Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a3a2f33322d3332203d3e20323633323736.roa
File:                     323830343a313633383a3a2f33322d3332203d3e20323633323736.roa (raw, json)
Hash identifier:          5SmtrlbT7P05nBANXDt0HXOdu+NtOjsLDMzy4kw6tkA=
Subject key identifier:   65:37:69:A3:E2:27:3A:BA:86:D2:EE:53:DA:62:ED:E2:9B:18:A1:69
Certificate issuer:       /CN=B1099D894126AC4CAD9411E4308EE689A767609A
Certificate serial:       67B468D464C5138331A141EAFF25A6B0CBE46D3D
Authority key identifier: B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a3a2f33322d3332203d3e20323633323736.roa
Signing time:             Fri 10 Jul 2026 14:29:17 +0000
ROA not before:           Fri 10 Jul 2026 14:24:17 +0000
ROA not after:            Fri 09 Jul 2027 14:29:17 +0000
asID:                     263276
IP address blocks:        2804:1638::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl
                          rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b4:68:d4:64:c5:13:83:31:a1:41:ea:ff:25:a6:b0:cb:e4:6d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1099D894126AC4CAD9411E4308EE689A767609A
        Validity
            Not Before: Jul 10 14:24:17 2026 GMT
            Not After : Jul  9 14:29:17 2027 GMT
        Subject: CN=653769A3E2273ABA86D2EE53DA62EDE29B18A169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1a:4a:31:db:1f:46:27:fc:bc:5b:36:18:c6:
                    9a:29:7a:ec:2c:21:3f:8e:f5:c3:47:0f:99:b8:fa:
                    26:42:06:10:71:4c:0d:8e:6c:37:2f:92:f7:ab:ca:
                    4e:37:0d:70:86:54:da:75:80:54:a0:d0:03:70:fa:
                    d6:b1:84:f6:89:12:d8:e7:46:01:c1:4e:96:ac:40:
                    3a:d8:e3:fa:d2:ae:66:25:45:53:59:ad:49:7f:bc:
                    ec:4f:24:96:db:5d:0e:04:18:32:4e:da:4d:c0:01:
                    24:c0:02:b3:75:dc:19:f9:9a:bf:c3:70:f5:f4:93:
                    84:93:11:f7:c7:89:e6:b7:44:e6:e6:54:d3:e4:c9:
                    20:ec:29:52:1b:33:1b:29:86:59:e9:1a:27:91:ec:
                    81:26:be:86:9a:84:8d:b7:bd:53:a7:59:62:6a:7d:
                    c6:28:8e:6b:39:79:af:2a:46:07:94:84:cd:53:50:
                    a0:28:f4:e9:45:7e:c8:ee:ad:e0:6c:36:8e:07:69:
                    08:66:98:0a:44:80:c6:2e:78:98:de:40:f9:1b:f9:
                    d5:b8:fd:d5:01:50:c5:c4:3b:32:6d:99:fd:22:5b:
                    3d:4d:ab:a9:2e:fb:f6:eb:57:90:95:d8:00:48:97:
                    ac:28:ee:4b:b7:41:60:a2:17:fe:f1:62:96:8e:52:
                    65:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:37:69:A3:E2:27:3A:BA:86:D2:EE:53:DA:62:ED:E2:9B:18:A1:69
            X509v3 Authority Key Identifier:
                keyid:B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a3a2f33322d3332203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1638::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:de:9d:13:2f:7d:9e:c3:e1:67:bb:7b:ef:0c:14:52:8d:15:
