Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a613730303a3a2f34302d3430203d3e20323633323736.roa
File:                     323830343a313633383a613730303a3a2f34302d3430203d3e20323633323736.roa (raw, json)
Hash identifier:          VowZ7zPW2tUO8J2qHGykWL/qilOCQ/pMvY8gFFfLnQM=
Subject key identifier:   DC:C4:95:10:B1:C5:F5:1C:EE:47:8D:92:18:A7:48:02:7E:3B:C0:0A
Certificate issuer:       /CN=B1099D894126AC4CAD9411E4308EE689A767609A
Certificate serial:       7D1F87D47AB705580B05766723C38A1982426CBE
Authority key identifier: B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a613730303a3a2f34302d3430203d3e20323633323736.roa
Signing time:             Fri 10 Jul 2026 14:29:18 +0000
ROA not before:           Fri 10 Jul 2026 14:24:18 +0000
ROA not after:            Fri 09 Jul 2027 14:29:18 +0000
asID:                     263276
IP address blocks:        2804:1638:a700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl
                          rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1f:87:d4:7a:b7:05:58:0b:05:76:67:23:c3:8a:19:82:42:6c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1099D894126AC4CAD9411E4308EE689A767609A
        Validity
            Not Before: Jul 10 14:24:18 2026 GMT
            Not After : Jul  9 14:29:18 2027 GMT
        Subject: CN=DCC49510B1C5F51CEE478D9218A748027E3BC00A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:46:59:7c:f9:85:d4:b4:fd:cc:ea:50:72:
                    b8:8f:42:4b:34:5f:4f:eb:d1:c6:65:df:64:52:b9:
                    a8:22:7f:7a:32:b3:cc:c1:aa:a2:2f:29:dd:bb:00:
                    78:ae:c6:2d:10:70:a2:a3:37:c4:d6:5b:df:b6:92:
                    25:31:d3:26:89:98:b8:f7:ff:4d:5a:7f:c5:72:c4:
                    f3:ba:70:d6:a3:66:22:e9:3d:a4:df:b1:07:0b:a9:
                    cc:5a:49:66:de:de:e5:49:ce:0b:a7:4a:e0:50:89:
                    af:b6:f4:fb:a2:c8:dc:71:56:30:20:75:21:87:95:
                    c0:cf:0e:95:04:3f:b9:d4:9b:81:a9:65:9b:54:1e:
                    54:da:b7:73:4f:75:09:0d:8e:ce:98:0b:b6:33:fe:
                    0d:e5:11:af:3d:71:5c:41:a6:59:6a:79:dd:fd:81:
                    ab:0a:21:45:53:20:27:3c:b1:32:14:0b:3d:ca:53:
                    41:66:54:87:93:62:6f:3d:8a:90:86:8c:b1:20:b0:
                    85:bb:ce:e2:5a:f5:4e:41:b6:cc:7f:11:06:5a:e4:
                    26:74:f4:8c:23:6c:47:dc:d7:45:b8:12:aa:c8:45:
                    ce:81:c2:7b:1d:a2:cd:a7:f7:db:66:5f:07:5d:45:
                    bc:0d:69:eb:7e:e1:62:73:73:83:40:4d:46:a2:80:
                    3e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C4:95:10:B1:C5:F5:1C:EE:47:8D:92:18:A7:48:02:7E:3B:C0:0A
            X509v3 Authority Key Identifier:
                keyid:B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a613730303a3a2f34302d3430203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1638:a700::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:65:24:9e:d2:f6:bd:33:45:6b:2b:e7:f4:1c:83:19:df:60:
         5c:fb:da:e5:d3:f4:ae:57:25:ae:48:48:09:b2:c2:17:9a:d3:
         3f:76:26:94:48:53:ab:df:16:b7:ed:47:fd:20:13:d6:96:75:
         27:f7:ae:81:67:1c:16:79:64:09:58:1e:27:33:fc:66:4b:c0:
         ab:6b:1e:88:59:f6:89:d9:da:dc:3a:11:f2:02:58:ed:c0:9b:
         d1:35:5b:57:c7:a9:d5:30:8c:d7:3a:b5:50:3e:44:98:2b:04:
         a0:e0:95:9c:09:91:d0:4d:7c:62:3d:c9:67:e8:3c:6e:40:e7:
         91:39:1b:8e:48:a8:1c:33:fd:24:ef:0a:d0:62:5f:b3:62:b6:
         a3:99:24:10:4b:2b:86:c6:2b:fd:28:3e:92:9d:6a:f6:07:d5:
         a7:4d:2b:7f:67:88:08:23:ea:37:88:ca:0f:cd:5f:f9:76:fe:
         48:83:03:04:c6:41:31:d8:9b:6b:0e:1a:01:f8:c4:64:e6:12:
         78:84:b8:29:b5:20:73:30:87:c6:4d:a6:14:e6:83:f5:4b:49:
         94:8b:97:89:6e:85:35:3f:a0:ea:e0:91:a3:95:c8:3b:1c:76:
         1f:e8:63:40:a2:5d:3b:27:71:6a:c4:c9:12:c6:d5:11:d9:1b:
         ae:4a:af:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:37:25 2026 by rpki-client