Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/323830343a353435383a3a2f33332d3333203d3e20323638363434.roa
File:                     323830343a353435383a3a2f33332d3333203d3e20323638363434.roa (raw, json)
Hash identifier:          TjHHg3kXqy2kGXCnziX0s+bBlKLeHc30liBvUwCYlEY=
Subject key identifier:   09:F4:3D:02:51:79:1E:08:4B:46:38:94:52:F1:70:EB:83:E8:A0:99
Certificate issuer:       /CN=B95DA4500CFC4EB3787FB5C9BE7068045664997E
Certificate serial:       024EBE3C3FA1CE7F8DE79FA9425F2672A40BD3C7
Authority key identifier: B9:5D:A4:50:0C:FC:4E:B3:78:7F:B5:C9:BE:70:68:04:56:64:99:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B95DA4500CFC4EB3787FB5C9BE7068045664997E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/323830343a353435383a3a2f33332d3333203d3e20323638363434.roa
Signing time:             Thu 30 Jul 2026 16:01:54 +0000
ROA not before:           Thu 30 Jul 2026 15:56:54 +0000
ROA not after:            Thu 29 Jul 2027 16:01:54 +0000
asID:                     268644
IP address blocks:        2804:5458::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/B95DA4500CFC4EB3787FB5C9BE7068045664997E.crl
                          rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/B95DA4500CFC4EB3787FB5C9BE7068045664997E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B95DA4500CFC4EB3787FB5C9BE7068045664997E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 20:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4e:be:3c:3f:a1:ce:7f:8d:e7:9f:a9:42:5f:26:72:a4:0b:d3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B95DA4500CFC4EB3787FB5C9BE7068045664997E
        Validity
            Not Before: Jul 30 15:56:54 2026 GMT
            Not After : Jul 29 16:01:54 2027 GMT
        Subject: CN=09F43D0251791E084B46389452F170EB83E8A099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:56:15:cb:25:29:a0:3c:a2:31:26:d8:38:76:
                    80:b0:b0:2b:ed:95:5a:8c:4c:d7:40:07:a3:6b:4b:
                    a2:e7:79:13:ac:e0:ef:04:19:d2:ca:52:a0:6b:26:
                    cf:1e:42:64:5f:74:3e:b7:e8:e2:d0:95:84:42:84:
                    a4:c9:b6:91:23:f3:ae:78:bf:89:92:3f:19:c3:b3:
                    66:35:68:ef:76:a2:8c:e6:c7:cc:6e:d7:c1:17:73:
                    48:c0:cf:6a:48:7d:5c:a5:9e:54:73:42:6a:2a:a6:
                    e0:8a:9e:67:90:18:29:41:07:73:d2:ad:20:aa:90:
                    4f:3e:d0:7f:ab:83:75:b2:c3:2f:cd:51:25:f9:6f:
                    d1:20:dc:78:e5:92:01:bc:25:0b:06:bc:a1:16:96:
                    12:d3:3c:4b:f1:5e:14:94:88:a8:13:2b:c3:c6:93:
                    ab:5f:0b:ae:10:8f:b4:28:90:63:7e:c0:cb:db:0c:
                    c6:56:d9:09:ce:c3:cd:78:77:05:82:89:ca:77:43:
                    b0:63:a7:75:3e:fa:24:4c:40:51:fe:2e:22:1f:96:
                    4b:e9:89:8f:69:ac:d2:8f:af:df:6d:1e:ac:2e:39:
                    40:5a:7f:10:ae:da:e6:23:2c:73:32:87:97:79:85:
                    0e:d7:fd:c6:c1:85:a5:49:df:fb:96:91:46:5f:39:
                    96:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F4:3D:02:51:79:1E:08:4B:46:38:94:52:F1:70:EB:83:E8:A0:99
            X509v3 Authority Key Identifier:
