Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a6466343a363030303a3a2f33362d3438203d3e203532353331.roa
File:                     323830343a6466343a363030303a3a2f33362d3438203d3e203532353331.roa (raw, json)
Hash identifier:          eazUitfNnRKepenkgS/mBcLLdrh4QvOFErC+9uRfip0=
Subject key identifier:   45:C8:81:E1:62:D1:BB:2E:B1:0B:54:8C:08:73:F0:D9:AA:6C:2B:81
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       045DF326595E83349B6093FFBED274FD75B56B19
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a6466343a363030303a3a2f33362d3438203d3e203532353331.roa
Signing time:             Thu 30 Jul 2026 19:40:29 +0000
ROA not before:           Thu 30 Jul 2026 19:35:29 +0000
ROA not after:            Thu 29 Jul 2027 19:40:29 +0000
asID:                     52531
IP address blocks:        2804:df4:6000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 02:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5d:f3:26:59:5e:83:34:9b:60:93:ff:be:d2:74:fd:75:b5:6b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Jul 30 19:35:29 2026 GMT
            Not After : Jul 29 19:40:29 2027 GMT
        Subject: CN=45C881E162D1BB2EB10B548C0873F0D9AA6C2B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:2b:10:a4:b6:e3:f3:e3:00:92:72:f4:6b:
                    96:0d:81:9d:75:13:31:98:9a:e5:3a:ac:36:41:d4:
                    59:4a:25:4b:58:44:a9:bc:19:25:26:7d:be:52:a4:
                    f8:b8:be:23:31:c3:c9:e8:98:c1:cd:0d:ad:67:c1:
                    ba:9e:fc:2f:21:be:4d:39:85:12:fe:08:73:83:1a:
                    6e:c7:af:db:fb:35:e6:2a:a4:f1:be:d4:37:e2:e4:
                    b1:f5:be:5e:df:9e:75:d2:bb:4e:34:46:5d:99:42:
                    db:28:c5:4e:ac:4c:5d:5e:ce:19:51:e6:2d:8d:75:
                    cf:8c:a4:84:9f:c3:96:82:99:86:22:5f:3c:52:3a:
                    6d:71:9c:ad:67:fc:9a:75:c1:e9:b0:ab:b5:73:76:
                    0f:66:07:ba:e0:79:fb:75:e5:51:f6:43:58:fb:67:
                    ca:35:83:b7:a5:ab:4a:8d:32:76:36:b7:5a:e1:fc:
                    b2:61:c1:3a:34:8e:af:27:38:7c:1f:dd:15:5f:c6:
                    5a:92:00:36:cf:a2:0e:86:f9:13:b4:03:91:a0:14:
                    8a:ab:04:96:0d:6e:66:14:8b:ef:d5:c7:b5:ec:89:
                    30:12:8d:4d:a2:99:f8:e0:8e:24:62:88:8b:a6:ee:
                    1c:57:cb:76:7b:a0:64:7a:aa:e5:c2:44:5c:34:39:
                    8a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C8:81:E1:62:D1:BB:2E:B1:0B:54:8C:08:73:F0:D9:AA:6C:2B:81
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a6466343a363030303a3a2f33362d3438203d3e203532353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:df4:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         90:4a:59:aa:ce:9b:e9:cd:f0:99:a9:ec:1b:d0:b5:e4:0c:61:
         25:a0:37:97:e7:ed:45:27:99:f7:50:ac:7a:d7:9a:84:9f:eb:
         62:fc:84:55:c3:03:3b:e9:13:e8:06:1b:54:aa:fa:9d:9b:a6:
         6c:e6:8b:01:cc:64:92:0c:06:e7:0f:99:fc:7b:97:37:15:02:
         55:48:0b:42:84:7f:17:76:44:a6:e9:f8:37:37:c9:e5:f5:cb:
         b0:87:20:e8:bc:90:46:8e:5c:e6:3c:dd:49:37:8d:d5:70:3b:
         63:a2:5e:9e:13:31:06:bf:d1:b1:d2:ea:c2:d9:87:3c:f3:e2:
         62:0b:c4:e4:2f:50:aa:eb:59:69:1a:a5:5a:87:0c:49:c6:87:
         35:25:d9:72:e9:ec:ff:9d:67:ba:0c:f1:37:dc:49:4a:7e:2b:
         a6:68:fb:cd:ee:e8:83:9a:a9:db:3e:6d:ac:91:23:01:80:75:
         ce:5a:e2:f8:eb:9d:ff:a3:67:46:7b:7a:de:74:d5:61:8e:4c:
         9a:87:4d:0a:8c:7f:39:1a:42:fa:d8:5a:0f:a2:bc:96:39:7f:
         db:61:71:94:b6:9f:2f:ec:61:f1:08:60:38:4e:31:fa:fc:01:
         a5:ad:9c:1d:d5:20:46:57:8e:81:c4:72:46:d4:0f:d8:6b:32:
         0a:7e:71:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:22:09 2026 by rpki-client