Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a616139303a3a2f34382d3438203d3e20323633323736.roa
File:                     323830343a313633383a616139303a3a2f34382d3438203d3e20323633323736.roa (raw, json)
Hash identifier:          11OlD8msqyH6egfUqOMl5NE1fwZb1xIDMfWRDN6xMNI=
Subject key identifier:   A4:B3:E5:07:98:8D:25:B3:26:A9:53:B7:52:32:5B:89:CA:3E:6F:25
Certificate issuer:       /CN=B1099D894126AC4CAD9411E4308EE689A767609A
Certificate serial:       5D8EF71C22D3C81CF140A4ACE1789A535FB5CB82
Authority key identifier: B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a616139303a3a2f34382d3438203d3e20323633323736.roa
Signing time:             Fri 10 Jul 2026 14:29:17 +0000
ROA not before:           Fri 10 Jul 2026 14:24:17 +0000
ROA not after:            Fri 09 Jul 2027 14:29:17 +0000
asID:                     263276
IP address blocks:        2804:1638:aa90::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl
                          rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8e:f7:1c:22:d3:c8:1c:f1:40:a4:ac:e1:78:9a:53:5f:b5:cb:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1099D894126AC4CAD9411E4308EE689A767609A
        Validity
            Not Before: Jul 10 14:24:17 2026 GMT
            Not After : Jul  9 14:29:17 2027 GMT
        Subject: CN=A4B3E507988D25B326A953B752325B89CA3E6F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ba:95:fe:9e:4e:36:48:c5:c0:75:07:37:89:
                    4d:be:e6:1d:fa:20:e5:04:23:ed:6f:aa:2d:92:0a:
                    4c:36:68:52:fa:0d:b2:65:96:d1:8b:1f:1c:80:11:
                    e1:2d:27:36:73:a7:05:1d:00:f0:7a:aa:51:78:78:
                    dd:22:84:bb:d4:cd:a3:f8:ca:71:38:61:a1:89:e0:
                    74:92:71:3e:3d:e5:e6:2d:af:55:19:c8:3a:7c:f8:
                    6c:4d:50:59:65:8c:f8:8c:ae:e6:f1:a6:fd:06:27:
                    7d:6b:d1:cb:02:9c:00:fd:51:ec:db:ea:ec:e6:f9:
                    36:8e:7c:45:4f:d0:92:62:b8:05:e7:ba:ad:5e:7b:
                    34:26:75:ee:c4:d1:c0:a3:b3:25:ed:9d:e1:5d:55:
                    3a:ab:8a:41:8c:fe:03:d7:07:2f:a6:33:f4:78:5a:
                    d7:3c:d0:13:dd:88:65:48:c4:73:ce:25:03:c9:64:
                    e1:17:3a:52:e1:71:25:c0:e3:9b:b6:97:14:25:1d:
                    de:83:4f:3f:cd:28:3d:b9:c7:18:e4:04:51:38:da:
                    2c:32:e2:a2:49:97:bd:1d:80:af:ad:ef:5a:99:2a:
                    0e:93:85:10:1d:a5:16:d8:46:bc:d1:20:39:5b:d8:
                    54:a1:56:c7:24:24:e2:90:68:47:4d:ee:bf:b4:f8:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B3:E5:07:98:8D:25:B3:26:A9:53:B7:52:32:5B:89:CA:3E:6F:25
            X509v3 Authority Key Identifier:
                keyid:B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/323830343a313633383a616139303a3a2f34382d3438203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1638:aa90::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:b2:1f:ea:9a:4f:34:08:30:c4:f3:6e:66:89:db:3c:95:1b:
         f5:b1:3d:24:3d:70:bb:81:aa:00:e9:be:b3:f6:ab:45:25:42:
         c5:e4:c8:b4:df:e4:8d:fa:29:2d:91:92:60:23:af:e3:b1:21:
         b9:e9:53:0e:ed:11:b5:91:05:c3:32:28:50:8e:ad:fc:8a:72:
         12:4d:fa:75:4d:df:fc:4a:26:20:1f:6b:98:6d:34:92:dd:3e:
         fb:22:d7:08:4b:c0:ba:8e:24:19:26:89:a3:95:4b:1b:e5:36:
         ad:ce:61:8e:ce:44:17:42:cd:77:df:16:58:e2:7e:2f:b3:57:
         78:f6:d4:e9:bb:94:96:da:5e:1f:36:95:8f:2d:18:5e:da:85:
         c1:11:26:a6:e8:97:b4:9a:c6:d2:f6:15:22:00:39:f2:ee:b2:
         1a:10:30:ed:8f:00:d6:d4:f3:dc:6c:cf:7a:c6:da:f0:33:4f:
         20:bf:18:61:a3:41:a8:99:66:af:48:e6:f0:6d:de:0d:17:1d:
         99:2f:45:16:9f:52:8e:27:07:95:14:d5:86:40:57:5e:1e:0b:
         6e:a4:9b:70:4f:08:5f:54:38:88:06:41:d1:77:23:82:a1:0e:
         e9:db:c5:18:bc:2d:e0:9a:86:04:11:75:d2:1e:ca:c0:0f:1d:
         96:74:e7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:38:01 2026 by rpki-client