Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663730303a3a2f34302d3430203d3e20323734363732.roa
File:                     323830343a393165303a663730303a3a2f34302d3430203d3e20323734363732.roa (raw, json)
Hash identifier:          Dvuku6s7ZiJpXfYbpHQM+Jye2peB3kjsPaIIWu5hzkc=
Subject key identifier:   74:7C:2F:0C:15:51:28:72:E6:74:2B:8C:1A:85:D3:D4:6F:A9:21:FB
Certificate issuer:       /CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
Certificate serial:       6D2FB33E7F166D8C24A7DE67DBEE2878D28577DD
Authority key identifier: 26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663730303a3a2f34302d3430203d3e20323734363732.roa
Signing time:             Tue 14 Jul 2026 01:40:49 +0000
ROA not before:           Tue 14 Jul 2026 01:35:49 +0000
ROA not after:            Tue 13 Jul 2027 01:40:49 +0000
asID:                     274672
IP address blocks:        2804:91e0:f700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2f:b3:3e:7f:16:6d:8c:24:a7:de:67:db:ee:28:78:d2:85:77:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
        Validity
            Not Before: Jul 14 01:35:49 2026 GMT
            Not After : Jul 13 01:40:49 2027 GMT
        Subject: CN=747C2F0C15512872E6742B8C1A85D3D46FA921FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c7:07:86:1b:7c:cd:f6:8b:ad:e1:4d:1d:72:
                    f0:e7:fc:e0:9a:c8:f0:78:bf:46:1b:bc:9d:31:b5:
                    28:52:6b:b9:4e:f4:6a:fd:05:07:f5:67:12:39:a3:
                    94:d6:57:1d:bd:25:b3:0b:36:a0:49:38:25:b8:21:
                    8f:a1:3d:68:b3:82:55:60:c0:68:0e:0d:e5:27:c9:
                    f4:86:04:05:2d:20:61:9e:8d:02:f0:7d:25:ad:4a:
                    8b:6a:ae:7b:8c:a7:84:39:78:9b:0a:0a:81:a0:25:
                    7c:87:2a:1c:0f:45:21:4c:d5:53:cc:2c:64:76:e8:
                    29:fd:0f:33:eb:a9:5a:c6:27:de:e0:fd:44:8a:0c:
                    98:cb:4f:70:06:aa:ca:a7:40:cd:5c:9f:b9:ef:e2:
                    9a:73:ce:30:a6:60:dd:01:fe:f6:24:6d:d2:fd:3d:
                    f6:6c:b7:82:04:80:f7:59:87:41:7f:24:55:68:d3:
                    87:3f:a6:b4:62:df:ce:7d:19:fd:0e:1f:53:27:82:
                    0a:c1:56:d5:4d:c0:aa:ce:56:16:83:0e:6f:35:03:
                    b1:da:db:4d:b8:84:a2:95:b6:4c:f9:06:3a:3a:3b:
                    b6:b4:0c:cd:e6:be:a6:de:02:0a:3e:61:7a:15:04:
                    a6:d1:99:d4:8b:96:79:79:b9:d8:0f:e9:7e:82:58:
                    25:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7C:2F:0C:15:51:28:72:E6:74:2B:8C:1A:85:D3:D4:6F:A9:21:FB
            X509v3 Authority Key Identifier:
                keyid:26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663730303a3a2f34302d3430203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:f700::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:21:75:82:a3:6a:4a:f1:e8:b2:91:bd:51:46:72:65:c1:99:
         54:8f:d2:80:fb:59:bc:a7:4a:42:42:6a:0d:e7:9b:bf:3f:1c:
         b6:3c:d3:59:e8:28:e7:e8:4e:4f:ad:a7:27:85:d6:b9:72:b8:
         39:48:34:0f:08:ca:3c:60:3f:e8:ee:d4:f8:4a:e8:26:d4:24:
         ee:0e:0e:7f:8e:d0:92:46:bd:e1:16:18:70:02:bc:38:51:6b:
         c4:66:41:5b:ed:d6:d9:dc:9e:34:4b:18:ca:a3:ad:7f:88:5b:
         b4:a9:b1:90:8f:b7:dd:5b:ed:5e:97:91:93:e9:b3:d2:d6:13:
         3b:71:06:12:da:98:45:f3:84:04:34:40:e8:a6:ee:5e:80:65:
         bd:33:f4:97:2d:d9:bc:3a:ac:85:45:ba:d9:bd:85:40:a0:87:
         5f:79:db:39:74:76:5d:88:47:a4:fe:95:3d:0b:a3:9b:55:83:
         65:79:ff:d4:79:8d:cd:da:52:2e:87:71:d7:29:68:d2:58:5c:
         fb:6e:74:e6:e1:00:85:1c:3c:27:cb:fc:24:d8:d5:6f:ec:19:
         11:b2:f0:c1:98:d4:0c:da:07:c8:3b:a9:5e:6c:ed:3d:b1:81:
         14:e9:99:74:b4:9d:7b:42:2a:e3:98:02:dd:a1:f2:39:99:08:
         26:77:26:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:36:46 2026 by rpki-client