Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a313030303a3a2f33362d3336203d3e20323638303430.roa
File:                     323830343a353730633a313030303a3a2f33362d3336203d3e20323638303430.roa (raw, json)
Hash identifier:          XX4RgqWrgK0cN07dELop4PmkV3SAb55I/eZ0jEmBII0=
Subject key identifier:   BE:D1:A1:2D:01:C2:70:A0:50:68:21:66:74:43:AF:38:C9:EC:AA:52
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       456521FA19A360B548B3A85A6874E63F8B922645
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a313030303a3a2f33362d3336203d3e20323638303430.roa
Signing time:             Mon 08 Sep 2025 21:31:25 +0000
ROA not before:           Mon 08 Sep 2025 21:26:25 +0000
ROA not after:            Mon 07 Sep 2026 21:31:25 +0000
asID:                     268040
IP address blocks:        2804:570c:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 11:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:65:21:fa:19:a3:60:b5:48:b3:a8:5a:68:74:e6:3f:8b:92:26:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Sep  8 21:26:25 2025 GMT
            Not After : Sep  7 21:31:25 2026 GMT
        Subject: CN=BED1A12D01C270A0506821667443AF38C9ECAA52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:f8:eb:df:d7:a8:25:0b:a4:4c:96:6c:c1:
                    cc:cf:28:90:71:75:9b:45:4e:96:ba:4c:50:cc:f4:
                    dc:36:a2:11:f6:ef:c3:ff:d1:4a:b7:a4:0b:77:66:
                    3e:05:b1:75:77:60:a0:e2:7c:b1:6c:c8:36:33:70:
                    e8:c6:dc:e7:62:ef:37:92:3a:b6:81:82:48:45:ea:
                    81:dd:41:fe:3d:63:34:ea:66:25:4d:e7:62:45:af:
                    2c:64:57:ad:6a:51:0d:8a:c9:14:ea:5a:d8:73:20:
                    f8:45:4d:af:d9:63:df:96:f9:ef:37:82:9c:ac:ca:
                    a1:f2:79:f1:ac:45:b3:8c:2c:0f:4c:b7:57:c1:15:
                    71:9a:34:5c:b1:f1:ed:f2:97:89:ec:37:17:af:14:
                    7b:5c:1e:3e:b7:2e:87:bc:af:47:27:d9:cc:15:53:
                    95:8c:db:f0:68:6f:6e:d7:0c:8e:bc:f6:0e:f5:8f:
                    aa:45:29:96:00:81:37:d6:5f:b7:d7:4d:11:44:18:
                    15:52:bc:be:dd:d9:11:b7:92:23:89:2d:48:ca:42:
                    7e:f1:3e:2d:98:02:31:0e:16:30:87:7d:31:62:90:
                    cd:f3:e9:bd:b2:59:9b:d6:b7:c6:21:6d:76:8d:1e:
                    fc:6c:d2:2e:4a:8f:f8:0a:3b:8e:b3:6c:52:09:ab:
                    36:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D1:A1:2D:01:C2:70:A0:50:68:21:66:74:43:AF:38:C9:EC:AA:52
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a313030303a3a2f33362d3336203d3e20323638303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:570c:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9d:77:63:38:cf:54:86:17:1f:bc:38:69:9e:ab:8a:ff:55:48:
         8b:28:71:ca:0f:0b:7b:a4:eb:e3:bf:8a:ed:8c:74:9c:56:1e:
         8a:dd:0e:27:34:74:40:a2:bc:ed:25:39:1d:97:c3:2f:20:3a:
         21:9e:26:2b:b6:48:3b:15:a2:b7:2f:2c:ee:6a:14:fe:bf:85:
         8e:da:da:36:fd:45:c2:13:ca:91:33:ca:fe:f0:a2:70:77:6a:
         ad:ed:72:4c:8f:e5:6b:ba:00:0b:23:bc:05:37:15:a0:5e:3f:
         e6:d5:30:5f:43:18:0c:d4:29:04:b2:08:36:d4:df:9e:4d:26:
         b2:fc:04:bd:50:cd:6a:c3:34:ad:ba:6d:c7:fa:e8:66:84:70:
         a2:21:d0:e8:d0:29:ba:70:b8:43:ba:81:d7:2a:77:99:49:8c:
         aa:0e:bc:33:e7:84:f4:96:23:d5:a9:ca:b0:4f:88:de:ff:c6:
         2e:3c:05:da:36:47:f5:09:1c:b9:85:8c:72:46:46:57:af:d4:
         3a:b1:be:da:dc:1b:60:4f:19:77:63:ae:2a:01:80:89:a6:6b:
         6b:ec:13:28:7b:cc:38:74:f3:ff:b3:83:3c:a4:d9:0c:05:10:
         02:06:42:a3:be:d2:1b:d3:93:27:ee:ae:aa:5f:0a:12:2e:aa:
         79:39:51:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 18:24:40 2025 by rpki-client