Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a3a2f33322d3332203d3e20323633383436.roa
File:                     323830343a323661343a3a2f33322d3332203d3e20323633383436.roa (raw, json)
Hash identifier:          yIOt75TfYxYnZL5kL+wG46gXXn7oWnjZuD6il02VNbs=
Subject key identifier:   87:ED:F0:31:26:F9:8C:73:D7:4D:D5:D5:34:ED:64:84:97:D3:A0:48
Certificate issuer:       /CN=AF58EB7303419B1037B666A14A64BDE04E515532
Certificate serial:       1F0CA2E3F87DD6FE8552972816C24C24657BDA69
Authority key identifier: AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a3a2f33322d3332203d3e20323633383436.roa
Signing time:             Tue 14 Jul 2026 13:52:35 +0000
ROA not before:           Tue 14 Jul 2026 13:47:35 +0000
ROA not after:            Tue 13 Jul 2027 13:52:35 +0000
asID:                     263846
IP address blocks:        2804:26a4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl
                          rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0c:a2:e3:f8:7d:d6:fe:85:52:97:28:16:c2:4c:24:65:7b:da:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF58EB7303419B1037B666A14A64BDE04E515532
        Validity
            Not Before: Jul 14 13:47:35 2026 GMT
            Not After : Jul 13 13:52:35 2027 GMT
        Subject: CN=87EDF03126F98C73D74DD5D534ED648497D3A048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:9e:29:b8:e9:3c:88:3c:55:5d:c1:d4:4a:
                    9a:e9:38:64:2b:cb:d7:35:66:0f:a6:e8:a4:91:f0:
                    d8:f7:ea:49:a4:8a:3c:bd:f2:5d:d9:3d:88:00:e0:
                    58:9b:92:e5:3b:65:20:69:63:5a:9a:43:3e:02:2d:
                    60:43:1d:17:30:3b:cc:f1:db:80:e3:93:55:bb:85:
                    5f:9b:00:8c:92:35:fb:ac:29:7c:ab:ca:f5:48:84:
                    c7:1d:71:1b:5d:e9:f6:fd:d7:60:11:67:78:93:a9:
                    8b:76:94:26:f0:a6:98:3b:a3:f7:a2:a3:0e:ea:a3:
                    07:87:fd:39:bd:7c:96:b5:02:65:3b:e7:72:e7:01:
                    09:88:61:bd:c0:50:54:02:81:36:91:ff:e0:4c:af:
                    4a:fd:10:93:d7:d3:77:10:ca:58:33:59:4e:e0:57:
                    d3:1e:d6:a4:9c:9c:2f:b1:27:d5:ac:fc:34:e0:56:
                    16:1a:01:a8:da:3d:19:6b:7c:5e:73:b3:79:ab:bc:
                    88:f7:d0:0c:f4:62:39:99:dd:f3:cf:bb:75:fe:4b:
                    bc:4a:00:0c:5c:ca:c8:e2:3d:38:ca:af:4d:5a:a9:
                    c4:15:4f:ad:ec:a8:1f:f5:6e:e1:a1:4b:43:71:26:
                    1d:13:15:3f:dc:76:87:d6:ca:8d:e2:89:f3:2a:4d:
                    76:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:ED:F0:31:26:F9:8C:73:D7:4D:D5:D5:34:ED:64:84:97:D3:A0:48
            X509v3 Authority Key Identifier:
                keyid:AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a3a2f33322d3332203d3e20323633383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:f2:c1:7d:cf:51:31:68:cf:3a:c4:48:90:09:15:59:82:7c:
         d2:4c:70:ea:03:91:26:2b:6a:b7:a9:ef:7f:a7:45:0d:ef:c2:
         e1:e1:e7:1a:ee:cc:cf:2c:31:6f:18:39:a2:0e:8b:44:91:db:
         88:ad:16:81:71:99:b4:97:e8:da:32:f6:ff:df:31:37:ab:59:
         0e:d5:ec:2e:32:ba:61:3f:19:17:18:8a:2c:25:31:86:fb:e8:
         26:24:2a:97:94:a1:50:b6:04:9f:c7:27:b8:04:f4:f8:aa:63:
         3c:22:69:1f:66:d4:ff:7f:e9:01:f7:db:99:3e:49:f5:75:8c:
         00:a6:72:a1:33:a6:71:ab:60:8c:45:cd:9f:4c:83:7d:5d:41:
         f6:2c:91:14:a6:da:5d:5e:01:1f:17:4a:3b:76:d0:82:ea:50:
         80:2c:02:af:f4:c8:a7:96:f3:d9:35:b9:2c:30:4e:ba:0a:43:
         ed:51:8a:93:22:db:17:56:4b:b0:ce:6e:c0:d4:f8:68:80:5c:
         98:d3:de:90:91:ad:d5:0d:d7:b8:aa:01:dd:b8:59:dd:82:eb:
         18:23:f6:c5:ca:97:59:db:bc:2b:6f:1f:cc:5f:f7:53:59:1c:
         0d:6c:40:80:1e:59:8e:d4:5e:f1:a9:f5:7e:55:78:a6:65:37:
         8a:8a:58:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:44:49 2026 by rpki-client