Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/323830343a376434633a3a2f33322d3430203d3e20323731353532.roa
File:                     323830343a376434633a3a2f33322d3430203d3e20323731353532.roa (raw, json)
Hash identifier:          TstczNMPhw8EN33NrUVYCrtlNSUmSkQ+PFauAJies2s=
Subject key identifier:   8B:3D:AA:B9:41:F0:26:41:E4:91:3A:17:96:C7:E4:B2:D8:F6:BE:16
Certificate issuer:       /CN=BF01EDEC817946FEE3E062E65259E1F2FD9BB42E
Certificate serial:       23F0498D970B622B3B5E064B6FF95B887C89E9CC
Authority key identifier: BF:01:ED:EC:81:79:46:FE:E3:E0:62:E6:52:59:E1:F2:FD:9B:B4:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/323830343a376434633a3a2f33322d3430203d3e20323731353532.roa
Signing time:             Tue 21 Jul 2026 20:39:22 +0000
ROA not before:           Tue 21 Jul 2026 20:34:22 +0000
ROA not after:            Tue 20 Jul 2027 20:39:22 +0000
asID:                     271552
IP address blocks:        2804:7d4c::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.crl
                          rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 09:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f0:49:8d:97:0b:62:2b:3b:5e:06:4b:6f:f9:5b:88:7c:89:e9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF01EDEC817946FEE3E062E65259E1F2FD9BB42E
        Validity
            Not Before: Jul 21 20:34:22 2026 GMT
            Not After : Jul 20 20:39:22 2027 GMT
        Subject: CN=8B3DAAB941F02641E4913A1796C7E4B2D8F6BE16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:d6:bf:15:79:bc:5b:fb:ab:b4:3a:af:33:
                    82:53:4c:f3:f2:e2:e7:dc:e7:4c:f9:d9:cf:2f:e7:
                    2c:a8:a7:61:6d:8d:a0:d4:f9:da:ed:38:9d:b3:fc:
                    65:78:c5:09:d1:b0:bf:ce:fa:5f:df:4a:e0:89:3d:
                    72:91:e5:8a:16:61:59:92:71:ea:6a:4e:52:3d:08:
                    15:27:95:a2:52:b0:6f:b9:17:b2:83:de:ed:aa:53:
                    b6:79:09:a7:13:f6:06:1f:ee:b7:56:89:f6:29:25:
                    41:11:71:c6:a9:63:66:f0:bf:86:64:74:54:c4:e7:
                    4e:ae:cb:09:f7:12:ad:aa:b5:4c:00:70:49:65:64:
                    41:cd:00:8a:1a:56:ed:7e:3e:eb:9a:27:78:3f:bb:
                    49:76:a4:d5:67:d8:3c:88:0f:26:dc:60:8b:45:39:
                    0c:53:76:ed:bd:1f:02:6b:9b:e2:a7:b1:2d:cd:7e:
                    0d:1b:e0:9f:20:c6:d6:ec:34:04:e0:d7:67:c0:14:
                    70:60:1f:a9:a9:7a:0e:45:a6:91:20:4b:84:db:40:
                    1d:aa:50:92:85:07:c5:83:0d:8c:2e:5b:9d:48:b5:
                    33:33:bf:e6:31:11:9a:9c:28:e9:49:65:3c:9f:a4:
                    43:99:12:9d:6a:ca:94:47:b3:b5:b9:cd:83:68:a0:
                    a8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3D:AA:B9:41:F0:26:41:E4:91:3A:17:96:C7:E4:B2:D8:F6:BE:16
            X509v3 Authority Key Identifier:
                keyid:BF:01:ED:EC:81:79:46:FE:E3:E0:62:E6:52:59:E1:F2:FD:9B:B4:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/323830343a376434633a3a2f33322d3430203d3e20323731353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:ea:1a:8f:ad:8d:3c:31:c3:5f:d9:6c:02:ea:1f:c5:03:a6:
         76:84:26:f1:7f:77:b1:43:ba:05:21:13:d8:71:26:33:cf:52:
         78:e1:6a:45:dd:c6:4d:92:c9:4c:f2:90:13:78:1b:d8:0b:f7:
         c4:9d:d8:0c:01:fa:d4:2f:e2:76:b2:a9:c6:27:32:c0:33:ee:
         12:75:aa:46:f1:55:38:07:24:80:9a:4a:0e:00:01:7e:90:50:
         61:92:60:f4:de:a2:4b:14:86:63:fa:f5:4f:34:4e:5d:aa:9c:
         01:00:08:da:b5:2f:39:44:4e:73:43:2c:54:17:9a:71:35:5b:
         a9:ec:fc:c7:4e:9f:ee:d9:ec:d9:e9:f2:b5:7b:bf:36:a3:8c:
         44:a8:bb:d3:ad:b7:ab:5a:ea:11:8d:43:75:de:0e:17:e6:30:
         f4:d6:a6:58:5f:b5:97:6f:34:d3:a0:0a:ee:fa:7c:df:2b:3c:
         c2:ee:ca:7e:e8:d4:98:60:05:72:fa:be:b2:7a:ac:61:b4:3a:
         38:db:97:3d:fe:9a:9c:94:da:8c:1a:80:71:b4:f5:b2:09:c1:
         a5:73:e8:3d:f1:91:aa:c6:9b:ef:57:1e:aa:02:3d:cb:f2:93:
         54:78:a4:8f:bf:90:fa:85:9e:b9:b1:5a:97:99:4a:8f:9a:fd:
         a6:90:ae:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:39:16 2026 by rpki-client