Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a3930303a3a2f34302d3430203d3e20323633303938.roa
File:                     323830343a313736633a3930303a3a2f34302d3430203d3e20323633303938.roa (raw, json)
Hash identifier:          lmNkH4QvFoagAsKqIMmMVPu3AfgETplQg5RvFvbqLps=
Subject key identifier:   B0:BC:40:93:BE:23:04:64:73:AB:6E:1C:F0:1E:16:96:4E:C8:09:5C
Certificate issuer:       /CN=74F9C88A4F4F16E11392F600961CE950348548CB
Certificate serial:       4515B27F34EFB95682E24042C17DFDF758797E7F
Authority key identifier: 74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a3930303a3a2f34302d3430203d3e20323633303938.roa
Signing time:             Wed 03 Jun 2026 16:11:26 +0000
ROA not before:           Wed 03 Jun 2026 16:06:26 +0000
ROA not after:            Wed 02 Jun 2027 16:11:26 +0000
asID:                     263098
IP address blocks:        2804:176c:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:15:b2:7f:34:ef:b9:56:82:e2:40:42:c1:7d:fd:f7:58:79:7e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74F9C88A4F4F16E11392F600961CE950348548CB
        Validity
            Not Before: Jun  3 16:06:26 2026 GMT
            Not After : Jun  2 16:11:26 2027 GMT
        Subject: CN=B0BC4093BE23046473AB6E1CF01E16964EC8095C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:8d:87:92:d4:7d:85:71:8f:a3:50:a5:9a:
                    a3:91:74:7d:79:d0:75:23:36:c7:8d:55:eb:06:a9:
                    cd:59:6e:c4:ab:19:21:9c:ef:18:52:6b:37:70:b0:
                    9d:7b:47:64:16:9c:57:99:7c:6e:e0:65:52:30:b2:
                    91:fa:11:1f:a0:8c:a2:02:aa:35:63:30:69:41:e5:
                    45:0b:2d:13:85:df:12:4c:93:6d:28:68:42:40:83:
                    4f:a9:4e:7f:8b:d4:2d:b9:18:bc:c3:6a:57:57:8e:
                    d2:5c:1c:2c:2e:58:81:0a:19:b5:9f:69:ca:47:f6:
                    b7:3c:1f:37:64:24:41:3e:b5:3d:d0:32:52:93:7a:
                    74:e1:9a:b5:e9:da:6f:b3:5f:62:9a:1f:7f:33:24:
                    bd:1a:2c:aa:28:29:cb:d3:f8:f5:5d:0e:b5:19:f6:
                    0d:ad:97:de:c8:4a:3f:a3:45:fb:77:02:48:99:b4:
                    81:3d:57:11:f5:70:03:4a:2a:a4:d6:49:4d:4c:1e:
                    cf:a9:23:e0:99:ba:9b:5f:ac:db:b1:71:db:52:ff:
                    bd:88:19:59:cb:fe:c2:24:46:27:72:a2:a0:a3:c0:
                    da:f3:27:7e:8e:02:e1:6a:2a:b8:77:7e:06:62:67:
                    68:85:8d:c7:ee:28:98:38:83:84:5c:aa:69:63:92:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BC:40:93:BE:23:04:64:73:AB:6E:1C:F0:1E:16:96:4E:C8:09:5C
            X509v3 Authority Key Identifier:
                keyid:74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/323830343a313736633a3930303a3a2f34302d3430203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:176c:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:28:80:2b:04:0d:c5:08:be:3e:69:2e:7f:47:78:35:3d:d2:
