Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/323830343a333862633a6130303a3a2f34302d3430203d3e20323636343938.roa
File:                     323830343a333862633a6130303a3a2f34302d3430203d3e20323636343938.roa (raw, json)
Hash identifier:          CqtUEj4hLZkCD00OHpd2JQC1m3flw8g4m2/uLmpNEBc=
Subject key identifier:   7B:C2:87:0D:46:45:9E:AD:40:27:16:A4:6A:D5:0A:B3:11:F1:EA:31
Certificate issuer:       /CN=B4EEB7C002647F9F4D976BA898697B33B698C485
Certificate serial:       7218FD106DA587EA0F926A849FBE1797AB10A9D5
Authority key identifier: B4:EE:B7:C0:02:64:7F:9F:4D:97:6B:A8:98:69:7B:33:B6:98:C4:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/323830343a333862633a6130303a3a2f34302d3430203d3e20323636343938.roa
Signing time:             Fri 17 Jul 2026 14:29:23 +0000
ROA not before:           Fri 17 Jul 2026 14:24:23 +0000
ROA not after:            Fri 16 Jul 2027 14:29:23 +0000
asID:                     266498
IP address blocks:        2804:38bc:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.crl
                          rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:18:fd:10:6d:a5:87:ea:0f:92:6a:84:9f:be:17:97:ab:10:a9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4EEB7C002647F9F4D976BA898697B33B698C485
        Validity
            Not Before: Jul 17 14:24:23 2026 GMT
            Not After : Jul 16 14:29:23 2027 GMT
        Subject: CN=7BC2870D46459EAD402716A46AD50AB311F1EA31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:90:28:1c:d0:81:b3:df:ff:4e:fd:80:c3:f9:
                    d6:58:fa:d3:82:61:09:a6:85:4c:ff:76:11:f7:59:
                    e9:25:c6:28:f1:88:5a:16:eb:cf:4b:f1:88:00:b4:
                    e4:fa:75:25:2a:a5:1a:e6:a7:c3:66:09:7b:10:e7:
                    36:fd:1e:e0:21:5b:01:3d:05:eb:3e:7a:34:72:cd:
                    60:aa:ff:4b:49:54:12:36:4c:49:18:d0:5b:59:46:
                    6c:e1:ae:c0:c4:6e:f2:63:9f:c5:62:97:b2:fc:c3:
                    44:54:5a:9a:a2:ff:59:82:eb:9a:74:00:c6:62:7d:
                    94:f1:a8:9d:fe:05:e4:ab:a0:24:93:1c:e7:8d:c7:
                    34:44:40:7c:bd:16:81:36:36:9c:6a:14:5b:32:ad:
                    e0:a7:f4:8e:8d:e8:4c:92:99:ae:a2:42:d8:a8:6e:
                    33:f4:c9:df:36:5a:5c:d3:3d:62:66:d4:e5:77:e0:
                    10:72:93:28:b9:44:db:d2:ba:36:0e:bc:ec:09:7d:
                    0a:63:ce:9f:c0:75:5e:d4:73:5f:54:4b:92:2f:85:
                    48:26:34:ff:bb:df:af:d5:49:65:2b:49:80:ab:62:
                    47:fb:76:a9:a2:5b:4d:9f:d8:48:92:51:40:1c:7c:
                    32:ca:48:5c:7a:29:aa:8b:ec:ed:80:01:fe:14:8c:
                    50:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C2:87:0D:46:45:9E:AD:40:27:16:A4:6A:D5:0A:B3:11:F1:EA:31
            X509v3 Authority Key Identifier:
                keyid:B4:EE:B7:C0:02:64:7F:9F:4D:97:6B:A8:98:69:7B:33:B6:98:C4:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/B4EEB7C002647F9F4D976BA898697B33B698C485.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EEB7C002647F9F4D976BA898697B33B698C485.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/0/323830343a333862633a6130303a3a2f34302d3430203d3e20323636343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38bc:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:59:dc:31:1a:f8:de:cd:69:09:55:48:3e:9e:23:00:93:a4:
         f3:08:b7:21:39:b8:cc:0d:72:f4:9d:aa:65:d4:bd:50:07:98:
         b5:a2:7a:c6:87:70:42:a4:56:bd:6e:58:cf:8a:57:b2:dc:1f:
         3c:0a:a8:40:14:ba:b6:2d:cf:e8:5b:1b:6d:ab:eb:cb:08:da:
         8e:1a:06:8e:fe:4c:1c:60:fa:d7:02:25:b3:bc:a6:57:21:49:
         37:56:38:08:54:13:b6:f6:8d:d1:a1:88:8e:36:cb:da:ac:32:
         9d:c9:5d:ed:3d:c0:8d:24:02:d9:57:f6:16:ed:88:7e:0f:8a:
         3e:cd:ae:df:71:4b:55:07:c7:78:6b:54:c7:c4:fe:73:89:00:
         de:d0:9d:e6:5f:9e:f9:cc:3a:c7:fa:82:5d:ff:1d:5f:b0:2e:
         a8:0f:f0:fc:26:e3:08:31:3e:07:3d:d7:d7:68:1e:b7:b5:b8:
         73:b1:ea:5c:33:0a:a4:84:57:16:7d:31:71:f1:d6:f9:f8:8d:
         17:e9:55:c0:fb:0e:5a:b9:5a:80:ec:1b:38:64:d3:40:21:60:
         4f:08:80:8a:51:1a:c2:09:17:36:a8:24:75:20:8b:55:2b:04:
         3a:c7:80:92:69:91:03:f4:de:e9:b2:a5:66:14:50:fc:4d:22:
         db:c3:f4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:49:58 2026 by rpki-client