Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a3730303a3a2f34302d3430203d3e20323633303938.roa
File:                     323830343a313736633a3730303a3a2f34302d3430203d3e20323633303938.roa (raw, json)
Hash identifier:          sdKahC/4yqu3vSt7IoXLArYZeRY18DxG5v0wWIAm338=
Subject key identifier:   D5:AE:6F:24:AA:A7:5A:40:FE:65:05:99:16:EA:A5:11:0C:FF:B6:29
Certificate issuer:       /CN=74F9C88A4F4F16E11392F600961CE950348548CB
Certificate serial:       47364D544037E704D2E3BA354A40BD7EBBD4CCBD
Authority key identifier: 74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a3730303a3a2f34302d3430203d3e20323633303938.roa
Signing time:             Wed 03 Jun 2026 16:11:26 +0000
ROA not before:           Wed 03 Jun 2026 16:06:26 +0000
ROA not after:            Wed 02 Jun 2027 16:11:26 +0000
asID:                     263098
IP address blocks:        2804:176c:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:36:4d:54:40:37:e7:04:d2:e3:ba:35:4a:40:bd:7e:bb:d4:cc:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74F9C88A4F4F16E11392F600961CE950348548CB
        Validity
            Not Before: Jun  3 16:06:26 2026 GMT
            Not After : Jun  2 16:11:26 2027 GMT
        Subject: CN=D5AE6F24AAA75A40FE65059916EAA5110CFFB629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:b5:06:6b:c9:bf:49:0d:02:a3:34:8b:b6:
                    de:c8:fc:6e:56:ef:21:23:71:17:9f:34:14:8a:e5:
                    7d:32:75:24:58:0f:7a:53:4a:7f:01:87:3c:b3:94:
                    e7:04:61:e1:88:88:dc:ac:3d:e9:fe:9f:fd:ce:c7:
                    01:a1:91:88:7b:b6:d8:ea:a8:d3:65:39:5f:36:1f:
                    d2:54:8c:b1:48:15:1c:d6:f5:26:a7:47:c4:68:c3:
                    47:de:35:fb:d8:f0:56:14:31:29:02:11:83:bc:3d:
                    da:50:56:af:37:53:13:c6:cc:de:23:37:79:0a:93:
                    56:7c:89:aa:2a:66:96:ca:32:42:e2:34:2f:9b:18:
                    9a:42:fa:78:30:8b:7f:94:67:d7:f6:27:1b:c4:97:
                    5e:75:aa:b1:82:e4:8a:08:f2:68:af:56:9b:d5:0c:
                    83:d7:75:ac:e7:78:74:c6:04:0c:4e:9a:93:d3:45:
                    34:f7:da:23:69:2a:bc:a1:4a:cf:44:af:91:3c:77:
                    61:1f:6f:8c:be:f4:fb:c1:90:3e:3f:d3:d5:f4:18:
                    08:c1:77:a6:9f:79:fd:10:ba:af:91:45:42:fe:68:
                    1b:53:28:f6:43:76:3f:9b:5c:ef:ac:0b:ea:d8:94:
                    f7:a7:30:44:0b:bb:87:13:4e:59:c7:94:af:13:73:
                    b8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AE:6F:24:AA:A7:5A:40:FE:65:05:99:16:EA:A5:11:0C:FF:B6:29
            X509v3 Authority Key Identifier:
                keyid:74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a3730303a3a2f34302d3430203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:176c:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:91:db:c5:cc:c2:ad:3d:68:c8:f0:d4:dd:12:b8:03:f2:32:
