Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a323830303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a323830303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          MuDNXgceEpNRiHtoGmDQLFmJRxekQZr2fIfzg3rDgyg=
Subject key identifier:   F7:A7:9E:CC:EF:14:5F:E1:A7:0D:12:1F:E8:4E:1A:E0:5C:B7:6A:E3
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       252A88A31A44D9DECAD603134F6F0D53AA19DB02
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a323830303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:50:40 +0000
ROA not before:           Fri 10 Jul 2026 13:45:40 +0000
ROA not after:            Fri 09 Jul 2027 13:50:40 +0000
asID:                     263629
IP address blocks:        2804:104c:2800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2a:88:a3:1a:44:d9:de:ca:d6:03:13:4f:6f:0d:53:aa:19:db:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:45:40 2026 GMT
            Not After : Jul  9 13:50:40 2027 GMT
        Subject: CN=F7A79ECCEF145FE1A70D121FE84E1AE05CB76AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:51:9a:ae:45:7a:9a:78:a1:3c:0a:4f:21:
                    bc:a0:cf:f4:90:87:66:aa:fd:b6:6b:93:e9:bd:f8:
                    47:b3:c2:62:b0:f0:39:86:98:5b:09:ed:3a:4c:3c:
                    6b:48:a6:a2:fe:12:7c:1c:b0:e9:2a:e3:f8:be:d0:
                    90:59:08:e1:73:60:b1:83:cc:bd:64:52:c1:87:c1:
                    d0:a5:7a:8f:1f:9f:d9:47:cf:0e:46:b8:cb:80:f3:
                    6f:07:37:7f:06:35:f1:74:87:e3:cd:9d:e3:cc:40:
                    2d:23:07:8e:80:56:55:8f:20:d2:4f:17:26:b1:0c:
                    be:76:67:1b:d9:ff:64:66:65:b6:19:69:6d:22:2a:
                    49:f9:32:61:3d:1c:b3:25:bb:0f:4f:16:7c:23:6c:
                    26:90:f4:5b:fa:a0:44:2c:6e:3f:3b:9c:ad:ef:fc:
                    7d:53:56:e1:41:42:5f:f0:ad:71:8f:54:bd:33:5d:
                    9c:86:74:f8:1c:78:24:f0:e8:e7:bc:a7:47:aa:c1:
                    90:30:36:0e:b6:59:d9:09:8c:6c:d9:0b:57:8f:92:
                    fd:0c:90:14:44:3c:ef:89:ad:76:ef:22:74:0f:25:
                    27:a0:ea:ac:16:9b:ff:2f:73:70:fe:8c:3d:b0:2a:
                    81:99:0f:48:39:c9:03:72:9a:09:1a:37:fc:ea:ca:
                    c3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A7:9E:CC:EF:14:5F:E1:A7:0D:12:1F:E8:4E:1A:E0:5C:B7:6A:E3
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a323830303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:2800::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:32:59:a3:15:88:fd:26:be:5c:ea:0e:19:8a:cf:5f:32:fd:
         3b:3c:1a:4b:54:0a:c0:46:0d:e1:c4:64:0f:8a:32:5a:b7:a0:
