Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a313034303a3a2f34342d3434203d3e20323730333431.roa
File:                     323830343a366138343a313034303a3a2f34342d3434203d3e20323730333431.roa (raw, json)
Hash identifier:          PmTx7wWVvhlpDQzUWlPlKCFv00LHio1mTlzf3itN6o8=
Subject key identifier:   0D:6C:E1:7C:5F:5D:39:13:7F:2B:7D:B0:F1:50:89:C6:96:6A:D2:C0
Certificate issuer:       /CN=D4CE1443D6786421014CB2B08469ADBFF750F303
Certificate serial:       6F4E9E1C095ED5732B5B21383BC4C56D31160A34
Authority key identifier: D4:CE:14:43:D6:78:64:21:01:4C:B2:B0:84:69:AD:BF:F7:50:F3:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a313034303a3a2f34342d3434203d3e20323730333431.roa
Signing time:             Fri 23 Oct 2026 22:52:46 +0000
ROA not before:           Fri 23 Oct 2026 22:47:46 +0000
ROA not after:            Fri 22 Oct 2027 22:52:46 +0000
asID:                     270341
IP address blocks:        2804:6a84:1040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.crl
                          rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 05:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4e:9e:1c:09:5e:d5:73:2b:5b:21:38:3b:c4:c5:6d:31:16:0a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4CE1443D6786421014CB2B08469ADBFF750F303
        Validity
            Not Before: Oct 23 22:47:46 2026 GMT
            Not After : Oct 22 22:52:46 2027 GMT
        Subject: CN=0D6CE17C5F5D39137F2B7DB0F15089C6966AD2C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fb:04:23:2b:b8:d7:df:64:f1:6e:b5:65:82:
                    fb:84:67:d5:a5:ff:a3:81:f6:aa:ea:e4:62:e2:e3:
                    6d:2f:c4:ab:be:7a:35:37:53:a5:d7:f3:16:73:d4:
                    fb:4c:90:7c:95:7f:f6:1f:50:47:70:6f:43:a0:ae:
                    31:c4:86:67:08:87:09:21:a2:a2:1f:f7:de:d0:13:
                    28:01:fd:d1:ef:5b:db:f6:60:a5:d5:08:f3:b6:bb:
                    bd:e0:ef:d3:b0:65:a7:c9:77:dc:a8:b7:89:4d:45:
                    7d:f3:7a:04:03:50:ad:c0:84:25:ba:12:31:91:82:
                    19:fd:fb:32:18:54:dc:dd:f2:61:17:61:ca:44:c8:
                    40:50:2d:93:48:a7:69:ca:60:53:72:6c:00:da:7d:
                    7c:f9:4c:b4:29:a6:c3:5e:7d:e9:c8:d3:71:90:35:
                    8e:01:fa:e3:75:5d:9c:c7:4c:28:e9:9b:88:f1:59:
                    7b:b6:29:fa:7b:f8:f8:76:10:bf:1e:7c:6a:b8:ed:
                    c0:97:76:e4:71:e4:18:93:7f:61:b7:e1:e8:df:3a:
                    b3:41:b1:40:cb:14:bb:ae:64:e5:57:b1:c4:8b:17:
                    8b:f1:6f:21:cc:4d:b8:0d:df:d8:a5:d5:5d:88:22:
                    41:75:ce:33:34:bf:c9:ad:9e:16:72:0a:94:24:b8:
                    db:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6C:E1:7C:5F:5D:39:13:7F:2B:7D:B0:F1:50:89:C6:96:6A:D2:C0
            X509v3 Authority Key Identifier:
                keyid:D4:CE:14:43:D6:78:64:21:01:4C:B2:B0:84:69:AD:BF:F7:50:F3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a313034303a3a2f34342d3434203d3e20323730333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a84:1040::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:4d:42:1d:75:4d:28:38:69:b6:34:6a:24:a2:8e:f8:05:ad:
         8f:3e:ca:26:20:e0:a5:fa:c2:cb:f4:bd:88:c0:51:f7:0b:e3:
         17:cd:bd:95:6d:d2:0b:f1:2f:2e:06:b5:e6:01:1b:85:ab:ff:
         bd:a6:72:06:3c:72:40:b8:7f:2a:94:ef:9f:19:58:88:d1:2a:
         6d:3b:e9:1e:f8:ae:7b:61:76:93:39:fa:5c:e8:34:6b:3a:37:
         6b:a7:27:b9:3e:a1:73:d3:96:a3:c5:74:4b:16:95:f3:58:6c:
         30:69:de:9e:4d:47:ee:75:2c:25:df:72:54:74:df:77:7a:23:
         d0:f6:8b:85:a0:0d:99:ff:dc:0d:f0:0a:67:fb:c4:99:26:5e:
         eb:2e:c4:2a:8b:85:96:7a:6b:1d:9c:5b:98:24:d0:a4:88:a7:
         a3:aa:d4:b7:b8:db:d8:75:ea:ec:c5:6d:ec:98:91:31:49:24:
         a5:d0:0b:d3:5f:35:3d:89:45:b2:86:10:ae:c3:de:3c:e2:96:
         9e:fe:e5:93:f6:5c:f2:65:a9:ce:f3:78:3e:ed:88:67:a8:d4:
         4c:59:e8:1e:83:47:0e:e4:88:9b:1a:e1:de:c5:32:ee:15:27:
         89:0b:b0:e0:f2:20:80:e8:53:2f:ff:54:d4:e5:63:78:bf:ef:
         b5:77:1e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 21:04:30 2026 by rpki-client