Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/323830343a313831383a3a2f33322d3438203d3e20323632363537.roa
File:                     323830343a313831383a3a2f33322d3438203d3e20323632363537.roa (raw, json)
Hash identifier:          sqvsD2XgxsB26rI6EKww3XBzrV0OAZeNAqD9yhc1SBw=
Subject key identifier:   97:E7:90:39:8D:B7:F9:DC:49:4B:B8:ED:59:E6:9B:1B:72:0D:E8:AB
Certificate issuer:       /CN=E6C6031E6416B0847723A7D4C34C1FB7A0659192
Certificate serial:       38D972BDF5FC59CB8F3D404A3F5463BCF7F9CFF5
Authority key identifier: E6:C6:03:1E:64:16:B0:84:77:23:A7:D4:C3:4C:1F:B7:A0:65:91:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6C6031E6416B0847723A7D4C34C1FB7A0659192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/323830343a313831383a3a2f33322d3438203d3e20323632363537.roa
Signing time:             Thu 22 Oct 2026 15:17:57 +0000
ROA not before:           Thu 22 Oct 2026 15:12:57 +0000
ROA not after:            Thu 21 Oct 2027 15:17:57 +0000
asID:                     262657
IP address blocks:        2804:1818::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/E6C6031E6416B0847723A7D4C34C1FB7A0659192.crl
                          rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/E6C6031E6416B0847723A7D4C34C1FB7A0659192.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6C6031E6416B0847723A7D4C34C1FB7A0659192.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 18:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d9:72:bd:f5:fc:59:cb:8f:3d:40:4a:3f:54:63:bc:f7:f9:cf:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6C6031E6416B0847723A7D4C34C1FB7A0659192
        Validity
            Not Before: Oct 22 15:12:57 2026 GMT
            Not After : Oct 21 15:17:57 2027 GMT
        Subject: CN=97E790398DB7F9DC494BB8ED59E69B1B720DE8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f6:52:8b:17:87:31:2d:64:23:b4:cb:cd:70:
                    76:29:92:b7:fc:44:8a:95:7e:3e:97:e1:4f:9a:9b:
                    4b:fe:79:6e:ea:1a:3e:4a:31:65:35:44:d8:53:bf:
                    fe:ec:86:2c:49:79:ac:95:8d:a5:90:b2:61:20:cd:
                    ae:fe:ab:46:87:3d:bd:b3:7c:7d:e1:74:36:f0:fc:
                    be:db:37:20:76:d5:89:ef:80:f2:f1:3f:3c:c8:fa:
                    b3:64:c5:5d:54:88:a0:a3:05:5f:b7:55:af:76:a5:
                    4f:ef:e4:fb:0d:31:f2:74:06:0b:6e:93:13:bc:64:
                    6c:04:f6:7d:cf:c4:ae:e2:c7:b1:59:9a:f7:ae:d5:
                    28:2d:2c:2a:14:63:bd:3e:1e:7a:4c:8a:5b:b7:ff:
                    96:4d:3d:7a:dd:46:de:44:d5:80:0c:17:4e:0a:76:
                    6b:1f:7f:70:a7:7a:8d:c1:6f:79:6e:c6:83:d7:b1:
                    b7:db:dc:0b:cd:70:31:65:1b:af:27:c0:9a:e1:5c:
                    ff:2c:30:61:ef:04:7d:aa:e9:87:99:2f:aa:e0:d5:
                    9a:aa:1b:92:10:0c:1a:eb:90:39:5a:55:8d:27:2f:
                    8a:d1:47:f8:ea:b9:73:a3:55:34:e4:d8:68:ce:3c:
                    13:c3:be:e0:6b:51:45:c5:6a:32:36:90:57:97:c9:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E7:90:39:8D:B7:F9:DC:49:4B:B8:ED:59:E6:9B:1B:72:0D:E8:AB
            X509v3 Authority Key Identifier:
                keyid:E6:C6:03:1E:64:16:B0:84:77:23:A7:D4:C3:4C:1F:B7:A0:65:91:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/E6C6031E6416B0847723A7D4C34C1FB7A0659192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6C6031E6416B0847723A7D4C34C1FB7A0659192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVxwiMB31ZzApsUYsoYJKEZfP7BMdA8LhFEJ6f3bGvGn/0/323830343a313831383a3a2f33322d3438203d3e20323632363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1818::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:86:08:42:b9:5b:d4:18:0e:c6:9f:4a:1f:8b:9c:bc:5c:93:
         20:11:7b:0c:12:81:62:fd:f2:8f:65:98:c0:ac:4d:7b:88:89:
         6d:09:8e:25:53:45:f2:f6:eb:b9:d4:12:70:aa:5b:10:a6:8e:
         68:16:15:72:9a:f8:50:3e:a8:f1:8d:ef:d1:e5:cd:2e:24:c6:
         0d:6a:03:0e:98:53:f9:66:a0:4e:48:69:17:bf:52:02:03:71:
         e2:89:e6:ea:2a:37:3a:e3:1e:32:33:49:e4:52:7e:b0:ec:ab:
         77:46:33:bd:80:ab:9d:46:66:3a:08:68:4a:eb:03:42:58:a1:
         7a:d4:8f:07:b8:ad:9a:33:0d:86:20:27:4a:0b:53:a8:d9:6b:
         ea:6b:73:6d:4e:a6:ad:ab:48:fe:43:92:19:5f:42:0a:73:4b:
         1e:38:c0:7d:e7:f1:40:36:25:69:46:9c:72:5f:5a:b8:cd:6e:
         49:15:92:32:5a:b6:54:8f:3d:0c:37:87:47:3b:f7:59:06:19:
         08:37:39:02:44:72:31:f4:d1:25:2f:c7:42:91:23:0a:e0:a0:
         89:d2:d4:a1:51:cb:a3:97:77:af:36:87:c0:0c:38:91:80:a7:
         dc:6c:ce:eb:6b:f6:47:56:f2:9b:ce:5d:9a:95:dc:b0:bb:87:
         10:57:d0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:47:40 2026 by rpki-client