Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a633030303a3a2f33342d3334203d3e20323632393739.roa
File:                     323830343a3961383a633030303a3a2f33342d3334203d3e20323632393739.roa (raw, json)
Hash identifier:          y0FoRbB3vl4jcVGXK0Ntgwzzcstnx9No+99EwpIXAig=
Subject key identifier:   9A:53:5A:70:61:DD:AF:D6:28:FA:76:64:CA:33:A8:59:63:F7:B8:93
Certificate issuer:       /CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Certificate serial:       2E32714B91CCBEA121E6D1B24F60FC4C7AA80E75
Authority key identifier: C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a633030303a3a2f33342d3334203d3e20323632393739.roa
Signing time:             Wed 29 Jul 2026 17:35:38 +0000
ROA not before:           Wed 29 Jul 2026 17:30:38 +0000
ROA not after:            Wed 28 Jul 2027 17:35:38 +0000
asID:                     262979
IP address blocks:        2804:9a8:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 11:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:32:71:4b:91:cc:be:a1:21:e6:d1:b2:4f:60:fc:4c:7a:a8:0e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
        Validity
            Not Before: Jul 29 17:30:38 2026 GMT
            Not After : Jul 28 17:35:38 2027 GMT
        Subject: CN=9A535A7061DDAFD628FA7664CA33A85963F7B893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3d:3c:21:fe:50:13:f0:e6:85:8e:a8:8f:62:
                    08:25:70:ef:53:26:60:bc:14:e0:b0:05:90:e5:f9:
                    d6:17:90:b4:dc:11:f8:80:be:dc:43:1e:6a:63:eb:
                    ec:fe:9c:27:81:52:e8:5d:71:6a:e7:d2:bc:ed:81:
                    e4:ff:26:45:c9:4b:e3:9d:2a:f9:7d:6f:ec:ec:50:
                    ea:47:28:30:c3:bd:47:fd:2d:0e:e2:b5:d7:0d:5b:
                    96:37:1f:26:6a:c7:b8:2f:76:65:1b:a8:4f:e9:2d:
                    96:18:6a:84:53:ec:80:1e:ef:3a:4e:6f:30:3f:a3:
                    b0:ab:88:51:85:37:7a:60:56:ef:2b:28:25:3b:28:
                    90:20:32:27:2e:e3:fd:19:cd:fa:24:a0:e6:b1:6d:
                    e4:b0:3c:85:2a:0f:64:28:7e:8c:ba:f1:80:a2:b4:
                    10:80:e2:eb:87:61:a6:e8:12:10:86:32:14:5a:11:
                    4b:43:5b:a2:22:fc:4d:4e:49:1e:f7:1d:4a:1c:0f:
                    7d:ba:e3:fb:34:25:e0:40:7e:5a:97:59:30:ff:4b:
                    6c:1f:9c:c6:ba:25:88:f5:50:0d:13:6f:5b:5f:70:
                    ec:90:60:09:f2:32:f5:5d:37:74:8e:3b:c1:45:d0:
                    85:d9:75:34:64:fd:7c:ef:e3:e9:76:74:7d:40:d2:
                    3f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:53:5A:70:61:DD:AF:D6:28:FA:76:64:CA:33:A8:59:63:F7:B8:93
            X509v3 Authority Key Identifier:
                keyid:C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a633030303a3a2f33342d3334203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9a8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a4:1e:a5:7e:9f:a1:be:8c:c6:0c:61:46:0e:a0:83:1c:e4:9c:
         08:29:6e:d2:73:61:74:f0:0b:18:c0:15:61:af:1f:04:eb:a7:
         96:f8:d9:c2:ac:48:ef:9a:e0:95:ad:1f:05:3a:5a:d9:63:16:
         ce:f1:f8:28:08:7a:11:09:c7:65:0d:f4:8d:63:9f:d2:09:fc:
         ee:0b:d4:60:bd:5b:07:ea:52:f3:8a:40:77:c8:73:e3:c1:eb:
         e0:37:d7:66:77:b6:7a:d6:c2:35:ff:79:c3:50:6c:01:6a:64:
         08:78:9f:18:7d:e9:02:79:c4:12:ca:6a:0a:df:c5:c9:33:15:
         5b:a0:a2:2b:d1:96:28:ac:72:3e:a2:b0:2e:8e:7a:9e:75:e6:
         c8:c8:df:87:60:83:fb:85:04:b5:77:e8:ac:94:96:b9:26:3c:
         e7:11:90:a0:62:4a:5e:72:de:aa:07:9b:1c:c0:18:0d:9b:db:
         32:34:a2:f0:3d:88:60:98:26:99:c7:b5:0a:36:32:fb:20:93:
         2a:3a:c6:2d:de:74:3c:ba:37:53:1a:a4:ec:67:30:3e:8c:cc:
         ce:cc:64:95:54:00:25:9c:80:a9:82:2e:fa:f5:80:5d:a0:47:
         cb:0e:36:a8:6f:2b:9b:87:0d:c9:42:f6:88:97:27:66:3c:f0:
         e5:17:e4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:31:55 2026 by rpki-client