Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/323830343a313438343a383030303a3a2f34312d3431203d3e20323633333335.roa
File:                     323830343a313438343a383030303a3a2f34312d3431203d3e20323633333335.roa (raw, json)
Hash identifier:          FaOzsBI7Y8zkVWvyfzx7sH5B53YbWQCXA0q6YUYp5PY=
Subject key identifier:   25:B2:8C:5F:55:F3:AC:6A:36:69:21:87:0A:2A:3A:9D:68:70:2D:2E
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       44D192B9EA38B43B1F8E73A350DF2E0A3121E6F3
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/323830343a313438343a383030303a3a2f34312d3431203d3e20323633333335.roa
Signing time:             Fri 09 Oct 2026 14:00:18 +0000
ROA not before:           Fri 09 Oct 2026 13:55:18 +0000
ROA not after:            Fri 08 Oct 2027 14:00:18 +0000
asID:                     263335
IP address blocks:        2804:1484:8000::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 11:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d1:92:b9:ea:38:b4:3b:1f:8e:73:a3:50:df:2e:0a:31:21:e6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Oct  9 13:55:18 2026 GMT
            Not After : Oct  8 14:00:18 2027 GMT
        Subject: CN=25B28C5F55F3AC6A366921870A2A3A9D68702D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:d3:57:fc:e2:b3:d8:02:7a:3e:63:c9:c2:
                    6b:12:e0:31:e9:a5:8e:a5:10:e3:e9:2c:f1:28:88:
                    80:f7:94:20:f4:9d:c0:91:c7:13:76:86:48:26:2e:
                    2b:67:1a:88:24:35:8d:d0:29:3a:3e:93:f9:6e:5a:
                    35:d2:fd:77:a6:71:4b:6c:4f:c6:93:2a:09:8a:ed:
                    33:07:d4:e6:ff:90:8f:d4:eb:ae:9f:fd:2f:f6:ff:
                    86:ab:59:03:ee:d3:b6:cd:d1:d1:11:fb:1d:bf:3d:
                    65:3f:b7:96:56:ec:86:d2:93:0c:74:d1:72:67:f9:
                    bc:05:1d:a6:93:3f:0e:ac:19:8e:45:7f:c7:03:62:
                    ea:e8:e9:6c:e3:56:79:62:cf:c8:fd:1b:cd:f3:9d:
                    1e:92:0e:b8:06:8d:1c:2a:2a:93:ef:67:28:96:76:
                    85:d1:99:53:a0:f9:b0:58:34:4e:2b:fa:b1:c4:55:
                    21:e2:13:38:95:84:a9:a4:f0:6d:dc:4a:4c:95:38:
                    d6:d5:d5:52:44:1c:81:d7:b1:5c:3a:fd:0f:24:07:
                    ff:55:29:2d:6e:11:c4:ce:e9:bb:ab:14:2d:60:ae:
                    e5:45:71:14:f8:20:ad:2a:12:fc:56:55:3e:d8:11:
                    7e:3b:35:05:d7:10:03:55:ef:ad:55:df:58:3f:54:
                    7c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B2:8C:5F:55:F3:AC:6A:36:69:21:87:0A:2A:3A:9D:68:70:2D:2E
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/323830343a313438343a383030303a3a2f34312d3431203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1484:8000::/41

    Signature Algorithm: sha256WithRSAEncryption
         35:9e:43:5d:ff:65:16:eb:bb:0a:0c:91:ec:79:dc:99:de:bc:
         59:79:2e:d9:a8:af:24:c5:12:3f:af:41:33:88:d8:60:66:15:
         67:0b:d1:8b:74:69:0e:c6:f3:ae:22:93:d9:0b:ad:47:6b:39:
         66:73:45:49:f4:c8:e0:92:bb:9d:5f:53:3a:e6:16:7d:d6:aa:
         ca:b0:37:01:63:af:64:93:6d:f7:ba:8f:b9:4d:7b:2f:6f:5a:
         cc:c2:4b:1a:3c:57:b6:c5:88:50:5c:53:5a:be:f6:42:c9:7b:
         3f:ad:b6:cf:7a:26:e2:87:a8:56:9f:b3:30:b1:79:5e:95:42:
         3f:55:8e:3c:66:ac:8e:fa:16:71:66:90:04:ce:7b:0b:c5:a6:
         00:d6:0c:ef:89:55:98:5b:4d:e3:e6:69:be:97:7a:e7:0c:e2:
         47:27:ea:7b:2a:10:aa:f0:d9:ac:e8:4e:92:13:ee:69:ff:50:
         9c:5d:23:1e:19:06:69:26:88:9d:3a:2d:9d:4f:68:69:19:1e:
         5c:17:08:48:09:83:4d:67:a4:a2:35:1b:a0:c2:cb:db:ba:9a:
         ab:d0:d2:0c:a4:c8:ba:d5:3e:a2:39:c8:99:46:2d:d0:45:0c:
         ea:c0:b6:48:99:1f:49:f3:9b:0d:2f:e3:e5:16:d6:9c:57:a0:
         37:5b:87:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 17:05:40 2026 by rpki-client