Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a613030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a613030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          4AWXECcUeT4LddQQIhiz/lBC3Tq3eJzjMaPduv41MD4=
Subject key identifier:   4B:2D:65:64:D2:43:0F:CF:E7:F7:02:7E:4E:99:55:D3:C5:38:4D:77
Certificate issuer:       /CN=60E5E85875AA425349FC348EA2ACB29313D099EC
Certificate serial:       7A1711F3ACB2A5F06377D132EA0165B37E93A9BF
Authority key identifier: 60:E5:E8:58:75:AA:42:53:49:FC:34:8E:A2:AC:B2:93:13:D0:99:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a613030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Wed 26 Aug 2026 18:15:47 +0000
ROA not before:           Wed 26 Aug 2026 18:10:47 +0000
ROA not after:            Wed 25 Aug 2027 18:15:47 +0000
asID:                     263059
IP address blocks:        2804:934:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 14:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:17:11:f3:ac:b2:a5:f0:63:77:d1:32:ea:01:65:b3:7e:93:a9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E5E85875AA425349FC348EA2ACB29313D099EC
        Validity
            Not Before: Aug 26 18:10:47 2026 GMT
            Not After : Aug 25 18:15:47 2027 GMT
        Subject: CN=4B2D6564D2430FCFE7F7027E4E9955D3C5384D77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a1:79:33:3d:4f:14:8f:3d:16:66:89:df:2d:
                    2b:1e:1f:31:af:8b:5a:e5:8a:a9:2c:d6:27:82:af:
                    b1:43:36:46:c1:cf:5a:4e:67:0b:e0:e2:a6:0c:b7:
                    e4:89:8f:78:20:76:c7:da:19:b2:85:5a:d0:8d:b6:
                    5f:b7:69:76:a1:a5:6a:66:ce:70:78:d5:86:71:a4:
                    88:bc:a6:8d:cf:39:e1:e5:c3:70:c9:b3:a3:c7:6d:
                    ad:fb:f1:6e:ef:3e:56:1f:2b:13:2e:b1:60:4f:cb:
                    f4:e0:3f:40:c2:0f:a9:8d:00:94:2b:27:a0:6b:56:
                    d6:2b:52:93:1b:09:1f:63:3b:24:9c:a7:4e:7c:6e:
                    ff:32:ba:fe:9a:62:ab:ba:bc:7a:e6:db:3d:24:23:
                    2f:92:68:b2:81:7c:ec:77:51:5d:cb:7b:30:db:3e:
                    71:64:c8:7c:e9:36:87:da:69:a2:0e:bc:cd:09:bb:
                    04:f5:53:12:e5:af:fe:37:9f:d8:29:9c:d4:86:74:
                    d0:e1:58:02:28:de:80:f4:c3:70:ff:93:66:9d:46:
                    3d:ea:e6:43:bb:97:9f:21:83:ac:72:fe:de:cd:82:
                    61:c3:48:f2:8a:f9:cc:a9:77:2b:b7:75:d2:bd:be:
                    42:22:d9:c4:b5:7a:8d:a8:b5:df:cd:16:8f:30:e8:
                    45:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2D:65:64:D2:43:0F:CF:E7:F7:02:7E:4E:99:55:D3:C5:38:4D:77
            X509v3 Authority Key Identifier:
