Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a3a2f34342d3434203d3e20323633393935.roa
File:                     323830343a323931303a3a2f34342d3434203d3e20323633393935.roa (raw, json)
Hash identifier:          dZRvtyLtWJP3zEVDx1OWpXx80zDQowcqiEqSvxQ6zsQ=
Subject key identifier:   B3:CA:77:82:68:FF:B2:F9:D3:3A:B5:61:88:5F:C4:F9:03:18:E3:26
Certificate issuer:       /CN=B7047B095A7C54A0D935E35C988F1A341D363E06
Certificate serial:       46079B407E3068970142DCE59B2CF46A04476E36
Authority key identifier: B7:04:7B:09:5A:7C:54:A0:D9:35:E3:5C:98:8F:1A:34:1D:36:3E:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7047B095A7C54A0D935E35C988F1A341D363E06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a3a2f34342d3434203d3e20323633393935.roa
Signing time:             Thu 02 Jul 2026 15:54:25 +0000
ROA not before:           Thu 02 Jul 2026 15:49:25 +0000
ROA not after:            Thu 01 Jul 2027 15:54:25 +0000
asID:                     263995
IP address blocks:        2804:2910::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/B7047B095A7C54A0D935E35C988F1A341D363E06.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/B7047B095A7C54A0D935E35C988F1A341D363E06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7047B095A7C54A0D935E35C988F1A341D363E06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 02:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:07:9b:40:7e:30:68:97:01:42:dc:e5:9b:2c:f4:6a:04:47:6e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7047B095A7C54A0D935E35C988F1A341D363E06
        Validity
            Not Before: Jul  2 15:49:25 2026 GMT
            Not After : Jul  1 15:54:25 2027 GMT
        Subject: CN=B3CA778268FFB2F9D33AB561885FC4F90318E326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:33:dd:63:c2:33:46:37:d4:9a:ff:93:b0:
                    f7:30:ea:ea:74:b2:f0:e4:6a:1f:dc:3d:dd:02:87:
                    a5:65:80:f4:68:86:26:b7:0e:17:17:99:35:0d:ef:
                    15:a8:6e:2d:6d:1e:c5:e7:ce:ef:46:7d:2e:4f:f1:
                    69:1f:cc:2a:cf:9c:56:e1:9e:19:f1:1f:e6:69:70:
                    27:0e:06:07:e5:0a:4d:a1:ef:4a:76:c5:bb:47:a9:
                    34:b1:ba:06:4b:42:96:f3:f6:1f:19:ce:32:e4:5b:
                    8a:49:0b:b5:89:46:f3:1a:09:26:2f:58:81:0b:51:
                    f2:bc:82:2b:4f:1c:10:a3:63:20:1c:12:54:e0:ab:
                    f2:6b:05:5f:1d:a9:95:6a:2e:90:a9:25:d4:48:6d:
                    34:d0:0f:49:86:ab:95:74:14:31:8c:cd:4e:4f:a6:
                    c5:4a:b2:6d:22:ec:57:b6:60:b0:17:ab:b6:95:b6:
                    3d:89:c9:8d:b5:0f:41:b9:1f:21:06:7e:e4:22:c9:
                    5e:24:04:ee:5d:5f:66:1c:05:98:66:ad:e2:94:63:
                    9d:92:a3:ba:7c:52:c2:b7:13:39:c0:cc:d5:ba:96:
                    c1:f1:e0:c3:21:fb:76:42:3d:98:54:cb:f3:d0:d6:
                    2c:7e:1d:a8:8f:89:bd:21:e8:cc:77:9f:2d:c1:a9:
                    15:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CA:77:82:68:FF:B2:F9:D3:3A:B5:61:88:5F:C4:F9:03:18:E3:26
            X509v3 Authority Key Identifier:
                keyid:B7:04:7B:09:5A:7C:54:A0:D9:35:E3:5C:98:8F:1A:34:1D:36:3E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/B7047B095A7C54A0D935E35C988F1A341D363E06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7047B095A7C54A0D935E35C988F1A341D363E06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a3a2f34342d3434203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2910::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:10:42:77:6e:f9:2f:84:80:2f:62:f5:d8:e0:49:13:3d:ff:
         2e:3c:23:74:98:c3:11:e7:36:a5:cf:6e:7e:29:e8:28:fa:7c:
         ca:bd:fd:df:3a:4f:33:e7:8c:4f:0f:5f:2d:bc:6a:f2:22:1f:
         9d:27:c0:bd:fe:71:3a:14:ed:78:56:0c:14:6c:b5:a7:6e:6b:
         e9:1b:f4:34:10:9c:e2:5a:c7:75:e4:20:16:8b:fa:7b:51:76:
         9c:d6:31:87:bc:cb:04:bb:0a:f6:2e:17:f9:aa:d7:17:31:e7:
         4a:44:bc:dc:2f:c6:e9:3d:30:cd:09:c5:49:5b:88:b2:45:84:
         e0:06:da:86:78:f4:ff:a4:f4:08:4e:4b:f1:cb:a0:ea:d2:bc:
         a0:08:c6:38:96:28:cd:d9:89:6f:09:55:f6:cb:dd:2f:80:80:
         40:32:8c:a2:31:c3:b8:3d:58:52:a6:9a:3f:f1:1f:26:86:11:
         93:f1:7d:71:a9:aa:7a:43:d9:98:aa:2c:dc:df:71:f6:60:7a:
         d9:f0:c4:18:df:01:db:0e:15:8b:13:ae:e5:81:bd:9c:1b:98:
         6d:31:29:ed:38:18:a1:f4:73:ae:c9:7d:d0:a1:8c:aa:b3:4f:
         21:59:a2:da:7d:19:c9:3e:86:87:81:a7:60:82:32:ef:36:0a:
         a3:88:4a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:02:00 2026 by rpki-client