Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/323830343a366335303a3a2f33322d313238203d3e20323730343539.roa
File:                     323830343a366335303a3a2f33322d313238203d3e20323730343539.roa (raw, json)
Hash identifier:          GX80yDTtqhmOrwMxdSXfljCOBNeMYd91RoFQT0KnX+o=
Subject key identifier:   6E:0B:A5:91:00:BA:EC:21:4C:EE:1A:C5:6E:31:C6:2F:96:C8:8D:84
Certificate issuer:       /CN=E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23
Certificate serial:       33580152FEDAC046CA2910C0F890FE346BF91CBD
Authority key identifier: E8:C6:4F:57:C6:0E:03:5C:C9:1F:AF:09:6A:8C:BE:39:B4:C3:CF:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/323830343a366335303a3a2f33322d313238203d3e20323730343539.roa
Signing time:             Wed 14 Oct 2026 17:31:26 +0000
ROA not before:           Wed 14 Oct 2026 17:26:26 +0000
ROA not after:            Wed 13 Oct 2027 17:31:26 +0000
asID:                     270459
IP address blocks:        2804:6c50::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.crl
                          rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 12:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:58:01:52:fe:da:c0:46:ca:29:10:c0:f8:90:fe:34:6b:f9:1c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23
        Validity
            Not Before: Oct 14 17:26:26 2026 GMT
            Not After : Oct 13 17:31:26 2027 GMT
        Subject: CN=6E0BA59100BAEC214CEE1AC56E31C62F96C88D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6d:97:dc:ea:71:b0:2f:b4:77:a1:58:e4:4a:
                    b7:e8:27:88:f8:6b:05:4b:83:b2:21:9d:23:e1:71:
                    b4:1d:fe:32:ca:ae:ea:1b:2a:c2:4f:cd:d0:9d:48:
                    1c:66:98:85:d8:7d:84:cc:e6:e5:94:61:6b:4f:23:
                    72:1d:f9:68:bf:cd:39:26:af:b6:8f:81:46:b7:75:
                    59:7a:27:44:59:49:f0:7b:3b:2f:22:cf:02:62:7f:
                    70:be:34:51:0a:b9:ea:09:7b:87:0e:00:11:e4:81:
                    7d:69:7a:b4:ce:0e:3b:b5:95:bb:67:47:2e:48:50:
                    33:85:9c:e6:d8:a5:f8:62:88:77:0d:27:fb:b1:6a:
                    c3:c0:69:85:58:f5:eb:9a:c0:1e:a0:dd:eb:fb:1f:
                    cd:b8:c2:51:b9:40:c7:59:d4:d4:7d:48:1c:00:24:
                    7a:fc:97:ac:03:db:e5:46:f7:cc:fa:f1:d1:e2:74:
                    a0:8a:2a:92:23:12:9b:10:97:6d:97:ed:b7:ef:54:
                    c1:9a:a3:28:63:ae:db:bd:74:a6:bb:6b:bc:50:3d:
                    a5:05:6a:db:00:36:98:de:a0:bf:eb:b2:19:f1:af:
                    65:7d:dc:05:54:d9:20:a5:8f:fd:56:d3:e5:2a:0b:
                    9f:4f:e0:40:a9:8f:51:39:3c:31:8a:6c:6f:8a:6a:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0B:A5:91:00:BA:EC:21:4C:EE:1A:C5:6E:31:C6:2F:96:C8:8D:84
            X509v3 Authority Key Identifier:
                keyid:E8:C6:4F:57:C6:0E:03:5C:C9:1F:AF:09:6A:8C:BE:39:B4:C3:CF:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C64F57C60E035CC91FAF096A8CBE39B4C3CF23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLGEwXMZ5SxDK5bZWE2V7bQR6dzQaxtWY61yu26gsyMU/0/323830343a366335303a3a2f33322d313238203d3e20323730343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:ce:ab:c5:c9:e2:4e:e1:f4:7c:cc:6b:32:63:d9:be:49:36:
         7c:2b:99:20:06:1a:11:50:40:d9:e1:73:83:ca:08:e0:3b:93:
         bd:5d:7d:0f:77:28:b8:ab:42:9f:ec:04:b5:33:b2:97:a4:98:
         01:e4:58:82:5f:d2:26:88:16:12:da:2f:a1:77:c8:a3:69:25:
         c2:30:c2:55:2a:e0:0f:96:fd:c3:bb:13:f7:63:83:4c:8e:5c:
         e2:3c:e5:29:f4:ea:27:52:7a:7a:74:6c:2b:c5:f8:9b:25:83:
         7f:e6:2e:e3:47:57:92:b4:ff:62:89:db:31:1a:4b:d3:c9:25:
         7f:6b:06:a4:4d:0a:97:8d:13:33:dd:60:6c:41:64:62:88:f4:
         d2:cc:ea:d8:57:5a:28:ea:0b:81:ed:8c:ac:5c:c5:7d:44:2b:
         e3:81:81:58:fe:be:02:03:38:2c:79:aa:24:9c:e2:36:e6:12:
         cd:95:14:00:3a:87:d6:bf:11:d7:2e:d9:ab:3c:be:c6:61:37:
         59:d0:36:12:57:a4:83:b6:33:9a:51:a3:b1:ab:b0:2e:48:70:
         97:2b:6f:ef:63:5a:36:da:2f:53:07:54:0e:ce:4c:99:58:33:
         1f:75:e2:a0:65:88:e9:07:af:82:68:78:f3:85:79:4c:33:e8:
         54:16:6b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:05:57 2026 by rpki-client