         aa:91:6e:81:06:05:d2:b3:1a:c9:9e:73:a5:34:c5:a2:7f:d0:
         8a:2f:db:9f:29:5b:b5:9c:ec:4e:7c:b6:67:bd:01:03:14:ef:
         9d:8f:9c:6d:26:1e:71:e9:ac:4d:97:86:64:d0:09:04:78:5c:
         d5:18:4c:fa:8f:78:f1:16:9c:ae:1d:d8:9f:ae:be:bf:2c:eb:
         69:4c:fd:8d:b8:ea:7f:80:11:dc:60:bc:41:1e:72:b0:aa:b1:
         94:0b:5e:15:57:29:1d:50:9e:2d:6f:9e:79:ac:a5:53:bf:c4:
         95:9f:72:8c:5d:61:83:c0:d4:b3:fc:6a:1d:ed:90:df:39:2e:
         b3:62:54:b5:c4:f0:2c:9e:92:ec:8d:9a:3a:69:51:ca:60:41:
         f4:8a:a3:3a:ba:28:a5:af:22:f7:0d:2e:67:d5:4c:2d:e5:3b:
         ee:12:53:7f:56:fd:2e:4e:43:d0:64:89:80:1a:07:b1:ff:6f:
         b8:52:c6:bb:73:0e:3a:91:3d:71:86:00:d3:93:59:b2:10:9d:
         91:f0:71:6f:f0:12:b1:bf:13:34:ae:0c:26:6d:e3:fb:6a:3c:
         c1:dd:73:0c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJSqIoxpE2d7K1gMTT28NU6oZ2wIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFCREE3MDYyMjQ2M0FFREQxRUQ3MjBGNTZFM0VCODI5
NEY3ODU3NzAeFw0yNjA3MTAxMzQ1NDBaFw0yNzA3MDkxMzUwNDBaMDMxMTAvBgNV
BAMTKEY3QTc5RUNDRUYxNDVGRTFBNzBEMTIxRkU4NEUxQUUwNUNCNzZBRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0TFGarkV6mnihPApPIbygz/SQ
h2aq/bZrk+m9+EezwmKw8DmGmFsJ7TpMPGtIpqL+EnwcsOkq4/i+0JBZCOFzYLGD
zL1kUsGHwdCleo8fn9lHzw5GuMuA828HN38GNfF0h+PNnePMQC0jB46AVlWPINJP
FyaxDL52ZxvZ/2RmZbYZaW0iKkn5MmE9HLMluw9PFnwjbCaQ9Fv6oEQsbj87nK3v
/H1TVuFBQl/wrXGPVL0zXZyGdPgceCTw6Oe8p0eqwZAwNg62WdkJjGzZC1ePkv0M
kBREPO+JrXbvInQPJSeg6qwWm/8vc3D+jD2wKoGZD0g5yQNymgkaN/zqysObAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU96eezO8UX+GnDRIf6E4a4Fy3auMwHwYDVR0j
BBgwFoAUir2nBiJGOu3R7XIPVuPrgpT3hXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhOTlpuWWNBZGROQ0JuVW1uV3JDRzRhajJvdkpaSGJKcTlNbVJndzlj
WGsvMC84QUJEQTcwNjIyNDYzQUVERDFFRDcyMEY1NkUzRUI4Mjk0Rjc4NTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBQkRBNzA2MjI0NjNBRURE
MUVENzIwRjU2RTNFQjgyOTRGNzg1NzcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoTk5ablljQWRkTkNCblVtbldyQ0c0YWoyb3ZKWkhiSnE5TW1SZ3c5Y1hrLzAv
MzIzODMwMzQzYTMxMzAzNDYzM2EzMjM4MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzMzM2MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEEEwoMA0GCSqGSIb3DQEBCwUA
A4IBAQAuMlmjFYj9Jr5c6g4Zis9fMv07PBpLVArARg3hxGQPijJat6CqkW6BBgXS
sxrJnnOlNMWif9CKL9ufKVu1nOxOfLZnvQEDFO+dj5xtJh5x6axNl4Zk0AkEeFzV
GEz6j3jxFpyuHdifrr6/LOtpTP2NuOp/gBHcYLxBHnKwqrGUC14VVykdUJ4tb555
rKVTv8SVn3KMXWGDwNSz/God7ZDfOS6zYlS1xPAsnpLsjZo6aVHKYEH0iqM6uiil
ryL3DS5n1Uwt5TvuElN/Vv0uTkPQZImAGgex/2+4Usa7cw46kT1xhgDTk1myEJ2R
8HFv8BKxvxM0rgwmbeP7ajzB3XMM
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:02 2026 by rpki-client