Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a653030303a3a2f33362d3336203d3e20323633383436.roa
File:                     323830343a323661343a653030303a3a2f33362d3336203d3e20323633383436.roa (raw, json)
Hash identifier:          rGfAZku7+fAfQ2aJyFIdLWdXyer0V15S8XmRvsLm3sg=
Subject key identifier:   36:34:57:DA:C1:DA:51:37:50:88:44:01:EF:DE:95:72:30:0F:23:DB
Certificate issuer:       /CN=AF58EB7303419B1037B666A14A64BDE04E515532
Certificate serial:       6BE046F6596ED95D64B1EC2F826E7D19487B7AAF
Authority key identifier: AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a653030303a3a2f33362d3336203d3e20323633383436.roa
Signing time:             Tue 14 Jul 2026 13:52:36 +0000
ROA not before:           Tue 14 Jul 2026 13:47:36 +0000
ROA not after:            Tue 13 Jul 2027 13:52:36 +0000
asID:                     263846
IP address blocks:        2804:26a4:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl
                          rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e0:46:f6:59:6e:d9:5d:64:b1:ec:2f:82:6e:7d:19:48:7b:7a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF58EB7303419B1037B666A14A64BDE04E515532
        Validity
            Not Before: Jul 14 13:47:36 2026 GMT
            Not After : Jul 13 13:52:36 2027 GMT
        Subject: CN=363457DAC1DA513750884401EFDE9572300F23DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:87:c4:e1:9a:cb:33:87:35:74:76:1a:01:
                    85:f1:46:8a:cb:12:ae:22:25:b5:aa:fa:de:15:c2:
                    4c:10:f0:b5:03:d9:f4:8c:d4:a2:b2:5f:84:c8:97:
                    6f:48:84:7b:8c:46:d3:a5:04:e5:24:10:0b:1a:c8:
                    46:97:6f:4f:2d:7a:db:f0:30:76:1d:33:12:66:2b:
                    ef:21:f4:04:c2:53:54:ab:aa:de:9e:1a:13:24:f2:
                    a2:2a:a9:96:c3:11:02:fd:4b:d9:db:cf:e2:7f:ea:
                    b4:16:71:d7:9c:64:b4:6b:28:85:84:95:cd:dd:0c:
                    f1:9f:14:ab:e7:92:0c:c1:30:ca:6e:bd:4e:25:84:
                    d4:67:28:a2:91:9b:a8:44:b4:33:6a:34:c8:ae:66:
                    02:22:b3:a4:db:61:aa:cc:f6:47:7d:44:89:b1:f1:
                    4e:a4:91:91:3b:be:52:49:4c:cb:e9:97:b1:8d:36:
                    0f:53:9d:aa:d6:de:dd:73:ec:5d:f5:8b:bc:5e:2b:
                    6a:14:e5:5d:81:b8:49:a2:77:8d:9d:e6:58:cb:45:
                    0b:e3:a8:b4:60:e3:8c:34:82:0b:57:d5:bb:ea:97:
                    82:12:dd:41:f5:f0:78:b3:a0:ef:9d:d2:73:b3:90:
                    db:71:84:03:a4:2f:73:81:6e:15:4e:ca:3d:a1:37:
                    e4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:34:57:DA:C1:DA:51:37:50:88:44:01:EF:DE:95:72:30:0F:23:DB
            X509v3 Authority Key Identifier:
                keyid:AF:58:EB:73:03:41:9B:10:37:B6:66:A1:4A:64:BD:E0:4E:51:55:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/AF58EB7303419B1037B666A14A64BDE04E515532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF58EB7303419B1037B666A14A64BDE04E515532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoquhETTwWMkSnnoZkffxAhMEnkLKHXmcXB8tD8hZhqL/0/323830343a323661343a653030303a3a2f33362d3336203d3e20323633383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26a4:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         78:77:20:51:a7:e8:0c:6a:80:a9:6a:36:63:4b:26:2b:9d:dd:
         d4:18:24:34:24:8b:62:67:1e:96:6f:e0:2b:76:7e:d4:06:79:
         bf:b0:13:56:25:88:ad:5c:17:86:5f:e6:f9:54:d3:9d:89:cb:
         b0:a4:c1:a9:6e:4b:7f:8f:66:b0:c6:23:54:e5:75:a3:fc:9c:
         8b:7c:f2:59:18:ac:43:60:09:e4:0b:98:93:ce:45:36:41:4a:
         b5:26:9f:21:52:2b:d3:63:26:0f:9f:78:6b:55:c7:4b:ac:04:
         52:86:ae:95:d3:56:ea:2a:69:78:f2:2c:1a:88:97:64:e0:37:
         1f:62:e0:15:49:8b:b4:c1:e2:02:2a:a7:35:22:0f:f1:f0:ed:
         bb:c2:00:18:ed:29:e7:5d:d7:74:d6:40:7c:c6:55:66:d3:10:
         4b:de:9e:c1:b0:8d:8d:6f:a4:ec:e1:ee:78:8b:2d:88:77:76:
         e2:9f:22:37:a2:5e:c6:27:e0:04:71:79:3f:60:79:c1:bb:ab:
         2f:a1:74:15:1c:bc:54:0c:ca:94:c9:e3:a9:a0:24:a6:4a:ea:
         66:b5:15:e1:94:3f:d7:d6:d6:df:be:df:09:11:8a:3c:03:07:
         4d:5a:9f:a0:f2:eb:a7:ef:e4:da:21:a0:bc:c9:da:44:a3:22:
         9f:2e:d8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:22 2026 by rpki-client