Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3430303a3a2f34302d3430203d3e20323634343931.roa
File:                     323830343a323037343a3430303a3a2f34302d3430203d3e20323634343931.roa (raw, json)
Hash identifier:          A2Vc0cue/ngI62DAp6nP9uMNSvD4V9Ib0TDAtRNq7sw=
Subject key identifier:   B2:3D:BF:EB:F7:33:35:34:92:3F:E1:20:CD:3E:59:1B:73:3E:F1:B6
Certificate issuer:       /CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
Certificate serial:       6B1E2DF148841EFF10FD051FD5306E00AA26C43A
Authority key identifier: 31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3430303a3a2f34302d3430203d3e20323634343931.roa
Signing time:             Tue 07 Jul 2026 17:39:26 +0000
ROA not before:           Tue 07 Jul 2026 17:34:26 +0000
ROA not after:            Tue 06 Jul 2027 17:39:26 +0000
asID:                     264491
IP address blocks:        2804:2074:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl
                          rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1e:2d:f1:48:84:1e:ff:10:fd:05:1f:d5:30:6e:00:aa:26:c4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
        Validity
            Not Before: Jul  7 17:34:26 2026 GMT
            Not After : Jul  6 17:39:26 2027 GMT
        Subject: CN=B23DBFEBF7333534923FE120CD3E591B733EF1B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:fd:c6:98:59:d5:b4:86:69:08:0c:79:a5:
                    36:55:d6:4b:ab:74:be:0e:92:34:8d:36:44:2f:82:
                    d2:e4:9c:23:07:ae:7f:59:12:74:c1:e8:36:54:78:
                    c0:bd:83:7e:69:c1:b5:73:60:1e:67:64:12:d6:3c:
                    a3:80:80:83:2e:32:3f:73:33:eb:dc:2c:40:20:be:
                    b1:b2:54:35:a9:82:09:af:2e:f7:0d:b9:b7:63:d2:
                    18:ad:fc:76:7d:c3:41:88:b4:f0:e8:5d:5e:dc:63:
                    94:a2:f7:a4:1b:c5:98:e1:56:1f:5a:db:bc:2c:d7:
                    39:bd:4a:4c:69:59:f8:4f:c3:88:97:6a:e2:f1:30:
                    55:bc:f0:55:f7:b4:1b:08:07:73:ea:04:d5:02:64:
                    73:06:71:14:bd:32:f8:c8:28:0f:99:e7:0f:d3:ed:
                    96:60:c3:ac:de:45:36:f8:34:8b:74:3c:fe:db:6e:
                    14:e9:d1:2d:cd:f9:d8:d0:55:fb:88:f8:dd:15:b4:
                    73:a9:fd:81:6f:51:af:66:e1:b0:4c:45:1c:89:69:
                    64:7d:d3:c7:79:02:48:58:3d:ba:26:b4:60:60:59:
                    1e:3e:98:1e:8f:9b:22:b4:a0:fb:eb:33:13:39:e4:
                    28:42:37:5e:1b:63:30:c3:be:15:8a:bd:ba:df:e7:
                    1d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3D:BF:EB:F7:33:35:34:92:3F:E1:20:CD:3E:59:1B:73:3E:F1:B6
            X509v3 Authority Key Identifier:
                keyid:31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323037343a3430303a3a2f34302d3430203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2074:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:09:99:ae:2b:f0:9e:8d:29:32:c5:5f:0b:78:cd:f2:73:c5:
