Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a633030303a3a2f33362d3336203d3e20323638303430.roa
File:                     323830343a353730633a633030303a3a2f33362d3336203d3e20323638303430.roa (raw, json)
Hash identifier:          yRypl7BwD3ozXjDXZq+aGNiog9V9FfeB01RWh7OIr4A=
Subject key identifier:   C2:34:1B:4C:00:19:81:FA:DC:A0:2A:B0:47:56:B7:30:BD:30:09:A1
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       3C1342D15825B95F451D89F0C0CD8EB1FA069F9A
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a633030303a3a2f33362d3336203d3e20323638303430.roa
Signing time:             Mon 10 Aug 2026 22:23:45 +0000
ROA not before:           Mon 10 Aug 2026 22:18:45 +0000
ROA not after:            Mon 09 Aug 2027 22:23:45 +0000
asID:                     268040
IP address blocks:        2804:570c:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 11:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:13:42:d1:58:25:b9:5f:45:1d:89:f0:c0:cd:8e:b1:fa:06:9f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Aug 10 22:18:45 2026 GMT
            Not After : Aug  9 22:23:45 2027 GMT
        Subject: CN=C2341B4C001981FADCA02AB04756B730BD3009A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:97:30:c6:e5:fb:e8:1a:26:b8:a1:9f:b2:2f:
                    e3:71:cb:2f:c0:ab:96:d4:bc:6d:f1:b3:e2:6c:f9:
                    6b:41:f3:7e:2d:71:92:99:9d:35:a6:0f:3a:e6:92:
                    a4:6d:01:5f:fd:11:90:fe:d4:fd:9b:c8:87:1f:f3:
                    de:59:f6:dc:cc:13:79:1d:a7:71:15:1d:2b:72:ed:
                    bf:6d:66:b1:d6:51:57:b1:f2:32:bf:d6:f2:63:2d:
                    db:29:ef:7a:bf:b1:8a:ad:f9:aa:06:e2:6d:0f:d7:
                    c1:4d:81:91:d3:a3:be:fd:24:77:1e:64:42:a0:7a:
                    68:c8:82:07:32:39:92:c7:52:12:1e:4f:a5:83:9f:
                    16:b9:98:61:74:0a:fc:fd:43:d6:6d:2c:5d:e4:e4:
                    e3:4b:e0:8d:99:26:fb:bf:96:70:f6:ab:8b:79:08:
                    e0:24:eb:dc:cd:7f:1e:ea:81:0f:9c:cc:51:2e:75:
                    4f:0b:a0:36:e4:a7:42:6f:67:2e:25:85:aa:5f:3a:
                    54:2e:9e:a1:fb:04:5d:a0:89:6b:6a:6f:6e:d5:8e:
                    4d:e6:b3:63:4f:e8:78:c3:b2:a2:5b:49:50:28:85:
                    33:8a:1e:ff:80:96:5d:37:6e:66:e7:f7:4e:aa:b1:
                    0f:c5:0a:cc:fe:42:8f:21:1e:a9:60:50:36:a6:67:
                    11:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:34:1B:4C:00:19:81:FA:DC:A0:2A:B0:47:56:B7:30:BD:30:09:A1
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a633030303a3a2f33362d3336203d3e20323638303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:570c:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         aa:6e:40:dd:7e:5c:c0:47:8f:db:46:f7:6e:f6:3f:ae:c4:0c:
