Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a3a2f33322d3332203d3e20323638303430.roa
File:                     323830343a353730633a3a2f33322d3332203d3e20323638303430.roa (raw, json)
Hash identifier:          NPJlZoapyXgbKp6nQrUGfGeQejkrs2Sgotm/M7pu97Q=
Subject key identifier:   26:56:8C:1C:FE:4B:6E:BD:D5:B1:96:0E:C9:A9:DA:86:98:80:F6:95
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       2C455C4C7DE492901828A2C49BA05F687818F1D8
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a3a2f33322d3332203d3e20323638303430.roa
Signing time:             Mon 08 Sep 2025 21:31:27 +0000
ROA not before:           Mon 08 Sep 2025 21:26:27 +0000
ROA not after:            Mon 07 Sep 2026 21:31:27 +0000
asID:                     268040
IP address blocks:        2804:570c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:45:5c:4c:7d:e4:92:90:18:28:a2:c4:9b:a0:5f:68:78:18:f1:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Sep  8 21:26:27 2025 GMT
            Not After : Sep  7 21:31:27 2026 GMT
        Subject: CN=26568C1CFE4B6EBDD5B1960EC9A9DA869880F695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:38:f9:2b:b1:39:fa:35:a3:ab:69:18:bc:
                    4f:3c:9d:84:d0:65:4f:55:3e:a9:e3:ad:ff:37:2e:
                    af:72:56:95:41:e3:d8:0c:98:3f:6d:57:05:0a:80:
                    23:1b:11:bb:7a:95:21:be:c3:91:16:32:e4:62:21:
                    2c:30:4c:2e:29:45:0d:5c:e1:65:d0:f5:cb:69:70:
                    4b:d6:44:2b:7d:b6:be:59:d6:59:5f:d3:8d:e5:66:
                    c8:ee:60:d6:af:1c:b3:f7:fe:20:45:c5:f4:d8:d8:
                    fd:bd:b9:92:89:02:1c:4a:d4:28:4c:45:b8:01:41:
                    6e:7a:c5:80:99:7b:11:63:d3:60:9b:a5:9d:23:92:
                    60:37:e6:70:64:3d:fc:90:3d:01:92:5d:2c:be:08:
                    2b:93:d9:b2:0d:f6:75:45:b9:82:e1:11:65:22:ce:
                    a2:e7:13:f5:0a:2f:86:cd:34:8b:95:f7:93:5a:c8:
                    e2:ce:9a:70:fa:f2:89:a4:66:dd:df:75:58:2e:f9:
                    c2:59:b3:59:5f:c6:cd:c5:a2:79:b0:74:1b:99:e8:
                    dd:a6:fa:53:c9:b2:d1:96:53:74:5c:22:c2:a2:df:
                    6d:6f:43:c8:26:c4:9c:29:78:08:4e:de:2c:db:ac:
                    e5:84:1f:0b:c4:1d:6c:ba:b0:59:a5:e1:56:8b:30:
                    5e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:56:8C:1C:FE:4B:6E:BD:D5:B1:96:0E:C9:A9:DA:86:98:80:F6:95
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a3a2f33322d3332203d3e20323638303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:570c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:03:34:91:d4:2c:cb:0d:39:8c:31:42:68:24:93:83:43:3d:
         c2:a4:2e:2c:3b:f3:42:a2:f4:42:8d:4d:b4:cf:a9:25:25:71:
         64:06:cc:de:2d:59:b7:f7:d1:5c:78:04:eb:3e:63:e4:76:d5:
         7f:18:db:2b:26:95:3c:8d:1f:48:31:4e:b0:6c:c6:a7:78:be:
         63:8d:58:13:1d:03:8b:c1:fa:94:84:8e:7d:c5:d7:07:46:00:
         dd:b0:f6:66:61:0f:b5:ec:d8:7e:54:e3:62:ee:b8:fa:4c:d1:
         9d:8f:a4:15:12:f3:2e:f9:90:a8:88:3d:ac:e3:68:12:bf:e1:
         f4:9c:9c:d0:01:a3:bb:e9:a8:a4:d9:4d:41:78:a6:1b:6e:90:
         5d:78:f4:2b:2c:dc:01:fa:58:bb:14:c8:2c:a9:9d:7c:43:21:
         95:f0:f5:80:87:b9:3a:57:87:f7:2e:99:37:a1:2c:20:9a:dd:
         04:ef:d1:83:67:14:fe:a1:fc:f4:7d:05:96:f2:52:79:5f:06:
         3c:7a:86:97:0d:3b:28:fd:3c:a7:ab:b3:cd:47:33:46:4b:ae:
         a5:65:7c:2c:a1:c4:0e:ed:d6:97:d9:5d:c5:75:fa:4b:37:dd:
         dc:9c:41:45:70:60:90:42:a9:88:14:8c:fe:fc:3f:d3:f7:b7:
         1a:16:d8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:34:12 2025 by rpki-client