Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a343030303a3a2f33352d3335203d3e20323632393739.roa
File:                     323830343a3961383a343030303a3a2f33352d3335203d3e20323632393739.roa (raw, json)
Hash identifier:          /hQo6Cj0kupeQlik+Idn1Tr8R9XWqPq19xVRLKhmQfQ=
Subject key identifier:   F3:7E:A9:FD:9A:4C:F4:6D:09:6C:CB:E0:F5:6C:6E:16:97:2B:00:3F
Certificate issuer:       /CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Certificate serial:       78D74B39A266316D8F7A0DB6510C8FC98C9D983C
Authority key identifier: C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a343030303a3a2f33352d3335203d3e20323632393739.roa
Signing time:             Wed 29 Jul 2026 17:35:39 +0000
ROA not before:           Wed 29 Jul 2026 17:30:39 +0000
ROA not after:            Wed 28 Jul 2027 17:35:39 +0000
asID:                     262979
IP address blocks:        2804:9a8:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d7:4b:39:a2:66:31:6d:8f:7a:0d:b6:51:0c:8f:c9:8c:9d:98:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
        Validity
            Not Before: Jul 29 17:30:39 2026 GMT
            Not After : Jul 28 17:35:39 2027 GMT
        Subject: CN=F37EA9FD9A4CF46D096CCBE0F56C6E16972B003F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:ac:e0:4e:7b:c6:37:53:83:b4:8a:67:46:
                    26:eb:0b:60:63:97:b9:55:0e:62:da:e1:f3:44:df:
                    e1:e8:df:10:86:f4:3c:69:f5:c4:11:3c:0e:fc:8a:
                    6c:ba:30:80:fa:c0:a2:79:85:ed:7f:99:83:26:5a:
                    28:f7:ef:4c:16:c0:8e:e2:bd:2b:05:98:99:c1:c8:
                    5c:8c:d6:aa:2b:11:75:08:f3:40:27:60:cd:91:56:
                    28:a3:a8:e6:5e:e4:1f:58:40:36:43:49:0b:77:de:
                    59:74:de:a7:a1:5d:c8:8e:78:85:98:fe:af:df:9d:
                    29:49:99:b9:e0:b0:02:a4:15:8f:25:16:dd:ff:e4:
                    25:cc:95:ff:30:01:77:3f:7c:00:80:0c:20:82:e3:
                    79:56:fa:24:70:c9:3b:dd:0e:f0:39:06:4b:d4:6f:
                    69:64:d5:f4:5e:62:d7:f0:bf:be:0d:a6:ce:a4:36:
                    19:ad:42:39:1e:ac:5c:fe:b4:f0:21:33:ac:02:23:
                    61:7a:a6:31:d6:78:52:23:47:34:48:b3:c2:ca:6c:
                    6d:98:61:d3:6a:02:84:83:6f:d7:3a:1a:04:e8:c3:
                    ec:9c:99:88:5b:ba:39:c6:54:1e:7b:e2:b4:2a:c9:
                    6b:22:bd:86:5f:d4:2b:cc:b9:2c:d1:0e:a4:a8:84:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7E:A9:FD:9A:4C:F4:6D:09:6C:CB:E0:F5:6C:6E:16:97:2B:00:3F
            X509v3 Authority Key Identifier:
                keyid:C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a343030303a3a2f33352d3335203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9a8:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         52:a6:d8:57:82:f8:54:9e:9a:5c:c2:17:04:6a:6b:ad:08:85:
         46:46:bd:d0:56:39:4b:3d:af:0f:b8:da:39:2e:0a:f2:48:be:
         08:51:bd:fc:74:37:4d:4e:27:4b:87:a8:82:da:82:a1:9e:b2:
         2a:c9:1b:8d:98:65:d8:bd:62:36:ba:33:f9:e5:ff:87:b3:fc:
         51:55:29:16:d3:f7:9c:6f:a5:c1:11:d5:7a:0f:09:61:1a:25:
         71:96:99:1c:b9:22:3a:84:44:48:5a:59:c6:4e:d8:25:ab:bb:
         ae:47:f9:f1:8f:c4:b4:e2:e6:a5:fb:df:c7:86:7e:b5:c7:ff:
         e6:8c:b0:a8:22:a2:d4:f7:3c:30:09:5a:37:b8:e8:9f:4f:80:
         5d:44:a9:fd:04:75:87:53:bd:bc:d7:94:05:41:b8:1e:bc:ae:
         ce:b8:86:f2:00:11:04:1d:65:b4:0f:f5:f9:49:cc:a8:40:bb:
         7b:1c:0c:c3:48:ec:72:13:e4:f3:32:6a:f9:9e:78:28:3b:3a:
         ee:66:12:3a:aa:f7:22:3c:e6:72:8c:de:a9:7b:18:74:5f:a0:
         16:52:6b:eb:6b:d5:15:5b:c7:38:10:8d:e5:71:10:be:64:ce:
         61:6c:82:4f:7c:9c:0e:8d:30:d7:7b:a1:39:c4:25:98:76:9f:
         dc:f1:6f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:36:05 2026 by rpki-client