Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/323830343a313934633a383030303a3a2f33332d3333203d3e203631373835.roa
File:                     323830343a313934633a383030303a3a2f33332d3333203d3e203631373835.roa (raw, json)
Hash identifier:          EavD6/LwX80Xaz6QjQjdDGYYwBpIIBU0juI1lwAkdL8=
Subject key identifier:   BA:CD:37:42:57:1F:C5:73:41:5C:28:C3:79:72:5B:18:03:D0:B1:36
Certificate issuer:       /CN=8066E9F3C9E33472B98927F9B49B35F23A2E655D
Certificate serial:       68537001E935DFD5D89B0527D8CDD8622712CEAF
Authority key identifier: 80:66:E9:F3:C9:E3:34:72:B9:89:27:F9:B4:9B:35:F2:3A:2E:65:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/323830343a313934633a383030303a3a2f33332d3333203d3e203631373835.roa
Signing time:             Wed 15 Jul 2026 17:01:39 +0000
ROA not before:           Wed 15 Jul 2026 16:56:39 +0000
ROA not after:            Wed 14 Jul 2027 17:01:39 +0000
asID:                     61785
IP address blocks:        2804:194c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.crl
                          rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:53:70:01:e9:35:df:d5:d8:9b:05:27:d8:cd:d8:62:27:12:ce:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8066E9F3C9E33472B98927F9B49B35F23A2E655D
        Validity
            Not Before: Jul 15 16:56:39 2026 GMT
            Not After : Jul 14 17:01:39 2027 GMT
        Subject: CN=BACD3742571FC573415C28C379725B1803D0B136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6f:bd:09:83:c4:30:73:ea:06:a1:53:b2:2e:
                    91:b5:0e:ea:f5:9a:aa:b2:a2:55:20:c7:ad:08:12:
                    24:1f:9a:c1:49:ad:98:ea:59:e2:3c:f6:69:e4:fc:
                    3a:7a:6a:1b:1f:eb:50:b6:18:d1:27:ba:8b:d0:bb:
                    bf:37:26:41:24:2f:af:62:42:f9:04:16:88:28:7f:
                    bb:f1:0f:5f:2b:76:e3:ad:09:17:82:87:cd:14:6d:
                    37:1b:48:53:f9:87:9e:e2:bf:23:a8:e5:10:38:1e:
                    eb:4c:54:2e:3d:9a:67:36:d1:40:21:fa:fd:72:16:
                    3a:a2:ef:60:c1:7c:24:5c:1c:69:42:87:c2:c2:c1:
                    c4:ea:27:c9:28:b2:53:6b:3f:7e:ed:6b:b0:ba:52:
                    7b:78:54:e9:fc:9a:3e:fb:ac:0d:a2:2b:74:ea:65:
                    05:42:8e:fc:21:e0:5a:bb:0b:5d:e1:13:01:1f:9e:
                    14:63:06:b9:98:de:dc:d7:be:d5:79:d4:94:bf:02:
                    22:22:c0:90:9e:ba:b0:81:53:43:5f:02:9e:e7:4d:
                    eb:77:18:d0:5d:36:6b:dc:43:22:9a:bd:c9:62:c0:
                    0e:94:7f:8b:c8:33:59:9f:45:b0:39:25:7c:a9:97:
                    f5:ab:5d:db:06:37:15:9e:13:28:df:c8:20:d9:0e:
                    4e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CD:37:42:57:1F:C5:73:41:5C:28:C3:79:72:5B:18:03:D0:B1:36
            X509v3 Authority Key Identifier:
                keyid:80:66:E9:F3:C9:E3:34:72:B9:89:27:F9:B4:9B:35:F2:3A:2E:65:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/323830343a313934633a383030303a3a2f33332d3333203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:194c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         71:81:98:32:12:0b:08:29:7d:f6:7a:1b:4c:76:f2:6b:14:47:
         ae:bc:2c:59:87:be:9b:3d:a9:92:df:7b:97:4d:27:57:a9:ff:
         6c:59:f4:10:95:cb:5b:44:38:4f:c7:86:db:25:92:99:82:14:
         d2:2a:3f:1d:b6:0e:e0:ba:b2:bb:91:64:21:f7:3a:ec:a7:78:
         4b:d1:4b:19:d6:d5:fd:81:21:c1:b0:dc:57:d1:c7:07:30:6f:
         e1:ce:2b:1f:b9:96:4e:90:91:c3:db:eb:80:6b:66:c6:93:ee:
         8f:3f:2f:42:c0:9d:c6:bf:5a:a4:2b:00:30:2a:c8:8e:99:15:
         25:62:76:2a:2d:96:5a:85:9f:54:8e:10:a9:49:c8:29:19:2b:
         1b:f3:fd:af:3e:c4:20:ea:30:c0:4f:2e:9d:81:ed:f7:96:ac:
         7a:9f:0a:4e:21:0f:c7:53:25:5e:2b:ef:aa:4a:72:bd:ae:41:
         b7:42:b6:b2:83:9a:0f:e4:93:ff:6c:da:72:63:72:a3:da:88:
         ec:96:bf:fc:a2:74:9d:ed:22:c6:25:bb:b6:97:ac:e3:05:9a:
         82:f6:79:fd:5a:0a:1a:a8:97:ba:97:89:07:c7:5c:3c:03:9d:
         0f:95:57:be:b1:ac:34:db:10:47:b8:6f:cb:e0:21:d4:e1:25:
         1c:c3:c7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:01:37 2026 by rpki-client