Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/323830343a343035383a313830303a3a2f33372d3337203d3e20323635393533.roa
File:                     323830343a343035383a313830303a3a2f33372d3337203d3e20323635393533.roa (raw, json)
Hash identifier:          HNdCr4DVEI130ygPx13NQJ6KT+snlHsFHvBwEmLddfM=
Subject key identifier:   7F:63:BA:38:74:22:7C:F2:7C:32:11:60:44:B8:5D:13:0E:F5:2C:E7
Certificate issuer:       /CN=D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9
Certificate serial:       557DFA33CA47147C259CC2039E57C27268D3D653
Authority key identifier: D4:63:7B:A1:0D:62:C8:7E:68:A2:5F:AB:52:A2:4D:5C:BF:A5:2E:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/323830343a343035383a313830303a3a2f33372d3337203d3e20323635393533.roa
Signing time:             Mon 20 Jul 2026 19:53:19 +0000
ROA not before:           Mon 20 Jul 2026 19:48:19 +0000
ROA not after:            Mon 19 Jul 2027 19:53:19 +0000
asID:                     265953
IP address blocks:        2804:4058:1800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.crl
                          rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:7d:fa:33:ca:47:14:7c:25:9c:c2:03:9e:57:c2:72:68:d3:d6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9
        Validity
            Not Before: Jul 20 19:48:19 2026 GMT
            Not After : Jul 19 19:53:19 2027 GMT
        Subject: CN=7F63BA3874227CF27C32116044B85D130EF52CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:41:a7:93:6b:e4:77:78:47:03:e0:85:28:
                    e2:85:58:d5:34:32:e7:7a:1f:3d:84:7c:35:c8:cc:
                    cf:20:58:21:47:45:d3:ba:40:d5:41:f6:c7:02:bd:
                    0d:ab:8c:7d:e4:25:96:60:3e:52:6e:f4:9d:6c:3f:
                    0f:a4:9b:21:28:08:5b:51:10:c6:ad:ef:da:cd:72:
                    aa:ab:f3:e9:76:50:6a:d9:c5:88:60:01:85:31:b2:
                    b2:8a:3c:9f:bc:35:c0:eb:97:7b:84:d4:96:c6:08:
                    c1:02:49:14:c5:88:c5:fc:5b:a9:2a:7a:f3:e8:2a:
                    e9:4a:57:91:3a:d1:c5:9f:c6:2e:e9:ba:ce:c9:ed:
                    11:15:87:81:08:30:fd:c2:35:01:aa:5b:88:de:b2:
                    cc:74:aa:0f:fe:04:0e:19:b4:d3:c0:54:76:be:6f:
                    82:de:5b:58:cc:a1:a4:08:4b:11:87:39:1b:b6:57:
                    d9:0f:39:ab:63:26:34:95:10:5a:ad:62:a1:d7:a5:
                    aa:b4:b9:19:7a:00:8d:d6:73:16:f8:8f:f0:a2:92:
                    87:09:94:fc:b5:15:98:ed:b7:b6:49:ec:ca:f6:88:
                    20:5f:e2:4c:5f:5d:32:ba:6e:bc:a1:43:97:ce:98:
                    6a:fa:a4:d3:d2:f4:0c:11:c0:d0:f4:bb:27:f1:72:
                    46:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:63:BA:38:74:22:7C:F2:7C:32:11:60:44:B8:5D:13:0E:F5:2C:E7
            X509v3 Authority Key Identifier:
                keyid:D4:63:7B:A1:0D:62:C8:7E:68:A2:5F:AB:52:A2:4D:5C:BF:A5:2E:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/323830343a343035383a313830303a3a2f33372d3337203d3e20323635393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4058:1800::/37

    Signature Algorithm: sha256WithRSAEncryption
         44:5d:4e:f2:3e:1b:d0:d3:cd:69:14:8b:8d:d1:ef:d3:98:ad:
         cc:bf:80:ef:a7:95:46:6e:a8:49:f5:13:1f:54:05:af:f2:d8:
         b3:76:0b:0a:6a:b4:9b:b7:3a:d4:9d:19:1c:c5:cf:b1:00:df:
         f5:ed:4b:d1:29:61:bd:cd:2f:24:7c:27:7f:70:a6:4b:ee:5d:
         3f:fe:fe:34:6e:09:a8:f9:9b:ac:9e:e3:2d:a6:ba:4e:7b:f7:
         36:07:d7:49:dd:d4:8a:f0:85:04:52:08:78:3f:69:05:8e:6b:
         a0:f8:07:d3:b4:f9:6c:de:cb:92:f0:69:2c:21:77:06:89:95:
         86:f9:79:ba:40:72:1e:cb:2d:65:59:e4:25:17:c9:28:db:33:
         5d:8e:6d:9c:a1:40:56:30:d0:18:d1:d2:bd:90:21:de:24:71:
         80:4e:00:f4:f3:a0:3a:73:24:c9:b7:2f:d5:6d:65:e9:d6:e3:
         26:b6:8f:90:be:7d:ac:c3:01:35:27:61:c4:80:05:f3:d1:5c:
         79:5f:ba:bd:7e:e3:8b:93:27:23:f7:82:89:01:7a:d5:00:ef:
         53:10:74:94:78:bb:40:57:bd:cd:0d:ab:b8:92:6e:d4:64:c8:
         ae:36:a6:f5:13:34:fb:eb:07:de:64:95:e9:86:b3:a1:67:4c:
         f1:09:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:50:03 2026 by rpki-client