Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/323830343a313036633a666666663a3a2f34382d3438203d3e20323633363335.roa
File:                     323830343a313036633a666666663a3a2f34382d3438203d3e20323633363335.roa (raw, json)
Hash identifier:          Aoq/JwRfWrxtorOVCDzB7C3d9NUCMhN7Cfe+Q/Il708=
Subject key identifier:   1E:A7:0F:4F:D9:1C:52:F2:F7:E2:25:7F:96:B7:47:F7:7A:1E:B7:06
Certificate issuer:       /CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
Certificate serial:       3074690867E93BF9C314B642710CD333635E11A2
Authority key identifier: 36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/323830343a313036633a666666663a3a2f34382d3438203d3e20323633363335.roa
Signing time:             Fri 16 Oct 2026 23:41:09 +0000
ROA not before:           Fri 16 Oct 2026 23:36:09 +0000
ROA not after:            Fri 15 Oct 2027 23:41:09 +0000
asID:                     263635
IP address blocks:        2804:106c:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl
                          rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 17:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:74:69:08:67:e9:3b:f9:c3:14:b6:42:71:0c:d3:33:63:5e:11:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
        Validity
            Not Before: Oct 16 23:36:09 2026 GMT
            Not After : Oct 15 23:41:09 2027 GMT
        Subject: CN=1EA70F4FD91C52F2F7E2257F96B747F77A1EB706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:35:37:6e:9f:19:51:f0:44:ff:f3:dd:81:88:
                    f7:5d:f6:a8:e6:54:53:56:b2:ee:d7:4c:82:ca:41:
                    8b:01:89:19:0a:ce:14:e5:78:eb:95:c9:4f:4c:95:
                    6d:46:8b:d5:63:79:0c:e8:aa:2e:43:4d:a7:01:2b:
                    1e:1f:6c:f9:7b:8a:3d:bc:29:7b:3e:7e:7e:38:a4:
                    c5:16:a4:b9:04:b5:a4:60:a4:d9:49:bf:0c:c8:6d:
                    44:d2:b1:b5:84:14:f2:48:64:52:b6:d8:07:5c:df:
                    66:d6:74:53:8b:34:bb:ea:35:e5:e4:4c:09:7e:3f:
                    06:73:4b:14:d3:66:8c:1a:57:b3:c2:a9:63:19:ab:
                    35:e9:cf:cd:e3:8f:c4:e0:86:6c:68:f6:69:4e:1e:
                    2d:0e:83:75:fc:c7:32:e4:8c:67:b7:5a:1e:71:eb:
                    9d:7d:a9:3b:ad:12:10:e2:78:96:7a:03:e6:2a:cf:
                    11:fd:75:15:8c:0d:85:34:74:7c:6c:55:78:67:77:
                    a6:fb:5d:95:81:bd:1a:c7:9b:0c:2f:a0:0b:34:3c:
                    19:ae:c0:33:93:fb:1c:c7:88:71:d4:fe:63:3d:45:
                    bc:0c:7d:e9:02:10:fb:d2:c4:f0:ac:59:be:7e:e5:
                    01:97:b3:60:e4:c2:29:e9:f8:4a:49:93:e7:e5:30:
                    41:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A7:0F:4F:D9:1C:52:F2:F7:E2:25:7F:96:B7:47:F7:7A:1E:B7:06
            X509v3 Authority Key Identifier:
                keyid:36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/323830343a313036633a666666663a3a2f34382d3438203d3e20323633363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:106c:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:65:55:b2:a0:a4:7a:0b:ba:c7:ba:e4:e4:b5:56:73:fe:36:
         88:06:2c:1e:3d:94:c0:64:ca:0a:c8:14:fa:15:1e:41:97:0e:
         70:45:b7:5e:7d:d1:a3:cb:ef:d1:a0:44:41:73:24:a5:8c:44:
         aa:9d:c1:16:dc:96:c9:d5:e0:8e:58:a1:b8:08:86:8d:88:e2:
         2c:a9:6a:ec:41:d9:06:21:65:3d:56:36:09:b2:4d:05:b2:c4:
         36:42:46:bf:3d:51:ed:7f:96:3b:2b:94:1d:ab:bc:ee:2a:32:
         17:a2:41:4b:d2:50:ef:51:ec:a8:28:ff:80:dc:87:9c:24:4f:
         4b:a4:62:34:96:24:ea:33:83:bb:f2:e9:c9:e4:08:4e:d3:c8:
         2a:e6:69:30:e0:33:62:22:a1:01:b2:12:e2:5d:71:6e:b6:bb:
         8f:f6:d5:17:1d:72:92:4e:fb:86:54:6e:99:ab:a8:3b:ed:09:
         fd:73:84:96:a7:87:de:9b:1d:6a:d4:c9:74:f7:2f:33:38:75:
         ba:a7:af:ab:e4:1e:62:e8:9c:f6:d6:1f:e4:89:5d:de:0d:09:
         60:6f:e4:fd:0e:4c:a9:86:be:22:c0:54:0b:85:f9:77:75:3f:
         1e:81:93:b2:3f:a2:05:57:ea:7c:b3:d2:11:99:79:25:8b:f9:
         7c:dc:2b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:25:52 2026 by rpki-client