Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a32303a3a2f34342d3434203d3e20323633393935.roa
File:                     323830343a323931303a32303a3a2f34342d3434203d3e20323633393935.roa (raw, json)
Hash identifier:          WMs2/vIYN462paGzc5yfyk3WFvMn6NnMpplFeyrgr8U=
Subject key identifier:   42:D8:34:43:BB:C8:67:A0:71:A5:5E:D3:FD:A7:E5:A4:E8:60:2B:3F
Certificate issuer:       /CN=B7047B095A7C54A0D935E35C988F1A341D363E06
Certificate serial:       76BD873507DC8A9778AD2D7E4CD31D1018306C7E
Authority key identifier: B7:04:7B:09:5A:7C:54:A0:D9:35:E3:5C:98:8F:1A:34:1D:36:3E:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7047B095A7C54A0D935E35C988F1A341D363E06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a32303a3a2f34342d3434203d3e20323633393935.roa
Signing time:             Thu 02 Jul 2026 15:54:25 +0000
ROA not before:           Thu 02 Jul 2026 15:49:25 +0000
ROA not after:            Thu 01 Jul 2027 15:54:25 +0000
asID:                     263995
IP address blocks:        2804:2910:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/B7047B095A7C54A0D935E35C988F1A341D363E06.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/B7047B095A7C54A0D935E35C988F1A341D363E06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7047B095A7C54A0D935E35C988F1A341D363E06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 02:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bd:87:35:07:dc:8a:97:78:ad:2d:7e:4c:d3:1d:10:18:30:6c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7047B095A7C54A0D935E35C988F1A341D363E06
        Validity
            Not Before: Jul  2 15:49:25 2026 GMT
            Not After : Jul  1 15:54:25 2027 GMT
        Subject: CN=42D83443BBC867A071A55ED3FDA7E5A4E8602B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:47:3e:6c:e4:02:c5:3c:02:73:54:a8:fd:a7:
                    90:1e:1b:dc:af:26:48:69:84:5c:b3:97:f5:c6:3f:
                    5c:80:82:b2:b3:8d:38:56:0e:5e:27:6c:4d:d1:11:
                    4d:c6:35:6b:29:dc:18:22:18:9b:4e:aa:77:8d:9b:
                    da:5b:d5:c8:ea:e1:ce:7b:7b:f6:83:6b:54:31:4f:
                    4e:eb:13:1b:57:d8:a5:bd:76:7f:4e:dc:2e:ee:cf:
                    05:89:5f:ca:d6:f4:cf:1d:2a:6f:75:12:db:98:16:
                    53:fb:2d:0f:d7:50:87:00:c4:05:9d:a5:84:bd:14:
                    18:5f:5f:2b:ce:8f:f5:2f:57:cb:20:0e:44:d9:03:
                    6e:5c:52:0b:b1:fb:9e:79:32:12:74:61:75:81:9b:
                    19:55:1a:3d:f2:4f:e2:35:76:cc:88:c3:58:86:62:
                    66:b1:c8:20:68:1a:c1:7e:4d:af:ea:f7:26:e8:7b:
                    b9:6e:52:89:fb:c5:de:79:54:c3:79:40:ba:67:34:
                    bd:30:62:6d:8a:55:d2:a0:57:83:64:42:c2:c4:2f:
                    ca:9e:90:c5:7a:f8:d4:29:5f:0f:7e:74:c2:e6:99:
                    c6:5d:38:66:08:0b:14:44:4c:b1:50:1c:b6:b3:cf:
                    29:d0:86:da:a6:c6:cb:d9:9a:6a:ec:ce:b5:17:c5:
                    23:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D8:34:43:BB:C8:67:A0:71:A5:5E:D3:FD:A7:E5:A4:E8:60:2B:3F
            X509v3 Authority Key Identifier:
                keyid:B7:04:7B:09:5A:7C:54:A0:D9:35:E3:5C:98:8F:1A:34:1D:36:3E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/B7047B095A7C54A0D935E35C988F1A341D363E06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7047B095A7C54A0D935E35C988F1A341D363E06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a32303a3a2f34342d3434203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2910:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         56:cc:df:a0:7f:4d:10:2e:1f:04:2e:2b:03:fc:81:a2:ae:32:
         08:3f:07:09:55:4c:9b:6f:a8:6f:84:3d:5f:a3:29:15:d8:8e:
         d7:e9:7f:b6:ed:1c:de:b2:43:bf:62:ac:35:ef:33:fc:1c:85:
         cf:12:08:76:6e:e9:68:9d:3c:96:45:1a:67:60:db:3a:c9:ea:
         f0:4a:99:13:2d:60:01:16:f0:41:2f:4c:b2:6e:4b:ff:15:52:
         fa:dc:47:9d:f6:8a:40:58:55:34:c0:88:9e:50:c0:4c:80:64:
         7e:a7:1b:c7:4f:71:1a:2a:d2:d3:1e:d4:e5:5b:50:2c:01:10:
         59:82:55:46:e3:74:0e:fd:1e:a5:ae:d4:4b:38:e1:05:b3:04:
         cd:5b:8d:1c:85:1d:45:74:ed:a2:a5:91:fe:c1:28:68:94:f3:
         b5:49:7c:83:70:30:ec:b1:7a:02:a7:92:20:b0:8f:90:76:7d:
         95:0d:58:c1:22:e1:a4:d6:1e:6b:ed:b5:1b:48:41:0e:13:a1:
         c6:ba:9d:47:ee:a1:04:68:dc:a8:b8:2e:4d:23:af:88:2c:d9:
         39:02:71:c7:75:b1:a7:23:f4:19:0d:e6:c5:dd:b5:47:c0:27:
         4f:e6:34:fb:0e:58:43:76:4d:c9:0a:ca:92:7f:89:b9:22:b4:
         f1:cc:15:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:01:49 2026 by rpki-client