         79:45:10:a1:17:ea:7a:01:cc:71:f6:75:a6:8e:23:c5:43:30:
         47:75:f2:79:9c:be:a2:17:09:39:13:93:39:00:3e:52:fb:0f:
         a7:5e:ab:db:a5:8e:c7:36:85:66:0e:65:5e:2b:07:b3:3e:40:
         f7:f2:5d:fb:72:e4:be:12:92:2c:c7:5d:41:7c:c7:4c:c0:6b:
         6e:11:68:89:78:fa:a8:e8:5e:03:f2:0d:6b:c3:80:a8:df:2b:
         0a:5d:45:41:5d:05:e6:25:2c:17:6e:12:e2:78:4c:01:87:f2:
         d9:0c:3f:db:87:68:59:40:6c:0f:d9:79:53:fd:c4:70:65:de:
         53:43:f9:e6:0a:e9:2c:30:f1:24:fe:cb:32:53:a6:04:2f:db:
         5b:ed:15:b5:7a:cd:e4:f8:65:03:79:fe:b8:82:5b:23:30:e6:
         60:f7:db:da:9e:2a:59:a0:48:a6:b6:d0:d5:d4:54:27:71:6e:
         d4:95:42:e0:43:2e:31:22:45:bd:6c:98:5b:9a:ca:77:86:71:
         ee:eb:7e:41:21:1c:a0:25:5f:fc:17:7c:8f:08:e7:fe:60:65:
         90:9b:48:bd:0d:6b:ea:35:4d:b6:11:a9:66:a3:c4:e2:20:fe:
         94:8f:80:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUax4t8UiEHv8Q/QUf1TBuAKomxDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFGOEU2RkY4OTgzQzgyRTU5QjYxQUZCQzExQkI3RkFF
NzUzMjk3QjAeFw0yNjA3MDcxNzM0MjZaFw0yNzA3MDYxNzM5MjZaMDMxMTAvBgNV
BAMTKEIyM0RCRkVCRjczMzM1MzQ5MjNGRTEyMENEM0U1OTFCNzMzRUYxQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeNf3GmFnVtIZpCAx5pTZV1kur
dL4OkjSNNkQvgtLknCMHrn9ZEnTB6DZUeMC9g35pwbVzYB5nZBLWPKOAgIMuMj9z
M+vcLEAgvrGyVDWpggmvLvcNubdj0hit/HZ9w0GItPDoXV7cY5Si96QbxZjhVh9a
27ws1zm9SkxpWfhPw4iXauLxMFW88FX3tBsIB3PqBNUCZHMGcRS9MvjIKA+Z5w/T
7ZZgw6zeRTb4NIt0PP7bbhTp0S3N+djQVfuI+N0VtHOp/YFvUa9m4bBMRRyJaWR9
08d5AkhYPbomtGBgWR4+mB6PmyK0oPvrMxM55ChCN14bYzDDvhWKvbrf5x3lAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUsj2/6/czNTSSP+EgzT5ZG3M+8bYwHwYDVR0j
BBgwFoAUMfjm/4mDyC5Zthr7wRu3+udTKXswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnp3ajhZanNkOEpEbWdQVUdvZG43akJQTW5kN3VkOFFiUjJlSzE1b25u
SGYvMC8zMUY4RTZGRjg5ODNDODJFNTlCNjFBRkJDMTFCQjdGQUU3NTMyOTdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxRjhFNkZGODk4M0M4MkU1
OUI2MUFGQkMxMUJCN0ZBRTc1MzI5N0IuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6d2o4WWpzZDhKRG1nUFVHb2RuN2pCUE1uZDd1ZDhRYlIyZUsxNW9ubkhmLzAv
MzIzODMwMzQzYTMyMzAzNzM0M2EzNDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzQzNDM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBCB0BDANBgkqhkiG9w0BAQsFAAOC
AQEAZgmZrivwno0pMsVfC3jN8nPFeUUQoRfqegHMcfZ1po4jxUMwR3XyeZy+ohcJ
OROTOQA+UvsPp16r26WOxzaFZg5lXisHsz5A9/Jd+3LkvhKSLMddQXzHTMBrbhFo
iXj6qOheA/INa8OAqN8rCl1FQV0F5iUsF24S4nhMAYfy2Qw/24doWUBsD9l5U/3E
cGXeU0P55grpLDDxJP7LMlOmBC/bW+0VtXrN5PhlA3n+uIJbIzDmYPfb2p4qWaBI
prbQ1dRUJ3Fu1JVC4EMuMSJFvWyYW5rKd4Zx7ut+QSEcoCVf/Bd8jwjn/mBlkJtI
vQ1r6jVNthGpZqPE4iD+lI+AlA==
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:58:43 2026 by rpki-client