Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666530303a3a2f34302d3434203d3e20323734363732.roa
File:                     323830343a393165303a666530303a3a2f34302d3434203d3e20323734363732.roa (raw, json)
Hash identifier:          WwVR6nfty0NxOlSx/RL+CMBlZP1FN00+s5XUSEJ38aM=
Subject key identifier:   EB:BD:0E:76:FC:FA:F3:68:82:3A:35:91:33:0D:DC:F7:B7:52:12:57
Certificate issuer:       /CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
Certificate serial:       3605846035DC9E815CB7DFF209ABB5AC4157A49D
Authority key identifier: 26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666530303a3a2f34302d3434203d3e20323734363732.roa
Signing time:             Tue 14 Jul 2026 01:40:49 +0000
ROA not before:           Tue 14 Jul 2026 01:35:49 +0000
ROA not after:            Tue 13 Jul 2027 01:40:49 +0000
asID:                     274672
IP address blocks:        2804:91e0:fe00::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:05:84:60:35:dc:9e:81:5c:b7:df:f2:09:ab:b5:ac:41:57:a4:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
        Validity
            Not Before: Jul 14 01:35:49 2026 GMT
            Not After : Jul 13 01:40:49 2027 GMT
        Subject: CN=EBBD0E76FCFAF368823A3591330DDCF7B7521257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:95:bf:0c:20:74:c5:8f:02:f5:bd:f2:40:89:
                    d5:3e:2a:23:10:1a:7b:2f:f6:2a:ce:1d:c3:c7:45:
                    50:0d:c8:67:c8:b8:fc:0b:55:e6:a7:0c:85:78:ca:
                    36:64:f7:bd:5a:6f:7d:ef:b4:b2:6d:0b:bc:fd:07:
                    41:a7:b9:25:18:00:13:5d:7a:0a:f6:a0:7d:21:cd:
                    ba:85:df:57:f8:6c:4b:9a:f1:1d:6f:9c:05:81:50:
                    5e:9e:2c:81:db:a8:c3:ea:4f:f0:25:57:ee:d9:c5:
                    47:74:7f:8c:e6:85:5b:d6:1b:79:3d:5f:ad:22:58:
                    6d:30:54:55:fb:d6:5c:42:66:e4:19:a3:77:8f:17:
                    bd:4a:14:4c:f7:dc:db:ac:3e:a8:f2:a7:54:20:19:
                    75:19:58:7b:be:6c:79:e8:ae:4f:85:3a:30:a8:61:
                    59:7c:bc:e3:2c:69:83:ef:b3:c5:79:5b:90:fe:77:
                    45:4b:3f:ed:89:1c:64:43:4e:93:d6:11:0d:45:8c:
                    27:d0:b9:7a:d3:51:6c:24:f3:88:af:52:73:2b:1d:
                    c3:23:0f:d0:f2:8a:59:6c:31:5a:af:59:c6:e0:d3:
                    79:ed:17:0f:11:c9:a3:5d:a7:82:94:df:f9:26:ed:
                    01:ea:ea:06:04:0a:2c:d7:1c:bf:c9:c9:7a:aa:ef:
                    ea:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BD:0E:76:FC:FA:F3:68:82:3A:35:91:33:0D:DC:F7:B7:52:12:57
            X509v3 Authority Key Identifier:
                keyid:26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666530303a3a2f34302d3434203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:44:5a:28:9d:fb:cb:de:b8:08:67:67:9d:d6:bf:8f:b1:fa:
         5f:38:72:49:d4:24:3b:45:89:54:ff:c7:07:df:b4:fc:9e:87:
         f9:a5:30:cb:48:06:cb:af:76:63:7b:c1:c2:f1:64:e9:02:26:
         d2:dd:9d:f2:e5:55:e0:75:09:47:10:69:4b:de:4f:4e:69:58:
         82:9d:48:45:33:9e:ca:5c:8e:21:31:95:7f:91:71:4c:65:cf:
         2f:f3:96:30:6d:e4:d0:a6:04:b5:a9:ad:8f:1e:e3:e6:44:f2:
         71:ae:47:2d:5a:14:67:b5:af:25:98:f5:8e:69:d8:9d:3c:e5:
         e8:6e:2f:78:0f:1c:e3:99:1a:e9:ac:08:ee:03:67:e6:76:35:
         43:a0:57:bd:83:08:73:8d:f3:48:d6:d6:2c:92:9f:3f:f3:46:
         00:98:55:b0:c5:d4:21:15:ba:49:66:e5:fc:5c:41:cb:f7:9d:
         83:7f:95:69:53:06:d3:79:9f:75:cf:78:49:9f:e5:33:8d:8e:
         fa:e7:eb:e4:85:93:2a:8e:6e:51:bd:c7:a4:bb:f4:78:bd:a9:
         2d:a2:f3:aa:4b:a8:e4:b5:c9:10:46:5b:6f:9d:fb:dc:42:55:
         64:48:80:e0:1c:2a:04:37:2f:6f:c5:40:b7:b8:d3:12:ba:4b:
         57:ec:47:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:03:56 2026 by rpki-client