Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a6466343a3a2f33362d3438203d3e203532353331.roa
File:                     323830343a6466343a3a2f33362d3438203d3e203532353331.roa (raw, json)
Hash identifier:          6CxwMT6E6L8cW9t1WGTbRVdw43f2PHGPJ7bO9hzOwrg=
Subject key identifier:   C0:F1:F5:69:D2:6B:CB:B3:6E:CF:AC:B5:4E:18:F7:98:A8:91:7F:D4
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       7B1EDA9D0F618F1AD6FE0BCEADBBCB994125C4CE
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a6466343a3a2f33362d3438203d3e203532353331.roa
Signing time:             Fri 30 Oct 2026 21:13:28 +0000
ROA not before:           Fri 30 Oct 2026 21:08:28 +0000
ROA not after:            Fri 29 Oct 2027 21:13:28 +0000
asID:                     52531
IP address blocks:        2804:df4::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 00:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1e:da:9d:0f:61:8f:1a:d6:fe:0b:ce:ad:bb:cb:99:41:25:c4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Oct 30 21:08:28 2026 GMT
            Not After : Oct 29 21:13:28 2027 GMT
        Subject: CN=C0F1F569D26BCBB36ECFACB54E18F798A8917FD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:bf:84:ca:0d:f9:0b:39:65:40:c4:13:27:
                    df:06:5d:71:05:bd:4b:0f:9d:00:a8:c2:81:4e:c4:
                    3d:13:0a:7d:84:37:6d:f5:aa:41:67:7b:04:7e:67:
                    ab:6c:b3:ef:54:16:df:66:50:db:b7:d9:af:82:03:
                    d8:12:c9:1d:1c:e0:5f:45:a4:e7:8a:4a:6c:84:04:
                    ff:fa:e4:d1:43:4f:b6:0e:d0:19:9d:0f:26:38:6b:
                    c5:9d:a1:fa:cf:a0:28:b1:a2:82:66:23:ba:05:89:
                    6e:9a:14:d3:d1:6f:2e:a1:04:eb:1b:32:85:94:d9:
                    db:e0:ab:44:37:b5:f9:7c:da:c0:04:0d:f5:42:d4:
                    a4:ac:47:67:32:ff:45:60:d8:1d:ec:6f:bc:1f:7f:
                    28:6a:7d:ea:13:fd:de:b9:aa:5a:00:74:ff:8f:f5:
                    47:75:7a:a9:c7:93:84:8c:0c:ba:73:17:3a:d2:8c:
                    08:be:f7:89:d1:9c:fb:b8:a7:e9:8c:52:ef:29:b1:
                    73:44:d4:dc:b2:14:04:51:a5:b5:b9:76:20:30:e6:
                    7c:de:61:b1:d6:aa:67:b0:ad:88:f0:4d:a6:91:5d:
                    37:eb:eb:d1:17:5c:d7:14:81:bc:ff:d9:1f:b4:07:
                    1a:95:d8:d5:c9:d3:63:c2:24:10:13:90:62:ba:fb:
                    1b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F1:F5:69:D2:6B:CB:B3:6E:CF:AC:B5:4E:18:F7:98:A8:91:7F:D4
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a6466343a3a2f33362d3438203d3e203532353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:df4::/36

    Signature Algorithm: sha256WithRSAEncryption
         1d:b2:6c:99:2c:54:b0:25:7c:76:b4:6b:85:49:82:a9:b3:ed:
         80:b8:89:30:f5:0d:3b:4f:7e:cd:6a:aa:bb:14:74:e0:e6:ba:
         fc:93:90:73:b7:57:e8:dd:bb:2c:59:8d:b7:cf:59:d4:32:9a:
         27:7a:bf:8d:f8:ba:e3:c3:85:68:57:07:31:a9:87:db:be:d7:
         d4:dd:ee:40:d7:d6:dd:da:da:c8:04:c5:8a:48:03:3c:94:a7:
         07:81:7c:59:e6:8e:d2:47:6b:dc:54:8b:3f:3f:e0:53:f3:8e:
         a6:9c:84:a9:1e:9d:ce:65:7e:a0:70:78:42:5a:2f:a5:e3:40:
         36:c1:79:a0:5e:59:2a:d2:45:da:a7:de:ce:6e:55:7a:f6:57:
         69:53:9a:f9:4b:39:26:42:47:29:20:81:8f:7f:8b:3e:6b:9d:
         b0:3f:be:78:b3:6f:59:fc:97:d8:e4:79:25:81:bb:6d:9e:ad:
         9a:23:f9:30:ea:0b:89:f8:fa:b0:02:a1:23:c2:60:61:d5:37:
         5f:c1:5f:99:cc:f2:1a:a9:05:62:2f:fc:4b:c0:f8:b6:0e:e2:
         52:0d:d9:c4:f6:07:e9:be:38:fc:22:7e:b8:21:df:03:4e:20:
         02:c8:07:6c:23:31:67:a6:a7:08:59:54:34:9c:0f:11:22:1e:
         ff:93:f9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:16:56 2026 by rpki-client