Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a663030303a3a2f33362d3336203d3e20323638303430.roa
File:                     323830343a353730633a663030303a3a2f33362d3336203d3e20323638303430.roa (raw, json)
Hash identifier:          DDqiXH4DdttjGY2bJj8hMTSCzoazExdYreFMNjG5kNw=
Subject key identifier:   8D:9C:6C:80:15:D0:31:20:AD:F9:A0:E4:5E:A2:2E:DB:32:73:17:E2
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       76CB70C045DFEF6668714727C6BE05270DA596DA
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a663030303a3a2f33362d3336203d3e20323638303430.roa
Signing time:             Mon 08 Sep 2025 21:31:24 +0000
ROA not before:           Mon 08 Sep 2025 21:26:24 +0000
ROA not after:            Mon 07 Sep 2026 21:31:24 +0000
asID:                     268040
IP address blocks:        2804:570c:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:cb:70:c0:45:df:ef:66:68:71:47:27:c6:be:05:27:0d:a5:96:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Sep  8 21:26:24 2025 GMT
            Not After : Sep  7 21:31:24 2026 GMT
        Subject: CN=8D9C6C8015D03120ADF9A0E45EA22EDB327317E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1d:29:1f:ec:00:4e:e4:3b:d3:a0:f6:46:d1:
                    0d:a9:f0:a5:33:ed:f1:62:fe:14:04:c5:43:aa:5d:
                    51:ef:05:9a:3f:1d:64:64:22:26:8c:c2:ea:d1:78:
                    42:c7:9f:96:23:aa:fc:8a:0c:21:4b:68:81:1e:ff:
                    c9:1e:6d:fd:cd:6c:ba:d0:57:01:2a:44:26:3f:12:
                    c8:b5:1d:f8:ec:97:04:cf:4c:ad:f4:eb:aa:c8:0e:
                    01:40:0a:82:a1:35:35:24:35:9f:61:62:14:8f:9a:
                    03:5f:03:cb:d6:a1:65:81:86:3a:16:dd:86:10:fb:
                    c5:ff:e0:a2:9a:3c:c2:1e:35:b2:01:8d:b9:a2:52:
                    7c:2f:54:21:0b:a2:8f:81:a7:0f:45:13:87:3c:05:
                    c7:f4:0e:0f:ff:da:b4:51:94:6a:18:18:9b:03:a9:
                    54:d8:b9:5c:59:bb:77:c5:93:6c:fd:bd:93:8a:6b:
                    4b:60:1a:8d:00:12:39:e8:95:c6:12:2f:af:5c:ec:
                    22:c0:d1:70:ff:a4:79:36:a7:5d:d6:7a:5a:82:29:
                    1c:e5:18:9a:a3:31:78:44:b9:ee:ed:5c:65:e6:2c:
                    26:23:b1:07:e2:6b:f5:d8:a2:e6:40:e3:8f:1a:2f:
                    eb:52:b7:64:e3:ec:43:cd:2f:50:94:c3:5d:68:4d:
                    69:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9C:6C:80:15:D0:31:20:AD:F9:A0:E4:5E:A2:2E:DB:32:73:17:E2
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a663030303a3a2f33362d3336203d3e20323638303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:570c:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         52:75:67:ef:e7:18:80:ea:c1:dc:5c:9f:50:6a:4a:ea:cf:1f:
         cc:46:32:05:d1:7a:42:eb:dd:ef:ef:df:8e:3b:1c:2d:c6:3c:
         18:0c:d9:a3:7a:9e:f6:03:ae:e6:72:b2:0a:e5:3b:94:4d:fb:
         9c:61:f8:82:51:02:6b:02:bf:46:21:0d:a3:d9:8a:25:0f:b2:
         21:45:85:46:64:27:01:c0:86:c9:36:b6:0e:82:71:de:c0:d9:
         f3:60:6b:86:0f:43:e8:43:71:28:74:97:36:b2:d8:2d:4d:d1:
         49:74:14:07:c4:f0:65:38:9d:ff:af:31:0e:38:88:06:5a:be:
         13:c1:35:1f:0d:a4:34:c3:0b:5a:07:b9:79:07:76:66:8b:4e:
         5c:4c:8e:b9:57:f7:02:a9:2a:a8:f5:2b:3f:c0:a0:fb:48:e0:
         f1:ac:b1:62:0c:f1:3a:d0:ee:46:f9:42:37:15:fc:5c:8a:43:
         ff:5f:be:41:ed:cd:4c:08:f4:39:b7:53:55:63:27:4a:94:bc:
         1c:1a:d1:e3:9b:9e:f7:57:d6:fa:68:38:51:13:9f:03:a6:9c:
         f8:4d:af:2c:9c:ac:8e:71:4f:39:d8:57:be:43:31:ca:a7:40:
         49:96:37:05:30:70:6c:75:82:5d:cf:2c:9c:25:4a:61:00:ca:
         6f:3f:0c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:06:55 2025 by rpki-client