Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a3a2f33332d3333203d3e20323633323736.roa
File:                     323830343a313633383a3a2f33332d3333203d3e20323633323736.roa (raw, json)
Hash identifier:          KGKOOb4gM0kKDjFYW1GXdn+wJlkGuns3OkVRFgLfuEg=
Subject key identifier:   E1:71:FE:97:53:60:20:45:9C:08:A6:10:F9:E8:1F:84:AE:31:87:58
Certificate issuer:       /CN=B1099D894126AC4CAD9411E4308EE689A767609A
Certificate serial:       390880495B720A716A417F1B41F34790E797872D
Authority key identifier: B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a3a2f33332d3333203d3e20323633323736.roa
Signing time:             Fri 10 Jul 2026 14:29:17 +0000
ROA not before:           Fri 10 Jul 2026 14:24:17 +0000
ROA not after:            Fri 09 Jul 2027 14:29:17 +0000
asID:                     263276
IP address blocks:        2804:1638::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl
                          rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:08:80:49:5b:72:0a:71:6a:41:7f:1b:41:f3:47:90:e7:97:87:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1099D894126AC4CAD9411E4308EE689A767609A
        Validity
            Not Before: Jul 10 14:24:17 2026 GMT
            Not After : Jul  9 14:29:17 2027 GMT
        Subject: CN=E171FE97536020459C08A610F9E81F84AE318758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:af:41:dd:27:93:da:a3:f0:ab:8c:9d:e6:
                    0d:e6:ec:79:1e:63:2c:94:9a:eb:bc:b0:32:3f:1b:
                    83:27:cb:37:8f:a3:de:a0:ab:45:d6:60:f2:74:d1:
                    9c:58:d1:ac:52:5a:67:73:5a:fe:0d:5b:e1:54:6f:
                    c2:a6:b5:9f:73:65:b6:bf:50:c1:a9:16:a1:e2:a2:
                    f8:42:a2:6e:0a:1c:54:26:01:42:17:81:15:d5:5d:
                    a8:97:13:73:21:e7:7e:13:00:0f:89:2f:79:43:17:
                    4e:f2:d4:19:da:3b:60:e3:ee:89:37:85:04:01:6e:
                    4d:68:c6:6a:ea:af:c7:9d:7e:ce:63:26:87:42:a9:
                    7c:62:dc:cb:6b:d8:05:7f:80:17:e1:4d:36:f9:41:
                    7e:fd:d6:e3:a3:a2:14:38:ca:3e:de:95:95:be:46:
                    0f:41:56:c4:92:99:35:72:fb:4a:ae:eb:d3:b8:21:
                    04:ea:b0:25:ad:53:29:e3:05:5a:1d:70:d2:02:07:
                    65:80:36:f5:b6:04:cd:6c:5d:7c:9a:b0:2d:19:0b:
                    ae:03:55:d4:fd:b6:fd:9b:a3:41:53:47:80:f3:aa:
                    7a:85:3c:33:6e:c1:9f:7e:a3:32:c5:d4:41:cd:3d:
                    dc:23:5d:24:5c:01:d9:fd:a4:3c:ba:48:db:42:95:
                    63:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:71:FE:97:53:60:20:45:9C:08:A6:10:F9:E8:1F:84:AE:31:87:58
            X509v3 Authority Key Identifier:
                keyid:B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a3a2f33332d3333203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1638::/33

    Signature Algorithm: sha256WithRSAEncryption
         a7:dc:0b:15:cc:8d:8f:e9:cf:9b:07:a5:c0:29:79:56:9e:fd:
         af:0c:90:00:4e:8c:c0:23:58:18:50:88:4e:fb:e8:19:01:3d:
         3d:d9:30:72:9f:4e:13:05:ad:f8:f2:02:30:94:14:a1:85:2c:
         de:75:0c:d9:d9:63:db:eb:b8:d8:42:d4:88:ce:2a:96:ca:59:
         33:45:46:7e:88:9d:f0:b3:6d:9c:e2:6d:60:9f:67:83:5d:ac:
         89:8b:f9:ce:1a:ad:eb:82:82:5f:f0:fe:2c:fd:16:82:e9:dd:
         50:d8:86:f3:ab:ac:7e:b2:a7:d1:dd:27:5d:8d:af:69:0f:db:
         c0:39:03:c5:00:1b:c9:3c:e0:c1:84:80:a6:10:2c:8a:2b:06:
         ae:17:79:8f:6d:92:02:69:d3:b7:79:93:82:be:c2:e1:40:41:
         e5:5b:e1:a6:e3:c6:94:82:fb:af:ac:ce:fb:4c:28:d6:4f:45:
         13:90:25:a5:61:39:a2:f2:1a:67:b1:10:9d:f6:86:ba:56:18:
         da:c5:9c:e4:dc:62:19:ad:58:9b:c8:18:f1:00:da:ba:20:e3:
         b6:cd:19:9d:d8:fd:5b:b0:7e:2a:da:37:6b:59:51:70:0d:8d:
         d5:96:ae:e7:b8:8c:93:13:c5:f5:13:9b:ff:25:90:3b:6c:fe:
         a8:51:a1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:29:52 2026 by rpki-client