         b7:f4:b1:86:fd:bb:2c:ca:24:4b:5c:2d:46:02:98:d9:d3:60:
         35:0e:81:c6:4f:aa:5b:17:b7:60:18:de:cf:e4:75:1c:d2:d4:
         aa:e8:e4:20:b7:1c:1a:fe:a3:50:0f:37:a1:9a:79:db:0e:34:
         0a:5d:b1:f0:e0:f6:a1:2f:cc:92:63:17:11:a7:0d:8c:2d:0b:
         a3:6e:8b:38:ce:df:9b:da:0e:ca:49:54:a9:fa:dc:78:0d:36:
         fd:72:68:42:92:50:ee:63:9e:d9:3f:8f:ad:29:29:bb:2d:bd:
         86:21:01:ec:bd:04:d4:3a:b3:80:8a:f9:26:3d:2a:b3:be:c8:
         da:18:19:36:65:0d:ad:27:56:73:cf:11:dc:be:1c:94:0e:58:
         13:e4:e6:05:76:15:59:01:76:40:0d:dc:43:19:51:cc:83:f3:
         92:cd:6d:12:f2:38:ba:5e:21:cd:39:51:d1:88:af:cb:98:3c:
         ac:98:20:53:2a:52:1f:96:f1:94:43:8d:4a:35:d0:05:5f:a2:
         29:8f:65:ce:65:33:e6:66:fd:be:3b:da:1f:83:a2:5c:81:87:
         ba:55:37:59:8c:65:8e:29:5c:2a:84:80:6e:ed:08:70:33:60:
         fc:43:6b:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIURRWyfzTvuVaC4kBCwX3991h5fn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRGOUM4OEE0RjRGMTZFMTEzOTJGNjAwOTYxQ0U5NTAz
NDg1NDhDQjAeFw0yNjA2MDMxNjA2MjZaFw0yNzA2MDIxNjExMjZaMDMxMTAvBgNV
BAMTKEIwQkM0MDkzQkUyMzA0NjQ3M0FCNkUxQ0YwMUUxNjk2NEVDODA5NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzV42HktR9hXGPo1ClmqORdH15
0HUjNseNVesGqc1ZbsSrGSGc7xhSazdwsJ17R2QWnFeZfG7gZVIwspH6ER+gjKIC
qjVjMGlB5UULLROF3xJMk20oaEJAg0+pTn+L1C25GLzDaldXjtJcHCwuWIEKGbWf
acpH9rc8HzdkJEE+tT3QMlKTenThmrXp2m+zX2KaH38zJL0aLKooKcvT+PVdDrUZ
9g2tl97ISj+jRft3AkiZtIE9VxH1cANKKqTWSU1MHs+pI+CZuptfrNuxcdtS/72I
GVnL/sIkRidyoqCjwNrzJ36OAuFqKrh3fgZiZ2iFjcfuKJg4g4Rcqmljkqt9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsLxAk74jBGRzq24c8B4Wlk7ICVwwHwYDVR0j
BBgwFoAUdPnIik9PFuETkvYAlhzpUDSFSMswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXBRdTJzdUJpVFE4ZVRva01ORHUyWUNEMUVFdHZtU2o3WUx3bTJ3aXNM
N00vMC83NEY5Qzg4QTRGNEYxNkUxMTM5MkY2MDA5NjFDRTk1MDM0ODU0OENCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0RjlDODhBNEY0RjE2RTEx
MzkyRjYwMDk2MUNFOTUwMzQ4NTQ4Q0IuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VwUXUyc3VCaVRROGVUb2tNTkR1MllDRDFFRXR2bVNqN1lMd20yd2lzTDdNLzAv
MzIzODMwMzQzYTMxMzczNjYzM2EzOTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzMzMDM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBBdsCTANBgkqhkiG9w0BAQsFAAOC
AQEALiiAKwQNxQi+Pmkuf0d4NT3St/Sxhv27LMokS1wtRgKY2dNgNQ6Bxk+qWxe3
YBjez+R1HNLUqujkILccGv6jUA83oZp52w40Cl2x8OD2oS/MkmMXEacNjC0Lo26L
OM7fm9oOyklUqfrceA02/XJoQpJQ7mOe2T+PrSkpuy29hiEB7L0E1DqzgIr5Jj0q
s77I2hgZNmUNrSdWc88R3L4clA5YE+TmBXYVWQF2QA3cQxlRzIPzks1tEvI4ul4h
zTlR0Yivy5g8rJggUypSH5bxlEONSjXQBV+iKY9lzmUz5mb9vjvaH4OiXIGHulU3
WYxljilcKoSAbu0IcDNg/ENrpw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:33:03 2026 by rpki-client