                keyid:B9:5D:A4:50:0C:FC:4E:B3:78:7F:B5:C9:BE:70:68:04:56:64:99:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/B95DA4500CFC4EB3787FB5C9BE7068045664997E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B95DA4500CFC4EB3787FB5C9BE7068045664997E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BiMVDfTQM5beVkx5brAwNa1B1iXz4wwJLXM5B9UFpJcm/0/323830343a353435383a3a2f33332d3333203d3e20323638363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5458::/33

    Signature Algorithm: sha256WithRSAEncryption
         9e:5e:3b:57:f7:9f:73:cf:71:19:37:99:45:7d:e6:3e:3c:7f:
         64:98:30:68:8d:82:70:2d:dc:3a:9f:11:17:39:b7:3a:77:02:
         3f:25:da:b4:7b:7e:c0:91:5b:b5:8a:47:d5:d1:10:14:c4:52:
         7a:96:41:d3:0a:f6:10:c0:10:67:ae:f7:ec:90:f9:b0:a3:f7:
         16:8d:33:ca:17:aa:1f:7f:8f:b7:c1:16:97:94:31:61:f9:4b:
         e4:3b:21:d6:7e:fc:b3:88:9c:eb:25:6e:84:00:e5:bb:fd:2d:
         a2:c5:ee:ab:5b:b6:15:d3:50:3d:44:a0:61:a9:40:96:16:27:
         60:0f:6c:a8:20:ee:cb:32:7a:8f:11:03:3f:7f:fa:a0:71:6d:
         ca:9e:4b:52:5c:d5:a5:77:c1:66:b3:b2:da:e3:4d:d2:70:5d:
         90:06:e8:4f:0c:22:14:e8:da:f0:2d:be:3e:bf:49:2a:94:7b:
         0e:d7:68:ff:7b:62:1b:48:ed:5f:c9:36:66:05:dd:b9:55:02:
         9b:b7:78:3d:70:0e:d1:4f:3f:c5:04:78:4a:dd:2d:72:fc:22:
         d8:6e:ff:b1:67:d9:71:85:48:bb:43:3d:47:80:5e:36:e5:c4:
         d8:1a:36:74:f1:68:35:b7:2e:10:b7:57:f8:f6:de:8a:1a:cd:
         18:02:d4:28
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAk6+PD+hzn+N55+pQl8mcqQL08cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk1REE0NTAwQ0ZDNEVCMzc4N0ZCNUM5QkU3MDY4MDQ1
NjY0OTk3RTAeFw0yNjA3MzAxNTU2NTRaFw0yNzA3MjkxNjAxNTRaMDMxMTAvBgNV
BAMTKDA5RjQzRDAyNTE3OTFFMDg0QjQ2Mzg5NDUyRjE3MEVCODNFOEEwOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpVhXLJSmgPKIxJtg4doCwsCvt
lVqMTNdAB6NrS6LneROs4O8EGdLKUqBrJs8eQmRfdD636OLQlYRChKTJtpEj8654
v4mSPxnDs2Y1aO92oozmx8xu18EXc0jAz2pIfVylnlRzQmoqpuCKnmeQGClBB3PS
rSCqkE8+0H+rg3Wywy/NUSX5b9Eg3HjlkgG8JQsGvKEWlhLTPEvxXhSUiKgTK8PG
k6tfC64Qj7QokGN+wMvbDMZW2QnOw814dwWCicp3Q7Bjp3U++iRMQFH+LiIflkvp
iY9prNKPr99tHqwuOUBafxCu2uYjLHMyh5d5hQ7X/cbBhaVJ3/uWkUZfOZZBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCfQ9AlF5HghLRjiUUvFw64PooJkwHwYDVR0j
BBgwFoAUuV2kUAz8TrN4f7XJvnBoBFZkmX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmlNVkRmVFFNNWJlVmt4NWJyQXdOYTFCMWlYejR3d0pMWE01QjlVRnBK
Y20vMC9COTVEQTQ1MDBDRkM0RUIzNzg3RkI1QzlCRTcwNjgwNDU2NjQ5OTdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5NURBNDUwMENGQzRFQjM3
ODdGQjVDOUJFNzA2ODA0NTY2NDk5N0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JpTVZEZlRRTTViZVZreDVickF3TmExQjFpWHo0d3dKTFhNNUI5VUZwSmNtLzAv
MzIzODMwMzQzYTM1MzQzNTM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzYzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARUWAAwDQYJKoZIhvcNAQELBQADggEBAJ5eO1f3
n3PPcRk3mUV95j48f2SYMGiNgnAt3DqfERc5tzp3Aj8l2rR7fsCRW7WKR9XREBTE
UnqWQdMK9hDAEGeu9+yQ+bCj9xaNM8oXqh9/j7fBFpeUMWH5S+Q7IdZ+/LOInOsl
boQA5bv9LaLF7qtbthXTUD1EoGGpQJYWJ2APbKgg7ssyeo8RAz9/+qBxbcqeS1Jc
1aV3wWazstrjTdJwXZAG6E8MIhTo2vAtvj6/SSqUew7XaP97YhtI7V/JNmYF3blV
Apu3eD1wDtFPP8UEeErdLXL8Ithu/7Fn2XGFSLtDPUeAXjblxNgaNnTxaDW3LhC3
V/j23ooazRgC1Cg=
-----END CERTIFICATE-----
Generated at Mon Aug 24 13:19:36 2026 by rpki-client