                keyid:60:E5:E8:58:75:AA:42:53:49:FC:34:8E:A2:AC:B2:93:13:D0:99:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a613030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         72:c7:18:a9:c0:d2:9c:b7:12:c8:bd:54:b2:4e:60:69:bc:03:
         70:bf:e7:32:da:7d:83:46:c9:d2:47:85:a8:c0:0b:24:72:14:
         60:93:b0:e8:a6:ef:9d:7a:36:ef:12:61:60:c7:5f:8c:f1:fb:
         a3:61:fd:3e:f4:b4:f3:f7:45:49:6e:6d:e9:91:b5:67:58:0e:
         1d:26:cf:eb:0b:42:47:c9:d5:f6:ee:2e:d3:ff:26:54:ef:c2:
         69:e6:ee:f7:aa:70:dd:8b:64:7f:27:db:ad:f4:10:2a:37:d6:
         39:c3:5f:61:61:f6:44:42:db:a7:64:a4:50:42:b9:6a:ec:9f:
         bb:79:e3:a4:06:99:e7:c5:77:ad:3f:64:ef:d8:94:2b:b1:21:
         17:40:d1:23:cf:d6:22:8e:68:d9:3f:75:15:85:2a:60:be:bc:
         1a:e6:1f:40:84:8d:9a:66:ad:67:83:d0:4f:e8:74:d9:43:e9:
         f6:7f:83:6b:c7:6d:63:72:b2:ad:03:58:e5:16:d3:de:a4:56:
         77:fe:4d:18:90:48:20:8c:06:67:c4:a5:e9:5b:1e:9e:71:4d:
         c9:f9:ed:ce:70:6f:63:62:8c:7c:05:bf:d5:86:fd:86:4d:c1:
         77:e1:4c:b3:80:68:c3:56:87:cf:91:6b:77:ec:1b:33:6e:64:
         9a:ef:9b:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUehcR86yypfBjd9Ey6gFls36Tqb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBFNUU4NTg3NUFBNDI1MzQ5RkMzNDhFQTJBQ0IyOTMx
M0QwOTlFQzAeFw0yNjA4MjYxODEwNDdaFw0yNzA4MjUxODE1NDdaMDMxMTAvBgNV
BAMTKDRCMkQ2NTY0RDI0MzBGQ0ZFN0Y3MDI3RTRFOTk1NUQzQzUzODRENzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDoXkzPU8Ujz0WZonfLSseHzGv
i1rliqks1ieCr7FDNkbBz1pOZwvg4qYMt+SJj3ggdsfaGbKFWtCNtl+3aXahpWpm
znB41YZxpIi8po3POeHlw3DJs6PHba378W7vPlYfKxMusWBPy/TgP0DCD6mNAJQr
J6BrVtYrUpMbCR9jOyScp058bv8yuv6aYqu6vHrm2z0kIy+SaLKBfOx3UV3LezDb
PnFkyHzpNofaaaIOvM0JuwT1UxLlr/43n9gpnNSGdNDhWAIo3oD0w3D/k2adRj3q
5kO7l58hg6xy/t7NgmHDSPKK+cypdyu3ddK9vkIi2cS1eo2otd/NFo8w6EX9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUSy1lZNJDD8/n9wJ+TplV08U4TXcwHwYDVR0j
BBgwFoAUYOXoWHWqQlNJ/DSOoqyykxPQmewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u
NnQvMC82MEU1RTg1ODc1QUE0MjUzNDlGQzM0OEVBMkFDQjI5MzEzRDA5OUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwRTVFODU4NzVBQTQyNTM0
OUZDMzQ4RUEyQUNCMjkzMTNEMDk5RUMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv
MzIzODMwMzQzYTM5MzMzNDNhNjEzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzMzMDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAk0oDANBgkqhkiG9w0BAQsFAAOC
AQEAcscYqcDSnLcSyL1Usk5gabwDcL/nMtp9g0bJ0keFqMALJHIUYJOw6KbvnXo2
7xJhYMdfjPH7o2H9PvS08/dFSW5t6ZG1Z1gOHSbP6wtCR8nV9u4u0/8mVO/Caebu
96pw3YtkfyfbrfQQKjfWOcNfYWH2RELbp2SkUEK5auyfu3njpAaZ58V3rT9k79iU
K7EhF0DRI8/WIo5o2T91FYUqYL68GuYfQISNmmatZ4PQT+h02UPp9n+Da8dtY3Ky
rQNY5RbT3qRWd/5NGJBIIIwGZ8Sl6VsennFNyfntznBvY2KMfAW/1Yb9hk3Bd+FM
s4Bow1aHz5Frd+wbM25kmu+bCg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:33:16 2026 by rpki-client