Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/323830343a363239633a3a2f33322d313238203d3e20323639333037.roa
File:                     323830343a363239633a3a2f33322d313238203d3e20323639333037.roa (raw, json)
Hash identifier:          zra1oMvFJawcxm8XqcQvtkkx4tg3pOC7tZL4PmYoacM=
Subject key identifier:   85:F4:D3:2B:D2:AD:61:37:8A:6B:0B:3F:14:61:FC:0D:9B:02:96:FC
Certificate issuer:       /CN=0F9F75BC9C67C40FED41DBE07057EA800F8BEC26
Certificate serial:       5D5D20F8E1EDAD31A8BB3D8EC7559BD5F0059642
Authority key identifier: 0F:9F:75:BC:9C:67:C4:0F:ED:41:DB:E0:70:57:EA:80:0F:8B:EC:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9F75BC9C67C40FED41DBE07057EA800F8BEC26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/323830343a363239633a3a2f33322d313238203d3e20323639333037.roa
Signing time:             Mon 06 Jul 2026 19:23:40 +0000
ROA not before:           Mon 06 Jul 2026 19:18:40 +0000
ROA not after:            Mon 05 Jul 2027 19:23:40 +0000
asID:                     269307
IP address blocks:        2804:629c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/0F9F75BC9C67C40FED41DBE07057EA800F8BEC26.crl
                          rsync://rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/0F9F75BC9C67C40FED41DBE07057EA800F8BEC26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9F75BC9C67C40FED41DBE07057EA800F8BEC26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5d:20:f8:e1:ed:ad:31:a8:bb:3d:8e:c7:55:9b:d5:f0:05:96:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9F75BC9C67C40FED41DBE07057EA800F8BEC26
        Validity
            Not Before: Jul  6 19:18:40 2026 GMT
            Not After : Jul  5 19:23:40 2027 GMT
        Subject: CN=85F4D32BD2AD61378A6B0B3F1461FC0D9B0296FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d1:e8:fd:c3:fc:85:53:cf:20:c6:47:91:a5:
                    5b:84:00:19:ec:4e:ae:fa:91:36:40:bb:9c:6b:49:
                    32:66:e2:30:76:7a:d1:ec:c4:13:52:e9:84:62:f6:
                    a9:5a:a0:a5:a7:39:3b:cb:62:6f:b2:00:3b:d1:31:
                    4a:db:57:55:aa:36:5b:c5:f3:9e:0e:45:ff:a2:3f:
                    61:58:e4:37:57:b5:34:bb:24:50:b1:70:45:33:48:
                    88:88:50:39:2e:bb:93:30:ec:a0:25:8d:8e:81:eb:
                    c3:4c:81:c5:e4:c1:55:31:44:81:f4:cb:20:05:7b:
                    a6:99:68:bf:43:76:98:2e:75:06:ab:7f:28:ff:41:
                    30:04:78:20:fb:e3:8c:21:df:47:5d:f4:15:ff:af:
                    ea:f8:d0:8b:b1:b0:65:1c:ef:b3:d1:16:2c:02:b7:
                    ee:eb:90:f3:c4:2c:22:f7:73:cf:2d:61:63:86:4e:
                    72:81:1d:54:e0:9f:ce:4a:b6:e8:4e:56:fb:1d:a8:
                    77:e9:80:7d:de:16:cf:d9:44:41:84:10:e3:a3:4c:
                    3f:b0:49:86:15:28:3e:e6:e1:78:4f:45:2e:b7:f4:
                    d9:19:b7:90:23:56:7c:17:24:1b:52:61:b7:80:2e:
                    11:ec:ff:a0:c1:13:70:5f:6b:ed:7f:2f:56:96:ff:
                    91:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F4:D3:2B:D2:AD:61:37:8A:6B:0B:3F:14:61:FC:0D:9B:02:96:FC
            X509v3 Authority Key Identifier:
