Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          EAVzYln1p7SOWGIq3M9hf2WLqwzkYsXuGuoYySPuWKs=
Subject key identifier:   00:51:B3:4D:F9:F7:C1:5C:64:01:A9:6C:FC:E9:0A:59:4D:E9:C9:72
Certificate issuer:       /CN=60E5E85875AA425349FC348EA2ACB29313D099EC
Certificate serial:       04AED6E74E753A5A7C5DFC951F81AA8810AEC14B
Authority key identifier: 60:E5:E8:58:75:AA:42:53:49:FC:34:8E:A2:AC:B2:93:13:D0:99:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Wed 26 Aug 2026 18:15:19 +0000
ROA not before:           Wed 26 Aug 2026 18:10:19 +0000
ROA not after:            Wed 25 Aug 2027 18:15:19 +0000
asID:                     263059
IP address blocks:        2804:934::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 14:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ae:d6:e7:4e:75:3a:5a:7c:5d:fc:95:1f:81:aa:88:10:ae:c1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E5E85875AA425349FC348EA2ACB29313D099EC
        Validity
            Not Before: Aug 26 18:10:19 2026 GMT
            Not After : Aug 25 18:15:19 2027 GMT
        Subject: CN=0051B34DF9F7C15C6401A96CFCE90A594DE9C972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1c:be:e9:04:6e:cf:08:51:bf:a8:ae:eb:89:
                    e5:32:e4:c7:93:ab:e7:c1:16:2f:a1:6f:6a:3c:a0:
                    e3:d7:d5:07:3a:83:d9:95:f4:1e:94:a5:f0:cb:95:
                    62:23:18:08:80:83:cc:4c:1b:3a:3f:ca:c5:3d:55:
                    ee:d5:66:39:78:1b:02:8f:a6:a2:e0:8d:fe:80:f6:
                    3d:0e:8c:ee:58:0c:ce:1f:9e:15:51:bf:13:ca:49:
                    ee:e8:79:12:52:ee:d0:c8:c1:15:b0:19:05:49:2c:
                    02:b5:ea:99:90:25:66:a0:ad:53:88:d3:08:e4:b8:
                    97:c7:ee:23:6c:3e:22:6b:e9:26:84:23:a5:09:af:
                    da:fe:6f:35:9a:f2:3a:08:29:94:71:58:b6:89:b8:
                    0b:c8:ab:5a:6a:f8:25:fe:c9:88:e8:73:93:db:52:
                    0b:b1:3c:d6:70:28:a1:40:ef:03:5b:51:28:48:8a:
                    97:60:e9:84:ee:cf:49:6d:8f:80:1e:e9:48:5f:8e:
                    d4:41:af:92:9a:39:ac:c3:13:f4:cc:c9:44:2e:d5:
                    6f:14:2a:ff:05:89:d4:34:0c:d8:d7:03:0c:a0:13:
                    fc:f5:33:c7:13:64:9b:07:45:fb:a2:27:73:da:aa:
                    e7:04:eb:66:f2:5d:a1:34:bb:1b:ec:78:1d:31:11:
                    73:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:51:B3:4D:F9:F7:C1:5C:64:01:A9:6C:FC:E9:0A:59:4D:E9:C9:72
            X509v3 Authority Key Identifier:
                keyid:60:E5:E8:58:75:AA:42:53:49:FC:34:8E:A2:AC:B2:93:13:D0:99:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934::/36

    Signature Algorithm: sha256WithRSAEncryption
         b4:de:ed:d6:81:38:09:1d:99:3b:c9:87:44:02:94:f4:3c:e7:
         d7:3a:36:ea:b8:2a:3f:b9:b5:1e:b1:ce:f1:a2:59:42:39:69:
         61:4a:80:94:ed:d5:5e:b5:c8:b3:a0:a7:fd:66:64:4e:23:51:
         e1:1b:9c:92:4d:df:02:3b:c3:c6:0e:ef:98:da:6d:79:66:7f:
         ca:87:fd:71:58:bb:f8:89:46:d4:98:cc:61:54:6e:04:72:2a:
         70:3c:4b:bc:f5:02:fc:5c:80:7c:76:7f:24:31:d3:75:c9:81:
         57:31:30:32:47:11:26:4d:09:2b:33:e0:69:c2:c2:eb:05:fc:
         a8:3c:4b:c1:7e:13:a0:e3:c7:02:ae:bc:19:f9:23:5f:b8:2e:
         1c:d8:18:7a:d4:35:b7:8f:7a:a2:45:87:34:6c:32:ce:87:96:
         52:78:f4:00:fc:f5:32:c8:26:41:8c:68:4e:c1:f9:ad:5d:29:
         87:50:ee:5e:29:50:27:ed:c8:e8:01:a0:f0:8c:0f:1f:cc:c1:
         8d:58:75:77:14:be:af:20:c1:7d:ca:16:51:0c:ce:81:21:25:
         a1:cd:bc:97:f0:9c:3e:52:e2:da:5e:e2:26:86:76:22:1a:5f:
         36:72:0c:ba:ab:b6:22:d2:65:29:e9:80:9a:7d:73:ef:71:ec:
         d5:94:36:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 15:40:23 2026 by rpki-client