Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a323430303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a323430303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          extUgjzKWtzUG3oIhpC66XN5M3ifYqr1u8hntErSeIg=
Subject key identifier:   69:C9:B3:3E:C6:FC:38:5B:D7:11:1F:D8:B3:A3:94:9E:71:23:3F:82
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       0FF0E963BC29CD91E8DADACE397E61CD2E585BB3
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a323430303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:50:36 +0000
ROA not before:           Fri 10 Jul 2026 13:45:36 +0000
ROA not after:            Fri 09 Jul 2027 13:50:36 +0000
asID:                     263629
IP address blocks:        2804:104c:2400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f0:e9:63:bc:29:cd:91:e8:da:da:ce:39:7e:61:cd:2e:58:5b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:45:36 2026 GMT
            Not After : Jul  9 13:50:36 2027 GMT
        Subject: CN=69C9B33EC6FC385BD7111FD8B3A3949E71233F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f8:99:99:96:cf:1c:6a:96:d2:9f:f0:7b:64:
                    b9:e4:47:37:7f:91:34:66:88:03:6d:ab:d8:4f:8f:
                    da:e7:77:42:f5:87:3c:3e:f3:59:f4:72:9d:5b:a4:
                    db:e0:5e:6c:59:95:3d:fc:d3:f7:c4:20:5d:7c:2c:
                    92:05:ff:fd:0f:3b:2c:0b:5d:07:b8:d9:00:b7:0f:
                    37:78:9b:07:25:d7:af:d7:2e:80:5b:fb:89:a1:f3:
                    ae:e0:c8:d1:25:68:f3:9c:b2:a3:2d:5d:a5:ae:ce:
                    26:bd:8d:a2:09:bc:50:c5:17:ae:d9:7c:6e:4f:84:
                    30:a9:7c:3a:e5:cc:38:48:da:a6:86:47:83:f6:28:
                    dc:5a:11:c4:c8:34:bd:61:1f:55:1a:35:26:6a:b6:
                    ee:1d:ae:77:c5:04:cd:d2:71:19:62:18:e7:78:7e:
                    66:a8:a8:5a:1c:bf:e1:81:d1:fd:64:f5:18:f7:69:
                    c1:5c:5a:4b:32:3a:93:42:02:07:c4:06:1e:43:90:
                    0d:9e:1e:5c:bc:9b:c7:d7:75:ab:b4:0a:74:ac:b3:
                    5e:09:d1:f0:6b:09:35:4e:f0:86:ab:b2:f4:79:f9:
                    a4:47:02:b3:1f:23:34:ef:b6:7e:0d:14:08:87:4a:
                    d1:32:38:64:51:02:4e:f0:a7:e3:68:a2:56:a5:c3:
                    46:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C9:B3:3E:C6:FC:38:5B:D7:11:1F:D8:B3:A3:94:9E:71:23:3F:82
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a323430303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:2400::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:f5:51:02:7a:c2:03:3e:5e:00:c4:cb:ca:43:56:cd:92:65:
         52:2e:bc:69:65:b7:92:49:cc:ae:86:b3:11:2f:67:e0:59:e8:
         ba:01:9c:4f:31:d6:f3:44:b5:1f:51:a9:4c:82:86:58:1e:06:
         b9:56:56:60:e9:22:65:a8:e1:bf:3c:61:14:d1:56:21:9a:f6:
         00:db:63:f4:2f:5f:01:6b:e7:d5:5a:ad:32:9e:39:2c:52:9d:
         58:16:67:dc:2d:9c:86:e7:43:4b:6c:c3:56:6f:76:90:1d:d0:
         45:df:9d:cb:69:f6:e3:09:fa:a4:a8:c1:4c:68:2d:9e:4a:03:
         d3:19:a6:d8:74:15:07:97:78:ec:33:3b:c5:c4:f0:54:3d:2b:
         ba:c7:61:de:60:39:1f:40:af:6c:2f:ae:80:23:75:93:3d:aa:
         c4:95:bf:56:c3:00:6f:9c:c7:b0:07:49:58:2e:bb:ca:36:71:
         a2:cc:ae:cc:ad:2c:60:46:cb:a1:7f:05:09:ff:c7:5c:1d:bd:
         02:c2:53:ab:ed:fa:f8:a0:c9:c4:2d:36:88:43:81:63:ba:df:
         c9:a7:35:18:40:82:5f:a1:2a:89:11:9e:a7:ca:b7:ca:41:ed:
         08:f8:b4:71:8b:6c:a7:91:12:fe:3d:49:45:89:c3:f6:76:f7:
         46:25:7d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:01 2026 by rpki-client