Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a313036303a3a2f34352d3435203d3e20323730333431.roa
File:                     323830343a366138343a313036303a3a2f34352d3435203d3e20323730333431.roa (raw, json)
Hash identifier:          WgP8QcfTAL5eLXgB8v7m/vnMZMdm9XAINyOks0tb8Ss=
Subject key identifier:   18:94:CB:1E:02:42:6E:3C:15:9D:8C:6F:C0:3E:D5:35:75:39:D2:E5
Certificate issuer:       /CN=D4CE1443D6786421014CB2B08469ADBFF750F303
Certificate serial:       6FD2C9AEFF80F74AEB1F17F8B89DC80598BCBE08
Authority key identifier: D4:CE:14:43:D6:78:64:21:01:4C:B2:B0:84:69:AD:BF:F7:50:F3:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a313036303a3a2f34352d3435203d3e20323730333431.roa
Signing time:             Fri 23 Oct 2026 22:52:47 +0000
ROA not before:           Fri 23 Oct 2026 22:47:47 +0000
ROA not after:            Fri 22 Oct 2027 22:52:47 +0000
asID:                     270341
IP address blocks:        2804:6a84:1060::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.crl
                          rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 05:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d2:c9:ae:ff:80:f7:4a:eb:1f:17:f8:b8:9d:c8:05:98:bc:be:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4CE1443D6786421014CB2B08469ADBFF750F303
        Validity
            Not Before: Oct 23 22:47:47 2026 GMT
            Not After : Oct 22 22:52:47 2027 GMT
        Subject: CN=1894CB1E02426E3C159D8C6FC03ED5357539D2E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:f2:6d:72:8a:59:5f:67:ff:2e:c8:06:8a:
                    9a:30:d1:4a:2e:a8:c9:e8:e2:0c:93:7a:56:4c:a5:
                    52:2e:e4:a4:51:5f:68:c7:a6:57:f5:5c:f8:ac:70:
                    97:e3:c0:16:3c:38:4f:19:f8:a3:63:d8:19:e8:01:
                    e3:ab:3b:18:fa:47:35:7d:ae:b7:0b:58:47:0f:46:
                    ec:d0:22:21:ea:51:60:09:27:87:d3:d8:f0:02:a3:
                    c9:2e:5c:46:af:ea:53:f3:08:aa:25:0e:23:b7:03:
                    35:64:04:8c:bf:17:e7:3a:08:dc:90:49:42:bc:2a:
                    4a:dc:bb:c2:b2:91:19:aa:0a:7a:f2:d6:92:08:a0:
                    7d:76:e7:3f:b1:57:b7:47:1a:c9:d5:4b:21:60:6e:
                    f4:83:6b:c9:d0:92:0d:c1:32:d4:64:e2:99:3b:b7:
                    d9:b4:a0:68:46:bc:76:07:97:e3:47:f6:9e:dd:7d:
                    7c:44:e3:50:d6:25:63:9f:97:52:a3:72:02:41:a4:
                    fa:20:2e:90:06:bf:57:ea:f8:39:6b:1e:30:1c:bf:
                    f9:95:9f:60:c8:f8:cc:f3:9b:67:c3:2f:18:e2:07:
                    b2:59:97:c3:72:eb:9a:a5:cb:d9:c5:d5:37:74:42:
                    a3:f2:8a:f4:a0:0d:fa:34:8c:2f:03:a0:51:a5:07:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:94:CB:1E:02:42:6E:3C:15:9D:8C:6F:C0:3E:D5:35:75:39:D2:E5
            X509v3 Authority Key Identifier:
                keyid:D4:CE:14:43:D6:78:64:21:01:4C:B2:B0:84:69:AD:BF:F7:50:F3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/323830343a366138343a313036303a3a2f34352d3435203d3e20323730333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a84:1060::/45

    Signature Algorithm: sha256WithRSAEncryption
         05:47:ad:81:7c:a8:38:f4:53:39:83:4f:8c:a5:42:29:6b:60:
         fd:81:cb:51:a3:bf:d7:07:b0:77:3e:b9:b5:2b:a8:f3:45:f8:
         b0:d9:51:4a:0d:b5:89:fa:44:e0:56:d4:5b:05:3d:8c:14:09:
         90:f1:47:d5:9d:dd:55:03:01:f2:8c:d1:7e:a2:65:d9:f3:e7:
         61:e9:2b:06:c3:db:1a:bc:56:0e:32:d3:26:12:65:5e:30:2f:
         ca:b3:65:5f:62:74:c2:a9:db:ae:8e:e1:ee:63:40:e0:ef:b8:
         09:d6:ce:b3:02:3d:88:a8:fb:d2:3b:23:c6:68:20:63:8f:2b:
         f8:4e:bc:a9:b9:12:db:d6:52:cb:47:78:ff:a2:71:d1:d5:1a:
         08:05:80:bf:a7:91:00:fe:66:e7:8a:b4:1c:2a:44:93:c6:1d:
         ec:f5:e8:88:85:9d:96:3e:d3:ed:86:99:ed:48:f2:e6:3b:eb:
         80:b5:7b:69:5d:75:14:91:e9:fb:b2:f5:da:5e:be:fd:21:d8:
         a9:01:cc:69:40:be:24:6e:f6:47:50:53:30:41:87:6d:bb:24:
         62:f6:f2:01:f9:ac:65:ca:03:84:d6:c0:0e:ca:82:d4:1c:25:
         cf:62:44:f5:24:05:a7:8e:98:68:2a:a3:ab:57:be:df:72:26:
         75:0e:4f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 21:04:33 2026 by rpki-client