Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666130303a3a2f34302d3430203d3e20323734363732.roa
File:                     323830343a393165303a666130303a3a2f34302d3430203d3e20323734363732.roa (raw, json)
Hash identifier:          bgA6CxicAFRsFysD2pq3KXTQYFm5+0Mzrx3d6AMs61s=
Subject key identifier:   F3:C3:C0:60:87:ED:73:CB:CB:E3:FD:94:E8:52:BD:C3:C2:A1:7A:9D
Certificate issuer:       /CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
Certificate serial:       69D9CC2D3EE90772CAE96FFDF3DEB39AF083195D
Authority key identifier: 26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666130303a3a2f34302d3430203d3e20323734363732.roa
Signing time:             Tue 14 Jul 2026 01:40:49 +0000
ROA not before:           Tue 14 Jul 2026 01:35:49 +0000
ROA not after:            Tue 13 Jul 2027 01:40:49 +0000
asID:                     274672
IP address blocks:        2804:91e0:fa00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d9:cc:2d:3e:e9:07:72:ca:e9:6f:fd:f3:de:b3:9a:f0:83:19:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
        Validity
            Not Before: Jul 14 01:35:49 2026 GMT
            Not After : Jul 13 01:40:49 2027 GMT
        Subject: CN=F3C3C06087ED73CBCBE3FD94E852BDC3C2A17A9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:ed:4a:9e:b1:17:58:b1:7f:d8:c9:37:a0:
                    f3:fb:d5:e2:49:ce:8c:23:17:c6:2e:82:4b:2e:df:
                    c4:f0:6f:34:e3:79:04:3f:8a:79:9e:c4:08:c2:a5:
                    21:2a:d1:d4:e9:da:00:c7:5f:86:b8:81:b4:3d:e0:
                    28:0f:10:3b:66:90:41:2b:eb:b2:05:c0:81:5e:09:
                    22:8b:96:5f:c8:26:c2:20:a5:70:d2:69:06:5d:a0:
                    60:15:90:2f:96:01:a0:b1:6d:fd:b4:0d:92:3d:c4:
                    fe:7e:49:47:eb:9f:f3:60:60:c1:82:4e:0d:14:b0:
                    e9:35:7b:7b:da:fa:40:9b:e5:74:49:60:29:21:2c:
                    6e:67:c6:3a:52:ad:4b:a3:8c:ca:9a:5c:ee:aa:c0:
                    6e:9f:3e:ea:c5:ad:18:67:25:23:09:f2:55:26:cb:
                    3e:76:bc:1f:7f:3f:5e:21:38:6f:af:f7:fe:1a:51:
                    2c:d0:b7:7e:86:45:a9:b1:02:8d:f1:fd:c7:9a:bf:
                    2a:e1:d4:26:02:4f:de:03:1f:51:f2:94:1a:1c:c3:
                    5c:f4:b6:17:f8:06:6b:65:68:fe:7e:e2:ff:bf:31:
                    30:bd:75:45:14:77:2b:f0:76:59:73:3d:43:85:45:
                    fa:f6:5d:92:89:9a:8e:a3:e2:9f:23:b0:e8:24:99:
                    71:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C3:C0:60:87:ED:73:CB:CB:E3:FD:94:E8:52:BD:C3:C2:A1:7A:9D
            X509v3 Authority Key Identifier:
                keyid:26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666130303a3a2f34302d3430203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:90:bd:16:4b:8a:01:d2:f5:cc:02:ff:e9:ee:92:7a:44:f0:
         1c:79:f7:a6:7c:6c:d5:77:b2:4f:a5:e9:89:2f:98:51:d1:0e:
         05:e5:96:49:d3:c1:79:2a:31:f5:bc:ff:e6:55:26:6d:c9:57:
         15:d0:fc:0c:3c:7e:19:4c:7d:02:55:6a:d1:72:fe:f5:89:95:
         fa:63:33:ff:12:56:39:56:19:86:21:cb:86:f6:a2:ea:c6:3e:
         6a:53:87:7d:21:d5:97:fb:e6:fa:3f:8f:43:29:0b:b3:f2:17:
         bc:08:0c:3b:c2:bc:c0:92:4f:33:bd:1d:31:02:2b:b7:1b:47:
         df:65:35:4d:2c:d7:fc:79:9f:86:37:65:8f:bb:5e:27:32:1a:
         cb:c9:ab:51:99:d7:cc:0e:14:74:b7:1e:ae:0c:aa:69:4f:df:
         cc:a9:1e:32:be:35:1e:3a:84:ae:e3:b6:c0:1a:c0:7a:e9:26:
         b8:90:77:be:fb:8f:00:3a:53:e7:13:e6:f3:04:6b:b6:3a:63:
         36:eb:d4:5a:f2:66:fc:45:36:7f:7b:63:e6:91:c4:8a:52:fd:
         07:5d:ed:b3:5a:51:d8:1c:09:4b:ae:d5:85:9c:d5:a7:1d:cd:
         f7:a5:2d:05:02:83:b6:81:38:a1:d5:2e:07:d7:b0:3e:43:59:
         d7:8a:0f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:17:29 2026 by rpki-client