Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a346330303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a346330303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          6i3LhR9Xgguug7SniqnSmTqL9sgIzqhAvfe0vxW3bPU=
Subject key identifier:   8B:B3:3F:53:77:64:F0:E1:B5:D8:9D:4F:A1:B5:64:72:84:9F:96:80
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       3DCB39EAEB3CB81450197220698D78ED2230BC00
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a346330303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:51:25 +0000
ROA not before:           Fri 10 Jul 2026 13:46:25 +0000
ROA not after:            Fri 09 Jul 2027 13:51:25 +0000
asID:                     263629
IP address blocks:        2804:104c:4c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:cb:39:ea:eb:3c:b8:14:50:19:72:20:69:8d:78:ed:22:30:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:46:25 2026 GMT
            Not After : Jul  9 13:51:25 2027 GMT
        Subject: CN=8BB33F537764F0E1B5D89D4FA1B56472849F9680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:72:d2:bf:29:b4:6a:35:8c:56:67:8c:80:2d:
                    95:d7:d8:e3:87:0c:7a:d2:b5:4a:26:10:21:5b:7f:
                    66:b4:d3:c0:c5:d4:f1:37:31:1a:07:a7:33:41:8b:
                    e6:34:9c:c5:85:69:c5:00:e5:cc:05:e5:03:0f:69:
                    ff:84:e2:be:95:f5:22:8a:2c:11:e6:de:ce:f3:5f:
                    98:3a:23:80:16:46:a9:b4:a2:70:dc:82:7e:06:42:
                    8f:15:2a:ac:e3:27:b3:31:1c:4e:fe:ce:b1:25:78:
                    37:3e:98:ab:d0:ee:85:a6:1c:97:4e:9c:b8:8e:5d:
                    94:ab:16:48:99:0a:86:0c:d9:1c:b8:13:68:02:60:
                    5f:e3:06:50:16:8d:a9:8e:67:a3:0c:26:9d:26:15:
                    37:47:2d:f2:d2:bd:b7:ef:8a:0d:5c:0d:6c:2a:36:
                    67:47:e7:93:ea:64:bc:ab:ee:32:65:65:5c:97:33:
                    8d:c4:13:67:59:f4:32:77:1b:a6:ab:42:d4:10:ed:
                    96:bc:dd:80:a4:6f:48:73:7e:0f:45:fe:63:c0:cb:
                    e9:73:ad:0a:c3:39:ca:9f:11:ef:14:21:ae:4d:f4:
                    8d:d0:a5:78:b8:50:87:cd:b0:c6:4b:12:93:f0:01:
                    94:53:23:12:f5:d8:0d:4c:bd:ea:68:b3:4b:75:27:
                    8c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B3:3F:53:77:64:F0:E1:B5:D8:9D:4F:A1:B5:64:72:84:9F:96:80
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a346330303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:4c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:df:c5:9c:bf:1d:81:1f:1f:db:81:ba:e5:36:79:98:a3:e0:
         44:7b:18:94:3f:c0:0e:0d:c9:99:5d:c3:cc:67:d2:b2:47:da:
         2e:58:e3:c2:29:28:9c:a1:70:16:53:88:c1:0f:b5:41:b1:33:
         a6:d8:8c:0e:ac:01:a2:ee:7d:a9:7e:a9:1c:44:66:12:b7:96:
         c7:95:f3:0b:0e:4a:5b:5a:4a:b9:c0:e0:a4:e6:2f:0d:f4:44:
         eb:48:02:55:f0:0f:78:2f:72:12:54:bc:73:c1:76:83:a7:45:
         c9:e8:e6:13:f0:c1:eb:bd:2d:01:0c:86:dc:86:58:d3:3a:f7:
         a4:c3:49:9e:50:10:06:bc:16:94:5c:87:99:e0:1d:f1:0d:0b:
         2e:86:d1:f0:e0:15:ed:17:5b:f5:66:85:de:44:c0:b3:ec:a7:
         0d:07:f6:4c:cc:68:50:24:53:ce:fd:43:c3:90:0c:cc:87:38:
         1f:0b:81:ea:3f:53:66:86:5c:6e:3e:fa:f2:16:44:ec:21:58:
         bd:87:45:be:49:c0:fb:49:e0:e3:46:eb:00:ec:db:da:cf:f6:
         70:5d:c3:f2:73:e9:28:16:58:37:b5:0f:2e:3e:1d:92:c1:4e:
         d1:25:7b:50:18:7b:a4:f5:fe:f9:a8:0f:8d:79:fb:6d:39:8f:
         45:9d:93:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:30:26 2026 by rpki-client