16E11392F600961CE950348548CB
        Validity
            Not Before: Jun  3 16:06:23 2026 GMT
            Not After : Jun  2 16:11:23 2027 GMT
        Subject: CN=0B2FAD8AA00121E91191526806AA2C30A7DAAC5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f2:68:88:e9:62:e7:f4:5d:9a:5d:46:a6:79:
                    10:d4:95:38:03:d2:bb:b2:01:23:f7:6f:5d:0f:25:
                    8e:21:ad:51:9f:3e:09:ee:6d:08:47:a0:00:70:7c:
                    d0:e1:15:93:02:24:2f:c4:96:a9:ba:72:f9:94:a7:
                    d9:af:42:e1:d1:71:50:48:b6:b8:39:98:a9:f9:a9:
                    0c:48:c7:30:ff:4a:db:59:67:eb:03:5d:9f:f4:47:
                    4e:93:7b:62:31:69:50:27:1c:b1:68:ea:f1:aa:bc:
                    b1:d7:93:fe:77:84:b2:ad:fc:3f:91:ef:61:8e:45:
                    e8:a1:32:de:08:55:a0:9f:54:90:f3:49:e3:13:ae:
                    db:d6:0a:47:1f:38:70:29:fe:c4:f2:8a:17:6e:3a:
                    5d:95:16:d7:85:c4:98:01:41:83:df:3d:c5:32:7d:
                    e7:5c:8d:4b:b3:c4:d2:79:3c:51:d1:f8:12:6a:5c:
                    5b:62:e5:0b:ca:27:97:37:cc:c6:d8:22:35:e1:16:
                    f1:c0:42:97:65:70:c0:75:21:19:9f:7b:9a:ce:75:
                    ec:af:1b:b6:5e:33:2a:3a:0a:fb:b9:89:92:9a:f1:
                    d3:07:d2:28:69:94:74:66:f4:e4:a4:79:95:95:f6:
                    5e:1d:90:2a:90:8f:f6:cd:0f:f6:21:76:43:82:82:
                    4e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2F:AD:8A:A0:01:21:E9:11:91:52:68:06:AA:2C:30:A7:DA:AC:5F
            X509v3 Authority Key Identifier:
                keyid:74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a3933303a3a2f34382d3438203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:176c:930::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:1c:5a:ed:80:0f:95:38:73:2a:01:a6:d2:65:a4:d7:de:45:
         15:1f:76:89:95:6a:7d:35:5c:41:dc:98:d9:01:8d:ba:1f:1f:
         20:5a:c3:90:32:51:43:56:d3:26:d0:ed:b5:38:d7:94:ba:53:
         12:3b:f9:23:b9:40:01:bb:5d:c2:da:84:a2:44:92:e2:16:55:
         50:03:d8:ff:61:11:b5:ef:c0:db:c0:e3:51:1a:63:f9:01:57:
         d5:81:d4:60:ad:c7:9b:6e:4b:29:d2:72:3f:f9:09:b7:ac:f9:
         7f:d7:6f:00:a7:7c:8d:a7:66:3c:f8:81:b8:3f:90:17:0c:05:
         b1:13:14:7b:79:21:bd:4f:f9:a1:cd:1f:c1:bb:e0:88:79:d0:
         63:b6:e6:6e:77:3c:ef:e8:8c:d6:67:67:7c:9d:02:9c:4c:12:
         ce:5a:4c:fa:68:15:f2:21:94:4c:4a:55:f6:4b:7e:b4:1b:a8:
         48:f2:e0:60:fb:28:42:64:0f:b3:41:16:70:89:2c:50:4f:c1:
         0c:6c:b1:55:dd:04:2d:fd:f4:87:25:87:cb:5d:7b:5d:04:66:
         fb:5d:f5:26:7d:0e:1b:95:ea:bf:b7:a3:e4:22:90:3b:71:b2:
         6e:65:e1:da:cb:fd:32:fe:12:22:d2:e7:65:5f:30:d8:ca:90:
         24:ef:56:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:16:59 2026 by rpki-client