Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a653830303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a653830303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          sMk4yWPacQ1nPDerpPyG5a1ll21u9y15IEvQuMnh9yI=
Subject key identifier:   E9:03:0B:E5:4C:39:46:39:19:53:BA:4D:3F:89:51:83:FC:A7:98:B0
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       26F4812142AC75A7C7A59CD97AF36C1847C217B2
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a653830303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:54:04 +0000
ROA not before:           Fri 10 Jul 2026 13:49:04 +0000
ROA not after:            Fri 09 Jul 2027 13:54:04 +0000
asID:                     263629
IP address blocks:        2804:104c:e800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f4:81:21:42:ac:75:a7:c7:a5:9c:d9:7a:f3:6c:18:47:c2:17:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:49:04 2026 GMT
            Not After : Jul  9 13:54:04 2027 GMT
        Subject: CN=E9030BE54C3946391953BA4D3F895183FCA798B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:84:07:e0:e9:55:43:ec:81:d1:07:7d:80:
                    d6:2c:f3:0d:63:a5:d5:d7:04:0f:8a:0f:03:bb:22:
                    07:a4:5b:50:02:61:32:f7:1d:0d:fa:e1:e2:21:c3:
                    12:4c:72:32:9a:22:4f:3e:c2:91:f0:22:41:d5:62:
                    93:fe:22:b0:ca:b0:1f:59:e4:95:e9:57:d2:de:65:
                    9b:f0:8a:67:95:07:6a:fe:58:54:73:b9:67:0f:6b:
                    4c:c4:9a:3e:3a:e5:1a:23:e9:f0:1c:15:cd:45:75:
                    4a:93:90:b6:ab:98:ba:54:9a:e6:dd:63:30:41:5c:
                    61:c5:b3:79:f4:18:92:60:da:35:9a:05:26:4e:7c:
                    e4:77:b6:cf:02:a2:c7:a7:22:d6:e2:c2:66:9b:ba:
                    d1:80:82:d0:e0:88:e0:d1:a5:74:83:0d:3e:71:9f:
                    f4:1b:8c:81:35:91:f6:ba:07:a2:c0:f6:ac:3b:30:
                    5e:39:3f:1b:23:15:c0:fb:81:59:a5:81:da:ee:0b:
                    31:6a:c3:02:26:59:2b:0b:a9:7b:e7:d7:9c:75:a3:
                    55:c3:67:93:c5:88:a9:e4:56:79:34:78:19:b3:b9:
                    82:9c:45:54:e2:04:de:5d:db:47:8e:62:b9:97:9f:
                    0e:57:0f:5d:67:44:2f:45:ba:e2:93:57:80:46:7c:
                    ec:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:03:0B:E5:4C:39:46:39:19:53:BA:4D:3F:89:51:83:FC:A7:98:B0
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a653830303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:e800::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:4e:40:24:eb:b8:3d:04:2a:b1:47:45:f1:42:e2:ea:60:aa:
         54:f3:3c:5d:03:33:d8:51:3e:7a:8c:7d:6d:87:4f:2f:99:1b:
         56:d4:cd:cf:aa:e0:bc:8e:97:46:1a:f0:f4:8d:0d:4b:1f:f2:
         40:3e:8d:b0:5b:31:60:4d:32:64:32:b3:c1:5c:c9:92:e5:82:
         7e:c1:00:b8:0d:d9:41:b6:64:30:8c:c5:89:04:73:e2:3c:ba:
         c5:a6:11:79:e3:30:58:dd:bf:39:42:87:41:f3:bd:e9:14:b0:
         69:03:c1:7c:4c:00:b5:00:cf:46:ee:bf:16:74:15:37:b3:85:
         1e:f8:16:57:54:1c:85:33:33:bb:db:2b:42:ae:d6:2d:8b:ec:
         a8:57:a3:fd:27:1a:d8:98:08:1f:50:3e:9f:39:7e:66:2a:cb:
         1b:95:6e:53:66:b9:12:28:4d:a7:ce:75:55:4e:b0:42:a6:b0:
         33:14:02:4b:1f:46:26:cf:04:fb:fb:68:f0:0d:b8:c9:66:91:
         a7:8e:59:51:4e:ae:cd:0b:11:ab:7f:d9:fb:d3:91:d0:a7:db:
         17:81:04:27:c0:5a:6a:bb:8e:ba:ff:81:25:49:5a:a5:3f:0b:
         e0:ed:99:88:71:a7:75:ed:ab:97:83:99:ad:3c:4d:f4:f9:99:
         4e:f5:2f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:01 2026 by rpki-client