         07:ee:46:bd:cd:02:5f:e1:f7:c3:b8:f7:e7:af:0c:94:93:72:
         46:28:92:29:6f:f7:0e:cc:df:dc:5e:a8:21:aa:e8:4f:4c:e2:
         87:6d:50:3d:62:01:90:ca:a5:b3:fe:72:99:c8:c9:64:fb:92:
         49:7a:01:cc:43:70:8f:36:de:b0:b7:5c:93:0a:72:2a:13:17:
         29:98:20:e3:d1:05:59:33:b5:38:df:0d:c1:35:da:36:49:c1:
         7e:4b:09:11:af:fa:85:a5:12:2c:bd:6c:f8:11:fc:f4:15:50:
         c3:b5:fd:99:46:53:13:1f:b9:ce:b0:b5:41:35:5a:96:f3:ae:
         d7:66:4c:9d:f1:d6:dc:aa:71:4c:58:75:7f:d7:71:d1:7d:56:
         5e:46:4a:47:6b:3f:e8:ca:76:c9:28:55:d7:6a:f1:73:ae:bf:
         49:c7:79:04:68:b3:d5:91:21:15:d9:79:17:f3:78:7f:25:f9:
         43:d3:9a:6a:25:12:f1:ac:71:e0:46:18:b0:9d:b9:46:6f:76:
         0e:23:f9:a9:93:79:d1:30:c1:e0:b2:2b:5f:d7:67:b8:20:b6:
         09:ab:bd:c5:3d:ba:31:c6:7b:fa:80:42:d3:74:02:88:6c:45:
         b8:79:67:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURzZNVEA35wTS47o1SkC9frvUzL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRGOUM4OEE0RjRGMTZFMTEzOTJGNjAwOTYxQ0U5NTAz
NDg1NDhDQjAeFw0yNjA2MDMxNjA2MjZaFw0yNzA2MDIxNjExMjZaMDMxMTAvBgNV
BAMTKEQ1QUU2RjI0QUFBNzVBNDBGRTY1MDU5OTE2RUFBNTExMENGRkI2MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrurUGa8m/SQ0CozSLtt7I/G5W
7yEjcRefNBSK5X0ydSRYD3pTSn8BhzyzlOcEYeGIiNysPen+n/3OxwGhkYh7ttjq
qNNlOV82H9JUjLFIFRzW9SanR8Row0feNfvY8FYUMSkCEYO8PdpQVq83UxPGzN4j
N3kKk1Z8iaoqZpbKMkLiNC+bGJpC+ngwi3+UZ9f2JxvEl151qrGC5IoI8mivVpvV
DIPXdazneHTGBAxOmpPTRTT32iNpKryhSs9Er5E8d2Efb4y+9PvBkD4/09X0GAjB
d6afef0Quq+RRUL+aBtTKPZDdj+bXO+sC+rYlPenMEQLu4cTTlnHlK8Tc7iJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1a5vJKqnWkD+ZQWZFuqlEQz/tikwHwYDVR0j
BBgwFoAUdPnIik9PFuETkvYAlhzpUDSFSMswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXBRdTJzdUJpVFE4ZVRva01ORHUyWUNEMUVFdHZtU2o3WUx3bTJ3aXNM
N00vMC83NEY5Qzg4QTRGNEYxNkUxMTM5MkY2MDA5NjFDRTk1MDM0ODU0OENCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0RjlDODhBNEY0RjE2RTEx
MzkyRjYwMDk2MUNFOTUwMzQ4NTQ4Q0IuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VwUXUyc3VCaVRROGVUb2tNTkR1MllDRDFFRXR2bVNqN1lMd20yd2lzTDdNLzAv
MzIzODMwMzQzYTMxMzczNjYzM2EzNzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzMzMDM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBBdsBzANBgkqhkiG9w0BAQsFAAOC
AQEAiZHbxczCrT1oyPDU3RK4A/IyB+5Gvc0CX+H3w7j3568MlJNyRiiSKW/3Dszf
3F6oIaroT0zih21QPWIBkMqls/5ymcjJZPuSSXoBzENwjzbesLdckwpyKhMXKZgg
49EFWTO1ON8NwTXaNknBfksJEa/6haUSLL1s+BH89BVQw7X9mUZTEx+5zrC1QTVa
lvOu12ZMnfHW3KpxTFh1f9dx0X1WXkZKR2s/6Mp2yShV12rxc66/Scd5BGiz1ZEh
Fdl5F/N4fyX5Q9OaaiUS8axx4EYYsJ25Rm92DiP5qZN50TDB4LIrX9dnuCC2Cau9
xT26McZ7+oBC03QCiGxFuHln7w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 11:05:52 2026 by rpki-client