Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a623030303a3a2f33362d3336203d3e20323633303539.roa
File:                     323830343a3933343a623030303a3a2f33362d3336203d3e20323633303539.roa (raw, json)
Hash identifier:          VWWYroFej1kBZuikMAYLrjUa7YEozKRBAsdwtN9Q9Kg=
Subject key identifier:   7D:4D:46:8A:AE:02:5D:79:AA:75:47:85:E8:CA:56:22:AF:B0:DE:30
Certificate issuer:       /CN=60E5E85875AA425349FC348EA2ACB29313D099EC
Certificate serial:       2DDAC7F4A68B4A5C4016BBD444283EB96659F715
Authority key identifier: 60:E5:E8:58:75:AA:42:53:49:FC:34:8E:A2:AC:B2:93:13:D0:99:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a623030303a3a2f33362d3336203d3e20323633303539.roa
Signing time:             Wed 26 Aug 2026 18:15:49 +0000
ROA not before:           Wed 26 Aug 2026 18:10:49 +0000
ROA not after:            Wed 25 Aug 2027 18:15:49 +0000
asID:                     263059
IP address blocks:        2804:934:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 00:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:da:c7:f4:a6:8b:4a:5c:40:16:bb:d4:44:28:3e:b9:66:59:f7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E5E85875AA425349FC348EA2ACB29313D099EC
        Validity
            Not Before: Aug 26 18:10:49 2026 GMT
            Not After : Aug 25 18:15:49 2027 GMT
        Subject: CN=7D4D468AAE025D79AA754785E8CA5622AFB0DE30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f7:02:29:73:ba:3d:ce:01:cb:5d:db:b7:54:
                    d8:66:13:e7:49:6f:4d:6f:74:87:dd:cb:69:63:26:
                    a7:64:b4:1a:b8:36:f9:55:ba:45:b6:9a:45:91:00:
                    c8:cc:74:ff:a9:47:88:5f:f8:40:e2:e4:50:12:db:
                    1b:8e:78:54:21:86:d3:14:32:e2:e3:a9:09:6a:88:
                    d6:53:2d:1c:62:20:3b:41:18:6c:73:fb:dd:d1:f7:
                    d3:1b:1a:cc:6a:cb:47:21:98:09:b0:6a:23:4b:2a:
                    78:10:3a:23:b5:7b:d5:c6:d1:90:2a:c9:a3:20:88:
                    70:66:2f:34:9d:16:a0:36:51:1f:ca:70:28:6c:86:
                    61:dc:49:b9:d4:7a:34:65:e4:60:88:18:05:a1:54:
                    ec:cd:39:d3:a9:ec:87:ff:ce:b3:25:77:ac:c5:d0:
                    02:3d:83:bc:aa:f7:2b:b0:16:2d:45:58:2e:20:1e:
                    53:e0:31:91:3f:f1:ed:b6:98:6b:fe:3e:79:8e:87:
                    b7:00:53:23:d0:53:b5:16:91:1f:0d:ae:aa:0b:64:
                    a5:9d:bc:0f:c2:d4:6d:49:3a:7e:47:3c:37:57:06:
                    4b:66:18:53:05:cb:eb:b9:a8:60:3a:65:cb:9b:90:
                    fc:25:5e:89:63:a8:bc:ab:01:09:6a:fd:bd:ef:91:
                    94:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4D:46:8A:AE:02:5D:79:AA:75:47:85:E8:CA:56:22:AF:B0:DE:30
            X509v3 Authority Key Identifier:
                keyid:60:E5:E8:58:75:AA:42:53:49:FC:34:8E:A2:AC:B2:93:13:D0:99:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a623030303a3a2f33362d3336203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:934:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         35:c6:0f:55:bd:aa:dd:56:21:de:5c:89:b5:58:96:12:88:d2:
         c7:f5:b9:18:78:07:05:b6:4d:60:51:66:1f:57:21:4d:86:22:
         26:b4:e6:50:69:08:cd:ef:74:ae:01:4c:85:93:01:d1:1f:f3:
         4a:db:f7:70:62:f6:4a:de:8d:96:d5:ba:c9:48:4f:23:73:d1:
         f4:82:ac:c3:51:ab:71:3d:ee:8d:54:4e:2a:22:0a:79:27:13:
         23:de:35:51:95:38:c5:f1:59:16:42:46:1c:f4:77:58:f2:cd:
         f2:03:92:b6:b5:09:d7:4f:08:47:ec:89:b0:73:d8:93:65:fa:
         d1:cf:34:c6:f4:05:5e:18:85:bb:82:da:16:36:ee:66:e4:46:
         27:f7:58:13:fa:5b:03:97:e0:df:3d:a2:2b:b6:d0:50:fe:77:
         bc:cc:42:36:d9:c0:56:67:8d:3c:ee:f6:a4:7a:73:b8:09:a8:
         70:c6:6b:f5:1b:7c:3a:e7:f2:d7:e2:fc:63:b6:6b:ef:14:5c:
         5b:33:f2:cd:32:a8:74:f3:b8:23:ef:f4:8c:83:6d:aa:8b:af:
         1d:2d:26:ea:d7:4e:73:1b:1f:e4:b5:4a:df:2e:b8:63:ba:ae:
         87:d9:d5:1f:25:98:d2:c1:69:0b:b6:6f:94:7c:a0:de:36:de:
         c9:16:a8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:57:49 2026 by rpki-client