Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a383030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a383030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          t9C0iyFDe8oblii9cg/AxT8BHeCRS+UdHvgOfFR7TQs=
Subject key identifier:   0C:18:3E:25:4F:4B:C5:6C:9D:C1:A6:08:B2:6E:E0:28:58:50:1E:20
Certificate issuer:       /CN=60E5E85875AA425349FC348EA2ACB29313D099EC
Certificate serial:       5DAD06DF19E6AC7A40E1C1528C39CBBD78088219
Authority key identifier: 60:E5:E8:58:75:AA:42:53:49:FC:34:8E:A2:AC:B2:93:13:D0:99:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a383030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Wed 26 Aug 2026 18:15:42 +0000
ROA not before:           Wed 26 Aug 2026 18:10:42 +0000
ROA not after:            Wed 25 Aug 2027 18:15:42 +0000
asID:                     263059
IP address blocks:        2804:934:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 14:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ad:06:df:19:e6:ac:7a:40:e1:c1:52:8c:39:cb:bd:78:08:82:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E5E85875AA425349FC348EA2ACB29313D099EC
        Validity
            Not Before: Aug 26 18:10:42 2026 GMT
            Not After : Aug 25 18:15:42 2027 GMT
        Subject: CN=0C183E254F4BC56C9DC1A608B26EE02858501E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:cc:1c:3c:b2:92:55:39:7a:bb:ea:6c:42:
                    11:05:49:4c:ef:9b:f2:d8:45:8b:84:06:c8:97:d0:
                    3e:0c:3d:20:ae:22:10:5b:09:61:9d:5c:aa:40:80:
                    83:a9:65:3f:bc:a2:9e:1a:c4:b1:e9:8d:9f:cc:8a:
                    27:72:e3:ee:95:cd:d7:c7:eb:9b:42:9e:3f:dd:80:
                    26:1c:40:b7:2e:ac:ff:88:14:3a:db:cb:2b:92:91:
                    48:cc:b4:b6:b8:fb:66:93:ec:ec:91:36:c6:d0:48:
                    45:94:60:f1:51:bd:2f:64:67:7c:3b:46:2c:1c:30:
                    1c:c2:79:44:30:68:50:66:34:d3:e6:51:37:4a:13:
                    d8:a3:d4:f4:80:99:30:7b:e1:4e:2e:42:55:39:8c:
                    f9:0d:bf:57:fb:93:2c:cc:22:7a:34:30:9d:02:9d:
                    a3:44:54:d5:9a:3f:96:3a:f2:2c:91:f5:17:cb:a1:
                    66:54:87:89:8e:cf:1c:be:22:ab:8f:99:1e:c0:ed:
                    b6:73:aa:c4:54:18:a4:12:06:b2:49:e0:a3:36:aa:
                    81:34:d4:ae:a2:9b:4a:16:31:31:c9:93:ac:bb:5e:
                    b3:9f:aa:4e:76:a8:6a:cd:73:31:10:b6:b3:b8:26:
                    43:b2:e5:81:ad:11:63:a7:46:1b:f5:0c:85:8e:30:
                    f6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:18:3E:25:4F:4B:C5:6C:9D:C1:A6:08:B2:6E:E0:28:58:50:1E:20
            X509v3 Authority Key Identifier:
                keyid:60:E5:E8:58:75:AA:42:53:49:FC:34:8E:A2:AC:B2:93:13:D0:99:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a383030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         52:8d:6d:84:03:a4:29:a8:41:54:54:81:3f:7b:f0:ee:0a:3b:
         ce:b0:21:5d:00:85:8a:4e:69:d0:fa:60:c8:bb:ee:bd:9e:35:
         41:f2:f2:09:e7:52:cd:89:8a:b7:86:85:a5:b6:ee:ef:91:d3:
         d9:d0:56:74:05:f9:32:8e:d0:0f:a8:6a:a1:e3:e8:89:88:cf:
         89:23:74:46:15:42:c2:8e:24:18:1c:79:79:89:ba:07:2c:f1:
         38:e9:e1:e9:79:30:49:68:de:3c:0b:e2:82:eb:06:5b:8a:3c:
         53:ec:6c:d0:52:5e:1f:25:c2:60:fe:f4:aa:a2:32:cf:a6:71:
         7d:e3:1d:20:0b:ed:e5:a4:55:7d:b6:90:49:14:d2:a5:6d:47:
         fe:66:e6:28:b3:60:fd:91:fe:8b:1f:4e:e9:88:bd:b0:ab:ea:
         18:79:28:c6:b7:73:a6:75:51:e6:7a:f0:18:96:77:d0:8e:be:
         cd:93:f4:5f:24:fe:e9:0b:81:9b:33:d8:3c:a2:65:91:a2:7c:
         ed:94:eb:67:30:52:63:c4:a5:87:68:d9:27:1d:13:ca:10:f2:
         54:7e:d0:53:bd:9e:1b:e2:44:31:8c:c0:ab:75:85:dc:26:e9:
         07:dc:c7:d4:d0:37:a4:aa:91:e2:43:50:f6:02:5a:0a:67:d1:
         1d:b7:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:29:50 2026 by rpki-client