Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3330303a3a2f34382d3438203d3e20323634343931.roa
File:                     323830343a323037343a3330303a3a2f34382d3438203d3e20323634343931.roa (raw, json)
Hash identifier:          iw/72JxprmYq7nFs5Q+tf2iMFxXWNgQ0hs1vISC29b8=
Subject key identifier:   B2:2B:5F:FD:02:2C:FB:29:63:D3:C6:38:05:42:1A:EA:F2:4B:A0:66
Certificate issuer:       /CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
Certificate serial:       687B50DB3358C3A0B46B959EFA29B372A71AE752
Authority key identifier: 31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3330303a3a2f34382d3438203d3e20323634343931.roa
Signing time:             Tue 07 Jul 2026 17:39:27 +0000
ROA not before:           Tue 07 Jul 2026 17:34:27 +0000
ROA not after:            Tue 06 Jul 2027 17:39:27 +0000
asID:                     264491
IP address blocks:        2804:2074:300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl
                          rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7b:50:db:33:58:c3:a0:b4:6b:95:9e:fa:29:b3:72:a7:1a:e7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
        Validity
            Not Before: Jul  7 17:34:27 2026 GMT
            Not After : Jul  6 17:39:27 2027 GMT
        Subject: CN=B22B5FFD022CFB2963D3C63805421AEAF24BA066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8f:a9:64:fd:a6:93:aa:1c:a4:a4:0a:73:6b:
                    41:8e:1a:53:32:fe:10:d5:b4:1c:b9:4d:bc:5d:4f:
                    14:fa:f7:c8:f2:66:4f:3d:0f:33:ce:11:c9:2b:36:
                    7d:c0:00:5e:e1:7b:49:70:3f:8e:15:48:d6:05:fd:
                    d1:f8:f9:ac:fc:99:0c:5a:b2:26:2d:b0:c1:2f:9c:
                    19:a0:63:a1:6b:87:3c:9f:11:00:40:30:21:93:03:
                    01:b3:d6:a2:5d:73:f4:8a:df:98:f3:e9:5f:fb:2c:
                    d3:df:55:6b:15:d1:51:cd:4e:a1:54:b7:77:4e:f7:
                    ce:3e:a1:d2:d9:9e:a3:4e:ee:46:8b:3c:8a:eb:38:
                    3d:53:52:c7:26:b0:81:cc:e8:44:3b:52:27:3a:d9:
                    db:ae:7a:a6:5b:09:d1:88:f1:6d:ea:3f:87:f6:73:
                    52:fa:d9:e1:84:4d:e5:8e:2e:4a:5a:0a:af:03:c9:
                    4d:1a:9e:9b:15:ed:67:3f:06:fa:6e:c7:b9:af:d9:
                    79:52:50:86:77:53:6b:d1:93:c2:bf:32:c7:4c:cf:
                    ee:04:7d:5b:63:e8:8e:be:04:2d:eb:bd:ee:b4:92:
                    12:fb:d8:ad:ce:75:ac:d9:16:61:48:c2:40:2d:da:
                    54:1e:2f:e3:2e:90:98:6b:57:22:63:77:bf:db:74:
                    ba:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2B:5F:FD:02:2C:FB:29:63:D3:C6:38:05:42:1A:EA:F2:4B:A0:66
            X509v3 Authority Key Identifier:
                keyid:31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3330303a3a2f34382d3438203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2074:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:03:86:41:2e:bd:f0:1d:5c:5a:22:49:6d:4c:0f:50:86:21:
         b1:ce:8b:e4:72:bd:1c:68:96:ff:32:a9:bf:fd:1d:71:fd:20:
         c5:bc:a5:55:b3:ff:84:92:17:af:cb:dc:6b:d3:93:72:4c:4c:
         39:8d:ed:e2:df:82:52:09:53:bc:f3:16:1b:3b:e9:05:fb:f1:
         07:8e:7d:c9:51:32:ac:b7:78:e0:67:4a:96:9b:7e:5f:31:95:
         89:b5:07:34:b8:ef:3f:0d:45:eb:27:c2:82:91:64:53:f6:e6:
         c6:92:e8:23:df:5b:2d:66:3b:12:bb:38:8d:d4:09:27:93:59:
         54:be:de:70:d9:a3:00:d8:8e:96:a8:c2:8f:3a:ea:d4:fd:01:
         34:a7:91:9f:3b:f0:b9:d1:d3:e3:74:3a:a9:d9:bd:b1:ef:b3:
         fa:08:ce:00:d4:7c:6e:28:fe:e1:2f:c1:67:d0:5c:b7:bf:9f:
         3c:fd:f5:34:3a:ef:61:2a:88:6d:02:ab:b7:25:09:eb:3f:97:
         43:c0:0b:95:a7:3d:8b:2c:e9:31:59:c7:c2:67:8b:98:b3:9b:
         52:36:05:11:83:4e:2a:aa:65:76:43:62:d2:ab:dc:cc:da:20:
         d4:db:68:79:0f:b8:5d:a7:ed:43:7a:ed:5c:fc:59:4d:61:c2:
         3a:2c:f6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:59:00 2026 by rpki-client