Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a633030303a3a2f33362d3336203d3e20323632393739.roa
File:                     323830343a3961383a633030303a3a2f33362d3336203d3e20323632393739.roa (raw, json)
Hash identifier:          DY1xTqM1NvZIemIIzBSVZrQrBTgFz8kNrPyDkdamZYo=
Subject key identifier:   78:6E:D1:4A:D2:68:18:FF:CE:11:BC:21:E3:A2:39:28:16:38:44:E2
Certificate issuer:       /CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Certificate serial:       668C9D268C92BE78935842DB376C7A9A5F5B19E2
Authority key identifier: C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a633030303a3a2f33362d3336203d3e20323632393739.roa
Signing time:             Wed 29 Jul 2026 17:35:40 +0000
ROA not before:           Wed 29 Jul 2026 17:30:40 +0000
ROA not after:            Wed 28 Jul 2027 17:35:40 +0000
asID:                     262979
IP address blocks:        2804:9a8:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8c:9d:26:8c:92:be:78:93:58:42:db:37:6c:7a:9a:5f:5b:19:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
        Validity
            Not Before: Jul 29 17:30:40 2026 GMT
            Not After : Jul 28 17:35:40 2027 GMT
        Subject: CN=786ED14AD26818FFCE11BC21E3A23928163844E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:71:87:7b:bb:99:3f:03:ab:0e:b5:b4:b3:
                    53:ba:e4:1b:19:67:a0:d6:98:9a:27:72:79:fd:5c:
                    5f:15:22:d2:61:2f:db:c0:c9:6b:85:ee:80:1b:2d:
                    7f:71:2c:c4:08:03:61:a0:08:84:6c:52:f1:c1:63:
                    5f:56:be:cd:91:15:8b:88:8a:71:e0:57:b2:04:a4:
                    22:62:9f:22:7e:c8:c6:d9:35:11:f6:5b:41:8a:6c:
                    58:29:2d:1d:d7:92:d1:96:e0:dc:b7:02:ef:61:d1:
                    0c:a0:0e:28:10:07:01:9b:a7:84:6a:56:e1:a1:d3:
                    e3:2e:7f:df:34:6e:5d:f4:a6:73:2e:e0:8d:14:00:
                    42:ac:0d:0f:05:55:90:7e:e6:9c:7e:5c:1c:ba:99:
                    41:1c:5e:83:0a:10:3f:d5:2d:ef:b9:14:a5:bf:36:
                    f1:c7:c5:07:54:a4:21:e9:ff:d6:f1:95:c9:9e:f6:
                    f0:25:ac:2b:42:dd:94:7b:c4:3b:e5:56:e9:1a:f7:
                    8c:77:1c:7c:81:82:53:71:44:59:9d:24:8c:d3:68:
                    f6:93:a2:ae:d2:80:9b:ac:46:e6:61:01:0c:2a:47:
                    0e:b4:9f:c0:34:7a:bb:53:5f:de:ba:3e:d5:94:79:
                    64:a8:50:13:1c:5f:3f:2e:ab:c2:e6:b6:17:b1:95:
                    16:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6E:D1:4A:D2:68:18:FF:CE:11:BC:21:E3:A2:39:28:16:38:44:E2
            X509v3 Authority Key Identifier:
                keyid:C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/323830343a3961383a633030303a3a2f33362d3336203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9a8:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         58:a6:69:26:c0:e4:49:a1:d9:81:dc:19:c9:fd:97:0a:ec:88:
         3c:2b:18:bf:92:da:6c:a9:5c:d8:63:be:1a:99:d4:e4:f1:28:
         6f:e2:06:b8:dc:cd:ca:55:3d:7f:34:8d:ba:3b:f9:c6:db:f1:
         ce:eb:76:97:49:b5:f1:f9:3e:04:b4:7a:22:f1:cc:9e:7b:b9:
         64:f7:b6:04:b5:ba:94:78:a8:7b:ae:2d:21:e8:59:7d:37:3c:
         92:b3:9f:13:ea:7f:b3:24:fb:55:dd:2b:97:0e:65:b5:4c:26:
         70:12:b1:70:a9:69:45:b0:d5:38:8b:9b:4b:c7:95:0b:db:7e:
         b9:76:00:7b:20:59:8b:cf:bd:5d:df:f2:6d:82:ea:d3:0e:db:
         34:71:02:b6:84:19:fd:6a:6f:b3:92:2e:19:30:a8:8d:50:75:
         d0:b0:6f:aa:68:dd:94:68:66:8f:df:65:1a:be:70:83:fb:b4:
         cf:47:19:20:38:05:66:78:17:75:1b:20:70:7f:44:6b:12:3e:
         bd:8f:92:d4:92:d0:a6:c9:fb:4a:a9:76:d1:4e:fa:d3:2f:5f:
         d1:53:16:46:f8:da:2e:cc:85:21:7a:7f:ae:2f:5d:8b:e4:88:
         01:c1:07:30:c5:e2:3c:92:52:20:3d:9a:73:9d:ac:97:6e:09:
         91:41:fd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:18:41 2026 by rpki-client