Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a3430303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a3430303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          Q/3nh4ulb7uEB4Mv6fkhfLKixwpttGsEojV+DoNBwm0=
Subject key identifier:   02:C6:DA:3D:CE:50:89:D7:0E:39:26:E4:45:DD:16:B9:9F:20:72:20
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       55BD16F00F3C2B91E8DCE2BFFCFC3847C258A655
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a3430303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:50:58 +0000
ROA not before:           Fri 10 Jul 2026 13:45:58 +0000
ROA not after:            Fri 09 Jul 2027 13:50:58 +0000
asID:                     263629
IP address blocks:        2804:104c:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bd:16:f0:0f:3c:2b:91:e8:dc:e2:bf:fc:fc:38:47:c2:58:a6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:45:58 2026 GMT
            Not After : Jul  9 13:50:58 2027 GMT
        Subject: CN=02C6DA3DCE5089D70E3926E445DD16B99F207220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ef:91:47:f6:13:94:d0:4f:ac:83:51:ec:93:
                    f0:e4:32:a9:c5:98:79:d1:0d:f9:a6:af:05:c0:69:
                    96:14:19:a9:26:87:93:d5:cf:b8:bd:54:3f:cc:fd:
                    c8:64:6e:b3:be:61:66:6b:6b:a3:87:68:f3:78:71:
                    53:55:e2:1b:2e:b3:56:91:c8:a7:35:47:86:0c:69:
                    31:a2:3b:d0:ba:bc:e0:34:62:1b:37:24:5a:a3:1d:
                    60:f7:15:40:36:a6:c4:f4:fe:c8:b4:58:1d:ed:68:
                    6f:77:bc:19:fd:92:10:fd:01:27:a0:62:81:5d:02:
                    97:26:50:9e:81:92:41:75:1e:e6:67:f6:da:ff:99:
                    03:ec:13:6f:0a:5a:67:be:4e:a7:07:5c:25:9e:a5:
                    42:f6:c5:bb:aa:b8:f6:8f:76:38:9b:37:c5:f4:6d:
                    f9:7b:3d:7a:39:1d:c1:fb:fd:33:c7:fc:5a:0d:69:
                    8c:1c:1a:88:70:e4:6c:85:97:7a:eb:5b:67:82:12:
                    55:0d:fb:6c:ed:aa:65:84:00:f4:7b:ea:9e:e5:0f:
                    06:4f:df:bb:cc:4a:3c:8b:b7:17:b0:2b:24:9a:4d:
                    a4:de:39:c7:2e:c1:73:83:d1:6e:f6:b5:87:ae:0a:
                    57:3c:92:53:e2:69:77:00:77:0f:ce:90:9b:04:3f:
                    90:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C6:DA:3D:CE:50:89:D7:0E:39:26:E4:45:DD:16:B9:9F:20:72:20
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a3430303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:d7:3b:fb:68:ef:49:89:be:4d:50:e5:8a:bb:be:d0:41:18:
         e7:32:59:1e:31:f4:a2:33:00:d4:b4:4b:fc:b8:19:dd:d9:9d:
         ce:e8:6d:98:02:5c:ad:7d:f8:99:2e:5a:68:54:10:01:63:6e:
         9d:0d:49:70:b3:89:c9:bd:f6:76:04:32:7a:df:e0:ed:2c:28:
         57:c4:8b:4a:c7:51:ea:b8:f0:c0:58:66:1d:28:c6:4d:c2:76:
         84:45:03:e8:1c:f2:03:c1:8f:57:7c:62:7b:46:d5:44:4a:a5:
         bc:eb:a1:8f:86:3b:f1:77:c5:82:e9:54:60:d7:a2:41:92:3d:
         77:7c:ee:a8:cf:18:4b:54:59:bb:dc:74:1f:38:b7:b3:29:f4:
         97:05:3a:0b:89:11:d3:da:d4:e3:36:d6:0c:78:83:14:f2:e2:
         30:b8:af:b3:88:96:82:4c:e4:25:6c:7b:5d:c3:48:f1:b8:6c:
         e4:62:b1:95:dd:93:6e:1e:e4:c3:9c:00:9f:32:33:2f:4b:b8:
         cb:9f:ab:7a:87:74:12:0d:6b:1a:cf:9f:0e:8f:8c:7f:db:01:
         22:06:12:d2:db:ae:2b:b4:5c:d0:41:40:e8:f0:bd:da:ef:d0:
         c3:e2:9d:0c:6e:6d:bd:e9:a8:3b:81:15:c8:b4:b9:fa:93:d0:
         a1:57:76:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:23:37 2026 by rpki-client