Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/323830343a336566633a3a2f33322d313238203d3e20323636363333.roa
File:                     323830343a336566633a3a2f33322d313238203d3e20323636363333.roa (raw, json)
Hash identifier:          tOGcDd6mjwyktXSDNCFVdcpPhN4wpdRr7ikTXH+68k8=
Subject key identifier:   E7:89:33:85:8D:74:BD:71:99:BB:F1:F4:72:D8:D0:7A:64:F1:94:58
Certificate issuer:       /CN=26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802
Certificate serial:       76CFF68443C05972230B5156031196E483E52EB3
Authority key identifier: 26:BB:0A:9D:EE:B1:DE:27:D6:B3:71:07:9F:81:CA:BD:BC:D6:B8:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/323830343a336566633a3a2f33322d313238203d3e20323636363333.roa
Signing time:             Tue 25 Aug 2026 15:34:01 +0000
ROA not before:           Tue 25 Aug 2026 15:29:01 +0000
ROA not after:            Tue 24 Aug 2027 15:34:01 +0000
asID:                     266633
IP address blocks:        2804:3efc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.crl
                          rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 15:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:cf:f6:84:43:c0:59:72:23:0b:51:56:03:11:96:e4:83:e5:2e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802
        Validity
            Not Before: Aug 25 15:29:01 2026 GMT
            Not After : Aug 24 15:34:01 2027 GMT
        Subject: CN=E78933858D74BD7199BBF1F472D8D07A64F19458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ee:03:e2:00:b6:6f:44:59:1a:ee:45:5f:f4:
                    93:89:81:de:a8:8d:06:5a:87:f9:51:16:50:24:0e:
                    eb:b4:6f:23:3c:83:06:23:3d:80:0f:15:3a:15:83:
                    67:78:81:2e:4c:06:2c:04:30:d7:fb:3b:d2:af:8d:
                    70:b8:ea:ac:ad:a0:a4:6a:2b:53:94:3c:82:ca:4f:
                    91:82:5a:84:a8:d6:a1:d7:8d:b1:5a:a2:12:23:ad:
                    0b:89:94:01:59:3e:df:0c:94:95:f8:c9:4a:01:61:
                    c8:9b:dc:79:64:83:69:fe:a9:30:bb:7d:4b:9e:a9:
                    cb:2b:89:a5:25:ce:12:49:64:e3:2c:cc:53:04:92:
                    16:05:dd:60:be:00:ea:dd:48:4c:86:3e:42:fc:38:
                    6c:30:59:b0:07:21:f3:4c:2f:fe:72:8f:ee:54:f9:
                    dc:7e:9f:23:35:cc:da:8a:44:71:d9:e0:02:91:c7:
                    28:5e:da:a4:4e:ec:03:2d:df:c2:63:cd:37:be:2f:
                    f0:79:72:76:4c:73:a4:34:3b:44:f2:d1:41:08:d2:
                    90:87:4a:ad:cf:6d:2e:4e:6c:a5:0f:47:f6:3a:b4:
                    1f:23:3b:52:22:07:e6:db:59:87:17:90:66:68:d9:
                    8a:40:fc:d1:2b:dd:7d:79:37:14:2a:f7:91:61:e5:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:89:33:85:8D:74:BD:71:99:BB:F1:F4:72:D8:D0:7A:64:F1:94:58
            X509v3 Authority Key Identifier:
                keyid:26:BB:0A:9D:EE:B1:DE:27:D6:B3:71:07:9F:81:CA:BD:BC:D6:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26BB0A9DEEB1DE27D6B371079F81CABDBCD6B802.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2D2HJ6GCvpSH2xyUiLoCPweN5VsAm11LYHAPk51VHdhH/0/323830343a336566633a3a2f33322d313238203d3e20323636363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3efc::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:dd:c7:02:64:60:fb:a8:99:4e:02:06:40:c2:34:6e:3e:69:
         15:33:32:a9:48:53:95:dc:34:c0:94:a0:8e:9f:f5:aa:b8:b6:
         56:7e:a3:fa:00:79:f5:40:81:5d:a8:85:76:b3:52:46:bb:1d:
         12:70:4a:f2:60:72:9a:3e:09:f5:1e:b4:be:e9:92:e6:47:a0:
         16:f0:5a:41:e8:9c:95:5f:fe:5b:9f:76:54:fb:5a:2f:b9:f7:
         0a:02:c2:1c:10:95:34:a9:ae:58:e4:1d:f8:d9:0e:28:09:92:
         74:56:eb:2a:cc:26:a7:6c:f3:ea:b1:ef:b4:78:68:c0:1d:e8:
         0f:66:69:e7:14:ac:30:50:68:e7:89:40:ff:db:93:b0:f4:87:
         0c:c5:60:89:94:64:b4:19:ac:bf:2d:1d:68:b0:e6:2a:46:76:
         52:34:4e:ec:03:eb:df:25:e3:fd:e2:a0:5d:1f:21:e1:7f:be:
         1b:87:28:a0:0e:9b:c5:77:02:61:56:0b:d3:ac:49:e4:f6:65:
         5b:c6:68:de:b9:5a:20:38:0e:ef:d5:5f:21:e4:10:04:e5:fd:
         42:6e:a6:3f:1c:6b:8b:48:34:94:0e:69:80:bd:74:de:f8:1f:
         3f:6b:7a:3f:fc:3b:e2:08:3f:45:10:53:eb:4d:41:5a:81:97:
         d1:4e:ff:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:33:37 2026 by rpki-client