Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a3a2f33322d3334203d3e20323634393939.roa
File:                     323830343a333133303a3a2f33322d3334203d3e20323634393939.roa (raw, json)
Hash identifier:          zqChbeCkpu4fFC2JV122kDeepWTU7Ad6LPVMzmwXHCE=
Subject key identifier:   EA:45:16:92:44:00:C6:E1:03:72:AD:5E:BE:12:85:33:1F:96:67:69
Certificate issuer:       /CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
Certificate serial:       74D49CA0D650BE9281B83564316AF6AEACDE91F6
Authority key identifier: 80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a3a2f33322d3334203d3e20323634393939.roa
Signing time:             Thu 15 Oct 2026 19:28:21 +0000
ROA not before:           Thu 15 Oct 2026 19:23:21 +0000
ROA not after:            Thu 14 Oct 2027 19:28:21 +0000
asID:                     264999
IP address blocks:        2804:3130::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl
                          rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 17:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d4:9c:a0:d6:50:be:92:81:b8:35:64:31:6a:f6:ae:ac:de:91:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8069EEADCEE9DD92B195E50F9FCB35A03626D9CC
        Validity
            Not Before: Oct 15 19:23:21 2026 GMT
            Not After : Oct 14 19:28:21 2027 GMT
        Subject: CN=EA4516924400C6E10372AD5EBE1285331F966769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ba:4d:58:f5:bc:41:36:f4:17:a6:d8:79:7f:
                    41:af:52:03:db:6d:09:f8:fc:01:53:16:d2:b4:e4:
                    bb:07:86:b7:aa:b4:5f:c9:fa:85:79:1b:86:49:aa:
                    90:8a:b4:ca:b3:8e:a4:ca:46:70:f0:b0:a2:f0:3e:
                    49:1b:63:af:5e:cc:71:98:6c:c2:fb:88:d7:3b:98:
                    36:46:f5:b3:36:33:16:96:a3:ff:71:4b:ea:10:34:
                    6e:e8:38:f7:aa:e5:a0:3b:2a:14:ba:1b:6e:38:bd:
                    05:12:11:f3:b7:00:cd:61:9b:4f:a9:78:7b:e2:1b:
                    3d:d0:1b:a8:21:bf:45:ec:dc:7c:8c:d4:c4:06:56:
                    a8:3a:58:00:d9:ec:10:0a:dd:2f:44:4d:42:d6:63:
                    aa:94:d9:d8:16:1c:3d:39:3d:90:b1:0a:d5:22:36:
                    96:4f:22:23:6f:98:3a:9e:30:ef:a7:a5:24:08:f6:
                    60:87:0b:5b:40:c7:42:b2:c4:b1:b9:f1:e9:f4:ff:
                    6c:f9:bc:81:d0:97:69:42:3e:8d:18:5c:a4:f2:b8:
                    e5:8b:09:6f:d1:54:e1:53:81:70:c3:88:2e:22:8c:
                    d4:bd:6c:2e:36:a1:52:f0:91:b6:61:28:60:75:77:
                    8d:1c:44:d9:f7:d6:b4:0b:cb:fa:d8:08:33:fe:43:
                    c2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:45:16:92:44:00:C6:E1:03:72:AD:5E:BE:12:85:33:1F:96:67:69
            X509v3 Authority Key Identifier:
                keyid:80:69:EE:AD:CE:E9:DD:92:B1:95:E5:0F:9F:CB:35:A0:36:26:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8069EEADCEE9DD92B195E50F9FCB35A03626D9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a3a2f33322d3334203d3e20323634393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3130::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:15:11:63:55:bd:be:6f:cd:b5:70:cb:af:e4:04:33:91:93:
         b7:1e:d8:04:90:a2:8b:6b:46:2a:4f:59:31:3f:97:20:5a:c8:
         3f:3f:33:ea:78:71:80:0b:fd:51:b2:fa:23:bf:77:06:fc:9c:
         98:56:f5:00:f4:62:7c:64:bd:97:c2:d6:af:76:63:93:4d:bf:
         1c:9b:aa:50:b0:39:01:2a:04:05:92:c5:2d:8e:f8:eb:ac:cd:
         ca:81:d2:f7:80:f6:59:5f:d7:ba:dd:a1:98:91:f4:ed:38:16:
         b6:99:e5:94:85:e7:45:bc:82:58:41:9c:70:9e:f2:d1:5e:2c:
         cc:bd:c9:48:a3:58:8c:80:62:48:21:f4:a9:f7:5d:84:44:e8:
         65:64:ea:b6:00:7c:69:ee:f5:dc:fb:e8:7e:62:a9:59:59:1a:
         e3:bb:b8:aa:19:9e:ef:3f:4a:bf:74:20:a5:ec:93:7a:bd:1f:
         80:68:76:c5:41:19:3d:8f:0e:6a:53:7a:f6:7a:66:a4:c2:1b:
         38:bf:32:fc:21:6e:49:92:f8:e5:38:96:c2:1e:8c:30:f5:22:
         0d:d5:83:45:9e:ba:4c:5c:3c:39:ab:32:1e:96:0f:36:2b:da:
         26:79:70:46:82:fb:da:1b:1b:6d:b6:11:a7:4e:61:90:80:b8:
         e7:55:80:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 06:23:58 2026 by rpki-client