Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663230303a3a2f34302d3434203d3e20323734363732.roa
File:                     323830343a393165303a663230303a3a2f34302d3434203d3e20323734363732.roa (raw, json)
Hash identifier:          T49PRNw86iDXbsDIwoDXJRmZ5h5YGfDtIPbtqiyEQDk=
Subject key identifier:   6F:C1:D6:4E:F9:BA:3F:6E:50:81:24:84:72:E4:D7:B7:64:C9:A7:A7
Certificate issuer:       /CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
Certificate serial:       391A51B0D9A0CB897ADE540BC6981916BEEB03A5
Authority key identifier: 26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663230303a3a2f34302d3434203d3e20323734363732.roa
Signing time:             Tue 14 Jul 2026 01:40:46 +0000
ROA not before:           Tue 14 Jul 2026 01:35:46 +0000
ROA not after:            Tue 13 Jul 2027 01:40:46 +0000
asID:                     274672
IP address blocks:        2804:91e0:f200::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1a:51:b0:d9:a0:cb:89:7a:de:54:0b:c6:98:19:16:be:eb:03:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
        Validity
            Not Before: Jul 14 01:35:46 2026 GMT
            Not After : Jul 13 01:40:46 2027 GMT
        Subject: CN=6FC1D64EF9BA3F6E5081248472E4D7B764C9A7A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ee:06:93:3c:e2:8d:b3:f2:c9:27:2a:21:cb:
                    8d:aa:21:e1:2a:66:ed:88:74:d9:2e:59:3f:1c:17:
                    e8:df:ec:83:78:53:13:1b:68:07:80:a6:b8:4d:ed:
                    d0:db:8c:94:58:75:fd:59:7b:cd:97:91:2d:16:eb:
                    4a:d5:52:20:8c:ec:ff:67:03:6b:84:df:3e:7a:02:
                    98:fd:c7:12:65:ac:01:83:50:fc:5f:c9:d9:30:be:
                    90:c0:17:a2:f9:73:13:39:15:a2:3f:f3:d0:70:a0:
                    cf:44:6a:5f:cc:b2:8c:49:d7:6a:22:e3:57:60:ad:
                    3f:71:eb:2b:17:a8:c5:7d:f4:36:63:2b:26:5d:9f:
                    2f:16:cd:c3:3a:b3:65:0e:84:31:f3:78:be:e5:a7:
                    fd:60:cc:10:15:5a:cf:8d:56:06:1d:4b:db:76:f4:
                    65:0b:12:37:48:54:4b:ba:81:6c:21:ea:de:4b:b9:
                    b5:d8:17:83:49:29:b1:c3:96:5a:4c:01:ec:b9:83:
                    de:48:cf:0e:10:41:e0:92:fd:8e:ed:a4:d5:a3:6c:
                    dc:ec:c6:72:d4:88:78:85:0d:c5:73:27:ca:2d:a5:
                    c8:e9:5f:c7:26:f5:6d:4a:d0:26:56:cb:41:02:c8:
                    32:18:89:87:9f:ef:0d:a2:8b:81:53:be:4a:f8:80:
                    6a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C1:D6:4E:F9:BA:3F:6E:50:81:24:84:72:E4:D7:B7:64:C9:A7:A7
            X509v3 Authority Key Identifier:
                keyid:26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663230303a3a2f34302d3434203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         bc:8f:15:ee:27:a8:26:87:26:12:b9:04:22:49:b3:8b:9f:7c:
         e6:6f:b4:7b:76:e0:d3:c8:2b:95:19:33:38:ff:ce:bb:bb:63:
         00:76:83:c8:d5:4e:bc:17:f9:bb:60:ba:0d:45:91:90:07:81:
         19:d2:8a:70:cc:40:f8:02:ed:91:a1:c6:3f:5b:a1:fd:74:e8:
         e2:3f:e3:68:d3:e8:81:66:54:4d:83:43:1f:a9:f9:4e:bc:30:
         31:85:9b:dc:fb:58:1f:a9:e0:4f:17:ed:d2:2f:1e:b3:e3:d3:
         76:93:db:8f:23:8c:b6:37:ec:17:8d:51:25:6b:65:5c:09:f4:
         c0:c0:4e:6c:15:1c:fa:91:d1:c3:ae:7a:f9:e0:fc:93:5d:c6:
         54:b0:f5:34:6a:b8:9e:5e:f7:d4:dc:24:64:0c:6b:04:6a:b8:
         8e:da:f6:75:ba:59:1c:b8:a3:3b:b6:2f:6c:15:23:e7:0a:3b:
         c8:5d:45:f3:7f:ce:0e:5e:c1:82:20:5d:d9:84:c8:83:a4:61:
         76:76:59:cd:b2:21:84:04:6b:a8:0b:94:fe:89:49:67:f2:01:
         09:40:d6:7c:6e:f4:2f:0d:d8:97:c1:69:8c:59:0e:fc:24:93:
         5f:8d:db:40:8a:b5:64:04:2f:8f:4f:5b:fe:4c:e9:37:62:12:
         44:42:37:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:44:51 2026 by rpki-client