Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a613030303a3a2f33352d3335203d3e20323632393739.roa
File:                     323830343a3961383a613030303a3a2f33352d3335203d3e20323632393739.roa (raw, json)
Hash identifier:          giW8p4KrOxGiqQUzFFNcqe8Lxk3IHNxOtMjvDho4DF0=
Subject key identifier:   FC:9A:A5:28:4A:76:48:A3:A4:0D:E2:22:92:7B:74:DF:25:9E:DF:25
Certificate issuer:       /CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Certificate serial:       473698B9A45982FD98175308888B51FC842CAEA6
Authority key identifier: C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a613030303a3a2f33352d3335203d3e20323632393739.roa
Signing time:             Wed 29 Jul 2026 17:35:38 +0000
ROA not before:           Wed 29 Jul 2026 17:30:38 +0000
ROA not after:            Wed 28 Jul 2027 17:35:38 +0000
asID:                     262979
IP address blocks:        2804:9a8:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:36:98:b9:a4:59:82:fd:98:17:53:08:88:8b:51:fc:84:2c:ae:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
        Validity
            Not Before: Jul 29 17:30:38 2026 GMT
            Not After : Jul 28 17:35:38 2027 GMT
        Subject: CN=FC9AA5284A7648A3A40DE222927B74DF259EDF25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ac:9b:00:09:50:33:83:c7:07:7a:c4:78:2d:
                    93:1c:e9:ad:e5:3b:b6:dc:2f:27:32:34:c0:f7:32:
                    f1:96:d2:d9:0b:14:48:96:8e:dc:bc:40:38:d2:9c:
                    24:99:84:9f:f2:27:a1:c2:f5:09:7d:40:e7:c5:60:
                    00:4c:35:67:87:ee:48:ed:d0:1f:15:44:ce:9f:91:
                    e0:22:4b:74:d9:94:4c:c6:1c:79:83:8d:4c:13:58:
                    e8:2a:2d:a0:6c:16:e3:85:a3:58:72:29:cc:94:6b:
                    70:71:f0:5a:26:43:3c:01:7c:1f:74:b1:51:e7:6f:
                    0a:e1:e6:41:cd:5c:1d:52:7f:52:95:31:02:9f:f4:
                    8f:05:5d:1c:41:bd:32:66:53:e3:ea:84:49:79:e9:
                    f7:43:4c:d9:63:fa:87:97:41:f5:4d:58:ed:32:d0:
                    af:11:cb:da:92:95:ee:f8:e1:15:c5:5d:c9:df:e7:
                    b8:db:50:4f:e0:fe:e7:3e:c9:7e:90:3c:0c:2a:93:
                    b3:58:91:35:b7:51:64:b9:0a:1e:b0:ed:a3:6d:46:
                    6d:81:4b:f7:b2:20:f1:8b:77:1b:0f:f4:e9:4b:31:
                    95:7c:33:f0:08:3e:17:37:3e:ab:82:d2:d2:88:16:
                    c8:ad:d7:6c:f6:9d:15:e6:c3:ab:66:01:95:37:af:
                    f2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9A:A5:28:4A:76:48:A3:A4:0D:E2:22:92:7B:74:DF:25:9E:DF:25
            X509v3 Authority Key Identifier:
                keyid:C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a613030303a3a2f33352d3335203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9a8:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         90:f9:61:fc:74:10:3d:4c:4e:79:3a:f9:ad:55:c4:15:9d:b9:
         16:6c:96:80:89:c0:4a:a9:d3:3c:7b:ca:27:a8:33:b9:a8:26:
         04:44:d9:4c:1b:41:cf:a1:c1:55:c0:c3:09:67:78:76:d9:12:
         3b:b0:b4:14:33:f4:cf:30:6c:bb:49:94:d7:5d:de:21:b4:bd:
         32:9f:4a:8c:b1:45:93:b0:62:9a:35:af:fd:46:0d:10:ed:8d:
         26:32:95:06:5f:d4:8e:f1:85:13:be:b7:8e:79:31:54:03:6a:
         cd:75:dc:7a:25:fb:b2:c7:65:c3:43:5e:78:b5:51:95:54:67:
         dd:00:1c:fd:ca:65:49:a3:2b:46:ab:a2:80:f6:4c:98:2a:72:
         1d:23:0c:8c:f9:6c:dd:83:3f:4c:fc:d5:0a:e6:e7:28:ff:27:
         21:ba:ff:3b:09:be:2c:5e:a8:f3:53:17:f8:08:da:96:64:e5:
         ca:a5:77:7f:2e:46:b0:9c:52:3c:2f:c1:23:b3:f2:a3:55:81:
         b3:72:84:ce:2a:42:3c:03:2d:9f:1c:81:75:85:7f:bf:f4:dd:
         ad:ab:f3:22:3e:da:61:3b:e7:00:7f:fd:4c:cc:02:99:a0:aa:
         7e:3f:34:ae:91:1f:71:c8:4c:ed:7f:fd:a7:49:c9:f0:f1:ec:
         e1:7c:66:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:15:35 2026 by rpki-client