Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3130303a3a2f34302d3430203d3e20323634343931.roa
File:                     323830343a323037343a3130303a3a2f34302d3430203d3e20323634343931.roa (raw, json)
Hash identifier:          fGTl9uuAOpxD3nDqdQeWuO50YO1bgZe8WkepwvAUDJA=
Subject key identifier:   A0:8F:13:37:40:C9:12:AB:03:02:52:8C:8C:BB:09:CB:B7:D5:E4:7A
Certificate issuer:       /CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
Certificate serial:       32F4C8478D17A6E50A4D6BDE797E225FDCEEB421
Authority key identifier: 31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3130303a3a2f34302d3430203d3e20323634343931.roa
Signing time:             Tue 07 Jul 2026 17:39:25 +0000
ROA not before:           Tue 07 Jul 2026 17:34:25 +0000
ROA not after:            Tue 06 Jul 2027 17:39:25 +0000
asID:                     264491
IP address blocks:        2804:2074:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl
                          rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f4:c8:47:8d:17:a6:e5:0a:4d:6b:de:79:7e:22:5f:dc:ee:b4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
        Validity
            Not Before: Jul  7 17:34:25 2026 GMT
            Not After : Jul  6 17:39:25 2027 GMT
        Subject: CN=A08F133740C912AB0302528C8CBB09CBB7D5E47A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:10:8e:e1:e7:16:cb:32:56:01:88:29:dd:
                    a3:0a:28:68:ef:00:97:c0:da:84:8e:a8:84:eb:0b:
                    57:e5:d7:c0:d3:7c:80:2c:13:6b:f0:af:21:ce:e9:
                    80:4e:0d:ec:db:18:c0:fd:5b:46:55:39:72:69:6a:
                    70:86:58:21:cc:b0:b1:35:5a:dc:36:ee:93:2c:e2:
                    5c:81:12:b0:7c:59:29:fa:41:a8:85:7e:cf:75:a3:
                    44:98:71:3b:e3:ea:4e:f9:42:94:8c:ed:20:4f:15:
                    fa:c1:42:10:2f:44:5f:32:8a:52:8a:2e:9e:de:01:
                    41:d7:63:e8:8b:17:56:15:4c:0b:7a:c6:33:08:85:
                    48:ca:74:13:81:64:b7:18:80:8e:04:02:31:a7:c6:
                    88:b4:46:15:96:0e:2d:3a:a1:9a:f6:f5:6a:4d:12:
                    e9:89:15:2a:03:95:80:f1:57:50:c0:34:ad:46:b1:
                    d3:6e:f3:39:93:5b:7d:40:39:c1:8d:8f:0e:1e:56:
                    a9:02:b0:66:d8:8d:82:db:65:61:8a:4e:b2:86:51:
                    7f:b7:a7:43:39:6a:e8:6a:32:e3:24:50:f3:e6:bc:
                    bf:dd:80:c9:63:67:14:06:a7:09:b1:4f:0d:89:54:
                    0b:8b:5e:15:17:5e:a0:01:f4:13:3f:88:b9:65:bf:
                    e4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8F:13:37:40:C9:12:AB:03:02:52:8C:8C:BB:09:CB:B7:D5:E4:7A
            X509v3 Authority Key Identifier:
                keyid:31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3130303a3a2f34302d3430203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2074:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:7f:1f:fb:97:f9:77:03:30:61:12:18:c2:70:4c:92:12:82:
         aa:f9:39:e7:3f:29:98:1b:3d:2c:3e:a5:cd:ae:ab:01:b4:41:
         2a:24:ac:c7:7e:78:8f:ed:39:20:bf:4b:e8:77:50:fe:35:1b:
         79:a0:5a:c4:58:6c:4f:d5:8c:32:0c:1a:f3:23:15:bf:2e:80:
         64:3f:fe:5d:d9:fc:3a:08:12:c6:62:a7:85:ef:9c:e0:b1:e8:
         d4:df:f4:3b:b2:72:2c:92:2c:55:67:f3:78:c2:27:92:78:46:
         a9:a1:9b:d8:c8:fd:d5:ae:78:11:fd:4c:19:e4:b8:03:f9:1f:
         58:82:1b:bf:3a:09:04:e5:d1:f1:9e:da:84:d2:b5:e2:c0:9b:
         b6:b6:da:f6:17:41:06:d4:7f:4c:01:a7:e1:33:34:57:02:85:
         6c:30:51:1a:a3:84:c2:34:e3:5c:57:59:8b:45:aa:05:07:35:
         02:93:b7:66:9d:1d:ad:b5:91:e1:9c:ce:54:6f:5f:f5:f0:67:
         c1:75:e1:c7:6b:93:4c:0c:4b:3d:af:ed:db:1b:c6:eb:fb:dd:
         64:2c:f1:c6:f3:0e:03:56:e1:bc:f5:f8:2a:b4:6e:17:c1:8f:
         53:42:27:07:bb:31:85:b2:89:66:6a:42:17:64:e7:13:38:6a:
         45:ee:10:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:02:01 2026 by rpki-client