Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a623030303a3a2f33362d3336203d3e20323638303430.roa
File:                     323830343a353730633a623030303a3a2f33362d3336203d3e20323638303430.roa (raw, json)
Hash identifier:          X2rc93PvMDb+WTkToA7Nkp8oPjFMDxe3++KHI2ZnDdU=
Subject key identifier:   11:6B:77:BC:2F:8F:BD:F9:97:B5:34:F1:F4:75:32:74:2F:E4:83:24
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       197D4E6BECF48AF0A7DE46E11929DCD3AC735050
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a623030303a3a2f33362d3336203d3e20323638303430.roa
Signing time:             Mon 10 Aug 2026 22:23:44 +0000
ROA not before:           Mon 10 Aug 2026 22:18:44 +0000
ROA not after:            Mon 09 Aug 2027 22:23:44 +0000
asID:                     268040
IP address blocks:        2804:570c:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 00:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7d:4e:6b:ec:f4:8a:f0:a7:de:46:e1:19:29:dc:d3:ac:73:50:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Aug 10 22:18:44 2026 GMT
            Not After : Aug  9 22:23:44 2027 GMT
        Subject: CN=116B77BC2F8FBDF997B534F1F47532742FE48324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:2a:5d:09:84:21:5d:9b:aa:2e:42:9c:c3:
                    b3:4e:1b:ba:a8:7f:63:4e:88:dc:47:0f:46:17:98:
                    54:25:72:ce:a3:a9:ef:44:be:f6:dc:1d:99:4b:b1:
                    1f:94:19:9b:bb:69:da:a9:2b:11:b4:1a:36:a8:02:
                    da:e0:9f:f7:ae:06:2e:03:04:ef:30:fe:9b:56:3c:
                    73:40:a2:3c:71:76:17:0d:ad:80:1a:d1:1e:0c:2c:
                    6f:ac:f7:6b:28:be:1f:39:ea:2f:09:db:16:7f:8d:
                    9e:da:29:8f:2b:19:a6:3c:41:b9:26:60:24:f8:ea:
                    2f:0c:08:d6:e7:fc:57:3c:f8:72:e0:e6:e7:3f:bb:
                    8b:b7:e1:66:5b:1b:1c:08:cd:4f:64:a4:e7:50:4e:
                    11:0a:8a:2a:bd:b7:a5:2c:75:69:f7:b9:4a:e8:64:
                    6d:0c:42:cf:a2:ea:0e:20:e9:a8:ed:b4:e4:e1:2f:
                    b7:0d:c9:a9:c8:ba:db:e5:80:38:c7:64:a8:a8:da:
                    cb:e9:a8:3a:aa:19:8e:c6:cd:be:51:85:91:74:33:
                    ec:b0:52:09:e2:c5:92:8f:b3:33:55:fc:13:a9:ba:
                    48:d1:7a:8f:5e:0d:b3:30:c9:1b:9c:15:5d:ed:02:
                    14:2e:4b:f7:e7:33:63:8d:d4:8f:fc:98:e4:7d:5c:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6B:77:BC:2F:8F:BD:F9:97:B5:34:F1:F4:75:32:74:2F:E4:83:24
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a623030303a3a2f33362d3336203d3e20323638303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:570c:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         17:07:29:31:a2:98:de:7e:d4:2e:83:e0:73:d2:81:6a:82:e9:
         55:2e:9a:3f:e9:d8:d4:ef:ea:9b:3a:2e:ff:c0:93:e2:cf:50:
         69:06:ef:34:67:24:08:24:88:56:0f:79:04:fa:5c:5a:96:76:
         7b:d1:c7:ae:a7:c1:e7:09:10:29:e5:2b:d1:a9:8b:74:a2:01:
         f0:9f:99:4e:a5:1a:87:1a:06:af:a5:c1:af:92:21:82:1b:dc:
         ec:be:1c:bb:5a:4d:70:ab:22:9c:c3:0d:19:b0:7d:80:c1:67:
         d3:df:be:55:ef:08:ba:6c:00:ae:6a:13:51:86:69:72:ba:0b:
         07:ed:fb:9d:2a:59:a4:28:9b:cb:56:0c:ce:44:33:fc:91:ef:
         1f:df:b0:65:16:2c:65:c8:df:a4:ea:1e:c9:6c:12:b1:53:04:
         d0:e0:59:26:31:48:2c:9d:4a:14:5d:5b:23:82:8c:b2:9e:2e:
         aa:d7:7d:f8:70:74:1b:13:a5:0b:b8:c9:ce:b7:b6:79:45:f9:
         78:28:2b:8e:a4:e4:09:18:04:8d:1b:36:e4:58:f6:bc:7b:df:
         3b:c8:3c:fc:34:e4:a9:bf:d3:63:30:cc:dd:96:f4:89:b5:7e:
         96:0d:bb:99:af:4d:19:f9:2b:f5:82:10:0b:df:3d:68:f4:49:
         fa:53:98:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 11:59:17 2026 by rpki-client