Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a373030303a3a2f33362d3336203d3e20323638303430.roa
File:                     323830343a353730633a373030303a3a2f33362d3336203d3e20323638303430.roa (raw, json)
Hash identifier:          qEGTNLA+KBcnLwyZCSUh18M49As5kWTLHnJHsfSSMfE=
Subject key identifier:   4C:98:60:C5:47:7F:2E:49:2A:12:D6:EB:78:BB:61:ED:EF:2F:3D:E6
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       6D6DAA34DE7E42D459431C7C9D45AFF6A778F66D
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a373030303a3a2f33362d3336203d3e20323638303430.roa
Signing time:             Mon 08 Sep 2025 21:31:25 +0000
ROA not before:           Mon 08 Sep 2025 21:26:25 +0000
ROA not after:            Mon 07 Sep 2026 21:31:25 +0000
asID:                     268040
IP address blocks:        2804:570c:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 11:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:6d:aa:34:de:7e:42:d4:59:43:1c:7c:9d:45:af:f6:a7:78:f6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Sep  8 21:26:25 2025 GMT
            Not After : Sep  7 21:31:25 2026 GMT
        Subject: CN=4C9860C5477F2E492A12D6EB78BB61EDEF2F3DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:d8:2b:d7:5f:85:0f:23:7a:a1:78:ca:8b:
                    92:a5:5b:e0:84:a4:67:db:7d:24:58:77:0f:b9:64:
                    78:4b:b8:58:ac:5d:c7:94:3d:8b:07:a3:31:93:b9:
                    79:29:17:d2:86:dc:63:d1:1c:20:61:15:c1:f5:b9:
                    c2:d2:eb:b0:4f:63:bf:1c:79:bd:2f:17:bd:f1:b7:
                    88:4e:0c:50:47:4b:2c:79:17:29:cc:5e:1e:c6:b0:
                    2f:41:18:c3:35:71:d7:4c:7a:18:8b:89:52:00:3a:
                    57:08:68:6e:09:22:bf:5b:64:de:05:23:e7:56:81:
                    23:e9:ea:cd:f0:df:be:2c:ed:55:0d:0a:4a:82:e9:
                    46:7d:ce:cb:07:ba:31:b4:74:a5:a9:5f:96:ff:df:
                    94:5e:9a:f0:43:03:6f:4e:18:68:2f:b4:fd:3a:5e:
                    9e:51:dd:fc:13:22:29:c1:f4:32:db:9e:bc:da:8d:
                    cc:fc:88:7b:b3:b8:56:3c:95:58:d7:af:0b:fb:f4:
                    fb:5b:fd:25:db:93:a0:8e:69:47:5b:73:a9:2d:81:
                    32:b8:5e:41:29:0e:35:48:38:8b:10:15:96:d5:97:
                    f1:9e:26:aa:54:19:97:1b:75:55:ad:d8:1a:da:c5:
                    04:fe:e9:c1:46:68:55:ea:f0:47:b8:fc:87:d1:63:
                    bb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:98:60:C5:47:7F:2E:49:2A:12:D6:EB:78:BB:61:ED:EF:2F:3D:E6
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a373030303a3a2f33362d3336203d3e20323638303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:570c:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         78:c2:fb:b4:81:1d:27:94:6c:01:b3:ab:4e:61:e8:78:6f:ca:
         0c:b3:29:7c:38:f5:19:34:d2:37:92:a1:4c:3f:8c:4e:cf:bb:
         5d:4a:43:4f:0d:a9:2e:e6:6c:d9:7d:1e:26:83:5e:57:4a:20:
         c6:ea:1d:86:f3:9d:0e:91:38:7b:b4:7e:7b:82:21:df:01:4c:
         7c:62:17:1d:36:18:d6:8e:23:5b:5a:9d:39:70:15:90:fb:98:
         17:34:8c:a1:40:ca:f2:72:97:9b:5b:6e:71:f0:71:ad:0d:12:
         d3:09:bf:57:12:ba:39:4c:c8:dd:1e:6e:62:56:40:8b:5a:ba:
         27:90:29:15:ba:2e:e3:1f:06:63:2e:f9:e5:e9:d4:93:4e:c4:
         21:f7:76:24:92:9e:12:09:90:1c:91:cd:e2:83:90:57:5c:cf:
         aa:04:21:47:31:e5:93:9d:47:1a:25:a7:d5:93:ec:c7:0e:24:
         be:47:88:34:89:7c:63:7e:d7:f6:f6:b6:0d:f1:00:6c:41:48:
         58:21:90:91:6c:70:a9:10:18:c3:7f:ce:6d:71:7d:c3:01:10:
         a1:34:b3:3f:bf:a1:80:00:68:78:4d:22:f0:3c:6f:32:80:47:
         5b:46:a8:37:aa:72:e5:84:08:02:e1:74:1e:73:71:33:44:32:
         18:0b:e1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 18:25:08 2025 by rpki-client