Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/323830343a363665343a373030373a3a2f34382d3438203d3e20323639353839.roa
File:                     323830343a363665343a373030373a3a2f34382d3438203d3e20323639353839.roa (raw, json)
Hash identifier:          41Lbv8VO6j0LxFzKQbVSTNl8WyF6gpAw3tflOKodKU8=
Subject key identifier:   8B:A3:C7:9A:09:B1:E4:3A:E5:50:8D:95:A1:C3:DD:C3:53:E1:DF:C8
Certificate issuer:       /CN=26E9DBB375A429F2518B7433EA4000CA577E9AC3
Certificate serial:       7CB31743D11A116D2140B32840678C4EB5092EB1
Authority key identifier: 26:E9:DB:B3:75:A4:29:F2:51:8B:74:33:EA:40:00:CA:57:7E:9A:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E9DBB375A429F2518B7433EA4000CA577E9AC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/323830343a363665343a373030373a3a2f34382d3438203d3e20323639353839.roa
Signing time:             Fri 10 Jul 2026 13:19:41 +0000
ROA not before:           Fri 10 Jul 2026 13:14:41 +0000
ROA not after:            Fri 09 Jul 2027 13:19:41 +0000
asID:                     269589
IP address blocks:        2804:66e4:7007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/26E9DBB375A429F2518B7433EA4000CA577E9AC3.crl
                          rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/26E9DBB375A429F2518B7433EA4000CA577E9AC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E9DBB375A429F2518B7433EA4000CA577E9AC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 08:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b3:17:43:d1:1a:11:6d:21:40:b3:28:40:67:8c:4e:b5:09:2e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26E9DBB375A429F2518B7433EA4000CA577E9AC3
        Validity
            Not Before: Jul 10 13:14:41 2026 GMT
            Not After : Jul  9 13:19:41 2027 GMT
        Subject: CN=8BA3C79A09B1E43AE5508D95A1C3DDC353E1DFC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:df:f7:cd:70:6a:97:ef:57:5a:3b:61:c7:
                    5b:4b:fa:45:21:65:da:d1:0f:ef:87:b3:78:58:b0:
                    d8:7a:0a:b1:1f:4e:13:a0:2d:bb:ea:68:f0:eb:ce:
                    40:33:6a:52:88:5d:2d:c2:40:4b:b4:73:f2:a7:bf:
                    22:02:ca:c3:d8:b7:2e:cc:b5:a8:f1:19:11:a3:51:
                    eb:41:97:5c:b9:c9:97:83:8f:2d:b5:33:8d:b5:0b:
                    66:f0:84:e3:74:e7:85:f2:a3:86:5a:cb:7a:17:8e:
                    78:59:4c:20:7d:86:13:42:60:0b:13:d4:cf:08:2b:
                    b3:4b:ac:c4:b8:b6:96:ac:e2:fc:e3:d0:b4:c6:a3:
                    34:bb:22:70:53:e3:19:91:e0:08:6b:97:5d:f9:5e:
                    5e:40:8a:66:dd:31:36:6a:88:f2:ba:7c:c5:a5:50:
                    e1:85:12:cf:c4:16:e6:6a:e5:9b:f0:69:ab:44:66:
                    1a:24:db:33:b6:b1:45:90:e1:5d:b4:a1:12:c2:59:
                    3b:95:78:01:a9:16:2a:64:71:1e:65:b9:1c:a8:61:
                    a7:82:98:fc:50:03:17:c5:b6:58:91:b4:4b:31:0b:
                    d0:48:62:7f:87:3a:46:47:8c:59:61:f9:d6:a0:5b:
                    cf:14:77:a5:c4:9a:4b:45:78:15:5a:e1:26:ab:69:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A3:C7:9A:09:B1:E4:3A:E5:50:8D:95:A1:C3:DD:C3:53:E1:DF:C8
            X509v3 Authority Key Identifier:
                keyid:26:E9:DB:B3:75:A4:29:F2:51:8B:74:33:EA:40:00:CA:57:7E:9A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/26E9DBB375A429F2518B7433EA4000CA577E9AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E9DBB375A429F2518B7433EA4000CA577E9AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRD4Xfa5Upoxjfu97t7BvhtnQfAekWaC5mGn1kG4tbJt/0/323830343a363665343a373030373a3a2f34382d3438203d3e20323639353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66e4:7007::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:b4:96:dc:0f:35:90:0f:25:74:22:61:fd:a7:d8:7b:16:fc:
         22:8c:4a:53:4b:dc:02:a4:0f:6d:f1:68:cb:66:c8:bd:26:31:
         40:4f:a9:d1:49:60:7e:14:fc:2b:ed:30:f1:f8:c7:a5:d0:0b:
         21:f8:10:60:29:99:25:27:c8:1f:3b:8a:60:ca:2b:b4:8d:33:
         2f:7e:04:84:f2:3c:1f:58:ce:b0:94:bc:1e:ec:dd:6f:51:9c:
         9e:82:82:3d:f6:c3:17:0a:b5:e6:eb:43:ac:e5:73:60:6d:63:
         29:b1:1b:c5:9a:f0:e9:2f:e0:4c:45:60:51:44:4b:33:aa:cc:
         7a:60:ac:db:0b:0b:05:9f:ca:f0:f4:f8:8b:e4:85:e7:6a:b3:
         99:be:38:e5:3d:3e:de:27:cf:32:06:cd:49:42:15:73:f5:7a:
         3b:82:ac:68:b0:59:55:d8:71:b9:31:59:30:59:13:3f:51:91:
         48:a3:9b:2e:c3:1b:01:e0:0c:40:d6:bc:f3:30:ef:8c:81:77:
         fe:2f:59:0d:06:58:55:e6:37:e1:8e:b3:4a:17:88:91:12:e7:
         ac:d3:e9:0f:67:f0:11:f8:e0:1c:ff:99:0c:b5:01:ca:59:aa:
         be:75:1c:1b:af:f5:64:92:46:95:73:57:29:3b:ad:45:d9:4e:
         b8:60:cb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:36:47 2026 by rpki-client