Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a3a2f33322d3332203d3e20323634383931.roa
File:                     323830343a326637303a3a2f33322d3332203d3e20323634383931.roa (raw, json)
Hash identifier:          gw2kr8iqC2erMFHK8E4vmWOtw1TP0lHRX0o/CnJ8QUI=
Subject key identifier:   40:F7:0B:59:7E:D6:AD:BA:0D:90:86:C0:82:6D:93:FB:A9:1D:AA:4F
Certificate issuer:       /CN=6295613937297D5F10674AC45D3ACAB7545474C7
Certificate serial:       0A2950213C1C824F00C9F5A3AA9CD49F515D8DC4
Authority key identifier: 62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a3a2f33322d3332203d3e20323634383931.roa
Signing time:             Wed 08 Jul 2026 13:08:51 +0000
ROA not before:           Wed 08 Jul 2026 13:03:51 +0000
ROA not after:            Wed 07 Jul 2027 13:08:51 +0000
asID:                     264891
IP address blocks:        2804:2f70::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
                          rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:29:50:21:3c:1c:82:4f:00:c9:f5:a3:aa:9c:d4:9f:51:5d:8d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6295613937297D5F10674AC45D3ACAB7545474C7
        Validity
            Not Before: Jul  8 13:03:51 2026 GMT
            Not After : Jul  7 13:08:51 2027 GMT
        Subject: CN=40F70B597ED6ADBA0D9086C0826D93FBA91DAA4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:16:e2:83:ed:51:5d:59:bb:ea:7e:b1:dc:
                    14:fd:40:14:d1:0d:54:e2:06:14:c7:72:bc:c6:22:
                    b2:62:5b:d0:18:40:ba:55:dd:b6:91:c3:d2:21:31:
                    fa:0f:31:c4:f7:72:f6:ad:89:e6:c0:c9:9b:5d:55:
                    fe:3a:3a:bf:a7:c7:c5:29:3c:25:1d:2a:d4:4e:6a:
                    9c:af:a2:0c:ae:5d:14:5c:8a:8e:62:42:d5:34:34:
                    9b:8f:98:ba:4d:d4:e2:06:de:9f:19:4b:ce:fd:f4:
                    78:dc:bf:67:30:95:6e:f7:f0:98:2c:e6:ac:dc:c5:
                    7c:84:c7:a6:b4:e3:20:6f:5e:0f:11:62:aa:e1:a0:
                    37:29:38:5b:38:40:af:55:b8:c5:f1:4c:4a:f0:f7:
                    22:aa:e2:a9:96:11:45:f3:31:94:2a:64:56:0e:3b:
                    47:93:5d:57:1f:d4:6e:56:8e:1d:51:6c:02:91:39:
                    6c:79:c0:96:6c:c5:48:23:5f:02:05:26:d5:42:9e:
                    9b:97:98:ac:aa:70:16:8f:0f:91:77:82:24:0c:1d:
                    53:18:07:f2:2b:c4:c3:ae:99:7f:0f:81:d4:f6:2c:
                    ed:2e:99:43:fd:f8:9e:f1:28:1b:67:17:f2:cb:4f:
                    ae:7a:c1:d7:15:7a:fe:b1:94:35:b6:cf:3c:3d:bb:
                    2a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F7:0B:59:7E:D6:AD:BA:0D:90:86:C0:82:6D:93:FB:A9:1D:AA:4F
            X509v3 Authority Key Identifier:
                keyid:62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a3a2f33322d3332203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f70::/32

