Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a633030303a3a2f33362d3336203d3e20323633383436.roa
File:                     323830343a323661343a633030303a3a2f33362d3336203d3e20323633383436.roa (raw, json)
Hash identifier:          TiKTueZc0VrJWGYldVDkVm/Mn9LppZ0V1MR+6Fb60XU=
Subject key identifier:   FE:EE:67:49:14:96:94:03:2C:76:9F:1E:D4:20:4C:BC:7E:65:3D:12
Certificate issuer:       /CN=AF58EB7303419B1037B666A14A64BDE04E515532
Certificate serial:       41A3C84727F90E458F3F5A70A796A178D054F0F7
Authority key identifier: AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a633030303a3a2f33362d3336203d3e20323633383436.roa
Signing time:             Tue 14 Jul 2026 13:52:35 +0000
ROA not before:           Tue 14 Jul 2026 13:47:35 +0000
ROA not after:            Tue 13 Jul 2027 13:52:35 +0000
asID:                     263846
IP address blocks:        2804:26a4:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl
                          rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a3:c8:47:27:f9:0e:45:8f:3f:5a:70:a7:96:a1:78:d0:54:f0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF58EB7303419B1037B666A14A64BDE04E515532
        Validity
            Not Before: Jul 14 13:47:35 2026 GMT
            Not After : Jul 13 13:52:35 2027 GMT
        Subject: CN=FEEE6749149694032C769F1ED4204CBC7E653D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:1f:fa:b5:aa:55:2f:af:47:68:5a:a2:cb:
                    9e:4b:7c:84:5f:7a:b6:f5:20:fa:17:0f:32:01:2a:
                    a0:36:80:04:2c:a4:8c:b8:35:90:59:dc:df:53:5b:
                    f1:a0:a8:cf:ff:f1:80:8d:9c:39:51:2e:c1:cd:18:
                    23:3d:fd:4f:4a:6c:3e:ce:13:0c:c5:d6:d8:22:82:
                    b0:40:b3:13:75:29:39:a7:fc:72:8b:14:aa:30:a7:
                    19:80:30:18:f1:ac:53:1d:3a:3e:26:c9:c6:d5:85:
                    be:67:62:84:09:eb:d1:80:26:7d:63:e5:1f:47:44:
                    4d:be:87:2b:eb:df:62:3a:dc:96:15:a9:c4:84:79:
                    19:f0:30:e2:cb:49:b7:c0:4c:5b:a5:e1:aa:44:7e:
                    a5:4e:d0:cc:74:c7:24:22:e6:de:03:21:06:1a:26:
                    d2:d3:c5:cc:38:62:d4:eb:bf:cf:68:31:aa:fd:db:
                    cc:05:d5:b9:6d:e4:8f:ea:2e:d6:f5:d3:8e:ea:21:
                    e2:40:17:2b:6d:6c:90:bb:e3:cb:08:64:9e:0b:2e:
                    18:da:3b:20:65:8e:97:1e:e0:2e:d2:72:8f:58:e3:
                    95:35:d4:67:00:b5:4a:55:b4:7a:4d:9c:c2:3a:6f:
                    73:c2:ab:01:7e:31:74:db:93:3d:c3:25:67:44:32:
                    e0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EE:67:49:14:96:94:03:2C:76:9F:1E:D4:20:4C:BC:7E:65:3D:12
            X509v3 Authority Key Identifier:
                keyid:AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a633030303a3a2f33362d3336203d3e20323633383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26a4:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         52:53:94:2e:b6:db:74:2b:dd:25:79:32:1c:fd:98:dd:f8:55:
         8c:5c:bb:a7:af:02:ab:92:5b:f2:2c:c3:f7:f8:4f:ec:3f:0e:
         a6:6a:44:7f:f6:4f:4f:9b:ad:18:d2:5c:5b:eb:d2:19:2c:8f:
         a6:92:78:d9:a8:e3:a4:be:6e:65:41:5f:7f:d8:a5:19:56:7f:
         09:e9:39:df:36:41:51:de:52:c3:ae:9f:f8:90:b2:78:f3:f8:
         3f:55:78:32:32:52:b2:eb:dc:4b:ca:02:02:f3:30:10:8d:b7:
         e4:04:37:cd:30:1c:19:71:6e:9e:7e:24:5c:ad:62:5c:b7:1b:
         de:f9:57:22:45:fa:b7:97:da:64:48:25:1b:44:99:18:dc:79:
         d1:7f:f7:4c:5e:cd:39:3b:55:99:6d:82:ee:e1:68:69:cd:f6:
         ed:84:db:b5:96:5c:85:39:e6:5d:6e:2f:8f:f4:03:0e:ab:4d:
         50:c7:a3:b9:68:22:32:c1:67:e4:18:d1:25:32:43:57:c6:40:
         7f:d2:6f:f1:f6:67:46:15:6b:73:36:1f:4d:7b:f9:93:9f:76:
         b2:65:5f:91:6f:7e:a2:3c:e6:2e:10:61:72:ff:4f:5f:b5:a4:
         a9:b1:45:6a:1a:54:9a:fa:80:59:e2:d0:2f:c4:2d:2d:fa:4d:
         f1:8d:64:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:13 2026 by rpki-client