Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/323830343a323163383a3a2f33332d3333203d3e20323634353733.roa
File:                     323830343a323163383a3a2f33332d3333203d3e20323634353733.roa (raw, json)
Hash identifier:          1YLVa0D/b7AQ9dPFY666d4luyJ7twg5blroRZAvZgrM=
Subject key identifier:   8E:16:BF:57:A9:7B:B2:8F:43:B4:FB:9A:C2:94:CB:ED:D0:4B:76:2F
Certificate issuer:       /CN=DF915FC701D29BA7ABB1E98C2A4207E51058EE32
Certificate serial:       6EF8D1A955CE915BFA250541ACF8CE36C37963AB
Authority key identifier: DF:91:5F:C7:01:D2:9B:A7:AB:B1:E9:8C:2A:42:07:E5:10:58:EE:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/323830343a323163383a3a2f33332d3333203d3e20323634353733.roa
Signing time:             Wed 28 Oct 2026 13:07:07 +0000
ROA not before:           Wed 28 Oct 2026 13:02:07 +0000
ROA not after:            Wed 27 Oct 2027 13:07:07 +0000
asID:                     264573
IP address blocks:        2804:21c8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.crl
                          rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 23:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f8:d1:a9:55:ce:91:5b:fa:25:05:41:ac:f8:ce:36:c3:79:63:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF915FC701D29BA7ABB1E98C2A4207E51058EE32
        Validity
            Not Before: Oct 28 13:02:07 2026 GMT
            Not After : Oct 27 13:07:07 2027 GMT
        Subject: CN=8E16BF57A97BB28F43B4FB9AC294CBEDD04B762F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:93:cc:0c:98:7c:2d:5a:3a:93:c6:5d:a7:fe:
                    c6:1c:39:91:c3:18:25:57:c4:c6:56:b6:4d:ef:68:
                    c6:a4:1f:9f:e6:63:23:c0:ef:9e:db:53:30:e6:a5:
                    61:5f:b7:77:31:35:83:55:91:ed:5b:e6:e1:d0:83:
                    a2:d2:26:1f:02:b1:07:38:28:36:28:c9:24:75:4a:
                    25:73:25:70:60:30:4a:7d:43:8a:ab:62:ae:82:38:
                    82:58:75:d7:36:19:02:f1:fc:67:c1:b1:4c:ae:68:
                    c5:b8:22:8f:dd:24:89:f4:3c:11:ae:d4:fc:79:e6:
                    07:8a:6d:6b:b3:b6:35:4c:af:ca:7d:bb:97:3b:26:
                    d2:4a:49:d1:98:51:a5:34:a2:01:ad:42:61:20:16:
                    4a:1f:41:dc:ca:3e:65:16:39:b7:dd:59:e7:b0:aa:
                    88:dd:4c:7e:01:5a:92:a9:35:dd:08:69:41:43:ee:
                    57:8a:0c:49:c7:01:df:95:76:7a:73:50:c0:1b:e7:
                    15:22:e0:1f:44:ab:fa:c7:1c:bf:41:df:b4:ab:18:
                    36:13:40:a7:6c:84:63:8f:44:a0:84:b6:d6:0c:98:
                    5d:f1:a6:d6:57:e1:8f:57:58:96:af:25:dc:58:0c:
                    00:ea:61:13:29:61:89:36:a4:de:c8:f4:1e:50:6c:
                    f1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:16:BF:57:A9:7B:B2:8F:43:B4:FB:9A:C2:94:CB:ED:D0:4B:76:2F
            X509v3 Authority Key Identifier:
                keyid:DF:91:5F:C7:01:D2:9B:A7:AB:B1:E9:8C:2A:42:07:E5:10:58:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF915FC701D29BA7ABB1E98C2A4207E51058EE32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/1/323830343a323163383a3a2f33332d3333203d3e20323634353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21c8::/33

    Signature Algorithm: sha256WithRSAEncryption
         8f:bc:03:b1:48:64:cd:50:66:fc:23:6e:cb:a7:b6:18:87:86:
         aa:a0:c7:80:29:39:d8:d0:50:d0:5d:32:30:9b:fe:02:41:b8:
         2a:c3:a7:22:8a:bc:45:9f:d1:b2:c9:07:8f:5f:46:50:5e:31:
         dc:36:07:82:56:b5:4b:d3:75:0a:e6:20:7e:5f:98:c9:51:90:
         01:0d:c2:c4:47:47:da:6a:1d:44:3c:76:15:86:9f:cd:ea:7c:
         ba:cc:e0:a9:30:db:5f:4c:97:e8:63:6f:75:7c:e0:4e:9b:9b:
         6d:1b:63:0c:6e:24:94:cc:31:a8:c6:22:37:38:8b:8f:ff:41:
         39:76:d7:fc:85:4d:59:70:64:9f:2a:b6:fd:db:55:62:0f:3f:
         36:21:b8:0e:f2:e0:ad:38:02:6b:8c:79:aa:df:3e:87:f3:23:
         00:2a:c9:f6:7e:9a:72:0d:28:37:11:e1:f3:06:45:4a:5d:e7:
         0f:aa:f1:8c:24:88:48:32:7b:63:1c:75:76:3b:a2:b5:13:5e:
         a3:97:1c:a0:2e:43:d8:cc:63:f4:65:33:73:cc:98:e8:3c:65:
         de:1a:c5:ac:a8:4d:40:33:5b:44:2b:82:c5:fe:4f:77:fd:df:
         86:65:b5:d6:41:42:35:d5:c8:e2:00:d9:4a:f0:4b:a6:bd:4f:
         34:99:a8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 03:28:19 2026 by rpki-client