Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a386330303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a386330303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          dUdmFeq4pW0gjJcBH9pQNOOUV+mT/lJM+AOfcZXKV1M=
Subject key identifier:   35:A4:99:87:C9:C4:95:39:49:2F:D9:38:46:50:02:4A:08:26:19:CA
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       1B40CFB54C6D7FD21F35E4287DCD7CEEE6F76BA9
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a386330303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:52:41 +0000
ROA not before:           Fri 10 Jul 2026 13:47:41 +0000
ROA not after:            Fri 09 Jul 2027 13:52:41 +0000
asID:                     263629
IP address blocks:        2804:104c:8c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:40:cf:b5:4c:6d:7f:d2:1f:35:e4:28:7d:cd:7c:ee:e6:f7:6b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:47:41 2026 GMT
            Not After : Jul  9 13:52:41 2027 GMT
        Subject: CN=35A49987C9C49539492FD9384650024A082619CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d8:96:d9:d4:33:4e:21:39:03:ee:ad:44:ea:
                    67:f2:83:02:57:43:a3:03:f8:12:09:0b:64:81:68:
                    93:9f:98:c2:d5:8b:9c:bf:a1:69:c6:f6:81:3a:87:
                    49:ab:01:12:be:f6:41:b7:6c:23:34:7d:20:7b:7e:
                    d5:b8:cf:3c:ac:35:d8:a6:bb:f1:5b:0a:99:e2:7b:
                    0c:35:b2:c2:88:34:e8:d3:f2:e2:0e:17:68:58:28:
                    0c:12:d2:f9:ab:9b:02:73:42:4c:a4:c7:5a:fa:e7:
                    a0:e9:17:a0:6a:f1:21:53:e8:f8:6a:75:78:44:58:
                    bc:af:63:54:ac:a2:a2:a0:98:41:42:63:74:9e:44:
                    cd:e8:56:62:84:08:4e:cb:4e:af:fd:64:53:84:7d:
                    e1:76:ee:5e:92:77:3f:36:12:87:7b:ab:86:e8:4c:
                    78:90:5e:c1:f7:21:b1:e9:62:db:b8:88:09:18:23:
                    17:7a:69:80:7e:11:f9:95:c8:d1:5c:dd:50:09:cd:
                    42:55:45:f7:93:7c:da:06:fb:5c:e6:40:26:03:59:
                    bf:7b:b2:fc:82:48:61:6e:7c:b9:40:a0:df:f9:6e:
                    13:16:2c:48:b4:35:39:2a:a9:10:4b:3a:f4:89:94:
                    91:ff:87:91:0e:8c:54:35:e8:5a:9a:7e:b2:65:a0:
                    7d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A4:99:87:C9:C4:95:39:49:2F:D9:38:46:50:02:4A:08:26:19:CA
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a386330303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:8c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:c2:23:36:4a:05:f4:15:b7:c8:82:6b:e1:55:36:96:52:5a:
         79:1c:2e:69:f1:1c:cb:0e:e0:22:b3:c2:39:e0:d8:74:31:90:
         4e:7a:2d:a7:7d:2d:cb:b3:01:c2:0b:dc:9b:fc:1d:7e:62:7a:
         56:b9:da:ee:0e:83:10:51:66:ca:15:13:68:99:b2:81:fe:29:
         a2:df:8f:e9:dd:f9:96:de:95:94:a5:a2:59:eb:5a:49:65:b7:
         2c:9c:97:0c:16:a6:e2:ed:52:4a:57:7e:29:16:1f:00:42:aa:
         60:64:31:15:0e:2b:26:56:a5:d1:e0:d5:ce:5e:90:67:2c:a3:
         74:dc:67:c4:b0:0d:b7:4d:12:8f:96:1a:73:5f:9d:65:fc:9f:
         87:c9:34:cc:57:55:5c:94:66:0c:05:26:88:2c:51:77:55:6a:
         a4:0b:f2:66:b3:84:51:df:a0:8b:08:65:80:96:74:68:e7:72:
         ba:c2:98:45:da:a6:e3:c1:aa:20:05:98:c8:e8:79:72:82:08:
         ae:e1:0e:fe:c0:2f:38:c0:f9:8c:34:73:d1:39:83:a7:98:a1:
         b0:01:05:ce:04:0a:e5:9c:fd:91:05:2b:e6:11:15:98:fd:84:
         73:c7:8f:b6:3a:8a:13:4d:ea:36:4b:69:21:20:37:36:55:6e:
         1a:14:b4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:30:23 2026 by rpki-client