Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a313a3a2f34382d3438203d3e20323633323736.roa
File:                     323830343a313633383a313a3a2f34382d3438203d3e20323633323736.roa (raw, json)
Hash identifier:          vALjXzHjTIHkRMnMPdYcjp8nBaWDqiRByTEkbSXnIGY=
Subject key identifier:   E1:FE:02:1E:B2:BC:82:36:6D:78:94:9A:10:C8:4E:7A:4C:B3:2E:6F
Certificate issuer:       /CN=B1099D894126AC4CAD9411E4308EE689A767609A
Certificate serial:       2C5801F081106249BFB197D04371E024F304556B
Authority key identifier: B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a313a3a2f34382d3438203d3e20323633323736.roa
Signing time:             Fri 10 Jul 2026 14:29:16 +0000
ROA not before:           Fri 10 Jul 2026 14:24:16 +0000
ROA not after:            Fri 09 Jul 2027 14:29:16 +0000
asID:                     263276
IP address blocks:        2804:1638:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl
                          rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:58:01:f0:81:10:62:49:bf:b1:97:d0:43:71:e0:24:f3:04:55:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1099D894126AC4CAD9411E4308EE689A767609A
        Validity
            Not Before: Jul 10 14:24:16 2026 GMT
            Not After : Jul  9 14:29:16 2027 GMT
        Subject: CN=E1FE021EB2BC82366D78949A10C84E7A4CB32E6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:db:2d:51:56:3e:ad:dc:e5:ad:44:b2:b9:aa:
                    c2:79:ad:3a:0b:55:99:e6:c6:fb:9f:b9:03:cb:75:
                    13:0b:3d:7c:c3:cf:58:5f:48:b8:18:ea:f5:38:b5:
                    c1:e6:50:8d:8d:59:a5:a8:f1:e4:1f:8b:fb:96:ff:
                    15:52:de:8f:63:01:24:83:ef:be:59:bf:a4:34:f5:
                    69:7c:3f:5e:87:9f:34:97:29:f1:4c:f9:20:87:0d:
                    5c:20:ab:93:29:c6:09:5f:d7:39:02:36:f4:83:a9:
                    b6:c6:87:a3:c9:c4:75:da:5b:1b:71:8c:04:09:a4:
                    7e:0e:42:1c:4e:da:7a:4f:ff:c4:d7:e5:e1:08:fa:
                    7f:3f:3b:40:63:fc:96:32:8e:09:a2:d0:0b:ea:ef:
                    ce:c7:fe:65:87:61:07:27:fd:38:a9:66:01:2a:40:
                    5b:d3:29:bf:9a:db:ec:84:c2:e4:b2:0a:ab:0d:87:
                    a9:3f:e5:79:fc:f6:f8:ca:41:60:61:0d:11:94:64:
                    5e:fe:d7:18:e6:e1:c0:01:0d:89:e8:17:22:f3:4d:
                    d1:e3:60:6e:91:57:01:62:71:53:9b:8a:7a:9d:b1:
                    57:33:e5:12:c7:93:84:09:4c:09:39:67:fb:b6:46:
                    be:43:9d:39:ab:ab:bd:55:6e:79:9e:90:54:ea:fb:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FE:02:1E:B2:BC:82:36:6D:78:94:9A:10:C8:4E:7A:4C:B3:2E:6F
            X509v3 Authority Key Identifier:
                keyid:B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a313a3a2f34382d3438203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1638:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:7c:1c:c9:44:32:d3:92:6f:13:5a:45:ff:88:cb:a8:0e:fb:
         d6:7d:52:ac:02:b7:4e:8c:1f:46:e1:87:67:f1:d7:cd:80:2d:
         de:3a:4c:24:01:40:ef:53:88:85:67:67:7d:82:26:b3:1b:93:
         7a:53:d6:05:b1:f5:0c:33:0d:65:3b:7c:04:80:e0:05:a6:57:
         4d:ef:34:50:9e:6c:95:b4:08:9e:03:c0:13:c1:29:e5:ca:5c:
         10:79:37:7f:fe:66:cb:9e:98:43:69:8d:5d:9c:5c:15:0b:bc:
         01:e4:18:5a:76:e0:7b:5b:fb:97:7d:36:b4:88:e4:e9:5a:76:
         3c:6d:f0:dc:b3:17:0a:7b:0e:15:4f:95:e1:73:1b:cb:c9:80:
         16:90:b1:9c:2c:3c:15:3b:07:41:4a:5d:d3:4f:5e:7d:c8:c8:
         71:28:5c:72:f8:f2:18:b8:ff:3a:1e:39:af:2d:31:2a:ea:93:
         63:a2:65:d5:5b:bd:c0:b4:84:4b:d2:61:98:6f:fe:2c:5b:dd:
         ba:f2:1b:04:ef:04:01:5e:c4:2a:26:86:ec:70:fb:3f:ea:61:
         ac:0e:bd:46:64:62:c6:7b:cb:8b:ac:6f:ec:e1:a6:da:32:81:
         6e:8b:88:11:05:de:b4:74:05:a8:b5:63:5f:82:52:88:d4:41:
         f5:2f:02:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:41:31 2026 by rpki-client