Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/323830343a343833303a3a2f33322d313238203d3e20323637313033.roa
File:                     323830343a343833303a3a2f33322d313238203d3e20323637313033.roa (raw, json)
Hash identifier:          nBXIkiqysPJ+KOuvU86jGgcBTyVqhS7Ae9TImOTNebM=
Subject key identifier:   6C:0A:77:65:BD:85:F6:00:CA:6B:B0:36:F8:6A:CE:32:C8:53:C2:47
Certificate issuer:       /CN=28E5E6A5B2B9E3D980CD37E14FE622B291A4D191
Certificate serial:       0696E9886DF7BEBF09F7A90C5909CEE852598E46
Authority key identifier: 28:E5:E6:A5:B2:B9:E3:D9:80:CD:37:E1:4F:E6:22:B2:91:A4:D1:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28E5E6A5B2B9E3D980CD37E14FE622B291A4D191.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/323830343a343833303a3a2f33322d313238203d3e20323637313033.roa
Signing time:             Thu 23 Jul 2026 17:55:46 +0000
ROA not before:           Thu 23 Jul 2026 17:50:46 +0000
ROA not after:            Thu 22 Jul 2027 17:55:46 +0000
asID:                     267103
IP address blocks:        2804:4830::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/28E5E6A5B2B9E3D980CD37E14FE622B291A4D191.crl
                          rsync://rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/28E5E6A5B2B9E3D980CD37E14FE622B291A4D191.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28E5E6A5B2B9E3D980CD37E14FE622B291A4D191.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:96:e9:88:6d:f7:be:bf:09:f7:a9:0c:59:09:ce:e8:52:59:8e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E5E6A5B2B9E3D980CD37E14FE622B291A4D191
        Validity
            Not Before: Jul 23 17:50:46 2026 GMT
            Not After : Jul 22 17:55:46 2027 GMT
        Subject: CN=6C0A7765BD85F600CA6BB036F86ACE32C853C247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:63:cc:d9:73:2a:a9:24:14:ce:3f:0f:56:4b:
                    7d:8c:ea:18:ff:21:45:00:87:3c:32:4e:51:1e:bd:
                    43:74:b7:24:1b:4b:ff:69:67:9c:49:50:2d:d6:c6:
                    e6:c5:14:9c:4e:c2:22:94:a2:11:24:06:3d:a4:bd:
                    04:be:d8:ac:40:39:59:02:90:a4:5b:05:ce:3e:7a:
                    ab:25:26:64:c1:20:fc:95:06:97:75:6a:2b:8a:fe:
                    9d:cc:5c:99:2a:db:93:82:b1:55:4d:fc:c9:5f:b5:
                    11:ad:04:bf:9a:e4:45:3a:9e:1b:73:04:da:57:29:
                    82:87:4a:c8:3c:f3:c7:c7:d2:0b:94:f6:5a:7c:51:
                    fd:a3:58:98:dc:89:f7:5d:d1:2a:2a:00:3b:59:1f:
                    f7:8c:8f:55:27:d4:a5:d4:69:d0:64:eb:c9:f9:72:
                    b4:80:7d:21:c0:6d:32:71:5b:b9:e2:5a:1a:bd:5d:
                    b6:42:fa:6f:eb:67:d5:95:c8:0d:31:5b:37:4f:4a:
                    db:02:83:37:82:09:26:95:1a:c0:d1:77:30:73:00:
                    06:b7:14:a7:b0:a4:2a:9e:ba:2b:f9:d2:a9:1e:c6:
                    a3:f7:58:8a:21:76:62:27:0f:6c:4b:47:e5:9f:08:
                    63:e4:c5:d8:88:e2:39:e2:86:22:b5:76:72:1c:ec:
                    f2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0A:77:65:BD:85:F6:00:CA:6B:B0:36:F8:6A:CE:32:C8:53:C2:47
            X509v3 Authority Key Identifier:
                keyid:28:E5:E6:A5:B2:B9:E3:D9:80:CD:37:E1:4F:E6:22:B2:91:A4:D1:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/28E5E6A5B2B9E3D980CD37E14FE622B291A4D191.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28E5E6A5B2B9E3D980CD37E14FE622B291A4D191.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmpgVLBsDTPMNW5Wi8iYXWfSgFVcmpbDK2bXnDTHA43w/0/323830343a343833303a3a2f33322d313238203d3e20323637313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4830::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:ed:99:51:44:79:83:73:07:98:ff:95:03:90:a0:e4:39:bb:
         59:34:ec:c7:d1:dd:7a:e3:02:b4:86:2a:2e:0d:a7:34:12:7c:
         3f:b6:fd:a1:be:47:27:7a:99:2c:ff:ab:82:38:1a:5b:2f:e6:
         c1:e1:11:14:64:13:73:3e:f1:88:b4:6b:ac:89:ad:f8:0e:16:
         df:af:1f:72:e2:a0:e1:cf:94:08:9e:26:8a:bf:d2:9e:92:c8:
         e5:4f:7f:be:4a:64:a6:91:22:42:7f:74:7e:3f:0a:5b:3b:d7:
         7a:99:83:d4:e0:e8:7c:5c:d6:ca:6f:a1:bb:2c:97:b4:73:aa:
         33:bd:a6:c5:82:b1:ef:5b:d0:92:78:e0:98:82:af:5d:48:1b:
         58:65:f8:2e:c2:42:7b:36:5f:2d:29:e8:20:6f:fe:c0:e9:43:
         f3:80:d3:ce:ac:2d:75:5c:0e:fe:4b:d8:22:ab:ec:08:12:be:
         85:8a:13:bf:76:c0:39:a0:a9:c8:93:d6:a4:3a:e8:2f:26:61:
         c7:6f:3a:e0:4a:11:b8:2e:96:56:fd:2c:f5:43:9c:59:65:df:
         f0:57:74:f9:b8:a1:31:5a:1a:b2:20:f5:74:64:12:f9:a6:4d:
         be:b1:41:22:e0:b2:ca:3e:3e:a9:34:83:b3:f7:e1:c4:f8:89:
         98:8a:c6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:31:46 2026 by rpki-client