Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a3965663a3a2f34382d3438203d3e20323633303938.roa
File:                     323830343a313736633a3965663a3a2f34382d3438203d3e20323633303938.roa (raw, json)
Hash identifier:          +o/lmJSnZvNLGeI7USISBfgXfppCp/3IQ6fCifQzOsU=
Subject key identifier:   B1:2E:87:68:27:D8:97:D0:98:85:8C:4F:12:4F:FA:37:80:A5:D7:8D
Certificate issuer:       /CN=74F9C88A4F4F16E11392F600961CE950348548CB
Certificate serial:       4614A1AA6C286EFBA5CA345A8972FCDF1B8DCEF6
Authority key identifier: 74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a3965663a3a2f34382d3438203d3e20323633303938.roa
Signing time:             Wed 03 Jun 2026 16:11:27 +0000
ROA not before:           Wed 03 Jun 2026 16:06:27 +0000
ROA not after:            Wed 02 Jun 2027 16:11:27 +0000
asID:                     263098
IP address blocks:        2804:176c:9ef::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 09:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:14:a1:aa:6c:28:6e:fb:a5:ca:34:5a:89:72:fc:df:1b:8d:ce:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74F9C88A4F4F16E11392F600961CE950348548CB
        Validity
            Not Before: Jun  3 16:06:27 2026 GMT
            Not After : Jun  2 16:11:27 2027 GMT
        Subject: CN=B12E876827D897D098858C4F124FFA3780A5D78D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:76:f2:3f:74:df:76:d0:cf:07:86:25:8e:be:
                    57:94:14:33:81:90:95:79:ff:bf:6e:b2:7e:2b:a2:
                    2e:e5:52:83:49:03:5f:75:59:00:ca:23:d4:41:21:
                    da:8d:7d:dd:d4:a1:50:5a:08:5e:1f:ee:c2:d0:ad:
                    a4:c5:52:7c:6b:05:85:3d:a7:fc:67:59:d2:a7:15:
                    3d:fa:69:fc:2f:69:70:da:11:9d:e0:c6:69:d2:69:
                    14:7e:10:a8:85:83:7b:39:bf:6c:e4:1d:85:e4:89:
                    a5:a6:ea:1d:ef:25:23:0f:e0:5e:da:3c:71:23:06:
                    43:4a:47:7b:fe:6c:60:99:dc:c0:13:29:45:91:3b:
                    7b:c2:44:6b:f3:8a:26:6e:50:36:f0:20:4c:b3:61:
                    ef:b3:4e:9a:8a:17:db:50:bc:e1:b8:cf:54:78:74:
                    33:56:7f:26:11:61:37:76:7f:cf:2f:3e:87:8a:4a:
                    40:81:a8:08:46:05:be:0d:5e:18:a7:10:ad:86:ee:
                    eb:c9:90:b0:04:96:cc:5b:66:61:25:9a:7a:07:b1:
                    51:e4:18:56:87:a5:1d:f9:39:c5:5c:28:eb:09:ce:
                    2d:26:5d:bd:b8:b4:60:84:ea:51:4b:d5:86:b6:1c:
                    91:8c:8e:19:0b:7d:d8:ed:60:e2:8b:08:81:10:ff:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2E:87:68:27:D8:97:D0:98:85:8C:4F:12:4F:FA:37:80:A5:D7:8D
            X509v3 Authority Key Identifier:
                keyid:74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a3965663a3a2f34382d3438203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:176c:9ef::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:85:90:97:a2:bf:bf:52:6e:d7:52:9a:e0:76:82:05:bd:b6:
         21:f9:7a:a3:67:06:fa:63:e4:ed:b2:26:a0:81:54:14:9e:e2:
         6b:05:e5:34:44:61:e2:bf:ab:33:aa:2f:f1:43:2f:eb:3e:31:
         b4:d4:ba:40:89:ba:6d:3b:f7:5b:5e:73:6f:b0:35:7a:38:e8:
         f0:e7:cf:78:6e:a4:0b:b9:02:69:d3:09:e0:82:84:33:f3:d5:
         02:b9:36:be:45:cc:cb:1f:28:04:5f:f7:81:df:2e:05:88:74:
         31:56:56:35:9e:7a:d0:b2:3d:cb:3b:4f:e7:0b:3d:bd:c8:fb:
         a2:97:4a:13:76:6c:89:38:8d:2b:d3:14:6f:49:69:0a:95:7c:
         cb:84:8a:53:31:24:d0:36:a8:5f:f7:9c:b4:2d:38:51:42:a2:
         69:25:a0:06:e2:ee:73:aa:0b:62:d0:83:0c:25:6b:5a:ae:44:
         59:2e:fd:36:6f:0a:1e:66:2f:21:9a:87:3e:60:f9:83:b9:c3:
         5e:b0:7b:bf:5c:99:cd:ca:fe:88:9a:e1:05:15:9b:db:4f:60:
         5f:3f:5f:b8:56:cc:4f:7d:e5:13:42:6b:2a:98:86:00:cc:07:
         3c:cb:fc:84:69:f2:7f:f9:f4:a0:76:84:42:36:0c:18:85:cd:
         6b:ca:9e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:12:41 2026 by rpki-client