         d7:16:a3:16:c3:2a:16:b6:e0:bf:5a:0a:9a:0c:57:0d:2b:e3:
         94:a8:8a:0e:ef:f0:58:93:b4:4c:60:00:d6:23:88:f8:90:48:
         d9:9d:db:ab:4b:15:00:a9:90:4f:b5:80:96:09:d1:68:a2:2b:
         47:51:fe:e1:d7:2c:a0:03:66:c0:9f:87:d0:56:9b:96:4f:68:
         38:31:1e:ab:04:73:70:79:cf:90:48:42:4f:36:94:08:e7:e8:
         cb:33:10:b1:3c:27:ca:9d:5f:27:dc:78:f5:88:91:07:e7:2b:
         42:3a:62:c1:05:56:9f:b6:84:34:4b:ef:c1:de:43:84:16:c2:
         e0:5e:95:a6:b3:39:9b:9b:8c:19:41:ad:4a:94:55:fe:55:30:
         e4:24:3a:c5:42:a5:79:1c:ad:e2:34:b7:1d:86:a5:90:4d:97:
         28:97:0e:41:e6:f9:9d:60:1f:bb:24:ab:40:96:c6:76:7e:6b:
         28:83:64:ab:05:37:a9:5e:6a:ba:27:4e:68:76:ae:9a:5a:8e:
         9b:0b:c4:03:04:20:a8:45:8a:18:71:51:9e:35:74:42:2c:a7:
         37:bc:d7:01:f6:57:3e:94:32:e9:46:aa:3d:d8:39:ee:72:51:
         89:5d:b0:29
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPBNC0VgluV9FHYnwwM2OsfoGn5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VBNzRGRjM5NDVFNzUwODU5OUQ1NEE3MjFFNDdCM0JB
NzU3MDZFMzAeFw0yNjA4MTAyMjE4NDVaFw0yNzA4MDkyMjIzNDVaMDMxMTAvBgNV
BAMTKEMyMzQxQjRDMDAxOTgxRkFEQ0EwMkFCMDQ3NTZCNzMwQkQzMDA5QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDblzDG5fvoGia4oZ+yL+Nxyy/A
q5bUvG3xs+Js+WtB834tcZKZnTWmDzrmkqRtAV/9EZD+1P2byIcf895Z9tzME3kd
p3EVHSty7b9tZrHWUVex8jK/1vJjLdsp73q/sYqt+aoG4m0P18FNgZHTo779JHce
ZEKgemjIggcyOZLHUhIeT6WDnxa5mGF0Cvz9Q9ZtLF3k5ONL4I2ZJvu/lnD2q4t5
COAk69zNfx7qgQ+czFEudU8LoDbkp0JvZy4lhapfOlQunqH7BF2giWtqb27Vjk3m
s2NP6HjDsqJbSVAohTOKHv+All03bmbn906qsQ/FCsz+Qo8hHqlgUDamZxHlAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUwjQbTAAZgfrcoCqwR1a3ML0wCaEwHwYDVR0j
BBgwFoAUzqdP85RedQhZnVSnIeR7O6dXBuMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzJqSDQ4OUhzWHBtelh2ZjhYV2c1RGcyRFo4NVU2RmJjVm1NUHFMRm9G
NmcvMC9DRUE3NEZGMzk0NUU3NTA4NTk5RDU0QTcyMUU0N0IzQkE3NTcwNkUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFQTc0RkYzOTQ1RTc1MDg1
OTlENTRBNzIxRTQ3QjNCQTc1NzA2RTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0cyakg0ODlIc1hwbXpYdmY4WFdnNURnMkRaODVVNkZiY1ZtTVBxTEZvRjZnLzAv
MzIzODMwMzQzYTM1MzczMDYzM2E2MzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMwMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVwzAMA0GCSqGSIb3DQEBCwUA
A4IBAQCqbkDdflzAR4/bRvdu9j+uxAzXFqMWwyoWtuC/WgqaDFcNK+OUqIoO7/BY
k7RMYADWI4j4kEjZndurSxUAqZBPtYCWCdFooitHUf7h1yygA2bAn4fQVpuWT2g4
MR6rBHNwec+QSEJPNpQI5+jLMxCxPCfKnV8n3Hj1iJEH5ytCOmLBBVaftoQ0S+/B
3kOEFsLgXpWmszmbm4wZQa1KlFX+VTDkJDrFQqV5HK3iNLcdhqWQTZcolw5B5vmd
YB+7JKtAlsZ2fmsog2SrBTepXmq6J05odq6aWo6bC8QDBCCoRYoYcVGeNXRCLKc3
vNcB9lc+lDLpRqo92DnuclGJXbAp
-----END CERTIFICATE-----
Generated at Mon Aug 24 12:29:47 2026 by rpki-client