Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/323830343a353435383a3a2f33322d3332203d3e20323638363434.roa
File:                     323830343a353435383a3a2f33322d3332203d3e20323638363434.roa (raw, json)
Hash identifier:          go6/VIoPfwwHl/JTzkf0B87iyAF2heril36VAP/Ovl4=
Subject key identifier:   C0:59:CE:55:28:76:FA:4B:5E:57:ED:FB:E0:A1:12:CB:FB:04:FE:07
Certificate issuer:       /CN=B95DA4500CFC4EB3787FB5C9BE7068045664997E
Certificate serial:       12A2B6D5A1B6E180E50EFB84CAB6AFE1E4CB5F
Authority key identifier: B9:5D:A4:50:0C:FC:4E:B3:78:7F:B5:C9:BE:70:68:04:56:64:99:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B95DA4500CFC4EB3787FB5C9BE7068045664997E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/323830343a353435383a3a2f33322d3332203d3e20323638363434.roa
Signing time:             Thu 30 Jul 2026 16:01:54 +0000
ROA not before:           Thu 30 Jul 2026 15:56:54 +0000
ROA not after:            Thu 29 Jul 2027 16:01:54 +0000
asID:                     268644
IP address blocks:        2804:5458::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/B95DA4500CFC4EB3787FB5C9BE7068045664997E.crl
                          rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/B95DA4500CFC4EB3787FB5C9BE7068045664997E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B95DA4500CFC4EB3787FB5C9BE7068045664997E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 20:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a2:b6:d5:a1:b6:e1:80:e5:0e:fb:84:ca:b6:af:e1:e4:cb:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B95DA4500CFC4EB3787FB5C9BE7068045664997E
        Validity
            Not Before: Jul 30 15:56:54 2026 GMT
            Not After : Jul 29 16:01:54 2027 GMT
        Subject: CN=C059CE552876FA4B5E57EDFBE0A112CBFB04FE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:21:4d:62:44:02:49:4c:40:5a:05:95:dd:d4:
                    cc:43:fc:06:9c:30:e0:01:38:65:88:aa:36:4c:d5:
                    6e:2c:d8:79:f5:02:79:22:0e:45:b7:e8:c6:18:86:
                    d1:32:84:41:3a:0a:c0:dc:f4:bb:67:80:f5:89:e0:
                    34:5e:64:7d:3e:49:f4:de:54:86:ca:1f:12:97:a2:
                    46:13:97:07:34:99:c4:a5:71:5b:d8:96:69:af:da:
                    09:dc:0d:11:63:1f:e1:50:84:5d:56:03:67:d4:e4:
                    8f:45:a5:55:b0:7f:ac:f7:46:e4:69:18:96:d1:1a:
                    6d:17:98:43:37:eb:2f:95:88:a9:4b:fd:0a:30:8f:
                    13:3c:25:26:0b:c6:44:10:13:5b:9c:1d:62:2c:68:
                    49:49:fe:32:bd:3f:dc:2c:ed:1c:80:3c:82:1c:b1:
                    96:48:0e:cd:17:a0:60:1e:1e:b1:cb:2d:58:20:36:
                    a0:dd:35:61:c6:8a:93:ee:bc:53:37:2e:e5:2a:0a:
                    26:5e:8c:58:fe:dd:41:ef:d0:d3:04:9e:62:fb:56:
                    d3:a3:bd:b2:8d:0b:9b:af:75:b2:3e:35:5d:ae:e1:
                    bd:df:59:30:75:6f:21:a8:20:98:4b:26:ac:9f:be:
                    42:d9:6b:06:51:fa:5d:14:94:ba:cf:b1:59:cb:29:
                    70:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:59:CE:55:28:76:FA:4B:5E:57:ED:FB:E0:A1:12:CB:FB:04:FE:07
            X509v3 Authority Key Identifier:
