Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a333030303a3a2f34382d3438203d3e20323633383436.roa
File:                     323830343a323661343a333030303a3a2f34382d3438203d3e20323633383436.roa (raw, json)
Hash identifier:          mcpoyjhqYBmYmy39py5UjRKAUkAn99fKkm5DS0w2tiA=
Subject key identifier:   2F:31:D2:59:F5:DF:BF:9B:F5:7A:20:1B:A2:EB:C5:90:4F:B3:E9:F8
Certificate issuer:       /CN=AF58EB7303419B1037B666A14A64BDE04E515532
Certificate serial:       443F58853F0A14E6B7123E641726A6F35D4D7017
Authority key identifier: AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a333030303a3a2f34382d3438203d3e20323633383436.roa
Signing time:             Tue 14 Jul 2026 13:52:36 +0000
ROA not before:           Tue 14 Jul 2026 13:47:36 +0000
ROA not after:            Tue 13 Jul 2027 13:52:36 +0000
asID:                     263846
IP address blocks:        2804:26a4:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl
                          rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3f:58:85:3f:0a:14:e6:b7:12:3e:64:17:26:a6:f3:5d:4d:70:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF58EB7303419B1037B666A14A64BDE04E515532
        Validity
            Not Before: Jul 14 13:47:36 2026 GMT
            Not After : Jul 13 13:52:36 2027 GMT
        Subject: CN=2F31D259F5DFBF9BF57A201BA2EBC5904FB3E9F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:3e:96:7c:29:4c:60:3c:89:98:25:b7:d4:
                    c3:a0:b7:d8:73:07:5a:b3:48:93:e0:97:71:a2:cb:
                    7e:d9:cf:94:12:8d:2e:af:a0:b1:31:11:ac:47:50:
                    f0:f5:37:d6:e5:9b:97:40:c7:0b:c6:b4:16:fc:02:
                    bb:e8:ba:62:80:a3:fd:69:5e:51:b9:ed:96:49:01:
                    81:0b:00:7c:89:30:78:32:e8:c2:e6:bc:e6:f7:9d:
                    2f:13:86:01:fd:c2:17:37:7c:ce:ae:88:e9:e0:02:
                    68:8b:b2:1f:87:3f:2e:72:21:fe:0e:d7:84:16:3f:
                    75:99:d0:ec:cb:e4:3b:d8:0f:cb:df:7f:44:fe:76:
                    e2:1c:15:c4:af:08:62:f8:1e:32:8f:e6:6a:ed:72:
                    73:f8:47:74:e4:68:e8:4c:7f:fb:87:13:61:87:34:
                    7f:20:ae:be:fc:7b:b5:dc:98:41:c1:c2:c3:0d:71:
                    24:d0:12:1b:dd:8e:db:23:4f:4a:d7:10:ae:80:f3:
                    47:63:50:e4:4c:e3:11:a2:da:c6:3f:a9:86:11:99:
                    e2:7e:7b:17:8c:c4:34:8b:aa:45:80:87:e8:42:65:
                    9b:b7:03:7a:2b:6f:0a:a6:63:e5:9a:9c:6d:10:57:
                    9c:58:5d:bd:c1:0d:3c:27:16:a3:37:8a:77:eb:a7:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:31:D2:59:F5:DF:BF:9B:F5:7A:20:1B:A2:EB:C5:90:4F:B3:E9:F8
            X509v3 Authority Key Identifier:
                keyid:AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a333030303a3a2f34382d3438203d3e20323633383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26a4:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:71:ec:17:e5:13:4c:c1:79:a8:86:e7:96:05:4f:7c:d0:50:
         f8:0d:5a:72:29:3e:24:74:82:d6:b1:12:d7:6c:d1:ae:c8:e1:
         41:07:8a:a4:d5:9b:9e:80:e6:69:9a:33:9b:07:16:5a:8c:64:
         63:83:bc:9a:eb:17:6c:1a:13:e7:4c:cd:28:35:62:fc:0b:91:
         a9:b0:8e:89:0c:ef:6b:6f:1a:ab:0a:cc:5e:3a:17:99:0a:0d:
         a0:e1:82:74:d5:64:15:35:f0:a5:be:d3:2e:09:bd:3c:8d:d9:
         00:8a:03:ad:c9:a6:3c:77:f5:58:c2:6b:e0:51:3c:0f:7e:d0:
         09:73:69:15:b1:24:10:4a:08:c3:5e:21:e0:6f:2c:6a:dd:88:
         5a:e0:58:59:28:ce:67:cc:4d:c1:a1:9e:a6:88:c4:e3:09:99:
         38:0f:1a:e5:a7:c5:fe:18:00:81:18:6f:6a:31:c4:24:c1:63:
         75:28:41:29:f6:72:87:a3:00:3f:f9:aa:a9:fb:47:ae:36:43:
         26:70:b0:ec:4d:e0:b9:0f:b6:46:d4:d1:2e:c9:bf:f4:47:17:
         8d:49:9e:92:01:fc:7a:99:fe:2b:71:e0:6d:dc:33:34:b6:20:
         24:6d:5e:7d:f5:8e:3e:0b:64:7d:06:f2:36:ba:c6:cf:11:88:
         6c:f5:3a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:15 2026 by rpki-client