Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a383030303a3a2f33342d3334203d3e20323632393739.roa
File:                     323830343a3961383a383030303a3a2f33342d3334203d3e20323632393739.roa (raw, json)
Hash identifier:          7fMXvX8KpnBQ3n+RX3mVlWt5d0oyoC/VwGHjOTny7z8=
Subject key identifier:   1D:01:D0:83:51:30:31:9B:72:7D:C3:58:D0:40:5C:7C:2D:3A:4C:13
Certificate issuer:       /CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Certificate serial:       7879FA279651DE7A7FEA2246D7955139AC6B4090
Authority key identifier: C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a383030303a3a2f33342d3334203d3e20323632393739.roa
Signing time:             Wed 29 Jul 2026 17:35:39 +0000
ROA not before:           Wed 29 Jul 2026 17:30:39 +0000
ROA not after:            Wed 28 Jul 2027 17:35:39 +0000
asID:                     262979
IP address blocks:        2804:9a8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 11:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:79:fa:27:96:51:de:7a:7f:ea:22:46:d7:95:51:39:ac:6b:40:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
        Validity
            Not Before: Jul 29 17:30:39 2026 GMT
            Not After : Jul 28 17:35:39 2027 GMT
        Subject: CN=1D01D0835130319B727DC358D0405C7C2D3A4C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:19:4d:33:ca:74:15:84:2e:50:2a:4c:28:db:
                    8c:14:04:e8:32:34:22:3a:78:f0:28:01:25:a4:ab:
                    61:fa:9e:d0:29:6f:77:d7:4a:39:e8:08:f1:ca:ba:
                    1e:a5:57:88:24:0c:69:82:ed:a8:6d:fa:15:cf:20:
                    7d:ba:e5:e1:80:fc:9b:9d:fd:1d:93:2f:ea:cb:3e:
                    c8:50:68:1f:f0:07:5e:8c:aa:26:dc:dd:78:ff:de:
                    1c:bc:be:7e:e5:63:62:65:3a:40:4f:8b:f8:a7:ff:
                    90:86:57:3d:5a:ff:09:af:0d:f9:8b:e4:05:9c:77:
                    46:e7:99:5a:49:2a:d2:c0:58:36:39:de:75:11:07:
                    08:e6:54:f9:10:dc:89:c3:92:84:c2:a4:67:ed:2b:
                    bf:92:aa:99:24:e1:81:eb:79:a7:08:2c:ef:41:bf:
                    fe:7b:24:80:6c:7a:af:e2:ed:11:30:91:be:93:a8:
                    55:da:ee:9a:83:8c:2b:bb:d8:1e:5c:24:a3:96:ad:
                    42:f2:b0:c6:6a:b2:1e:48:9d:3e:d6:3c:0d:7b:4b:
                    17:77:80:8b:e3:22:65:71:07:c1:e5:35:ef:62:9e:
                    cc:fe:47:10:80:12:b4:90:7a:e4:74:95:c5:00:a1:
                    a3:2f:45:ca:74:49:cd:2e:b4:67:04:98:40:ba:4a:
                    29:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:01:D0:83:51:30:31:9B:72:7D:C3:58:D0:40:5C:7C:2D:3A:4C:13
            X509v3 Authority Key Identifier:
                keyid:C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a383030303a3a2f33342d3334203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9a8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6d:d0:f2:4c:72:3d:1a:e6:5f:1a:90:0f:c4:0e:08:b7:b1:0e:
         bc:28:9d:09:71:39:c4:53:a4:b6:c4:1d:0a:a4:5e:e5:77:85:
         23:14:41:e9:88:50:16:b5:ee:11:81:55:0d:3f:a2:d0:d3:60:
         ec:1a:48:24:15:e6:6d:a1:07:21:d6:91:68:cb:5c:97:4e:87:
         ad:2e:5c:bb:55:03:0f:41:56:fa:34:fd:f4:aa:e7:05:35:aa:
         c7:33:79:d8:09:33:e2:3f:f1:8d:0c:93:56:d6:45:45:ed:05:
         9e:34:f2:9f:95:3c:91:56:e4:af:f4:b8:06:20:ff:71:0c:67:
         43:d8:90:3c:2c:0c:2d:f6:90:d5:a3:23:78:a9:11:44:d7:05:
         53:8b:90:f0:49:82:68:b2:ee:4c:c9:06:44:b5:7c:30:de:68:
         da:db:c2:f8:06:e9:e3:9c:82:54:44:22:b6:74:3b:ff:e0:9f:
         da:b4:ec:5e:f3:10:46:fb:f3:bb:2b:6d:2a:da:71:f0:f6:cd:
         dd:6f:3c:85:5e:37:da:8c:2a:9e:2c:f6:b2:7f:96:1a:96:70:
         d8:3a:2c:a6:6b:f5:59:c7:41:9f:42:94:28:c4:13:f4:de:b9:
         fa:f8:be:65:1a:ae:f6:f2:5d:23:92:65:c5:8b:02:cc:2a:d8:
         c6:9f:01:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 17:39:02 2026 by rpki-client