Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/323830343a316466343a3a2f33342d3334203d3e203532393437.roa
File:                     323830343a316466343a3a2f33342d3334203d3e203532393437.roa (raw, json)
Hash identifier:          R/mU8VZzkTpUOr+ojlpiAOmBVw+v3cC4q2j0cNa7Loc=
Subject key identifier:   A9:8A:86:54:97:7B:95:9D:52:AC:69:0F:61:79:E4:F4:7E:9D:8A:69
Certificate issuer:       /CN=2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75
Certificate serial:       21EC573FC88A154FCCBC5A63B06CC9F74A874097
Authority key identifier: 2D:35:57:8C:A2:1C:6C:8E:82:AB:F9:0B:55:A2:1F:DC:04:B4:FF:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/323830343a316466343a3a2f33342d3334203d3e203532393437.roa
Signing time:             Fri 17 Jul 2026 13:03:38 +0000
ROA not before:           Fri 17 Jul 2026 12:58:38 +0000
ROA not after:            Fri 16 Jul 2027 13:03:38 +0000
asID:                     52947
IP address blocks:        2804:1df4::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.crl
                          rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ec:57:3f:c8:8a:15:4f:cc:bc:5a:63:b0:6c:c9:f7:4a:87:40:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75
        Validity
            Not Before: Jul 17 12:58:38 2026 GMT
            Not After : Jul 16 13:03:38 2027 GMT
        Subject: CN=A98A8654977B959D52AC690F6179E4F47E9D8A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c3:67:18:62:e0:8c:e4:d6:99:ed:3f:45:37:
                    81:0b:49:cc:34:c0:b0:a0:dd:fc:f6:19:3e:45:ea:
                    ad:99:17:de:4d:48:9b:6c:6c:0e:60:ec:46:77:75:
                    31:ba:fb:45:25:14:65:0b:bf:0c:fa:c6:4d:a5:38:
                    18:56:89:9a:e5:8a:6b:f0:f6:1e:95:10:0b:3e:ac:
                    33:d5:dc:12:a1:f4:18:d8:60:b9:7a:41:71:4e:6c:
                    e8:4a:27:22:6e:78:74:a8:2b:01:01:9e:60:ff:ab:
                    70:1a:d7:64:31:17:1b:2a:ca:58:d8:7e:0b:55:4f:
                    3e:16:91:d3:fe:2d:6c:6f:86:b3:4e:7b:2a:ec:5b:
                    8b:76:e2:8d:32:c0:63:5d:7c:a6:ea:72:65:5b:e2:
                    39:db:10:5d:a2:72:a5:b6:36:ff:4c:9f:bc:d8:62:
                    e4:d4:6f:ed:1d:60:b4:dc:9f:71:27:71:2d:7a:ed:
                    6c:15:ee:bb:bc:c3:32:61:2e:70:6a:ab:da:98:db:
                    14:93:3f:0c:60:68:b5:d3:cd:64:26:ad:f8:06:0c:
                    27:df:06:e6:ec:f4:91:71:4e:e4:6a:44:c1:be:b9:
                    3b:35:71:1b:41:07:74:68:70:c3:0e:06:cd:aa:46:
                    4c:40:90:ed:98:32:19:de:b5:e0:d0:dc:26:12:e0:
                    de:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8A:86:54:97:7B:95:9D:52:AC:69:0F:61:79:E4:F4:7E:9D:8A:69
            X509v3 Authority Key Identifier:
                keyid:2D:35:57:8C:A2:1C:6C:8E:82:AB:F9:0B:55:A2:1F:DC:04:B4:FF:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/323830343a316466343a3a2f33342d3334203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1df4::/34

    Signature Algorithm: sha256WithRSAEncryption
         33:f5:6c:83:84:e6:61:7d:93:4e:9b:ce:8e:26:a6:36:5b:b9:
         d2:4a:17:75:7c:fe:28:05:da:f9:41:fa:49:c2:27:f9:50:b8:
         86:47:f5:1e:52:95:8b:02:ee:b1:91:b2:d7:a3:d1:b8:de:44:
         d3:12:48:a4:f1:2c:1d:85:16:06:8f:f3:ed:46:0e:94:d4:99:
         ca:3e:6b:63:97:d9:97:32:4b:37:e5:7d:5c:83:c5:e1:cf:ff:
         ac:bf:72:8c:92:aa:bc:ea:ad:5e:d4:01:94:07:4a:fd:1d:17:
         98:bd:24:a5:99:43:93:60:6c:c9:a6:46:b8:a1:b5:c3:d8:bc:
         ed:81:3e:db:7e:48:06:e8:5a:d3:8b:d7:3f:b4:72:f0:f0:b7:
         fd:93:ce:ca:14:1b:5d:28:f3:c5:0f:78:e7:8c:4d:96:10:0e:
         eb:6b:3f:0a:12:12:46:47:dc:4e:d4:ad:29:38:fe:57:a0:8a:
         3b:dc:df:96:f3:11:ae:50:aa:15:03:bf:6f:3d:4a:c1:80:27:
         58:77:69:58:4e:f8:de:17:0f:fc:32:59:9f:09:12:3d:c8:9a:
         4c:68:9b:15:2e:4b:19:77:9f:14:d7:79:83:33:9a:3e:48:50:
         fc:95:26:a7:59:60:40:b0:f0:1a:f8:8b:0e:45:ea:7f:43:20:
         1d:e2:78:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:49:51 2026 by rpki-client