Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/323830343a313633383a3a2f33322d3332203d3e20323633323736.roa
File:                     323830343a313633383a3a2f33322d3332203d3e20323633323736.roa (raw, json)
Hash identifier:          iQWAwjuJ43/g119xCm0GsaE1twsS8+69s55qbxkoNWU=
Subject key identifier:   6B:7A:D0:26:BE:FF:1A:DD:C6:40:9E:96:BE:8E:C9:6C:E3:9A:86:1F
Certificate issuer:       /CN=8B402B544C026F193D073E5EB48316BF70232F73
Certificate serial:       44000F5897C40D49A5D3947EF12FDC70F981F9ED
Authority key identifier: 8B:40:2B:54:4C:02:6F:19:3D:07:3E:5E:B4:83:16:BF:70:23:2F:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/323830343a313633383a3a2f33322d3332203d3e20323633323736.roa
Signing time:             Wed 07 Oct 2026 19:03:00 +0000
ROA not before:           Wed 07 Oct 2026 18:58:00 +0000
ROA not after:            Wed 06 Oct 2027 19:03:00 +0000
asID:                     263276
IP address blocks:        2804:1638::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/8B402B544C026F193D073E5EB48316BF70232F73.crl
                          rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/8B402B544C026F193D073E5EB48316BF70232F73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 07:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:00:0f:58:97:c4:0d:49:a5:d3:94:7e:f1:2f:dc:70:f9:81:f9:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B402B544C026F193D073E5EB48316BF70232F73
        Validity
            Not Before: Oct  7 18:58:00 2026 GMT
            Not After : Oct  6 19:03:00 2027 GMT
        Subject: CN=6B7AD026BEFF1ADDC6409E96BE8EC96CE39A861F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:d0:6f:00:a7:db:d8:f9:68:cc:5f:5c:d9:
                    ef:75:a7:94:c1:06:01:8d:8e:93:5b:3e:79:a6:4b:
                    85:52:8d:5f:a9:ba:66:86:4c:ff:05:cd:7a:22:9f:
                    17:3c:5a:45:86:1e:0d:00:39:e6:98:34:c4:9b:ac:
                    61:b0:d1:36:7d:83:94:91:09:ca:04:97:f5:dc:95:
                    bf:25:3f:82:f7:53:42:d5:f1:51:b2:03:af:e7:b0:
                    33:6c:4c:e9:ef:2b:2a:1a:8a:da:73:3f:96:80:8b:
                    f7:04:e1:fd:79:8e:b9:26:c7:63:c1:18:be:20:b5:
                    0a:c5:cb:75:95:13:45:57:a2:22:fe:70:39:5e:1a:
                    eb:95:99:dd:4e:22:e8:1e:6b:39:5b:ab:f9:a9:a7:
                    93:a9:fa:4a:1a:ba:02:e1:58:9a:66:e6:78:6d:f6:
                    e5:25:9f:0c:1b:84:0e:72:65:23:e0:cf:c5:be:b5:
                    e3:10:ea:36:ac:36:bb:3f:68:10:a4:d8:91:b6:c6:
                    5d:64:87:81:58:ed:6d:68:0e:af:96:85:a9:88:22:
                    b0:38:16:b6:0f:90:85:27:47:8f:ac:f9:d0:73:40:
                    fd:58:ec:29:b4:7f:19:a3:fb:8f:8a:2f:16:a3:64:
                    5d:88:0d:f4:1e:3d:a9:9e:8c:a5:59:86:0f:83:92:
                    2a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7A:D0:26:BE:FF:1A:DD:C6:40:9E:96:BE:8E:C9:6C:E3:9A:86:1F
            X509v3 Authority Key Identifier:
                keyid:8B:40:2B:54:4C:02:6F:19:3D:07:3E:5E:B4:83:16:BF:70:23:2F:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/8B402B544C026F193D073E5EB48316BF70232F73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/323830343a313633383a3a2f33322d3332203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1638::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:93:dd:6a:93:fe:dd:55:77:67:b3:c3:36:52:52:de:9c:1e:
         0c:9d:75:56:67:29:06:76:be:d5:9d:e2:26:73:4b:8a:0e:6b:
         86:cb:96:94:78:5b:ab:86:83:37:d1:23:57:cd:b9:f3:ab:7b:
         c7:10:08:d7:07:17:29:73:da:74:e6:f6:22:c1:32:cf:33:5b:
         73:0f:01:2e:c9:05:3f:b4:9e:0a:8f:94:cf:36:5b:6e:e6:d8:
         b4:34:3f:c2:4c:3d:0a:cf:8b:bc:92:b7:7a:a4:69:85:b6:0c:
         bd:88:3b:8a:14:72:6d:f6:0a:f5:10:20:ca:00:47:7a:35:5c:
         8e:b4:7b:2d:ec:5d:72:7e:21:ea:d9:9e:f6:3d:13:b6:71:5c:
         91:46:21:7d:37:78:4c:ae:96:ca:fc:df:c5:a2:53:4f:4d:2c:
         94:7e:83:82:b6:08:f3:6c:f3:66:af:0b:81:b4:1c:e4:4d:a7:
         cd:6c:ab:0f:01:26:af:fb:9e:8d:dc:01:fe:ed:a5:6b:a1:9f:
         70:06:37:fa:9b:48:e3:7e:1b:3a:b3:32:7b:34:76:69:43:95:
         6e:70:3e:5e:77:86:06:14:b1:23:e1:7b:b6:4d:36:21:75:77:
         6d:b3:b1:88:c1:d2:7c:71:fd:7e:99:a5:1f:32:9e:2b:2b:72:
         4b:50:9c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----