Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a313034383a3a2f34352d3435203d3e20323730333431.roa
File:                     323830343a366138343a313034383a3a2f34352d3435203d3e20323730333431.roa (raw, json)
Hash identifier:          nIqlHHAsUr/+fcGN6tiE3aqMDQV7nZtadPAfAzg+J5g=
Subject key identifier:   8C:C2:98:63:78:87:5F:16:FB:BD:7F:73:80:D0:1A:D0:A5:33:0A:5A
Certificate issuer:       /CN=D4CE1443D6786421014CB2B08469ADBFF750F303
Certificate serial:       1998F8D97611B4D14C194351D2074650CA0CDDAF
Authority key identifier: D4:CE:14:43:D6:78:64:21:01:4C:B2:B0:84:69:AD:BF:F7:50:F3:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a313034383a3a2f34352d3435203d3e20323730333431.roa
Signing time:             Sat 24 Oct 2026 00:15:41 +0000
ROA not before:           Sat 24 Oct 2026 00:10:41 +0000
ROA not after:            Sat 23 Oct 2027 00:15:41 +0000
asID:                     270341
IP address blocks:        2804:6a84:1048::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.crl
                          rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 05:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:98:f8:d9:76:11:b4:d1:4c:19:43:51:d2:07:46:50:ca:0c:dd:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4CE1443D6786421014CB2B08469ADBFF750F303
        Validity
            Not Before: Oct 24 00:10:41 2026 GMT
            Not After : Oct 23 00:15:41 2027 GMT
        Subject: CN=8CC2986378875F16FBBD7F7380D01AD0A5330A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:b3:b9:58:9b:a1:aa:62:1f:4c:0b:d8:6b:
                    62:b2:e0:3d:a0:25:5c:c3:49:ea:23:25:f7:94:26:
                    a7:76:49:dd:d9:f2:39:76:67:fd:ac:ca:d8:11:bd:
                    0d:62:96:b1:84:de:7a:2e:3f:32:bd:88:e7:00:72:
                    89:74:e2:f9:a5:48:c8:8c:a3:81:f5:77:68:5f:6e:
                    30:06:92:71:16:c4:d1:95:b2:0f:6b:20:9c:ad:80:
                    c1:67:1b:5c:60:c1:5e:d6:eb:75:63:86:6e:d1:9a:
                    4f:29:94:23:a2:b9:22:7f:72:b6:26:98:b9:52:28:
                    c8:a7:8a:08:93:db:25:d9:4f:a4:7f:0e:30:90:43:
                    90:28:69:51:c8:bb:0e:cb:ee:07:13:42:48:46:71:
                    43:6a:7e:40:e7:b1:df:62:15:c5:44:ed:4a:f7:21:
                    b9:a7:b4:09:77:dc:c3:71:08:52:44:6c:25:f7:89:
                    c6:02:e2:e2:3e:6d:05:75:75:f5:51:be:2e:3b:68:
                    79:11:aa:69:17:08:1a:81:7c:20:ed:97:73:b1:ec:
                    d2:10:a0:5b:3c:d6:51:a5:4e:01:13:6b:b1:f7:a3:
                    bc:02:9a:f7:23:4f:8e:bf:32:d8:47:40:a0:86:67:
                    3a:db:b9:04:53:af:ae:fd:ea:6f:bc:e8:57:81:fb:
                    27:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C2:98:63:78:87:5F:16:FB:BD:7F:73:80:D0:1A:D0:A5:33:0A:5A
            X509v3 Authority Key Identifier:
                keyid:D4:CE:14:43:D6:78:64:21:01:4C:B2:B0:84:69:AD:BF:F7:50:F3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a313034383a3a2f34352d3435203d3e20323730333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a84:1048::/45

    Signature Algorithm: sha256WithRSAEncryption
         8a:60:48:31:df:d2:3b:c4:11:40:c5:33:db:40:8f:ff:f3:42:
         69:ca:d8:44:71:e0:32:ed:2d:99:0f:dc:ad:f0:e7:95:f7:8d:
         19:87:74:31:61:76:d0:22:83:5e:95:29:7a:09:83:53:11:6c:
         81:bf:32:54:22:06:b2:10:5b:7d:24:ea:d4:f3:7c:a8:d7:e2:
         98:13:8b:f6:d2:91:54:97:3b:d6:86:fd:0b:bd:16:a2:e4:f1:
         25:93:d3:b6:88:7f:e6:e0:aa:bd:46:8b:1f:be:d5:c2:61:7a:
         8a:55:2e:0e:73:31:ed:d1:ec:48:d6:1f:bc:fa:52:95:e7:81:
         38:e4:fc:cb:06:fb:f8:88:2b:22:8d:18:c5:74:34:ac:88:08:
         da:4d:af:a9:51:0d:97:74:68:34:0f:02:eb:90:dd:98:32:5f:
         ce:59:61:3f:27:8a:a3:e7:ce:3b:ff:7d:87:37:6d:dc:91:9c:
         69:90:f5:c4:37:e0:1f:76:f0:5e:9b:d0:81:b5:fa:69:9d:78:
         e5:9e:ae:8a:72:84:e6:b6:7f:f6:4b:2b:46:19:54:74:7d:55:
         e8:4a:e9:d1:ca:77:a6:98:e1:bd:c4:bf:cd:5f:65:93:8b:6d:
         90:f1:98:fc:c1:47:91:15:69:75:2f:33:6b:0f:a3:59:83:3e:
         cd:d0:a9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 21:04:32 2026 by rpki-client