Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/323830343a326135383a3a2f33322d313238203d3e20323634303730.roa
File:                     323830343a326135383a3a2f33322d313238203d3e20323634303730.roa (raw, json)
Hash identifier:          tWSeV5yJyXbgiJAPAOr6IYKXWPeuc8PmaFH1weRzVgc=
Subject key identifier:   16:0E:D3:A7:7B:11:6A:28:B7:65:7D:60:50:01:6C:01:77:B7:9C:A9
Certificate issuer:       /CN=F439D3B378B5A8210EE32EDD9176A74ADBBF8682
Certificate serial:       777E208B68C9F40879BD5DDA56BC057A20A0A41A
Authority key identifier: F4:39:D3:B3:78:B5:A8:21:0E:E3:2E:DD:91:76:A7:4A:DB:BF:86:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F439D3B378B5A8210EE32EDD9176A74ADBBF8682.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/323830343a326135383a3a2f33322d313238203d3e20323634303730.roa
Signing time:             Wed 01 Jul 2026 19:07:09 +0000
ROA not before:           Wed 01 Jul 2026 19:02:09 +0000
ROA not after:            Wed 30 Jun 2027 19:07:09 +0000
asID:                     264070
IP address blocks:        2804:2a58::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/F439D3B378B5A8210EE32EDD9176A74ADBBF8682.crl
                          rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/F439D3B378B5A8210EE32EDD9176A74ADBBF8682.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F439D3B378B5A8210EE32EDD9176A74ADBBF8682.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7e:20:8b:68:c9:f4:08:79:bd:5d:da:56:bc:05:7a:20:a0:a4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F439D3B378B5A8210EE32EDD9176A74ADBBF8682
        Validity
            Not Before: Jul  1 19:02:09 2026 GMT
            Not After : Jun 30 19:07:09 2027 GMT
        Subject: CN=160ED3A77B116A28B7657D6050016C0177B79CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c0:3c:8f:71:2b:95:0f:96:d3:25:17:e5:0c:
                    02:38:49:81:bd:b1:98:5e:58:f3:f1:9a:22:94:c0:
                    0f:28:b2:86:a9:43:79:ca:a9:7d:91:39:31:7a:6d:
                    c3:bf:92:47:33:5b:22:8b:13:f5:ed:97:49:80:19:
                    20:da:d1:42:e4:20:d6:e4:cc:4b:8e:a0:46:8e:fb:
                    7a:25:20:70:ff:15:5c:41:84:10:55:59:14:4b:85:
                    bd:7c:cc:57:c2:85:56:e7:d9:dd:98:b2:57:30:14:
                    63:43:4c:cc:18:ff:89:1f:b8:42:ad:08:6d:81:7a:
                    d1:f8:8d:cf:84:d9:26:e6:06:7e:25:4c:84:f3:68:
                    d2:0b:d6:8e:76:c6:20:d1:14:9c:b9:aa:f7:c0:29:
                    d7:ae:39:a4:9a:ce:d5:1f:bb:f8:4d:25:39:be:84:
                    67:e5:91:1d:72:d7:33:89:fd:99:d6:b3:e9:a1:cc:
                    08:8d:7a:26:f1:8f:bc:9e:b8:47:61:b2:3d:c8:e5:
                    d1:a7:c9:c4:bc:36:bc:93:fb:e2:a7:2a:5c:f0:af:
                    2d:98:b2:a8:41:0c:86:8c:ea:56:61:04:59:b3:0c:
                    cc:a2:dd:b7:ac:59:37:71:b2:b5:e4:32:41:b1:1b:
                    9e:a9:4f:a2:85:97:7f:59:09:82:46:16:8c:2a:db:
                    d7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0E:D3:A7:7B:11:6A:28:B7:65:7D:60:50:01:6C:01:77:B7:9C:A9
            X509v3 Authority Key Identifier:
                keyid:F4:39:D3:B3:78:B5:A8:21:0E:E3:2E:DD:91:76:A7:4A:DB:BF:86:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/F439D3B378B5A8210EE32EDD9176A74ADBBF8682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F439D3B378B5A8210EE32EDD9176A74ADBBF8682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/323830343a326135383a3a2f33322d313238203d3e20323634303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a58::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:69:a3:03:c3:3f:29:91:c7:ee:bf:6d:97:9d:50:e7:a6:d8:
         f5:fe:0b:7f:55:62:df:6b:32:09:7e:cf:46:49:9f:e6:53:e8:
         22:cc:aa:40:5d:de:4d:4e:4a:96:fe:d0:76:3b:69:4b:62:3c:
         d9:48:ce:1e:5a:ad:30:a9:5c:e5:09:ee:1d:14:2a:00:0d:c6:
         ff:9b:ac:d3:73:b3:eb:6b:4f:a6:25:82:c4:fd:c3:90:25:88:
         d6:b4:23:f3:cc:2d:99:f4:b4:2d:a9:ed:10:cb:a0:ca:03:d6:
         4b:7e:78:2f:4b:07:44:02:2f:3e:d2:0a:82:3b:96:41:2f:95:
         a6:0e:9c:a8:65:d2:85:25:25:75:4d:fb:13:b4:dc:e7:95:4b:
         2a:32:07:64:7e:87:a9:c0:35:ae:89:94:5d:81:b6:c0:3e:9f:
         be:8e:be:ba:b8:c1:e6:bf:fc:d7:bf:d7:12:91:68:10:ad:25:
         83:1e:c9:2b:ad:6e:fd:a2:16:9a:8c:82:06:41:db:50:28:54:
         df:94:29:af:51:6a:77:a4:81:8a:58:43:37:8b:c3:54:d6:df:
         9d:5d:3b:e0:4b:c5:1b:fc:4e:7c:03:ee:26:1c:33:ee:a5:b9:
         fb:9d:39:5f:5a:dc:2b:67:8e:c0:c9:d2:c6:52:51:04:c6:c8:
         b5:da:57:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:14:39 2026 by rpki-client