Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a623030303a3a2f33362d3336203d3e20323633383436.roa
File:                     323830343a323661343a623030303a3a2f33362d3336203d3e20323633383436.roa (raw, json)
Hash identifier:          wQTDx8/2IcwJMJkItnfIVshVKxxFcOGj8rcmqeXsJ28=
Subject key identifier:   46:C7:85:41:AE:77:8C:EB:23:00:1B:2C:3D:5E:63:46:FA:5E:B0:40
Certificate issuer:       /CN=AF58EB7303419B1037B666A14A64BDE04E515532
Certificate serial:       049EE782CEBF800202940EEB275514583826E3F3
Authority key identifier: AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a623030303a3a2f33362d3336203d3e20323633383436.roa
Signing time:             Tue 14 Jul 2026 13:52:35 +0000
ROA not before:           Tue 14 Jul 2026 13:47:35 +0000
ROA not after:            Tue 13 Jul 2027 13:52:35 +0000
asID:                     263846
IP address blocks:        2804:26a4:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl
                          rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9e:e7:82:ce:bf:80:02:02:94:0e:eb:27:55:14:58:38:26:e3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF58EB7303419B1037B666A14A64BDE04E515532
        Validity
            Not Before: Jul 14 13:47:35 2026 GMT
            Not After : Jul 13 13:52:35 2027 GMT
        Subject: CN=46C78541AE778CEB23001B2C3D5E6346FA5EB040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2a:02:63:00:23:41:d2:09:6e:a3:c5:15:f7:
                    d6:22:7f:53:a1:e1:d1:19:32:38:0e:27:c4:21:c3:
                    78:63:b6:78:f4:bb:ca:60:40:a6:2a:eb:c6:6c:bc:
                    9a:fa:dc:cc:03:e1:f9:e7:66:76:64:a6:25:78:99:
                    5f:29:c2:4b:b7:71:9c:1d:c6:b6:ef:d6:51:cb:2c:
                    5e:93:45:94:71:e0:11:1e:a4:e8:96:1f:5d:ea:46:
                    2c:31:2c:7d:c9:c8:66:b7:9b:dd:ee:34:6c:67:d6:
                    56:01:f1:4f:b4:0b:38:2d:69:bb:78:90:30:c0:2d:
                    83:be:45:da:53:56:9f:4a:0e:54:72:36:1a:93:3a:
                    c9:29:4a:81:65:60:37:ff:2c:de:c1:d0:f9:85:6e:
                    e1:e9:18:21:c5:24:c7:d7:75:66:35:3a:05:38:e4:
                    76:eb:88:70:2e:82:e2:c8:4d:f8:c0:2d:57:bf:02:
                    b6:ab:e7:7c:5d:b1:8d:9b:16:c4:18:fb:46:89:17:
                    16:09:40:17:df:c6:3b:71:62:f7:83:98:71:9c:d9:
                    78:1c:75:e4:ca:a0:97:d4:4a:c9:30:4d:4d:92:95:
                    8c:de:61:90:e2:f4:a0:32:b8:51:dc:40:1f:4c:e0:
                    e8:59:6e:22:33:ce:6f:78:ff:2a:4f:da:95:f8:3a:
                    9e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C7:85:41:AE:77:8C:EB:23:00:1B:2C:3D:5E:63:46:FA:5E:B0:40
            X509v3 Authority Key Identifier:
                keyid:AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a623030303a3a2f33362d3336203d3e20323633383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26a4:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:df:e5:eb:bc:58:80:1f:b0:91:2e:96:cb:d1:d2:3f:84:e6:
         75:b8:cd:1e:ad:18:8f:66:33:14:2d:6a:8c:f5:55:3e:48:ed:
         ff:b3:0c:6b:46:24:59:ce:3f:76:f3:df:dc:94:f1:7f:4c:93:
         c6:4a:6c:fc:35:4d:a9:ea:c5:1f:8e:b3:30:d8:14:4b:02:3e:
         71:a8:4e:8d:e1:4d:41:2d:c3:4d:53:60:68:04:c1:78:5f:93:
         6f:20:8f:a1:a0:23:48:12:b0:ea:11:54:d0:52:a3:cb:37:d8:
         53:47:f5:22:57:05:8f:cd:6f:41:b2:4f:59:87:b0:4c:e7:9f:
         c1:3a:62:a3:14:e1:f0:30:67:f9:7b:9d:52:8f:ff:88:c1:f6:
         b6:0e:5e:2a:4f:9c:0c:34:ca:19:9f:03:d8:5c:80:ec:04:0d:
         7f:5f:ba:ca:9d:98:cf:64:2f:ff:3e:c3:c0:19:e4:10:25:00:
         67:62:5b:e1:d3:35:53:89:4a:1c:2a:4c:7b:f0:0c:d0:c1:58:
         20:0f:a3:20:b1:1d:b3:17:93:97:2e:f9:8d:ce:6b:3b:17:bb:
         bd:aa:be:51:03:5a:06:ef:78:c5:59:87:37:a3:71:ea:ed:88:
         ed:2a:ac:91:c6:81:55:ce:18:84:b7:47:f9:2f:69:8b:0f:b9:
         fb:22:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:44:54 2026 by rpki-client