                keyid:B9:5D:A4:50:0C:FC:4E:B3:78:7F:B5:C9:BE:70:68:04:56:64:99:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/B95DA4500CFC4EB3787FB5C9BE7068045664997E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B95DA4500CFC4EB3787FB5C9BE7068045664997E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/323830343a353435383a3a2f33322d3332203d3e20323638363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5458::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:9a:74:d3:8f:44:97:eb:98:df:80:7d:27:3e:e6:3e:df:b8:
         3c:bd:4f:93:49:a8:34:2d:2e:63:65:d0:f9:fd:17:f1:da:ae:
         0c:12:f6:be:95:01:46:78:28:d2:16:de:5d:bf:df:15:a9:de:
         4f:be:cd:72:0c:4e:05:e8:8a:c5:94:2d:c0:b9:ec:26:07:c3:
         c2:31:d6:aa:08:71:fc:25:f3:7d:3a:ed:8c:96:17:20:cf:34:
         8a:f3:89:9f:b0:6e:35:70:c2:0f:2a:da:f7:fb:6e:05:00:b2:
         8c:fe:6c:f6:9a:03:ce:c8:b0:5c:67:a8:c2:b8:26:12:e1:c7:
         74:e7:30:2a:d4:0e:35:4e:27:92:94:dc:75:4d:6c:54:c3:e3:
         2b:c2:8d:3f:1b:71:d0:08:19:f5:d7:e0:0d:b4:46:ce:10:f4:
         5b:69:7a:56:49:97:db:08:67:c4:f1:3f:ff:70:ec:6c:6d:34:
         79:2b:e5:e4:2c:a1:5a:8c:6c:73:af:87:39:87:da:e8:f3:8c:
         fd:77:9b:52:06:05:ce:7d:fc:d8:41:60:cf:1b:75:ed:91:51:
         ff:a1:3b:95:57:04:f1:1f:21:63:06:ca:30:c8:3f:d9:f3:35:
         52:d7:95:75:8b:18:d1:fc:8f:cb:e9:38:2e:1c:10:03:b4:41:
         c4:ce:2f:7b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgITEqK21aG24YDlDvuEyrav4eTLXzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhCOTVEQTQ1MDBDRkM0RUIzNzg3RkI1QzlCRTcwNjgwNDU2
NjQ5OTdFMB4XDTI2MDczMDE1NTY1NFoXDTI3MDcyOTE2MDE1NFowMzExMC8GA1UE
AxMoQzA1OUNFNTUyODc2RkE0QjVFNTdFREZCRTBBMTEyQ0JGQjA0RkUwNzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKghTWJEAklMQFoFld3UzEP8Bpww
4AE4ZYiqNkzVbizYefUCeSIORbfoxhiG0TKEQToKwNz0u2eA9YngNF5kfT5J9N5U
hsofEpeiRhOXBzSZxKVxW9iWaa/aCdwNEWMf4VCEXVYDZ9Tkj0WlVbB/rPdG5GkY
ltEabReYQzfrL5WIqUv9CjCPEzwlJgvGRBATW5wdYixoSUn+Mr0/3CztHIA8ghyx
lkgOzRegYB4escstWCA2oN01YcaKk+68Uzcu5SoKJl6MWP7dQe/Q0wSeYvtW06O9
so0Lm691sj41Xa7hvd9ZMHVvIaggmEsmrJ++QtlrBlH6XRSUus+xWcspcM0CAwEA
AaOCAlAwggJMMB0GA1UdDgQWBBTAWc5VKHb6S15X7fvgoRLL+wT+BzAfBgNVHSME
GDAWgBS5XaRQDPxOs3h/tcm+cGgEVmSZfjAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9CaU1WRGZUUU01YmVWa3g1YnJBd05hMUIxaVh6NHd3SkxYTTVCOVVGcEpj
bS8wL0I5NURBNDUwMENGQzRFQjM3ODdGQjVDOUJFNzA2ODA0NTY2NDk5N0UuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvQjk1REE0NTAwQ0ZDNEVCMzc4
N0ZCNUM5QkU3MDY4MDQ1NjY0OTk3RS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZ
BggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QmlNVkRmVFFNNWJlVmt4NWJyQXdOYTFCMWlYejR3d0pMWE01QjlVRnBKY20vMC8z
MjM4MzAzNDNhMzUzNDM1MzgzYTNhMmYzMzMyMmQzMzMyMjAzZDNlMjAzMjM2Mzgz
NjM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBFRYMA0GCSqGSIb3DQEBCwUAA4IBAQBimnTTj0SX
65jfgH0nPuY+37g8vU+TSag0LS5jZdD5/Rfx2q4MEva+lQFGeCjSFt5dv98Vqd5P
vs1yDE4F6IrFlC3AuewmB8PCMdaqCHH8JfN9Ou2MlhcgzzSK84mfsG41cMIPKtr3
+24FALKM/mz2mgPOyLBcZ6jCuCYS4cd05zAq1A41TieSlNx1TWxUw+Mrwo0/G3HQ
CBn11+ANtEbOEPRbaXpWSZfbCGfE8T//cOxsbTR5K+XkLKFajGxzr4c5h9ro84z9
d5tSBgXOffzYQWDPG3XtkVH/oTuVVwTxHyFjBsowyD/Z8zVS15V1ixjR/I/L6Tgu
HBADtEHEzi97
-----END CERTIFICATE-----
Generated at Mon Aug 24 12:28:46 2026 by rpki-client