                keyid:0F:9F:75:BC:9C:67:C4:0F:ED:41:DB:E0:70:57:EA:80:0F:8B:EC:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/0F9F75BC9C67C40FED41DBE07057EA800F8BEC26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9F75BC9C67C40FED41DBE07057EA800F8BEC26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvBKKtCJ7rkidWoPjuDuDQ7DEudLVjGTycKyKZEcZMK4/0/323830343a363239633a3a2f33322d313238203d3e20323639333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:629c::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:46:87:c5:ff:36:ea:52:f4:4c:52:60:0a:88:77:bf:50:ec:
         c7:df:53:8a:c8:d3:1d:62:8e:47:9e:7c:87:b7:48:dd:84:4d:
         57:88:67:07:87:e9:78:19:f5:c4:b3:f2:0f:f8:40:ab:2b:95:
         db:78:48:f8:d2:51:e5:d7:7d:38:76:af:d3:b4:0a:eb:8c:c6:
         cf:fe:89:16:15:76:ae:cb:79:6e:b6:29:ef:ca:e7:79:a2:01:
         cc:b8:43:ab:6a:03:47:72:15:d1:f1:f3:2f:07:59:95:f2:af:
         30:1b:22:7d:e3:32:96:81:73:7d:60:61:b2:4d:ee:f9:27:0b:
         f4:4e:2e:1a:f1:a1:22:8c:20:59:cb:1c:88:67:b1:0e:08:7b:
         9a:90:c5:7c:35:14:a6:77:f5:25:c9:bc:13:8d:07:e3:54:87:
         52:d0:f6:8e:f8:c9:e2:af:16:83:c6:18:bf:3a:f8:db:69:3f:
         e9:48:82:d8:22:60:86:d0:24:82:8e:c3:bc:56:35:a7:f3:81:
         75:dc:78:92:f9:85:7b:4f:b6:38:d0:c0:3a:47:3b:af:35:68:
         70:e6:78:45:5b:3f:2b:65:fd:f1:1a:4c:24:5c:29:88:f1:0f:
         e3:45:b7:a3:6d:cf:a1:47:56:d3:f3:1d:6d:70:ef:80:77:90:
         d7:64:34:eb
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUXV0g+OHtrTGouz2Ox1Wb1fAFlkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY5Rjc1QkM5QzY3QzQwRkVENDFEQkUwNzA1N0VBODAw
RjhCRUMyNjAeFw0yNjA3MDYxOTE4NDBaFw0yNzA3MDUxOTIzNDBaMDMxMTAvBgNV
BAMTKDg1RjREMzJCRDJBRDYxMzc4QTZCMEIzRjE0NjFGQzBEOUIwMjk2RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO0ej9w/yFU88gxkeRpVuEABns
Tq76kTZAu5xrSTJm4jB2etHsxBNS6YRi9qlaoKWnOTvLYm+yADvRMUrbV1WqNlvF
854ORf+iP2FY5DdXtTS7JFCxcEUzSIiIUDkuu5Mw7KAljY6B68NMgcXkwVUxRIH0
yyAFe6aZaL9DdpgudQarfyj/QTAEeCD744wh30dd9BX/r+r40IuxsGUc77PRFiwC
t+7rkPPELCL3c88tYWOGTnKBHVTgn85KtuhOVvsdqHfpgH3eFs/ZREGEEOOjTD+w
SYYVKD7m4XhPRS639NkZt5AjVnwXJBtSYbeALhHs/6DBE3Bfa+1/L1aW/5HXAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUhfTTK9KtYTeKaws/FGH8DZsClvwwHwYDVR0j
BBgwFoAUD591vJxnxA/tQdvgcFfqgA+L7CYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnZCS0t0Q0o3cmtpZFdvUGp1RHVEUTdERXVkTFZqR1R5Y0t5S1pFY1pN
SzQvMC8wRjlGNzVCQzlDNjdDNDBGRUQ0MURCRTA3MDU3RUE4MDBGOEJFQzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGOUY3NUJDOUM2N0M0MEZF
RDQxREJFMDcwNTdFQTgwMEY4QkVDMjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J2QktLdENKN3JraWRXb1BqdUR1RFE3REV1ZExWakdUeWNLeUtaRWNaTUs0LzAv
MzIzODMwMzQzYTM2MzIzOTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzMzMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGKcMA0GCSqGSIb3DQEBCwUAA4IBAQApRofF
/zbqUvRMUmAKiHe/UOzH31OKyNMdYo5HnnyHt0jdhE1XiGcHh+l4GfXEs/IP+ECr
K5XbeEj40lHl1304dq/TtArrjMbP/okWFXauy3lutinvyud5ogHMuEOragNHchXR
8fMvB1mV8q8wGyJ94zKWgXN9YGGyTe75Jwv0Ti4a8aEijCBZyxyIZ7EOCHuakMV8
NRSmd/UlybwTjQfjVIdS0PaO+MnirxaDxhi/OvjbaT/pSILYImCG0CSCjsO8VjWn
84F13HiS+YV7T7Y40MA6RzuvNWhw5nhFWz8rZf3xGkwkXCmI8Q/jRbejbc+hR1bT
8x1tcO+Ad5DXZDTr
-----END CERTIFICATE-----
Generated at Wed Jul 8 17:05:11 2026 by rpki-client