Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a333030303a3a2f33362d3336203d3e20323633383436.roa
File:                     323830343a323661343a333030303a3a2f33362d3336203d3e20323633383436.roa (raw, json)
Hash identifier:          dw3poScbuRnaRE1PY4k0OzAza9tWTptAObVuQsAPIZo=
Subject key identifier:   65:BD:26:42:48:02:9B:C5:F6:7C:4F:52:BE:AA:5F:A6:2C:C0:6D:37
Certificate issuer:       /CN=AF58EB7303419B1037B666A14A64BDE04E515532
Certificate serial:       2D549DA59309E855862406E302A107A9BBBE514E
Authority key identifier: AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a333030303a3a2f33362d3336203d3e20323633383436.roa
Signing time:             Tue 14 Jul 2026 13:52:35 +0000
ROA not before:           Tue 14 Jul 2026 13:47:35 +0000
ROA not after:            Tue 13 Jul 2027 13:52:35 +0000
asID:                     263846
IP address blocks:        2804:26a4:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl
                          rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:54:9d:a5:93:09:e8:55:86:24:06:e3:02:a1:07:a9:bb:be:51:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF58EB7303419B1037B666A14A64BDE04E515532
        Validity
            Not Before: Jul 14 13:47:35 2026 GMT
            Not After : Jul 13 13:52:35 2027 GMT
        Subject: CN=65BD264248029BC5F67C4F52BEAA5FA62CC06D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:58:3b:e0:24:bd:39:04:48:c5:a0:8c:05:8b:
                    20:0c:f9:76:2c:ba:6c:78:7d:5c:b3:bf:ed:f1:64:
                    cd:2f:41:7d:76:18:a1:a8:42:8e:9e:34:a6:d1:29:
                    f2:df:75:41:e6:dd:ab:a4:25:b0:73:2e:bf:68:bf:
                    ed:74:5b:bd:fc:16:b8:e9:7d:42:55:07:ac:85:46:
                    96:54:5e:c6:79:ce:d2:49:02:bf:f9:ff:13:7c:79:
                    51:85:7d:6c:43:49:d7:b3:03:c1:c6:58:8c:b8:b7:
                    c2:19:fb:5d:56:c7:1e:ae:aa:86:67:28:ea:fb:89:
                    f8:d7:4b:c5:3e:07:ff:bd:75:6a:3f:66:5c:b9:f7:
                    75:f3:1a:db:86:b0:1d:38:a4:f6:9b:e3:6b:af:8a:
                    52:5c:a3:2b:0c:cc:b6:eb:ab:77:c0:26:53:77:92:
                    c8:0b:b1:99:b7:65:85:5e:7b:fb:29:e6:0f:31:be:
                    d9:a2:55:60:b3:12:d1:88:fd:b7:f8:24:f8:23:4e:
                    cc:1e:bd:ea:67:d1:a6:f7:69:6d:43:5b:be:74:73:
                    2c:59:60:1e:a2:ce:00:74:b0:4e:ba:25:36:41:ee:
                    3c:73:01:74:d5:8b:08:75:4e:e9:ed:e8:b4:dc:96:
                    14:47:16:62:ad:ed:6a:71:14:f7:ba:97:a6:94:1b:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BD:26:42:48:02:9B:C5:F6:7C:4F:52:BE:AA:5F:A6:2C:C0:6D:37
            X509v3 Authority Key Identifier:
                keyid:AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a333030303a3a2f33362d3336203d3e20323633383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26a4:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         17:c2:49:30:7c:20:e9:e6:5f:e3:af:1b:65:c6:65:73:3e:4a:
         f1:f9:f5:d0:7f:fa:5f:f9:ee:74:9a:44:6b:e3:63:67:b6:6d:
         00:e5:51:2b:d5:fd:38:ff:fd:69:83:c5:7c:a4:da:ee:a9:c3:
         14:3f:41:05:27:ab:0e:dd:32:85:e8:87:08:f3:d6:05:b2:91:
         39:e2:28:33:63:d7:0a:c0:1a:a9:9c:98:1a:7c:4a:e0:38:ae:
         06:34:9c:20:1e:b8:15:55:15:3b:28:82:9f:96:d8:56:4c:b8:
         7a:7d:fa:69:52:61:c7:43:2b:7e:05:53:a8:94:40:87:8c:9f:
         4e:b9:e9:59:b0:57:81:9c:11:58:52:cb:9c:36:56:8e:f9:c7:
         5e:16:3e:db:c0:88:30:a1:c4:3d:01:cc:52:05:91:49:91:99:
         5d:c5:f0:fb:12:c6:84:03:17:33:28:2c:a4:8c:4a:b8:a4:93:
         1d:ba:de:69:c9:e0:e5:14:ee:51:ee:a8:f3:12:ce:0d:15:f3:
         44:0a:77:80:89:4b:20:02:4e:ca:af:2c:ff:33:78:f7:b0:31:
         7d:fe:27:d7:2a:ea:33:ea:a9:85:87:a8:e1:94:97:16:2c:f1:
         03:a7:a4:96:f3:ee:71:7f:32:dc:7e:cc:3f:2d:c4:a2:08:be:
         7f:8e:bc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:27 2026 by rpki-client