         cb:8a:1a:d9:33:93:ed:97:86:e3:fd:42:60:bf:62:b9:9b:f2:
         6e:a8:68:36:01:53:a6:c3:e7:c8:20:ed:23:d2:9f:35:c3:65:
         b1:ae:97:1e:10:2c:a6:44:b7:2d:23:e9:fc:52:9d:65:cb:b1:
         d0:bb:79:ee:76:b8:28:79:89:43:e3:35:5a:1f:a3:54:4f:67:
         7f:75:1b:33:db:2c:e2:5f:e5:9f:f7:74:ca:7b:e6:41:b9:06:
         ef:62:13:38:4b:a5:cf:58:92:4a:e6:cb:be:99:5d:4a:94:6a:
         50:9a:4b:15:9b:18:96:f1:9f:fb:b8:12:5a:95:4a:42:67:8e:
         4c:a6:11:ef:90:60:bc:bf:f5:b8:27:1f:a3:bb:0f:d2:32:3a:
         83:c9:e0:bb:21:fa:72:b6:af:a9:bf:80:a4:8e:4b:00:d5:91:
         ee:db:e9:f3:9a:34:a2:9c:6e:3e:2c:54:b8:8d:11:a7:61:4a:
         39:1e:05:4a:7e:e5:89:15:39:89:0a:7e:c1:4c:ef:c1:1b:b5:
         aa:5d:18:50:1e:65:e2:e7:cd:30:5c:19:04:81:0d:01:1b:d0:
         62:f3:7f:65:d8:7c:c9:57:93:93:96:89:8f:e9:c1:e6:f8:3e:
         24:4d:93:a4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZ7Ro1GTFE4MxoUHq/yWmsMvkbT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEwOTlEODk0MTI2QUM0Q0FEOTQxMUU0MzA4RUU2ODlB
NzY3NjA5QTAeFw0yNjA3MTAxNDI0MTdaFw0yNzA3MDkxNDI5MTdaMDMxMTAvBgNV
BAMTKDY1Mzc2OUEzRTIyNzNBQkE4NkQyRUU1M0RBNjJFREUyOUIxOEExNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Gkox2x9GJ/y8WzYYxpopeuws
IT+O9cNHD5m4+iZCBhBxTA2ObDcvkveryk43DXCGVNp1gFSg0ANw+taxhPaJEtjn
RgHBTpasQDrY4/rSrmYlRVNZrUl/vOxPJJbbXQ4EGDJO2k3AASTAArN13Bn5mr/D
cPX0k4STEffHiea3RObmVNPkySDsKVIbMxsphlnpGieR7IEmvoaahI23vVOnWWJq
fcYojms5ea8qRgeUhM1TUKAo9OlFfsjureBsNo4HaQhmmApEgMYueJjeQPkb+dW4
/dUBUMXEOzJtmf0iWz1Nq6ku+/brV5CV2ABIl6wo7ku3QWCiF/7xYpaOUmUpAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUZTdpo+InOrqG0u5T2mLt4psYoWkwHwYDVR0j
BBgwFoAUsQmdiUEmrEytlBHkMI7miadnYJowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjZBcFdyY2pHV1k0Q215YThydXlNQnFvTm1FYWl1VjYxZmpLbjFjanVz
ZWkvMC9CMTA5OUQ4OTQxMjZBQzRDQUQ5NDExRTQzMDhFRTY4OUE3Njc2MDlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxMDk5RDg5NDEyNkFDNENB
RDk0MTFFNDMwOEVFNjg5QTc2NzYwOUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI2QXBXcmNqR1dZNENteWE4cnV5TUJxb05tRWFpdVY2MWZqS24xY2p1c2VpLzAv
MzIzODMwMzQzYTMxMzYzMzM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzIzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQWODANBgkqhkiG9w0BAQsFAAOCAQEAWN6dEy99
nsPhZ7t77wwUUo0Vy4oa2TOT7ZeG4/1CYL9iuZvybqhoNgFTpsPnyCDtI9KfNcNl
sa6XHhAspkS3LSPp/FKdZcux0Lt57na4KHmJQ+M1Wh+jVE9nf3UbM9ss4l/ln/d0
ynvmQbkG72ITOEulz1iSSubLvpldSpRqUJpLFZsYlvGf+7gSWpVKQmeOTKYR75Bg
vL/1uCcfo7sP0jI6g8nguyH6cravqb+ApI5LANWR7tvp85o0opxuPixUuI0Rp2FK
OR4FSn7liRU5iQp+wUzvwRu1ql0YUB5l4ufNMFwZBIENARvQYvN/Zdh8yVeTk5aJ
j+nB5vg+JE2TpA==
-----END CERTIFICATE-----
Generated at Sat Jul 25 01:45:00 2026 by rpki-client