Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3230303a3a2f34312d3431203d3e20323634343931.roa
File:                     323830343a323037343a3230303a3a2f34312d3431203d3e20323634343931.roa (raw, json)
Hash identifier:          QcV87XvhcAmxaSC2cmikxqbPXMBCSglAKLwa7y9bYlk=
Subject key identifier:   43:0A:C2:AC:53:54:09:04:5B:34:8D:58:E7:86:4D:BF:C8:79:41:E3
Certificate issuer:       /CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
Certificate serial:       7CD14B1C2DC852AF57F84EDC961E28FE389BAEEB
Authority key identifier: 31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3230303a3a2f34312d3431203d3e20323634343931.roa
Signing time:             Tue 07 Jul 2026 17:39:25 +0000
ROA not before:           Tue 07 Jul 2026 17:34:25 +0000
ROA not after:            Tue 06 Jul 2027 17:39:25 +0000
asID:                     264491
IP address blocks:        2804:2074:200::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl
                          rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d1:4b:1c:2d:c8:52:af:57:f8:4e:dc:96:1e:28:fe:38:9b:ae:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
        Validity
            Not Before: Jul  7 17:34:25 2026 GMT
            Not After : Jul  6 17:39:25 2027 GMT
        Subject: CN=430AC2AC535409045B348D58E7864DBFC87941E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:37:dc:bf:6e:49:75:97:c0:0b:5f:9d:9a:fc:
                    55:55:7c:da:01:04:80:10:a4:c4:b5:fe:17:3a:a6:
                    41:0a:31:80:27:c6:90:be:26:2b:03:03:63:66:38:
                    ab:2e:23:ae:cf:55:a6:fe:ac:70:50:06:0f:d6:d5:
                    3c:8f:80:f3:c5:1a:b2:a0:6e:55:56:f5:5b:dd:bd:
                    fb:21:40:a5:18:67:b5:b5:62:9c:97:07:33:8b:af:
                    68:9e:cd:6a:07:c1:b0:35:f2:e0:cc:41:1d:a9:9c:
                    2f:98:5e:22:43:bd:dc:6b:20:e2:67:c2:2e:ec:d2:
                    c5:b8:d0:6f:cf:44:7a:b6:ed:3a:62:55:6b:0c:38:
                    07:e2:69:07:d5:4e:22:43:58:a8:67:fd:72:1b:b2:
                    4f:e7:33:a6:be:1b:d5:46:fa:6b:8c:d1:d9:cd:78:
                    a0:06:f4:87:4b:3d:3f:c2:78:f2:73:ea:26:2d:99:
                    fe:a1:1f:a8:6a:fe:de:3c:02:d1:06:e9:b0:99:41:
                    27:bb:4f:e7:9d:62:24:df:5e:67:ad:2f:9d:20:fb:
                    31:b2:a2:a4:24:db:51:9b:ad:1d:c8:66:c1:c5:11:
                    86:25:28:8d:e3:d6:55:f7:68:ba:89:54:47:f0:bf:
                    45:22:77:d7:ac:a9:cb:ec:a6:f1:90:1b:7b:bc:a5:
                    21:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0A:C2:AC:53:54:09:04:5B:34:8D:58:E7:86:4D:BF:C8:79:41:E3
            X509v3 Authority Key Identifier:
                keyid:31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3230303a3a2f34312d3431203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2074:200::/41

    Signature Algorithm: sha256WithRSAEncryption
         02:82:9d:c5:ac:c2:45:9e:00:95:2d:38:35:8d:34:34:aa:e2:
         34:c2:e6:84:48:87:c2:21:b4:e1:7b:ca:11:f2:25:3c:d3:17:
         bf:e0:95:b1:02:5a:a0:7a:7b:94:91:57:96:17:43:3a:74:b8:
         cc:0b:9f:27:e5:03:3a:42:2f:8e:13:5b:4b:67:c0:68:12:7a:
         c2:ad:f5:79:65:55:19:49:12:6f:e3:6c:53:a6:93:8e:c2:aa:
         6a:c7:1c:fd:b2:2b:0c:bf:7a:31:1c:ce:7e:77:fb:05:11:bd:
         fa:f2:08:35:51:40:9c:5f:87:07:a0:e6:8d:e1:9e:79:53:73:
         d0:c5:57:51:55:3d:c2:72:b6:02:2a:95:bf:79:71:22:16:e1:
         09:ee:9b:3a:25:44:ac:3b:5f:38:c5:b2:e3:2e:01:b7:ff:45:
         db:af:98:da:21:85:d4:6c:66:f6:4a:1d:10:9e:0e:5c:8e:88:
         40:82:5f:e8:02:66:f7:71:35:61:f3:75:ce:6e:09:ad:60:c7:
         ed:3a:3f:4f:22:4c:90:9c:25:33:1b:bf:b0:48:2b:dd:84:19:
         6c:55:3a:ce:f8:f8:b3:60:8d:52:09:ad:64:43:7d:58:4d:1d:
         ef:d0:28:57:16:75:35:19:0a:99:ae:4a:c5:2a:ae:49:be:c4:
         cb:fe:a4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:58:38 2026 by rpki-client