Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/323830343a313438343a383038303a3a2f34312d3431203d3e20323633333335.roa
File:                     323830343a313438343a383038303a3a2f34312d3431203d3e20323633333335.roa (raw, json)
Hash identifier:          Xrk9tOjvuK3/FwcjPzuMK6UFTlzrDrxDv7owVIsyYWc=
Subject key identifier:   E1:24:35:6C:9F:5C:54:18:CF:5D:DB:8C:89:04:08:19:9E:42:C2:77
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       7995FE346BECC458251A660CA8458BA085B68BB4
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/323830343a313438343a383038303a3a2f34312d3431203d3e20323633333335.roa
Signing time:             Fri 09 Oct 2026 14:00:18 +0000
ROA not before:           Fri 09 Oct 2026 13:55:18 +0000
ROA not after:            Fri 08 Oct 2027 14:00:18 +0000
asID:                     263335
IP address blocks:        2804:1484:8080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 11:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:95:fe:34:6b:ec:c4:58:25:1a:66:0c:a8:45:8b:a0:85:b6:8b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Oct  9 13:55:18 2026 GMT
            Not After : Oct  8 14:00:18 2027 GMT
        Subject: CN=E124356C9F5C5418CF5DDB8C890408199E42C277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:64:0e:24:fa:64:90:2f:4d:a4:9d:34:7a:8a:
                    a5:79:78:97:08:11:6f:ee:fa:87:5d:68:e7:c0:41:
                    11:18:de:fb:ce:ae:b1:92:7a:8b:78:68:ab:7b:b3:
                    b4:9c:d5:5d:f3:0e:0d:71:73:71:85:57:d7:ba:0a:
                    30:28:05:fe:f2:a1:af:35:89:8c:0c:7a:25:e4:4f:
                    21:72:cd:de:44:ce:96:25:9d:d0:11:38:15:04:3c:
                    f3:b5:50:d9:e2:64:34:35:d2:8d:a4:92:61:22:91:
                    1c:fb:33:1b:45:07:b1:86:be:0f:51:a9:f5:57:84:
                    7b:d2:4c:b6:61:b1:5a:7e:4a:f6:22:50:9d:c8:f1:
                    1a:fa:52:1e:82:1e:50:ad:ba:6b:c6:1b:db:0d:83:
                    e2:72:66:c9:c6:a7:d0:bf:1a:cc:a8:67:31:42:3b:
                    94:2d:d6:7a:cd:63:fd:16:d8:7b:d0:c1:95:c0:53:
                    15:32:dc:19:28:9e:27:1b:7e:02:b1:20:25:6e:a5:
                    31:5e:68:f1:13:57:1a:5f:cd:34:cf:5b:59:f7:58:
                    83:11:f4:f8:0d:eb:c0:e7:47:98:c8:ba:49:38:4f:
                    1f:eb:ed:4a:09:b3:c8:13:31:ee:26:bd:99:cd:11:
                    b2:f0:b8:10:c7:97:c2:af:90:3f:58:ca:9b:1b:ce:
                    ef:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:24:35:6C:9F:5C:54:18:CF:5D:DB:8C:89:04:08:19:9E:42:C2:77
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/323830343a313438343a383038303a3a2f34312d3431203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1484:8080::/41

    Signature Algorithm: sha256WithRSAEncryption
         22:05:a2:1e:56:a3:c0:e3:1a:b1:89:77:f9:38:01:ae:b0:63:
         0d:ae:5e:d6:00:de:d7:d4:76:6f:9b:0f:ea:2a:f9:5b:00:30:
         4c:4a:99:24:d8:e4:cd:63:df:56:66:10:37:25:51:24:5a:af:
         4c:6f:d1:35:34:fe:ad:21:7e:ce:1a:5f:81:aa:69:78:69:43:
         08:b1:7b:af:88:94:86:19:a5:f3:86:e2:b1:81:c2:28:37:ff:
         e8:ad:d0:fe:bd:3d:7f:e5:42:85:69:31:b9:68:64:6c:93:f0:
         50:14:f7:3d:a1:d1:0b:e3:48:13:02:cd:c3:48:ee:d5:99:41:
         69:94:c6:cc:af:b1:07:af:60:6d:f4:19:7f:6b:0c:0a:1a:f2:
         81:e8:37:e2:55:ae:07:55:5b:fa:59:29:40:f2:cc:89:b3:dc:
         26:be:bd:ad:53:8d:2f:4a:21:35:9f:bc:75:b9:2a:18:c0:7b:
         13:82:c2:f4:05:f4:d5:1f:53:a1:f7:ef:0f:46:15:01:2e:34:
         82:8b:52:e1:37:36:65:b3:41:42:11:f7:14:22:31:bf:63:53:
         8f:3f:d0:a1:7c:85:96:9d:4f:0a:11:6d:c9:ef:29:2e:17:59:
         65:df:f5:fa:9c:0c:cf:a3:b1:26:49:b4:77:ec:6e:96:d3:47:
         c4:b7:84:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 13:45:13 2026 by rpki-client