Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a383030303a3a2f33362d3336203d3e20323633383436.roa
File:                     323830343a323661343a383030303a3a2f33362d3336203d3e20323633383436.roa (raw, json)
Hash identifier:          0qii5PJJzztSfuGSQ/JXQjRilu4lXy+BQDdOZC7c2/4=
Subject key identifier:   B0:1C:70:23:13:50:4D:EB:29:4C:1F:54:F0:B3:9F:24:CD:EA:5D:DD
Certificate issuer:       /CN=AF58EB7303419B1037B666A14A64BDE04E515532
Certificate serial:       0492E4A93A82EC529F14DEC3A6BD7D8C84F704CA
Authority key identifier: AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a383030303a3a2f33362d3336203d3e20323633383436.roa
Signing time:             Tue 14 Jul 2026 13:52:35 +0000
ROA not before:           Tue 14 Jul 2026 13:47:35 +0000
ROA not after:            Tue 13 Jul 2027 13:52:35 +0000
asID:                     263846
IP address blocks:        2804:26a4:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl
                          rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:92:e4:a9:3a:82:ec:52:9f:14:de:c3:a6:bd:7d:8c:84:f7:04:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF58EB7303419B1037B666A14A64BDE04E515532
        Validity
            Not Before: Jul 14 13:47:35 2026 GMT
            Not After : Jul 13 13:52:35 2027 GMT
        Subject: CN=B01C702313504DEB294C1F54F0B39F24CDEA5DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b5:c2:2f:53:12:02:15:41:00:d6:2a:02:d5:
                    3b:f9:ba:89:dc:3d:6a:8d:15:bc:35:e0:2a:d4:10:
                    6a:2f:55:47:a0:96:27:44:99:b7:f4:69:43:e7:8e:
                    9b:b8:5f:6f:a3:7e:29:59:18:13:21:41:e3:40:f2:
                    75:2d:b1:d6:8f:0c:d2:f1:95:fa:eb:5e:1f:ec:39:
                    68:32:c8:ad:29:1f:14:ac:dc:cf:c7:ca:f5:a1:fc:
                    52:da:c5:5d:04:ee:8f:4f:c9:00:c0:ed:86:b9:7e:
                    fd:76:e4:73:92:94:90:88:f9:59:7a:29:ab:24:62:
                    86:72:d2:34:37:d3:3a:81:84:66:98:ab:1f:b2:1f:
                    73:fd:29:38:a5:74:fc:ce:44:4d:4e:be:45:c0:f2:
                    8e:09:6a:a8:4a:af:49:3a:18:f1:46:b0:7e:5a:80:
                    19:25:4e:a8:f3:d0:6c:9e:9d:d9:53:e2:61:b7:29:
                    a7:8a:50:83:b6:b5:10:8d:1c:92:12:64:4d:23:07:
                    1d:f4:8c:9f:5e:91:42:55:ca:1b:1d:3d:4f:cf:57:
                    13:36:30:55:4b:6b:9c:c1:73:1a:cd:67:9e:27:30:
                    11:88:44:5a:a8:3b:13:b0:77:4e:5f:d7:a1:92:8b:
                    50:0e:1f:63:05:ea:08:c4:8d:3d:b1:38:26:3a:f1:
                    98:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1C:70:23:13:50:4D:EB:29:4C:1F:54:F0:B3:9F:24:CD:EA:5D:DD
            X509v3 Authority Key Identifier:
                keyid:AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a383030303a3a2f33362d3336203d3e20323633383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26a4:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         84:55:58:51:3b:95:4a:a2:f6:f7:c5:4b:b8:ef:47:f1:aa:f9:
         c4:53:0c:5a:7b:ac:49:9e:53:43:1f:69:b1:78:84:55:62:6d:
         a2:da:65:ac:03:6c:9b:75:70:14:78:c5:e9:fd:e7:c3:ae:5b:
         4c:d1:f2:44:8a:91:9e:d2:04:d3:06:3e:2a:09:17:17:92:16:
         00:a7:32:43:7c:07:b5:fe:5a:ec:df:6b:0d:67:f5:ca:dd:96:
         13:fe:43:c5:42:30:a8:02:34:76:1a:9f:ec:48:45:b5:04:e2:
         7e:01:75:64:60:8b:b6:43:b3:41:cc:ab:a1:7b:af:26:37:32:
         44:b8:a6:a5:e3:e1:8a:aa:95:1d:c5:68:71:cb:b0:31:60:a7:
         bb:7c:e9:5f:e5:18:fb:85:be:b0:62:26:61:12:00:5e:ce:ff:
         78:2c:5a:7b:3f:54:c5:5b:c4:df:31:81:44:d7:d8:d1:c5:62:
         bc:d1:7e:cb:c4:77:39:51:83:fe:65:a1:71:db:bc:45:fe:cb:
         2b:a0:82:10:f0:d8:82:52:2b:b7:8f:0a:90:45:24:0c:2a:8c:
         8a:22:e2:b6:f6:ab:e0:30:17:bd:63:02:9c:cb:75:47:af:aa:
         94:16:84:7b:f4:1c:3a:5c:4b:19:f2:ea:bb:b5:40:16:e8:f7:
         97:34:e9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:08 2026 by rpki-client