Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/323830343a376235343a353a3a2f34382d3438203d3e20323731343235.roa
File:                     323830343a376235343a353a3a2f34382d3438203d3e20323731343235.roa (raw, json)
Hash identifier:          /BozWtxdZtzqIsqj2D+c4uU9BDriDp61XuXl/cz7Vh4=
Subject key identifier:   A1:12:E4:F7:12:CF:60:58:6E:A0:22:05:5F:29:E3:BE:5D:07:22:FA
Certificate issuer:       /CN=9759E603436C9DE43EFF24E87D223F678D05568E
Certificate serial:       19630FED680443C916E64EACBDA9DCDC0FCC078E
Authority key identifier: 97:59:E6:03:43:6C:9D:E4:3E:FF:24:E8:7D:22:3F:67:8D:05:56:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9759E603436C9DE43EFF24E87D223F678D05568E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/323830343a376235343a353a3a2f34382d3438203d3e20323731343235.roa
Signing time:             Mon 20 Jul 2026 17:34:46 +0000
ROA not before:           Mon 20 Jul 2026 17:29:46 +0000
ROA not after:            Mon 19 Jul 2027 17:34:46 +0000
asID:                     271425
IP address blocks:        2804:7b54:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/9759E603436C9DE43EFF24E87D223F678D05568E.crl
                          rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/9759E603436C9DE43EFF24E87D223F678D05568E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9759E603436C9DE43EFF24E87D223F678D05568E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 17:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:63:0f:ed:68:04:43:c9:16:e6:4e:ac:bd:a9:dc:dc:0f:cc:07:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9759E603436C9DE43EFF24E87D223F678D05568E
        Validity
            Not Before: Jul 20 17:29:46 2026 GMT
            Not After : Jul 19 17:34:46 2027 GMT
        Subject: CN=A112E4F712CF60586EA022055F29E3BE5D0722FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:38:d2:4f:69:44:37:1b:0e:1c:db:69:5d:8b:
                    7a:0b:0d:8f:77:3b:45:88:83:b9:09:d4:aa:cb:57:
                    55:20:7b:56:97:34:79:81:95:c4:36:d9:27:ce:0c:
                    7a:49:02:8d:a2:a7:ad:a1:d6:a9:28:59:90:69:7c:
                    76:df:62:63:1e:83:98:7b:ba:76:4b:07:2c:7c:18:
                    41:32:56:9f:90:b0:4c:9f:f6:13:00:ea:20:b9:da:
                    52:73:58:1c:53:72:d0:58:39:93:c7:ef:bb:b5:79:
                    b0:52:bd:7b:12:94:51:46:42:de:be:24:7d:07:7c:
                    82:12:80:f2:5a:ab:4d:29:7c:06:85:f1:88:ab:48:
                    ef:4a:2c:a9:26:57:a8:c0:5d:b4:b2:65:33:a8:f1:
                    bf:a1:5f:8f:7e:52:a9:4f:8d:95:ca:84:8d:44:03:
                    c9:8a:fe:7c:0b:bb:e6:12:c1:6b:d0:7c:3d:e1:08:
                    bf:e7:4e:c3:5b:47:3f:9a:c7:87:e1:c6:f3:70:b3:
                    22:80:8a:53:fc:e4:d6:c6:8d:5e:e6:d5:cf:31:05:
                    d3:1d:ff:bc:99:e7:d5:31:e1:10:40:37:03:d4:59:
                    93:75:a6:ec:ca:fa:c1:03:6e:60:29:51:f4:ca:cc:
                    aa:b4:cc:67:56:fd:23:82:bf:ee:42:03:7c:5e:26:
                    35:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:12:E4:F7:12:CF:60:58:6E:A0:22:05:5F:29:E3:BE:5D:07:22:FA
            X509v3 Authority Key Identifier:
                keyid:97:59:E6:03:43:6C:9D:E4:3E:FF:24:E8:7D:22:3F:67:8D:05:56:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/9759E603436C9DE43EFF24E87D223F678D05568E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9759E603436C9DE43EFF24E87D223F678D05568E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/323830343a376235343a353a3a2f34382d3438203d3e20323731343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b54:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:67:67:68:5e:34:14:df:3a:09:3b:66:a7:4f:f0:fc:0e:ce:
         5f:ce:b4:49:43:10:0d:34:b0:1e:e3:88:0c:58:fe:4e:ce:3f:
         42:cd:58:b9:f7:3a:82:db:ca:e3:cc:53:dc:59:ed:2e:af:8b:
         5e:4e:2c:40:6b:8a:f4:97:de:f7:c1:4e:33:72:f7:87:64:ff:
         fd:a6:75:9a:13:a8:be:f7:eb:3b:11:40:4f:be:47:2e:61:6b:
         f5:23:88:55:ee:74:db:e2:5b:0b:74:10:74:c4:f8:2c:a2:f7:
         a9:01:24:c0:c9:d6:db:39:2d:ff:e5:38:14:3a:48:f2:b9:1a:
         42:1d:00:f9:1b:fc:65:fc:a7:2d:5b:14:a2:54:44:4b:19:3c:
         39:1f:1c:67:52:e7:21:66:f3:37:06:49:0d:57:9d:0c:52:2b:
         ce:c9:c4:6c:ac:f9:85:c6:6f:d8:7a:db:b3:be:e6:9e:cc:cd:
         de:d9:e1:33:95:92:22:a0:49:3b:5d:df:7f:d6:cb:c1:16:d3:
         d3:50:e2:b8:4e:16:1f:f9:63:4c:f9:b6:5f:b7:77:45:a3:13:
         3d:99:c9:c6:6d:7d:92:7e:06:26:e8:cd:0d:cb:bb:6b:db:41:
         35:92:db:4d:99:89:a7:7b:3a:49:5e:01:cc:8c:c0:ef:be:22:
         12:3c:06:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:28 2026 by rpki-client