Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/323830343a333862633a3930303a3a2f34302d3430203d3e20323636343938.roa
File:                     323830343a333862633a3930303a3a2f34302d3430203d3e20323636343938.roa (raw, json)
Hash identifier:          6WWcrZet5dlch9nneoAfOzTku7YFRQIFxoN+gayNzAs=
Subject key identifier:   D9:51:F3:3E:33:FE:C4:8C:46:71:E7:C6:DD:39:4A:3A:CD:90:56:1C
Certificate issuer:       /CN=B4EEB7C002647F9F4D976BA898697B33B698C485
Certificate serial:       5D64012BB6C7D9D2A14D07CC2236DEB2227D6841
Authority key identifier: B4:EE:B7:C0:02:64:7F:9F:4D:97:6B:A8:98:69:7B:33:B6:98:C4:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/323830343a333862633a3930303a3a2f34302d3430203d3e20323636343938.roa
Signing time:             Fri 17 Jul 2026 14:29:22 +0000
ROA not before:           Fri 17 Jul 2026 14:24:22 +0000
ROA not after:            Fri 16 Jul 2027 14:29:22 +0000
asID:                     266498
IP address blocks:        2804:38bc:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.crl
                          rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:64:01:2b:b6:c7:d9:d2:a1:4d:07:cc:22:36:de:b2:22:7d:68:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4EEB7C002647F9F4D976BA898697B33B698C485
        Validity
            Not Before: Jul 17 14:24:22 2026 GMT
            Not After : Jul 16 14:29:22 2027 GMT
        Subject: CN=D951F33E33FEC48C4671E7C6DD394A3ACD90561C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a0:76:80:29:65:14:7d:0a:b7:8f:fe:6e:97:
                    1a:6f:c1:5a:9f:74:53:14:70:1a:33:8a:c2:fd:85:
                    9c:04:d3:10:cc:85:4b:cc:1a:23:b2:c2:6e:f5:29:
                    ed:25:62:e3:bd:7d:58:1d:f6:e9:3e:72:d1:2d:6f:
                    0c:ce:59:4b:72:63:2e:33:e7:28:28:a8:f0:f1:76:
                    54:1a:ca:1d:80:2c:d0:04:40:1d:10:e7:65:c7:37:
                    cf:c8:42:12:23:7e:d4:79:a0:f5:6c:58:2a:3d:7f:
                    88:6a:be:56:eb:24:e9:f0:cb:5f:d2:ef:1c:55:ad:
                    b1:c8:61:bc:50:92:7c:02:a3:6e:de:8f:b5:fc:2d:
                    a6:d4:f4:63:ed:40:ec:c9:76:a7:b0:f0:64:3c:6f:
                    48:21:8f:52:c4:6a:06:70:c1:de:48:4a:83:db:e6:
                    fa:4b:f4:50:52:86:16:41:d2:bf:de:41:50:81:bf:
                    df:a1:b5:23:1d:44:a8:76:36:c4:c9:c6:fa:3c:db:
                    0f:ed:68:7c:3e:ce:eb:3e:31:4e:43:f9:3b:0b:1a:
                    41:cb:a0:6a:90:63:11:14:42:40:91:68:e8:78:25:
                    5d:98:2a:5a:bc:08:10:6c:6f:91:f2:9b:1e:c0:26:
                    37:e7:1e:7e:da:40:3a:b2:a0:2f:86:9d:66:2d:b5:
                    ae:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:51:F3:3E:33:FE:C4:8C:46:71:E7:C6:DD:39:4A:3A:CD:90:56:1C
            X509v3 Authority Key Identifier:
                keyid:B4:EE:B7:C0:02:64:7F:9F:4D:97:6B:A8:98:69:7B:33:B6:98:C4:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/323830343a333862633a3930303a3a2f34302d3430203d3e20323636343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38bc:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:51:99:6f:80:f0:75:70:5e:94:03:2d:04:73:c0:ae:de:17:
         dc:2e:84:72:1f:fc:b5:75:44:6d:ca:47:64:1a:3e:e7:2b:e5:
         1a:3d:42:ef:5c:5c:78:3c:d3:a7:38:86:74:64:04:ce:48:c3:
         49:d1:cf:60:6a:27:de:af:47:bb:48:73:0f:31:3b:2b:b2:f7:
         f5:07:34:26:6b:ab:cb:f6:1a:c5:c9:66:e1:8d:03:5f:78:9f:
         8d:2f:31:9b:34:2f:5e:63:bb:df:23:07:ee:6f:87:d2:4a:fb:
         51:fa:dd:3f:fc:10:f8:7a:59:12:a3:50:69:a8:47:32:60:13:
         55:77:21:f9:c9:00:35:3d:73:0e:3f:68:d7:63:a3:48:8d:11:
         a2:87:b9:12:39:1a:77:b3:13:f8:59:04:0a:72:93:8e:b2:bb:
         2a:78:ca:2d:28:67:a9:cd:1f:2f:ca:89:00:39:68:1a:83:18:
         c1:89:71:f6:b0:77:02:fb:27:bd:70:40:68:d7:5b:1b:1d:45:
         89:89:43:03:6c:90:87:ae:ee:e9:fe:e9:ad:b4:cc:a0:9e:2c:
         61:7b:29:22:ce:66:be:61:94:20:8d:c6:cc:20:7c:e9:15:d1:
         fb:a4:7b:f9:c1:58:24:d9:b2:f6:2c:b3:9d:10:96:99:1b:d3:
         8c:6e:ea:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:49:57 2026 by rpki-client