Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/323830343a376235343a383030303a3a2f33332d3333203d3e20323731343235.roa
File:                     323830343a376235343a383030303a3a2f33332d3333203d3e20323731343235.roa (raw, json)
Hash identifier:          JaDtpxP8pOFiA7FLgRFtjLqgzckJe3sycdvj8x2cP/4=
Subject key identifier:   B9:C2:A8:C9:18:3E:B7:AC:A9:44:FC:B3:72:86:D5:EE:62:C8:7B:BD
Certificate issuer:       /CN=9759E603436C9DE43EFF24E87D223F678D05568E
Certificate serial:       079444CA355A3442C65D3A020106098BD209F95A
Authority key identifier: 97:59:E6:03:43:6C:9D:E4:3E:FF:24:E8:7D:22:3F:67:8D:05:56:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9759E603436C9DE43EFF24E87D223F678D05568E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/323830343a376235343a383030303a3a2f33332d3333203d3e20323731343235.roa
Signing time:             Mon 20 Jul 2026 17:34:55 +0000
ROA not before:           Mon 20 Jul 2026 17:29:55 +0000
ROA not after:            Mon 19 Jul 2027 17:34:55 +0000
asID:                     271425
IP address blocks:        2804:7b54:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/9759E603436C9DE43EFF24E87D223F678D05568E.crl
                          rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/9759E603436C9DE43EFF24E87D223F678D05568E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9759E603436C9DE43EFF24E87D223F678D05568E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 17:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:94:44:ca:35:5a:34:42:c6:5d:3a:02:01:06:09:8b:d2:09:f9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9759E603436C9DE43EFF24E87D223F678D05568E
        Validity
            Not Before: Jul 20 17:29:55 2026 GMT
            Not After : Jul 19 17:34:55 2027 GMT
        Subject: CN=B9C2A8C9183EB7ACA944FCB37286D5EE62C87BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:20:ad:1b:00:c1:09:9f:73:53:8e:6f:9b:0c:
                    67:b7:0a:bc:aa:a9:3b:91:f2:1a:f8:95:8d:86:7b:
                    30:a8:9f:f4:79:2f:d4:4a:f0:44:4b:f9:c9:58:9c:
                    87:d7:a5:b1:7a:da:11:e3:e5:91:a2:b3:f6:27:5e:
                    65:11:21:7a:b3:b2:a7:b1:be:94:2b:f9:c2:4b:3e:
                    93:71:0f:8e:02:d3:0d:a8:e2:3c:f9:0e:62:cf:f9:
                    e4:0e:60:65:a9:69:1e:69:92:c3:4d:aa:c1:d0:b5:
                    3a:08:a3:6f:65:74:b5:d0:6a:7b:19:90:76:2c:4d:
                    65:f1:e4:80:96:da:11:64:7a:fa:6e:ee:82:bb:e6:
                    e3:ac:04:e9:b1:39:eb:60:a6:30:88:f8:95:a1:7b:
                    12:6a:42:90:3c:5c:a3:9d:0d:36:67:50:96:8b:7e:
                    ca:f5:6b:12:80:f7:83:08:99:1c:5d:ac:94:75:9f:
                    14:13:46:75:cf:b6:a4:3d:c4:ef:6f:f4:ab:fc:7c:
                    0f:51:ed:ee:c4:d3:e2:8b:1e:c4:41:90:fa:a8:e7:
                    7c:38:52:2b:f0:5e:3d:7e:0f:73:84:56:ec:d0:fb:
                    31:c3:98:ef:85:bb:88:66:bd:80:60:ab:01:12:0b:
                    f5:43:8e:82:ce:be:e5:d0:c6:c6:43:2d:5b:2d:be:
                    cc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C2:A8:C9:18:3E:B7:AC:A9:44:FC:B3:72:86:D5:EE:62:C8:7B:BD
            X509v3 Authority Key Identifier:
                keyid:97:59:E6:03:43:6C:9D:E4:3E:FF:24:E8:7D:22:3F:67:8D:05:56:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/9759E603436C9DE43EFF24E87D223F678D05568E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9759E603436C9DE43EFF24E87D223F678D05568E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/323830343a376235343a383030303a3a2f33332d3333203d3e20323731343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b54:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         98:bf:a9:87:dc:43:ff:de:e8:c0:06:2c:ed:fc:e2:53:b9:8d:
         75:40:b7:18:0c:af:01:09:a7:0e:77:0f:7f:18:51:96:42:43:
         05:a3:58:7e:dd:90:c2:d3:63:dd:c7:cd:62:44:e4:c0:37:38:
         72:fd:95:6a:3f:46:23:47:7c:d6:e4:28:3a:6c:9d:9f:d5:01:
         9d:2c:fd:f4:23:70:a8:1a:6a:bb:83:ec:46:8b:76:78:c8:23:
         6f:1e:3d:bd:9d:62:c7:8a:9b:bd:44:7b:6e:85:56:94:93:07:
         cd:21:40:15:dc:b7:69:b2:28:19:53:c5:c8:c1:02:63:5e:c9:
         85:2f:e5:b1:13:48:b1:5a:78:4b:aa:58:3f:b0:f7:ec:df:22:
         6a:93:03:70:ef:9b:18:23:21:b2:c6:f8:74:9c:55:b9:09:0c:
         c4:cf:87:73:de:1f:c6:47:73:91:ef:5c:df:b3:1b:fa:1a:93:
         34:df:4b:33:65:a8:3d:03:59:93:10:5f:69:75:f7:ee:7f:48:
         05:03:2c:17:a5:77:ce:33:f0:88:8d:1b:f3:8f:a8:13:76:57:
         2c:17:e9:a9:e5:58:18:94:67:04:ca:db:18:40:27:b8:ae:4d:
         8b:00:56:b8:5b:b4:c6:b9:11:79:e7:b3:24:24:d8:ea:50:74:
         aa:d4:41:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:24 2026 by rpki-client