Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666330303a3a2f34302d3434203d3e20323734363732.roa
File:                     323830343a393165303a666330303a3a2f34302d3434203d3e20323734363732.roa (raw, json)
Hash identifier:          Wsbak3PWc1z+5KN7dw88s+dAyAZnjq8+nUnhZUDQHo8=
Subject key identifier:   45:CC:A1:5A:54:B4:D6:E9:91:E3:0C:63:5F:35:49:FF:51:81:B2:A3
Certificate issuer:       /CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
Certificate serial:       0414E242B420A936D7EAD5AA5D2903D500B4DD63
Authority key identifier: 26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666330303a3a2f34302d3434203d3e20323734363732.roa
Signing time:             Tue 14 Jul 2026 01:40:45 +0000
ROA not before:           Tue 14 Jul 2026 01:35:45 +0000
ROA not after:            Tue 13 Jul 2027 01:40:45 +0000
asID:                     274672
IP address blocks:        2804:91e0:fc00::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:14:e2:42:b4:20:a9:36:d7:ea:d5:aa:5d:29:03:d5:00:b4:dd:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
        Validity
            Not Before: Jul 14 01:35:45 2026 GMT
            Not After : Jul 13 01:40:45 2027 GMT
        Subject: CN=45CCA15A54B4D6E991E30C635F3549FF5181B2A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:e3:23:1f:22:db:aa:37:8a:0c:14:91:6c:
                    92:b3:5d:6b:08:91:d9:10:e4:2c:e1:e6:41:01:51:
                    59:ea:a5:40:1e:94:37:39:ab:6b:08:bf:7c:15:84:
                    ac:9e:4a:e4:69:9d:0f:48:f0:7a:63:f6:89:57:95:
                    14:93:4e:37:32:ea:35:31:5b:5a:cf:36:80:0f:0c:
                    59:cd:d1:3a:fc:c7:49:b1:14:cf:ff:7d:98:70:83:
                    96:9b:47:05:10:92:ad:d9:1a:77:45:67:c9:f6:77:
                    09:53:67:48:2b:31:b7:4d:d8:6a:5e:64:26:f8:6d:
                    d5:50:25:37:17:a2:d2:2a:66:bb:55:3f:18:c5:34:
                    ec:cf:56:a1:c4:1d:0c:0f:3d:26:c0:bf:a4:4d:1c:
                    ad:27:e5:82:8e:f2:58:6a:e5:72:f2:91:1f:7e:ec:
                    34:88:da:52:7d:ce:f7:28:b4:2d:c2:e1:29:3a:bc:
                    22:03:82:85:c9:0b:d6:c7:5e:52:e6:82:60:38:71:
                    e9:81:f9:e0:48:dc:8b:d4:44:09:12:63:fe:c1:47:
                    0b:9f:28:ae:a4:84:3b:15:a3:09:84:61:4b:3a:3d:
                    6d:4a:1f:3b:47:2d:8a:6d:60:50:9b:73:95:68:e2:
                    bf:90:b8:99:10:5e:9d:3f:8d:6c:4c:0a:3a:3c:22:
                    d8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CC:A1:5A:54:B4:D6:E9:91:E3:0C:63:5F:35:49:FF:51:81:B2:A3
            X509v3 Authority Key Identifier:
                keyid:26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666330303a3a2f34302d3434203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:fc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:6f:65:3e:0a:87:9e:f2:e5:05:a8:88:94:f0:d7:88:ea:8b:
         1d:a5:0d:85:c5:0b:39:a5:49:ff:dc:a5:83:d6:93:11:fd:e0:
         c9:f5:7c:c6:24:dc:ca:c1:3d:0c:86:8a:f5:31:d0:5a:45:f7:
         71:2e:4b:65:9a:fe:a6:dd:55:2d:a4:c4:bb:ee:cc:b9:45:51:
         d3:85:65:92:49:57:9a:8f:61:b8:c0:74:33:f4:cb:32:5d:df:
         5b:53:a2:9d:5d:f8:08:31:b0:8a:d6:e0:a9:06:89:eb:ac:67:
         70:ec:da:8c:74:2d:98:71:26:5e:b6:7e:20:df:26:08:d4:d8:
         27:af:d4:62:b0:38:dc:87:f7:5f:db:e0:9f:f3:4c:fe:a8:97:
         c7:9f:98:48:05:cc:4c:dc:08:7a:ba:80:2e:e5:cb:9f:18:65:
         04:26:7b:07:7e:d1:75:d4:ee:26:3f:53:ea:f2:8e:05:5a:fb:
         b6:54:4c:44:38:15:bc:46:f0:79:6e:a6:35:c3:ee:f3:d3:8e:
         3b:08:d6:a2:99:e9:a2:9d:45:42:ce:2a:54:e0:19:f6:24:75:
         82:a5:95:00:e7:4d:da:5a:38:0c:50:7f:53:1c:d2:44:11:49:
         1c:89:6e:44:37:c9:57:99:9d:ed:ff:f7:bf:d4:b7:92:7d:88:
         b9:31:78:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:23:17 2026 by rpki-client