Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a393030303a3a2f33362d3336203d3e20323632393739.roa
File:                     323830343a3961383a393030303a3a2f33362d3336203d3e20323632393739.roa (raw, json)
Hash identifier:          hdudVHjZMfq1oXNNZVEpFi/qlcx3FHbyrGxOPbsqb6Q=
Subject key identifier:   42:F1:63:9D:11:3C:E3:D3:0F:AA:22:8C:20:63:56:63:85:9C:98:8E
Certificate issuer:       /CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Certificate serial:       3677BF3743D388654136255A6ED24CE6791071AB
Authority key identifier: C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a393030303a3a2f33362d3336203d3e20323632393739.roa
Signing time:             Wed 29 Jul 2026 17:35:41 +0000
ROA not before:           Wed 29 Jul 2026 17:30:41 +0000
ROA not after:            Wed 28 Jul 2027 17:35:41 +0000
asID:                     262979
IP address blocks:        2804:9a8:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:77:bf:37:43:d3:88:65:41:36:25:5a:6e:d2:4c:e6:79:10:71:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
        Validity
            Not Before: Jul 29 17:30:41 2026 GMT
            Not After : Jul 28 17:35:41 2027 GMT
        Subject: CN=42F1639D113CE3D30FAA228C20635663859C988E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:81:ce:79:d5:61:db:b0:e4:24:4a:55:10:b9:
                    82:9f:51:53:c6:bd:3e:e1:dd:bc:27:42:d6:b4:db:
                    9a:8c:68:83:d0:46:e7:09:40:2a:b1:91:6c:55:85:
                    e6:d2:65:74:e0:5f:97:d6:d6:6c:de:31:f6:be:1a:
                    b0:5e:9a:fc:f3:47:61:b6:4e:22:90:5a:10:83:a6:
                    98:e7:34:9b:da:9a:c6:b7:c1:1f:24:02:48:a0:6b:
                    84:be:b5:2d:3e:60:9a:ef:8b:e6:cb:7d:7b:93:c8:
                    f1:78:73:d7:78:36:ac:e8:97:77:a6:e2:57:85:44:
                    80:f0:66:e2:1d:f8:a7:70:40:e7:36:1f:0c:19:1a:
                    78:8c:8a:ed:3d:63:57:0d:23:06:e3:98:f7:23:0b:
                    45:34:4b:61:0a:74:37:34:a9:14:75:b5:67:74:a6:
                    3a:53:39:7d:61:28:c5:dc:da:26:05:05:41:20:7d:
                    c3:40:37:16:59:09:4b:c0:e2:15:e2:42:c5:c3:a8:
                    52:59:d6:a1:52:03:ed:3a:7d:d9:9a:14:9c:92:f5:
                    38:d1:54:08:0a:09:f7:f6:4f:1d:71:7a:fe:b9:b6:
                    67:bb:73:a7:95:e3:ca:ea:d4:30:e0:3b:48:5c:15:
                    f4:f5:52:75:f1:73:fa:16:d2:c3:f6:67:1a:a5:f8:
                    2e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F1:63:9D:11:3C:E3:D3:0F:AA:22:8C:20:63:56:63:85:9C:98:8E
            X509v3 Authority Key Identifier:
                keyid:C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a393030303a3a2f33362d3336203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9a8:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a3:fc:65:42:c5:48:30:12:20:77:9a:72:7a:59:61:0a:8c:5c:
         46:4a:fa:9f:26:d9:6d:95:5c:e0:8d:86:a2:fa:7d:a8:28:5f:
         2f:86:86:57:8b:8b:d1:3a:85:8e:1c:cf:38:50:fe:f7:49:4e:
         ab:72:39:2f:61:df:d8:5f:e1:b1:af:28:cb:50:41:0b:2c:cb:
         aa:df:88:aa:df:3f:7d:3a:02:fb:c8:74:9a:9d:83:09:69:13:
         19:68:34:e1:46:5b:a3:05:43:aa:47:e0:57:92:2e:59:35:25:
         64:2c:ef:cf:63:65:95:3c:e4:47:63:56:f5:bd:f6:b9:db:cd:
         f5:bc:3d:dd:d6:96:a5:09:7f:b4:c2:a4:52:be:e9:78:2a:7a:
         fe:87:f1:21:17:d0:d7:5b:81:cc:3d:78:d5:6b:5d:9f:2b:c3:
         c1:8d:8e:15:8a:39:f9:1a:3f:1b:7a:d2:cb:94:ab:6c:90:dd:
         47:9f:79:5d:4a:03:27:e9:20:fa:06:bf:7e:d3:d0:fe:b3:2a:
         00:e6:95:c7:0a:69:b7:c0:bc:56:01:ec:63:f3:a1:cb:01:8e:
         f2:44:8d:31:e4:b0:55:b2:cc:54:40:51:fb:97:1c:e8:bc:b6:
         39:cd:35:29:48:01:a3:a5:8a:23:40:59:09:7a:e1:52:97:d6:
         8b:fa:10:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNne/N0PTiGVBNiVabtJM5nkQcaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlGOTA1ODlBQTEyRUUzMzFFQjg0QjIzRDUwQ0ZDOUVG
NEYwMzNENzAeFw0yNjA3MjkxNzMwNDFaFw0yNzA3MjgxNzM1NDFaMDMxMTAvBgNV
BAMTKDQyRjE2MzlEMTEzQ0UzRDMwRkFBMjI4QzIwNjM1NjYzODU5Qzk4OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8gc551WHbsOQkSlUQuYKfUVPG
vT7h3bwnQta025qMaIPQRucJQCqxkWxVhebSZXTgX5fW1mzeMfa+GrBemvzzR2G2
TiKQWhCDppjnNJvamsa3wR8kAkiga4S+tS0+YJrvi+bLfXuTyPF4c9d4Nqzol3em
4leFRIDwZuId+KdwQOc2HwwZGniMiu09Y1cNIwbjmPcjC0U0S2EKdDc0qRR1tWd0
pjpTOX1hKMXc2iYFBUEgfcNANxZZCUvA4hXiQsXDqFJZ1qFSA+06fdmaFJyS9TjR
VAgKCff2Tx1xev65tme7c6eV48rq1DDgO0hcFfT1UnXxc/oW0sP2Zxql+C4tAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUQvFjnRE849MPqiKMIGNWY4WcmI4wHwYDVR0j
BBgwFoAUyfkFiaoS7jMeuEsj1Qz8nvTwM9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlZlc01HODlTckh6Szh5eXNrNk1FalRoc2VlR2FGRVF1VFRETkNGam04
SDgvMC9DOUY5MDU4OUFBMTJFRTMzMUVCODRCMjNENTBDRkM5RUY0RjAzM0Q3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5RjkwNTg5QUExMkVFMzMx
RUI4NEIyM0Q1MENGQzlFRjRGMDMzRDcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JWZXNNRzg5U3JIeks4eXlzazZNRWpUaHNlZUdhRkVRdVRURE5DRmptOEg4LzAv
MzIzODMwMzQzYTM5NjEzODNhMzkzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzIzOTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAmokDANBgkqhkiG9w0BAQsFAAOC
AQEAo/xlQsVIMBIgd5pyellhCoxcRkr6nybZbZVc4I2Govp9qChfL4aGV4uL0TqF
jhzPOFD+90lOq3I5L2Hf2F/hsa8oy1BBCyzLqt+Iqt8/fToC+8h0mp2DCWkTGWg0
4UZbowVDqkfgV5IuWTUlZCzvz2NllTzkR2NW9b32udvN9bw93daWpQl/tMKkUr7p
eCp6/ofxIRfQ11uBzD141WtdnyvDwY2OFYo5+Ro/G3rSy5SrbJDdR595XUoDJ+kg
+ga/ftPQ/rMqAOaVxwppt8C8VgHsY/OhywGO8kSNMeSwVbLMVEBR+5cc6Ly2Oc01
KUgBo6WKI0BZCXrhUpfWi/oQCA==
-----END CERTIFICATE-----
Generated at Sun Aug 23 09:15:32 2026 by rpki-client