Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663630303a3a2f34302d3430203d3e20323734363732.roa
File:                     323830343a393165303a663630303a3a2f34302d3430203d3e20323734363732.roa (raw, json)
Hash identifier:          68Gk8LLQFw5NQBKS+vM43BsTbc4xf4yQl6SOmFicYrA=
Subject key identifier:   2E:C4:64:78:47:7F:6C:DD:B2:06:F0:8C:3D:02:2E:97:C8:FB:5C:D5
Certificate issuer:       /CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
Certificate serial:       2DFF23F281376F2C8E8F6D9A34167EBE7244ACD8
Authority key identifier: 26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663630303a3a2f34302d3430203d3e20323734363732.roa
Signing time:             Wed 19 Aug 2026 16:13:56 +0000
ROA not before:           Wed 19 Aug 2026 16:08:56 +0000
ROA not after:            Wed 18 Aug 2027 16:13:56 +0000
asID:                     274672
IP address blocks:        2804:91e0:f600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ff:23:f2:81:37:6f:2c:8e:8f:6d:9a:34:16:7e:be:72:44:ac:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
        Validity
            Not Before: Aug 19 16:08:56 2026 GMT
            Not After : Aug 18 16:13:56 2027 GMT
        Subject: CN=2EC46478477F6CDDB206F08C3D022E97C8FB5CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4b:5d:79:63:64:7d:2c:b8:45:f6:a7:4d:20:
                    1f:b0:09:14:84:c9:b5:08:5e:7d:b7:c9:d3:8f:17:
                    1b:0d:16:7a:f4:1c:e6:e9:25:d8:4b:af:d1:b0:48:
                    23:ba:3c:05:fe:c2:6e:b7:0a:5d:99:fd:97:dc:cc:
                    96:81:2c:42:c2:ed:df:ba:2a:29:21:5d:55:5b:5b:
                    93:8b:4e:03:75:b2:5a:aa:d0:ef:84:b7:3e:a2:33:
                    40:84:2a:3f:9e:0e:3c:a8:9e:da:3b:0d:5f:95:57:
                    e3:98:f6:7c:37:3b:2e:b2:60:19:ff:16:29:26:79:
                    81:60:d0:fd:b2:96:61:6a:e1:69:29:35:d5:10:e8:
                    9f:55:70:b3:c7:9f:94:65:af:d8:7b:1f:b6:66:c9:
                    d4:d5:54:04:52:65:f0:22:9e:b2:b8:3c:bc:a4:1b:
                    f6:83:80:42:aa:b8:18:d0:6c:1c:e6:d4:af:0b:6e:
                    14:c1:e7:47:3f:a6:c1:21:43:3a:35:d4:d7:74:98:
                    79:24:72:0b:58:60:11:bd:bd:b4:45:61:7a:7f:3e:
                    9b:89:fa:3b:55:f2:c2:b4:b7:3b:64:22:93:76:5b:
                    46:85:69:f9:11:98:76:46:62:dc:23:f5:12:ac:27:
                    5f:79:5a:22:9e:5c:cf:3b:3b:38:d2:fa:8c:78:9c:
                    9c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C4:64:78:47:7F:6C:DD:B2:06:F0:8C:3D:02:2E:97:C8:FB:5C:D5
            X509v3 Authority Key Identifier:
                keyid:26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a663630303a3a2f34302d3430203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91e0:f600::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:8b:19:08:5f:63:9f:d2:69:e6:ce:cb:dd:8d:8c:b5:11:32:
         a3:3d:bd:a8:77:c3:6c:46:8f:04:be:fb:1c:8b:df:4b:ec:1a:
         f5:0a:4e:7b:68:6f:3c:42:cf:3e:20:3f:b5:38:12:51:6e:2d:
         cf:95:17:44:f6:92:50:f4:c9:1b:74:46:88:b5:d2:d7:b4:87:
         15:33:ec:c0:03:37:83:df:fe:3c:b4:ea:c5:d5:ed:1c:51:18:
         47:52:95:a5:c9:ac:80:89:21:74:a0:5b:eb:10:bf:f9:39:41:
         41:52:d1:08:82:dc:66:03:b9:c8:d0:1d:31:e7:4d:6e:f6:36:
         55:28:f4:a9:01:51:46:b0:5c:95:3a:81:82:4b:7a:8c:cd:2c:
         d4:89:c3:de:8e:56:80:d6:62:44:e6:c0:49:65:2d:af:59:9b:
         d7:8c:2f:aa:6a:25:1e:ca:54:5a:a2:a4:40:68:03:22:c1:f4:
         e5:2f:eb:72:08:ea:fc:10:d9:81:7e:40:fe:4a:55:13:89:b1:
         ce:d5:de:40:a1:df:ea:ac:46:e7:2a:18:d7:c5:fb:8e:8d:c2:
         22:24:12:99:f5:ad:0a:ec:19:7a:dc:88:86:4d:0e:bc:1d:92:
         25:77:fa:90:c4:68:b8:4b:bd:ae:9c:02:05:fe:1b:38:cc:57:
         b1:f9:e8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 02:37:43 2026 by rpki-client