Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a353030303a3a2f33362d3336203d3e20323633383436.roa
File:                     323830343a323661343a353030303a3a2f33362d3336203d3e20323633383436.roa (raw, json)
Hash identifier:          K1GknZp5rsffr7kZkuduYWbur9BptrB8h8A0niQ9nhc=
Subject key identifier:   03:6F:88:D1:3B:19:D3:F8:4F:26:15:26:D2:9B:19:D8:44:BC:54:0B
Certificate issuer:       /CN=AF58EB7303419B1037B666A14A64BDE04E515532
Certificate serial:       431B62B55A7235FF7E5D70882ADAFD897CE91A9B
Authority key identifier: AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a353030303a3a2f33362d3336203d3e20323633383436.roa
Signing time:             Tue 14 Jul 2026 13:52:34 +0000
ROA not before:           Tue 14 Jul 2026 13:47:34 +0000
ROA not after:            Tue 13 Jul 2027 13:52:34 +0000
asID:                     263846
IP address blocks:        2804:26a4:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl
                          rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1b:62:b5:5a:72:35:ff:7e:5d:70:88:2a:da:fd:89:7c:e9:1a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF58EB7303419B1037B666A14A64BDE04E515532
        Validity
            Not Before: Jul 14 13:47:34 2026 GMT
            Not After : Jul 13 13:52:34 2027 GMT
        Subject: CN=036F88D13B19D3F84F261526D29B19D844BC540B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:61:3b:6b:12:a5:a3:d7:e0:9c:ec:db:88:56:
                    f1:eb:0b:af:24:28:4c:45:44:8c:d1:7b:5e:d2:ca:
                    a9:b7:f6:13:9b:9d:21:de:e8:d3:47:ff:9e:6a:00:
                    e4:53:b1:23:4a:99:df:d0:41:85:09:a2:15:62:eb:
                    3f:8e:b2:f5:39:d0:ca:cd:15:a5:3e:5d:3b:96:ed:
                    7c:cd:57:08:95:73:53:d7:5a:27:20:f6:d6:c8:7a:
                    0b:a8:3f:ca:21:54:b7:70:73:3b:cd:26:b7:8b:25:
                    3c:58:84:61:27:78:b1:b7:67:ea:fd:17:a3:5e:41:
                    80:cc:7d:59:92:0c:77:73:ed:80:43:03:da:0c:54:
                    f3:33:4e:79:b6:8f:cb:a4:e0:10:19:ff:f5:2a:d2:
                    11:7a:a6:a6:ef:d7:9a:e8:f5:fb:52:32:5e:b3:ea:
                    7f:fe:ee:51:4a:06:d7:96:63:86:12:37:c1:8e:e6:
                    27:51:42:ff:73:34:0e:51:84:2c:52:75:a5:c5:65:
                    32:0a:03:ff:ab:83:81:22:1a:e1:ab:eb:0c:47:7d:
                    bf:1b:4a:90:99:9f:41:7d:39:40:7d:5a:21:90:08:
                    c8:0e:68:17:19:da:8b:bf:34:78:48:ec:cb:93:34:
                    4d:f8:9b:bc:19:64:d9:2e:f2:f3:f0:d2:10:d5:fd:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6F:88:D1:3B:19:D3:F8:4F:26:15:26:D2:9B:19:D8:44:BC:54:0B
            X509v3 Authority Key Identifier:
                keyid:AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a353030303a3a2f33362d3336203d3e20323633383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26a4:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0a:27:b5:dd:68:1d:b5:16:46:b6:5c:f7:3a:72:e9:7a:d2:c5:
         01:41:6f:f4:27:50:cb:7a:9f:b6:4c:d6:0a:02:2e:ba:0f:c9:
         34:d8:f1:08:9d:89:5b:e7:b7:91:36:c2:c2:d6:b7:e7:6b:b8:
         3b:99:49:38:d8:08:ae:68:17:bd:25:14:73:04:e5:4e:65:72:
         4f:64:33:49:68:39:44:d1:56:73:df:00:23:00:3f:ef:af:71:
         20:5e:49:f2:e9:04:0c:ae:00:fe:c0:3e:8f:97:7e:e9:b8:a6:
         6e:64:8b:e4:0c:5c:ba:95:1b:d9:d6:71:73:db:92:50:5e:d7:
         53:7a:db:ec:50:0e:4b:81:51:48:78:42:f6:6b:bc:29:b5:84:
         2d:26:f8:ff:8e:86:a7:3a:7c:5f:bc:f9:67:70:fa:cc:b3:61:
         20:5d:85:9f:8f:0f:80:a0:eb:f7:49:d4:66:a0:8f:33:38:dd:
         91:c1:dc:95:61:97:b8:3f:74:31:67:6d:f5:96:f0:ce:c0:18:
         d7:80:6c:6f:4d:87:b0:ba:2b:ac:1e:46:e9:29:f5:05:56:81:
         5c:ad:5e:45:ed:65:53:8d:09:ce:0e:cb:07:64:46:5b:63:04:
         60:31:66:e0:db:e3:72:49:c5:b4:68:6c:3c:be:78:15:cb:f4:
         0b:81:5e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:47:34 2026 by rpki-client