Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a333030313a3a2f34382d3438203d3e20323633383436.roa
File:                     323830343a323661343a333030313a3a2f34382d3438203d3e20323633383436.roa (raw, json)
Hash identifier:          c6NtgpZLZhznT/r5ssdZ8Qu+uod+rs6qa8XFsS8x/Xk=
Subject key identifier:   C4:59:A8:37:BC:77:8B:91:E2:9E:13:1F:E0:B4:82:11:76:94:41:FB
Certificate issuer:       /CN=AF58EB7303419B1037B666A14A64BDE04E515532
Certificate serial:       1138EBB8A65FF3FABB7CB326C91644A6F8AE637F
Authority key identifier: AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a333030313a3a2f34382d3438203d3e20323633383436.roa
Signing time:             Tue 14 Jul 2026 13:52:35 +0000
ROA not before:           Tue 14 Jul 2026 13:47:35 +0000
ROA not after:            Tue 13 Jul 2027 13:52:35 +0000
asID:                     263846
IP address blocks:        2804:26a4:3001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl
                          rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:38:eb:b8:a6:5f:f3:fa:bb:7c:b3:26:c9:16:44:a6:f8:ae:63:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF58EB7303419B1037B666A14A64BDE04E515532
        Validity
            Not Before: Jul 14 13:47:35 2026 GMT
            Not After : Jul 13 13:52:35 2027 GMT
        Subject: CN=C459A837BC778B91E29E131FE0B48211769441FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:57:1e:88:2e:67:1a:48:68:aa:59:41:21:05:
                    8b:b4:09:d0:bd:f7:b1:ae:e1:17:25:26:51:07:3d:
                    81:ef:47:e9:3f:29:05:50:1f:80:44:a4:eb:6d:54:
                    aa:8e:1d:b8:44:5d:5c:90:e0:eb:14:02:5b:00:d9:
                    44:c4:64:21:1f:8c:db:2e:9d:77:1f:2c:63:38:f8:
                    c9:7e:14:45:6f:db:02:69:41:03:27:a0:f2:a7:c4:
                    df:a9:96:6f:51:61:d7:dd:e5:7c:4b:6f:95:5a:ff:
                    8b:a4:40:64:a7:4b:fe:a6:58:6f:e8:b5:cf:08:ed:
                    39:18:a2:26:31:ef:c0:5d:d9:ff:25:33:d6:43:e3:
                    d1:be:49:f5:de:a9:cc:bc:27:68:27:23:8a:71:db:
                    58:fb:c0:96:bb:0a:6e:e4:40:9b:35:cd:64:62:a2:
                    f9:b9:58:19:8f:21:c3:46:8f:dd:c6:f0:cf:98:49:
                    c2:68:16:3f:95:b8:db:ab:bf:62:c1:36:16:c6:a1:
                    53:ab:bb:2e:5b:19:09:54:f5:5f:13:c0:01:c3:ee:
                    41:b6:0b:c5:c0:4b:26:6d:cb:df:43:b3:78:30:f5:
                    59:0c:84:ff:a3:a8:e7:6d:dd:1f:d9:6a:17:a4:64:
                    81:27:8c:8f:c9:5f:68:9d:7d:42:99:7d:3c:27:dd:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:59:A8:37:BC:77:8B:91:E2:9E:13:1F:E0:B4:82:11:76:94:41:FB
            X509v3 Authority Key Identifier:
                keyid:AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a333030313a3a2f34382d3438203d3e20323633383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26a4:3001::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:57:31:92:ee:b8:09:6d:b8:d2:27:3f:83:33:a7:6d:86:e6:
         ee:41:dc:4b:d7:61:d7:fb:34:dd:5c:fe:01:67:fd:1f:cb:ec:
         49:31:fb:24:62:c2:21:f8:17:08:f8:3e:d2:0e:df:73:be:88:
         c1:13:85:e6:b8:6f:99:b8:b4:f8:7c:8d:ff:2e:39:b9:47:a2:
         5b:c4:18:1e:6e:69:2b:bd:b4:a1:06:8e:e7:e7:e2:97:9b:a4:
         e3:c9:aa:27:4f:40:83:22:88:4d:4d:10:5d:e4:ac:25:e2:f6:
         72:50:0a:22:a1:bb:b8:84:05:3f:2b:72:02:9b:6d:bb:9d:76:
         c9:49:19:84:b1:8f:c3:95:31:44:cf:63:1d:d8:df:d4:10:c0:
         9b:b4:9b:3f:de:ba:80:0c:21:e5:ca:a0:93:11:4d:71:6f:a1:
         79:72:ac:08:0f:b1:2a:ce:7b:9a:51:e7:fa:25:f2:81:76:ea:
         65:52:7b:2b:2a:21:dc:ee:f3:1d:ac:73:fc:7a:cd:57:1f:a7:
         40:ea:03:56:9c:ad:3a:ea:82:fc:10:05:c3:94:8f:1d:57:7f:
         db:78:cf:6b:1c:2e:ee:4c:eb:24:7c:b8:97:4c:dd:dd:be:e2:
         4b:ce:11:1c:84:71:3d:6a:d3:b0:db:d0:a1:4a:ca:fd:1f:ad:
         40:8f:b3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:07 2026 by rpki-client