Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a613030303a3a2f33362d3336203d3e20323632393739.roa
File:                     323830343a3961383a613030303a3a2f33362d3336203d3e20323632393739.roa (raw, json)
Hash identifier:          i9AXU7689jTtnI1h/YZCQ6CEud+xDpLZ5oAS4NevWIc=
Subject key identifier:   41:5D:9F:0C:FA:45:C6:EA:FF:52:B1:A0:FE:FB:E2:CD:5E:6F:05:F8
Certificate issuer:       /CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Certificate serial:       406D398AC603A3A0D46D81F549733076DCAB0936
Authority key identifier: C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a613030303a3a2f33362d3336203d3e20323632393739.roa
Signing time:             Wed 29 Jul 2026 17:35:40 +0000
ROA not before:           Wed 29 Jul 2026 17:30:40 +0000
ROA not after:            Wed 28 Jul 2027 17:35:40 +0000
asID:                     262979
IP address blocks:        2804:9a8:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6d:39:8a:c6:03:a3:a0:d4:6d:81:f5:49:73:30:76:dc:ab:09:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
        Validity
            Not Before: Jul 29 17:30:40 2026 GMT
            Not After : Jul 28 17:35:40 2027 GMT
        Subject: CN=415D9F0CFA45C6EAFF52B1A0FEFBE2CD5E6F05F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:32:01:41:b7:ed:c9:2a:b8:f3:45:7b:cc:
                    80:50:42:5e:68:14:3f:1c:6e:13:8f:6c:d5:32:aa:
                    e4:6d:6e:25:a5:13:80:ff:51:76:d8:b1:a5:5a:16:
                    73:66:35:d6:3b:3e:99:72:0c:b3:29:5a:a1:77:91:
                    99:b3:a5:9e:b5:a5:b5:61:31:1a:e2:17:f3:b5:4d:
                    e5:da:d3:10:a9:ad:17:d2:98:67:e1:38:f1:f7:8e:
                    17:23:fe:7e:91:d3:e3:7a:0a:8f:68:57:c6:09:68:
                    9b:8b:27:5d:98:c6:21:95:f1:87:f5:80:9d:0e:50:
                    fd:17:12:2a:e5:e2:f6:b7:22:e2:8d:3f:4e:9d:3d:
                    61:0a:d9:f3:8f:9a:8b:39:d1:b6:5c:9e:8f:68:b8:
                    41:eb:d2:02:b7:15:5c:5e:b1:8a:cb:35:c4:6d:12:
                    f3:6f:70:39:a7:c2:99:6c:fe:3d:2a:ea:52:a2:98:
                    f4:df:2a:f5:fc:1d:86:6b:f6:91:8c:14:c7:ec:da:
                    d8:25:37:e3:2e:10:bf:0d:69:89:4e:39:4c:29:ba:
                    88:4b:2e:d8:2c:15:8c:97:01:d9:1e:95:5e:40:5a:
                    98:b8:51:66:d8:ee:7a:82:41:a5:a7:e7:4f:db:53:
                    a0:30:80:cb:ad:f0:5b:fc:47:83:06:a2:45:bd:24:
                    d1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5D:9F:0C:FA:45:C6:EA:FF:52:B1:A0:FE:FB:E2:CD:5E:6F:05:F8
            X509v3 Authority Key Identifier:
                keyid:C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a613030303a3a2f33362d3336203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9a8:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         01:90:b5:ed:8c:98:79:d3:8b:02:43:97:d7:9a:67:5a:7d:48:
         1f:6a:99:7f:88:be:ec:11:32:63:68:06:9c:37:4b:16:a8:fc:
         c2:cf:8b:57:d7:ec:2d:37:23:94:7c:90:dd:7c:fc:98:7b:ce:
         1d:d6:61:a0:54:e2:0d:09:a8:01:c6:2b:5b:80:8d:a1:fb:18:
         9e:dd:78:86:9f:fd:6f:17:f9:8b:be:a3:80:67:23:15:32:34:
         7a:ae:ab:80:d3:67:3a:df:91:25:4e:8a:66:3c:19:16:43:30:
         06:1e:84:0a:98:49:9b:44:72:57:ad:ff:19:49:1e:a4:cd:b7:
         19:1c:69:02:e9:ff:34:95:28:d8:03:e9:67:cf:78:ec:d2:6f:
         f9:42:32:6d:de:9d:a6:b0:a9:c9:80:18:48:33:c5:a1:6c:01:
         31:38:b0:e4:c5:83:d4:72:18:a9:1a:17:5c:dd:a6:e6:70:ff:
         e3:05:d0:b2:d1:e6:a8:f9:e7:31:52:dd:c6:79:02:39:82:a3:
         e9:e1:1f:3b:27:97:b3:79:ac:fd:4d:a1:0c:db:58:c9:dd:dc:
         aa:31:f1:19:bf:84:59:2d:43:24:b9:e5:02:83:ce:a4:51:fa:
         38:7a:0d:92:d4:54:d2:96:cf:f4:a2:9f:9e:06:f8:8f:99:ac:
         bf:c1:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:36:25 2026 by rpki-client