    Signature Algorithm: sha256WithRSAEncryption
         e6:82:4c:9d:4d:96:1a:b1:0d:f9:1a:fc:cc:75:06:62:47:f4:
         d7:eb:49:0b:52:ab:66:53:66:a4:78:66:12:e3:ff:78:ab:77:
         22:d5:b5:d4:a5:e5:6f:02:d4:8a:2b:52:3a:bf:d6:47:7c:17:
         5b:b0:5d:2b:ef:ff:f6:cd:36:aa:38:ce:d6:99:59:3f:dc:08:
         51:2c:b2:38:56:06:30:f5:a3:d1:86:51:5c:29:c7:bd:36:e2:
         5f:8b:48:49:e6:a6:af:ce:b6:51:37:05:05:05:fc:1f:f1:9f:
         4b:4c:08:fd:7f:38:26:62:c3:87:c6:be:55:c4:62:a6:5e:2f:
         22:88:ee:7e:b8:12:c6:96:20:cb:bf:7f:17:8b:11:b6:a9:73:
         d4:cc:0d:25:b5:a3:91:8c:ca:88:49:54:6b:22:72:a7:77:de:
         91:3b:48:ac:83:62:4f:a3:e8:f2:70:99:ff:c0:b3:63:10:ea:
         02:58:fb:7a:84:c2:96:bd:c5:fc:3e:45:5b:45:c2:d8:b6:1d:
         c5:d4:fc:4c:2d:8f:4c:b2:7e:83:64:df:98:2d:46:f5:24:61:
         1a:fc:2c:a0:e2:74:bc:74:c6:80:a2:05:62:2d:85:bc:ad:7c:
         a1:45:c9:85:19:9d:7f:ae:0f:13:26:9b:ef:12:c8:04:2c:4a:
         3b:ea:c7:af
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCilQITwcgk8AyfWjqpzUn1FdjcQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI5NTYxMzkzNzI5N0Q1RjEwNjc0QUM0NUQzQUNBQjc1
NDU0NzRDNzAeFw0yNjA3MDgxMzAzNTFaFw0yNzA3MDcxMzA4NTFaMDMxMTAvBgNV
BAMTKDQwRjcwQjU5N0VENkFEQkEwRDkwODZDMDgyNkQ5M0ZCQTkxREFBNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Whbig+1RXVm76n6x3BT9QBTR
DVTiBhTHcrzGIrJiW9AYQLpV3baRw9IhMfoPMcT3cvatiebAyZtdVf46Or+nx8Up
PCUdKtROapyvogyuXRRcio5iQtU0NJuPmLpN1OIG3p8ZS8799Hjcv2cwlW738Jgs
5qzcxXyEx6a04yBvXg8RYqrhoDcpOFs4QK9VuMXxTErw9yKq4qmWEUXzMZQqZFYO
O0eTXVcf1G5Wjh1RbAKROWx5wJZsxUgjXwIFJtVCnpuXmKyqcBaPD5F3giQMHVMY
B/IrxMOumX8PgdT2LO0umUP9+J7xKBtnF/LLT656wdcVev6xlDW2zzw9uyrxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUQPcLWX7WrboNkIbAgm2T+6kdqk8wHwYDVR0j
BBgwFoAUYpVhOTcpfV8QZ0rEXTrKt1RUdMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnhhYUtCa1JSUEw1QVRHcldCMXdYR0RmVE51QnFWQ1VRWmVtdzhZcXUx
TTEvMC82Mjk1NjEzOTM3Mjk3RDVGMTA2NzRBQzQ1RDNBQ0FCNzU0NTQ3NEM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyOTU2MTM5MzcyOTdENUYx
MDY3NEFDNDVEM0FDQUI3NTQ1NDc0QzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J4YWFLQmtSUlBMNUFUR3JXQjF3WEdEZlROdUJxVkNVUVplbXc4WXF1MU0xLzAv
MzIzODMwMzQzYTMyNjYzNzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzgzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQvcDANBgkqhkiG9w0BAQsFAAOCAQEA5oJMnU2W
GrEN+Rr8zHUGYkf01+tJC1KrZlNmpHhmEuP/eKt3ItW11KXlbwLUiitSOr/WR3wX
W7BdK+//9s02qjjO1plZP9wIUSyyOFYGMPWj0YZRXCnHvTbiX4tISeamr862UTcF
BQX8H/GfS0wI/X84JmLDh8a+VcRipl4vIojufrgSxpYgy79/F4sRtqlz1MwNJbWj
kYzKiElUayJyp3fekTtIrINiT6Po8nCZ/8CzYxDqAlj7eoTClr3F/D5FW0XC2LYd
xdT8TC2PTLJ+g2TfmC1G9SRhGvwsoOJ0vHTGgKIFYi2FvK18oUXJhRmdf64PEyab
7xLIBCxKO+rHrw==
-----END CERTIFICATE-----
Generated at Wed Jul 8 21:13:26 2026 by rpki-client