Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a663830303a3a2f34302d3430203d3e20323633363239.roa
File:                     323830343a313034633a663830303a3a2f34302d3430203d3e20323633363239.roa (raw, json)
Hash identifier:          LGydwqrYVTsyJjOZTZ8JmvnjBHIvS/zBzIaayFuj7T8=
Subject key identifier:   60:55:A7:30:64:25:BD:FF:15:65:9B:2E:CF:10:B6:40:2E:BB:71:59
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       22772458EE104C7332BFF75EDACE937CE863D3C3
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a663830303a3a2f34302d3430203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:54:12 +0000
ROA not before:           Fri 10 Jul 2026 13:49:12 +0000
ROA not after:            Fri 09 Jul 2027 13:54:12 +0000
asID:                     263629
IP address blocks:        2804:104c:f800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:77:24:58:ee:10:4c:73:32:bf:f7:5e:da:ce:93:7c:e8:63:d3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:49:12 2026 GMT
            Not After : Jul  9 13:54:12 2027 GMT
        Subject: CN=6055A7306425BDFF15659B2ECF10B6402EBB7159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:82:73:64:f9:7a:6c:24:0f:b5:54:4c:49:eb:
                    f9:1a:d5:06:3a:d1:b3:5e:73:2a:5d:66:a9:14:14:
                    88:02:2a:a4:fc:19:d6:89:f6:d4:5e:14:fb:48:c7:
                    b5:7c:56:9d:e0:d1:d0:86:42:54:c1:1c:b1:63:1a:
                    33:a3:05:bd:5d:72:32:4f:fd:72:fe:c7:cc:22:9d:
                    7d:6a:26:4c:02:10:76:1a:21:11:2a:71:96:a7:32:
                    c6:b9:7e:f1:56:42:b0:6a:f1:17:b6:e6:24:b4:77:
                    74:5e:ee:31:79:79:ec:be:53:bf:8f:9e:01:f7:5f:
                    dd:61:1e:44:f0:a1:a8:ed:97:26:8a:eb:df:54:c8:
                    c6:c5:61:ad:1e:b1:64:91:ef:76:af:77:22:5a:3b:
                    34:07:8c:dc:87:ff:c1:9a:cf:79:b1:d5:53:24:a9:
                    11:fa:61:cf:d8:c8:a6:23:02:8a:19:87:75:40:bd:
                    05:99:47:3d:a9:69:98:0e:28:67:f6:a7:58:e3:7e:
                    a2:64:8b:b2:db:b2:7b:27:0f:79:a0:4b:7c:41:a5:
                    65:af:61:2f:0f:b9:fc:1a:1d:a9:d1:9c:63:5d:5d:
                    e6:ef:33:06:88:69:fb:a0:25:40:6c:c4:71:f7:ae:
                    55:80:95:ab:4d:7f:93:b1:73:85:b3:65:bd:bc:a7:
                    4b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:55:A7:30:64:25:BD:FF:15:65:9B:2E:CF:10:B6:40:2E:BB:71:59
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/323830343a313034633a663830303a3a2f34302d3430203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104c:f800::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:f7:1d:53:23:18:0b:3d:51:68:00:93:74:a1:1a:8a:5c:5e:
         d3:08:b5:d1:b4:6d:10:c8:e2:54:03:73:de:a5:d5:19:37:dc:
         c5:6f:54:9d:27:59:2e:66:15:7f:dc:a1:12:6e:d9:6c:be:ad:
         d5:cc:33:ad:05:2a:b5:08:44:86:fb:a1:52:48:5c:2d:02:a7:
         6b:61:b1:cf:6b:0e:7f:28:65:6f:6e:30:0d:b7:60:c9:e8:98:
         59:9c:e1:4f:3d:d2:6c:1d:68:8b:ed:46:df:ce:28:f5:47:48:
         32:08:28:2a:41:91:77:81:c7:c6:d4:a7:fa:c3:e9:2f:fd:dd:
         1f:f4:72:76:ca:86:80:f6:1b:fc:68:e8:8b:1d:df:91:fd:97:
         4f:1a:a8:47:ed:a9:2e:8f:e1:b6:16:46:b4:f1:55:bc:b1:52:
         e2:d7:89:0f:5e:b5:47:11:bf:5c:53:56:74:d8:af:c5:d0:ba:
         b7:a3:83:e9:c6:5f:17:89:b3:03:1e:11:df:35:43:3c:c0:c9:
         f2:d8:35:26:99:cd:15:89:c7:62:a5:1a:04:03:f8:22:80:bd:
         4f:31:2c:3e:8d:c2:e7:2f:62:5a:99:9f:24:38:6a:5f:2b:0f:
         8f:17:68:af:40:92:c7:47:f6:41:31:91:b2:7f:e0:0d:3d:76:
         b9:38:de:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:29:40 2026 by rpki-client