Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a3a2f34302d3430203d3e20323633303938.roa
File:                     323830343a313736633a3a2f34302d3430203d3e20323633303938.roa (raw, json)
Hash identifier:          ED2d2p6+FH6kACJvVl4CHjZnzpwE5SJyUCeT9z4qD7Y=
Subject key identifier:   31:88:3B:3A:53:5C:EB:A3:A6:D6:3D:B8:0A:48:01:FD:75:09:D4:DF
Certificate issuer:       /CN=74F9C88A4F4F16E11392F600961CE950348548CB
Certificate serial:       4D767518398D687E284213F5396FCD0057609FCA
Authority key identifier: 74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a3a2f34302d3430203d3e20323633303938.roa
Signing time:             Wed 03 Jun 2026 16:11:23 +0000
ROA not before:           Wed 03 Jun 2026 16:06:23 +0000
ROA not after:            Wed 02 Jun 2027 16:11:23 +0000
asID:                     263098
IP address blocks:        2804:176c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 09:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:76:75:18:39:8d:68:7e:28:42:13:f5:39:6f:cd:00:57:60:9f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74F9C88A4F4F16E11392F600961CE950348548CB
        Validity
            Not Before: Jun  3 16:06:23 2026 GMT
            Not After : Jun  2 16:11:23 2027 GMT
        Subject: CN=31883B3A535CEBA3A6D63DB80A4801FD7509D4DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:11:e2:d1:9a:66:b6:bf:b4:23:94:43:6d:42:
                    52:42:44:47:46:99:13:b1:23:8d:76:71:3a:bd:28:
                    74:00:ee:c9:d3:a0:93:70:76:a9:17:fc:fc:49:f1:
                    95:59:26:92:16:7b:d0:6f:a7:0f:3d:ee:06:95:d4:
                    20:b5:01:b1:1e:8a:54:25:92:95:94:e4:96:84:ef:
                    57:49:57:4c:b4:5a:4c:5d:b8:2b:56:1f:39:b3:cd:
                    85:a6:f3:3c:09:eb:c8:42:8c:bd:fc:8a:69:74:75:
                    e1:9c:f3:13:81:47:28:13:c9:5d:6f:6d:68:0b:1a:
                    52:2d:30:74:b7:6c:06:13:67:8c:bd:ad:fa:02:4e:
                    e1:3c:96:8d:b7:a9:40:87:78:60:c5:d2:0c:76:65:
                    9f:52:07:58:b4:c3:19:d1:8a:89:14:9c:dd:ad:4f:
                    ad:a6:1e:86:b3:02:94:aa:77:db:b1:50:32:01:6b:
                    22:6e:07:31:eb:b6:22:cb:c6:0a:21:bc:b5:eb:86:
                    59:c2:ba:e2:0c:05:29:bc:02:70:f9:a8:cf:21:ec:
                    3a:74:70:13:57:f5:d1:78:33:ec:22:27:ec:6d:ba:
                    1a:b1:f0:bd:86:2b:c8:f3:49:e1:15:34:31:18:a6:
                    9f:b0:d2:a0:d1:b1:87:03:07:62:a3:28:82:ff:aa:
                    7d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:88:3B:3A:53:5C:EB:A3:A6:D6:3D:B8:0A:48:01:FD:75:09:D4:DF
            X509v3 Authority Key Identifier:
                keyid:74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a3a2f34302d3430203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:176c::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:99:80:f9:6e:03:24:7a:48:63:c5:04:14:7d:bd:0d:34:9f:
         5c:37:52:4e:f6:e2:75:2c:e1:fc:6c:5d:e4:50:73:33:56:62:
         f9:fc:ec:92:ac:48:f4:99:cc:13:8f:46:df:13:dc:05:5e:7f:
         f2:23:45:d7:9f:ce:48:f7:33:08:19:17:76:c1:51:d4:81:40:
         f1:90:5f:75:be:5a:10:d5:b7:4f:44:4b:93:27:af:aa:71:5a:
         2c:51:11:19:83:a0:54:06:bf:a6:58:18:72:52:d1:fd:33:ba:
         80:ff:cc:59:e9:74:22:e4:72:dc:5b:82:cd:6a:e3:fa:50:ff:
         fa:2e:94:e9:5b:e8:c0:c3:d5:4a:99:d1:a3:84:4b:cc:cc:c4:
         1b:3e:f5:8d:d9:2c:60:f6:78:f4:1b:b9:f7:01:f6:2d:a4:ce:
         02:ee:0a:80:d2:bd:20:c3:56:ae:51:b2:a2:58:98:a1:8f:72:
         ad:0d:e9:8a:01:ab:bc:b4:ad:53:71:78:f9:52:a4:6c:07:c3:
         f5:92:46:fd:87:7c:c7:ed:76:21:0e:32:16:14:72:91:99:26:
         57:2f:4f:31:f0:83:ed:a3:19:64:dc:22:29:5d:35:af:d1:87:
         de:8d:13:4c:2b:dc:bd:a7:ce:4a:0b:26:9c:c5:20:72:7e:f2:
         65:68:67:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:12:41 2026 by rpki-client