Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a3a2f33322d3438203d3e20323638393134.roa
File:                     323830343a356338383a3a2f33322d3438203d3e20323638393134.roa (raw, json)
Hash identifier:          8T2Gba7PaUome7Cz50AHNMR5ZgLmUi0W5IAEul6gFdY=
Subject key identifier:   82:BA:AF:46:75:34:60:58:53:B1:49:AB:86:38:0D:CB:A7:A3:56:B5
Certificate issuer:       /CN=EB31CB7DD47DD39945B803D7EB5040C01E2097B7
Certificate serial:       72EE9D6DABEC49620C42C94DC0A5AA686D24FF35
Authority key identifier: EB:31:CB:7D:D4:7D:D3:99:45:B8:03:D7:EB:50:40:C0:1E:20:97:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB31CB7DD47DD39945B803D7EB5040C01E2097B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a3a2f33322d3438203d3e20323638393134.roa
Signing time:             Thu 03 Sep 2026 22:32:20 +0000
ROA not before:           Thu 03 Sep 2026 22:27:20 +0000
ROA not after:            Thu 02 Sep 2027 22:32:20 +0000
asID:                     268914
IP address blocks:        2804:5c88::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/EB31CB7DD47DD39945B803D7EB5040C01E2097B7.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/EB31CB7DD47DD39945B803D7EB5040C01E2097B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB31CB7DD47DD39945B803D7EB5040C01E2097B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 20:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ee:9d:6d:ab:ec:49:62:0c:42:c9:4d:c0:a5:aa:68:6d:24:ff:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB31CB7DD47DD39945B803D7EB5040C01E2097B7
        Validity
            Not Before: Sep  3 22:27:20 2026 GMT
            Not After : Sep  2 22:32:20 2027 GMT
        Subject: CN=82BAAF467534605853B149AB86380DCBA7A356B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:15:dd:cf:0a:de:a4:b3:d6:b8:d5:17:a3:15:
                    84:77:14:37:3b:51:59:ba:86:78:e1:ed:56:bc:44:
                    2e:10:08:f1:ae:74:a3:49:e8:2c:3d:0a:f6:18:90:
                    fa:1a:ab:db:ea:3f:7e:8a:c2:ae:5a:20:32:90:eb:
                    dd:3a:7b:56:6f:14:30:75:7e:09:6b:23:da:6a:cd:
                    c6:19:f5:be:30:f1:b7:a1:da:07:1f:39:0d:fa:81:
                    cd:07:a0:9d:af:5b:e6:43:ae:78:ea:75:1b:68:b7:
                    41:15:13:2c:7c:10:03:76:3b:24:00:ad:9d:cf:a5:
                    ef:ae:de:b5:62:88:2d:b6:93:a8:bd:64:48:07:a6:
                    11:9a:f1:1e:ae:21:54:f0:cd:03:c0:f3:d6:9f:72:
                    f6:ba:96:9e:ec:1b:bc:3c:77:9e:28:c8:6d:09:5c:
                    00:15:ca:1c:9c:19:ce:8c:cb:62:96:9b:7d:38:5e:
                    11:d2:0d:7f:16:9c:02:94:b1:92:58:72:c7:56:40:
                    8f:64:af:da:0f:c0:c3:9c:72:58:ef:47:e9:50:68:
                    fb:6b:35:84:89:c7:2d:52:48:e7:64:eb:82:51:23:
                    98:c3:19:ad:9a:b0:1e:ef:fc:cd:db:38:fa:63:85:
                    64:64:66:67:4c:b5:fa:6f:84:f7:c7:89:38:7a:6d:
                    aa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BA:AF:46:75:34:60:58:53:B1:49:AB:86:38:0D:CB:A7:A3:56:B5
            X509v3 Authority Key Identifier:
                keyid:EB:31:CB:7D:D4:7D:D3:99:45:B8:03:D7:EB:50:40:C0:1E:20:97:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/EB31CB7DD47DD39945B803D7EB5040C01E2097B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB31CB7DD47DD39945B803D7EB5040C01E2097B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a3a2f33322d3438203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c88::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:db:4e:f6:a7:77:c8:10:26:5c:14:c1:2a:88:3d:d9:e2:41:
         82:b0:be:52:f9:56:9c:f5:b1:e7:2d:eb:95:46:33:98:eb:6c:
         7d:e0:c6:f6:b7:38:5a:76:04:5a:82:cd:d8:99:c7:f2:bd:c2:
         5e:c3:55:94:0a:1b:08:da:82:6f:2d:6a:9c:88:45:b7:31:79:
         a0:6c:34:62:0f:34:17:54:2d:b0:6f:ce:76:4e:35:79:a1:fd:
         75:3d:5e:f4:fe:ee:5a:16:2b:3e:e8:c0:e2:11:cf:a2:c0:b6:
         f8:22:e9:99:c7:db:b6:f8:22:bb:8b:a0:7e:6f:03:80:1b:84:
         b0:ca:a3:45:08:f1:5d:85:2f:37:f7:07:06:74:ab:40:54:df:
         8d:3b:56:17:7e:26:f7:a7:db:5c:eb:38:a9:b8:95:52:2e:e2:
         d5:18:6e:21:10:40:92:de:80:2e:35:20:b6:3b:09:3b:08:fe:
         ef:be:29:e3:a0:6d:ad:2e:b8:64:22:6c:8f:01:b2:34:ce:98:
         42:f0:8e:58:85:6d:05:9b:5e:80:1c:87:fd:ac:e2:ae:08:e3:
         0b:84:69:9c:ba:a3:21:aa:74:ec:30:0d:f4:06:2d:64:19:ff:
         5a:fa:ff:cc:96:12:8d:7c:77:1d:47:43:67:ab:ee:a0:4a:4b:
         61:35:ef:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:44:16 2026 by rpki-client