Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a323030303a3a2f33362d3336203d3e20323633383436.roa
File:                     323830343a323661343a323030303a3a2f33362d3336203d3e20323633383436.roa (raw, json)
Hash identifier:          jROE0wC3LpDkxE+RaMeraIA3B0elf3nMezot2RvWzRE=
Subject key identifier:   AF:11:F2:14:4E:4A:03:30:4C:7B:51:0F:8D:05:20:F6:C1:C7:20:14
Certificate issuer:       /CN=AF58EB7303419B1037B666A14A64BDE04E515532
Certificate serial:       200BBBA1FA8C6C59DCE54E72925B2613957E72E2
Authority key identifier: AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a323030303a3a2f33362d3336203d3e20323633383436.roa
Signing time:             Tue 14 Jul 2026 13:52:35 +0000
ROA not before:           Tue 14 Jul 2026 13:47:35 +0000
ROA not after:            Tue 13 Jul 2027 13:52:35 +0000
asID:                     263846
IP address blocks:        2804:26a4:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl
                          rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0b:bb:a1:fa:8c:6c:59:dc:e5:4e:72:92:5b:26:13:95:7e:72:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF58EB7303419B1037B666A14A64BDE04E515532
        Validity
            Not Before: Jul 14 13:47:35 2026 GMT
            Not After : Jul 13 13:52:35 2027 GMT
        Subject: CN=AF11F2144E4A03304C7B510F8D0520F6C1C72014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:25:e6:1b:0c:55:ee:de:12:6b:ca:f5:4b:ae:
                    9d:45:f4:7b:e1:1d:04:6e:5e:31:78:22:ee:54:98:
                    01:49:d0:7a:98:b2:9d:3d:65:27:f7:dd:24:ec:24:
                    ce:d6:3b:57:89:7a:92:ee:29:07:51:a0:80:ba:b5:
                    c7:a0:21:63:77:f9:51:1e:fa:83:de:7a:8b:24:a2:
                    16:de:87:73:dd:c0:a3:7a:42:86:2a:31:67:c9:cb:
                    c0:70:92:3d:73:e9:c4:dc:39:9e:8e:d1:c9:1f:45:
                    df:a5:96:76:1c:be:3c:97:92:b2:b0:13:c9:58:23:
                    46:0e:78:44:eb:06:0b:d5:0c:18:15:83:2c:e2:b6:
                    0a:d4:70:c3:e1:29:35:95:9f:81:57:4f:a6:9e:6c:
                    ca:3e:9a:bc:76:2c:4b:c8:da:2a:db:e2:35:6e:71:
                    c3:4c:23:a0:92:59:a7:3c:2e:8e:96:b4:dc:1d:6c:
                    68:6a:5f:da:25:4a:67:b0:74:17:7c:ec:f2:02:61:
                    24:e1:45:eb:f3:bc:da:46:1f:48:87:97:e1:e7:c1:
                    fe:f0:04:67:0c:5f:40:77:c6:cf:bb:32:44:c6:80:
                    57:d2:dc:f5:4d:85:ca:e5:4a:97:02:2f:64:00:98:
                    ea:cf:6a:27:3f:c3:68:82:81:15:ad:89:26:df:ad:
                    9e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:11:F2:14:4E:4A:03:30:4C:7B:51:0F:8D:05:20:F6:C1:C7:20:14
            X509v3 Authority Key Identifier:
                keyid:AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a323030303a3a2f33362d3336203d3e20323633383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26a4:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:1d:c0:67:3d:66:11:52:82:bd:bc:fc:ee:67:41:8f:47:96:
         02:a4:cf:8b:dd:a8:93:f6:98:40:e2:a7:2d:90:8e:3f:13:e8:
         7c:a6:66:72:71:a2:5b:5a:fe:ea:b6:1e:64:90:91:be:ac:70:
         1d:70:55:7f:60:28:e8:05:69:e8:75:98:3b:d9:ca:e2:15:ed:
         0c:50:58:25:a3:6e:f6:04:25:71:dc:5e:75:2f:74:19:6b:6c:
         02:81:b9:c4:d7:c8:43:8b:0d:be:10:8b:0b:47:68:fc:69:21:
         c5:a2:5c:89:0a:83:8c:51:c9:24:8f:92:20:e2:aa:c3:87:87:
         aa:3e:e3:5b:4a:77:e0:db:87:1b:24:e1:8b:36:c2:ff:30:70:
         7a:12:d7:49:9b:3a:8b:3e:a3:e0:56:12:b0:f8:41:45:5c:58:
         53:c7:a6:aa:7e:5e:f5:9e:73:8c:e3:e6:9d:c9:c8:bb:d5:9e:
         fb:08:b7:5f:bd:37:18:13:cc:fa:86:29:eb:3b:28:40:29:04:
         6e:ad:b9:0a:38:2f:77:50:50:2b:44:f1:d8:be:80:96:e2:2b:
         7c:bc:b2:a9:13:a7:da:93:86:9c:4e:c2:ef:51:de:4d:62:42:
         53:e4:c2:24:1d:ee:0b:81:50:c1:0e:c3:fb:3f:0e:7c:ef:44:
         38:80:52:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:56:41 2026 by rpki-client