Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a363030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a363030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          g0wC4r/rIKFSL81akvlelLpgXRLstOPnAFqGO/xzCgY=
Subject key identifier:   A5:01:F4:87:0A:68:C7:03:4A:84:33:6F:29:B5:D7:86:29:D4:99:CD
Certificate issuer:       /CN=60E5E85875AA425349FC348EA2ACB29313D099EC
Certificate serial:       5DA1C73F459E3BB029CDDED79B25AD8A13C52710
Authority key identifier: 60:E5:E8:58:75:AA:42:53:49:FC:34:8E:A2:AC:B2:93:13:D0:99:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a363030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Wed 26 Aug 2026 18:15:35 +0000
ROA not before:           Wed 26 Aug 2026 18:10:35 +0000
ROA not after:            Wed 25 Aug 2027 18:15:35 +0000
asID:                     263059
IP address blocks:        2804:934:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 20:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a1:c7:3f:45:9e:3b:b0:29:cd:de:d7:9b:25:ad:8a:13:c5:27:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E5E85875AA425349FC348EA2ACB29313D099EC
        Validity
            Not Before: Aug 26 18:10:35 2026 GMT
            Not After : Aug 25 18:15:35 2027 GMT
        Subject: CN=A501F4870A68C7034A84336F29B5D78629D499CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c4:1c:cf:38:05:e8:6f:e8:7a:80:a1:4e:93:
                    69:0a:d5:32:80:b7:17:19:c6:b3:e0:3d:18:16:ee:
                    22:95:df:51:10:ed:bc:dc:39:a7:c0:f1:b7:ef:66:
                    29:7b:56:51:94:de:be:f9:e3:77:c0:ee:e2:cd:c8:
                    ba:b0:07:df:ad:1f:fc:84:b0:2d:01:9f:b8:c9:f0:
                    77:6f:ff:66:14:fd:bb:f1:58:08:34:39:88:2d:50:
                    1a:07:73:4b:f0:1f:3c:bc:10:27:1a:bf:47:06:44:
                    d3:17:b2:9d:13:df:1a:0f:5f:10:6b:e5:5d:ac:a1:
                    a5:23:57:8b:8a:76:a9:a2:8f:30:ae:b0:da:45:43:
                    47:8b:39:1f:de:64:31:21:49:d0:d9:e5:fd:02:8e:
                    53:a4:04:00:f5:93:1a:c7:6f:01:2d:34:2d:6f:66:
                    fc:ef:1d:ac:37:1f:18:99:93:6e:99:57:d9:3a:b8:
                    02:88:e3:b5:34:91:0c:cd:49:af:aa:02:6e:f9:a8:
                    b0:f6:22:f1:36:7d:dd:43:86:91:c6:0f:93:8d:57:
                    f9:22:46:3b:b5:0c:cc:ea:76:b1:fc:53:84:de:26:
                    2a:c3:c2:a0:11:b2:a8:1e:16:7f:3e:90:2e:53:28:
                    3d:53:09:61:8d:84:07:68:78:cb:20:6b:76:72:4d:
                    3a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:01:F4:87:0A:68:C7:03:4A:84:33:6F:29:B5:D7:86:29:D4:99:CD
            X509v3 Authority Key Identifier:
                keyid:60:E5:E8:58:75:AA:42:53:49:FC:34:8E:A2:AC:B2:93:13:D0:99:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a363030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6c:7d:34:ff:9e:7b:87:f2:4f:dd:08:b9:96:fa:ec:53:6d:39:
         81:2b:3e:bc:9e:08:37:06:5a:72:a1:1d:83:6c:84:38:06:28:
         f5:c4:d6:67:29:2e:75:11:60:f3:7b:7c:b4:5d:bc:d5:74:ee:
         bd:9c:d5:c5:79:6f:d7:18:1a:ec:ec:cd:6f:ab:27:0a:67:0f:
         88:3f:4b:79:df:dd:cd:e9:27:37:f1:ba:15:e1:bd:2b:67:4d:
         9a:3d:76:fa:d7:b6:cb:4a:8d:0f:ff:4c:78:47:36:6f:c1:e3:
         da:02:5a:15:bb:e6:f1:d3:f8:bf:9a:ab:b4:89:87:07:0c:e0:
         d7:50:79:f0:70:2c:17:ce:46:6a:e1:1c:fe:b5:bf:76:84:b8:
         f3:d3:f7:39:25:f4:e4:9c:30:97:30:2f:3e:7d:4a:82:e3:72:
         3e:ef:1d:38:e6:df:5c:22:e2:96:b2:95:95:a2:90:2d:6d:b7:
         0e:1e:6e:ee:e6:09:af:ca:50:43:0f:5a:ac:d9:42:8d:8e:27:
         f8:33:af:21:e6:d5:63:53:4d:7a:59:93:2c:18:ef:3d:02:de:
         56:6b:f1:c3:4f:83:7c:aa:f1:db:16:bb:81:6a:aa:c0:dc:ff:
         52:f5:f2:fa:ae:96:71:94:2b:10:1c:63:95:82:7a:40:76:90:
         2f:3b:1d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:42:46 2026 by rpki-client