Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666230303a3a2f34302d3434203d3e20323734363732.roa
File:                     323830343a393165303a666230303a3a2f34302d3434203d3e20323734363732.roa (raw, json)
Hash identifier:          l0lVefnXvnsCl/MqPavPn0RNLc5433DPT1T6gldWHTI=
Subject key identifier:   D2:12:CC:5B:96:46:22:C5:40:02:3E:AB:D5:D7:0A:14:7E:09:66:45
Certificate issuer:       /CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
Certificate serial:       72966BDBF541EAA466B5FDBA6576760094073242
Authority key identifier: 26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666230303a3a2f34302d3434203d3e20323734363732.roa
Signing time:             Tue 14 Jul 2026 01:40:48 +0000
ROA not before:           Tue 14 Jul 2026 01:35:48 +0000
ROA not after:            Tue 13 Jul 2027 01:40:48 +0000
asID:                     274672
IP address blocks:        2804:91e0:fb00::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:96:6b:db:f5:41:ea:a4:66:b5:fd:ba:65:76:76:00:94:07:32:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
        Validity
            Not Before: Jul 14 01:35:48 2026 GMT
            Not After : Jul 13 01:40:48 2027 GMT
        Subject: CN=D212CC5B964622C540023EABD5D70A147E096645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d4:ed:48:fd:b7:28:f9:ed:98:8b:97:8f:b8:
                    50:83:29:89:ed:73:9c:34:d2:cd:cf:44:f5:56:82:
                    1c:87:d2:97:e0:35:3e:6d:f4:33:32:c8:6a:aa:e7:
                    95:e0:0a:c2:9e:a2:47:07:22:7a:c4:b7:7a:39:31:
                    a5:6a:05:f6:8d:bb:5a:23:32:ff:b7:2f:93:33:3f:
                    96:e1:51:06:05:f5:52:98:93:85:72:a1:82:32:34:
                    fb:cf:32:5d:93:35:48:75:d6:cc:c5:2b:5b:d5:ac:
                    e3:9b:35:d7:b6:19:b4:9f:80:6a:ca:8a:30:f4:77:
                    af:e7:9b:ee:74:bf:81:e3:78:1c:b2:c2:c8:89:bc:
                    34:7d:45:c7:c0:a4:99:01:21:b1:ac:51:9a:ca:0f:
                    d9:4c:b7:7d:6d:e0:99:9c:7f:75:67:32:f6:c2:e2:
                    01:28:a7:4b:79:29:a3:62:0f:83:15:aa:1f:9b:47:
                    27:6e:f8:29:95:b3:e0:44:3e:41:65:84:5b:72:bb:
                    28:78:28:d6:33:0f:88:b0:e4:60:b9:a1:e4:e7:37:
                    ea:54:aa:69:97:3c:b0:76:ec:2f:d5:28:aa:64:c4:
                    8f:c0:83:18:6b:40:df:2d:08:9d:a0:26:cd:d1:59:
                    eb:f4:77:d5:25:ff:9a:4f:80:30:7f:b6:20:65:35:
                    9b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:12:CC:5B:96:46:22:C5:40:02:3E:AB:D5:D7:0A:14:7E:09:66:45
            X509v3 Authority Key Identifier:
                keyid:26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666230303a3a2f34302d3434203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:00:dd:82:89:ea:e4:73:73:0d:0a:3e:20:70:51:82:bf:92:
         97:93:df:2b:d2:63:77:35:b8:56:83:18:b5:13:ca:c0:bf:7d:
         a0:cd:d3:e6:7e:21:74:0a:e6:14:0b:83:7f:6b:49:91:ce:ad:
         a7:43:59:fc:4d:4a:ae:6f:a1:ed:7f:a9:18:fd:51:ed:cb:2b:
         c2:3f:54:6e:0e:91:a3:fe:c1:31:d3:a4:45:ff:ab:b0:df:a6:
         0b:a7:73:8f:a3:8f:73:9b:b6:3e:a4:19:06:ab:00:ab:0d:bc:
         52:4f:d1:c8:71:1b:2f:9a:72:0e:c9:f6:10:d9:6a:63:1c:8a:
         36:85:ce:b5:ee:a8:e2:7e:bc:ea:56:6d:8c:4f:79:80:a4:85:
         a6:66:f7:da:c7:ca:fc:e5:30:ae:73:1c:24:83:db:4f:83:e4:
         91:86:63:d2:57:b3:ba:34:df:db:64:ef:a7:3e:35:11:98:97:
         1a:3e:ae:19:74:3f:00:9e:a3:e9:6b:0b:11:19:07:e0:b5:1f:
         99:bc:ea:4e:94:29:38:0d:db:7e:63:9f:4e:7b:4c:cb:3c:c3:
         c7:a8:e0:61:8f:69:b3:48:c8:0c:f6:df:6e:db:4c:7a:a2:4b:
         5d:d8:1e:ee:44:b6:76:a7:78:0f:cc:17:f4:5d:b4:a0:31:08:
         56:22:d5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:18:19 2026 by rpki-client