Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GfErsgtmBbG1xHpw8JmoeJ9wJMRR6sjbVLTz1sCSqpy/0/323830343a336662383a3a2f33322d313238203d3e20323635393039.roa
File:                     323830343a336662383a3a2f33322d313238203d3e20323635393039.roa (raw, json)
Hash identifier:          3QBCUtSrXQsQa0B2u3EsJKWtIBIdW9BS2ZTPRIgQmXg=
Subject key identifier:   00:9B:72:42:AA:92:3F:7F:DC:36:DF:33:1B:A6:9B:2C:B8:EC:72:FB
Certificate issuer:       /CN=80ED3309A50DE7241429532A7DCA29F9B0C75D6C
Certificate serial:       43C5CDE0A351964B68C672919700BEDA7610E771
Authority key identifier: 80:ED:33:09:A5:0D:E7:24:14:29:53:2A:7D:CA:29:F9:B0:C7:5D:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80ED3309A50DE7241429532A7DCA29F9B0C75D6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GfErsgtmBbG1xHpw8JmoeJ9wJMRR6sjbVLTz1sCSqpy/0/323830343a336662383a3a2f33322d313238203d3e20323635393039.roa
Signing time:             Tue 30 Jun 2026 12:53:56 +0000
ROA not before:           Tue 30 Jun 2026 12:48:56 +0000
ROA not after:            Tue 29 Jun 2027 12:53:56 +0000
asID:                     265909
IP address blocks:        2804:3fb8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8GfErsgtmBbG1xHpw8JmoeJ9wJMRR6sjbVLTz1sCSqpy/0/80ED3309A50DE7241429532A7DCA29F9B0C75D6C.crl
                          rsync://rpki-repo.registro.br/repo/8GfErsgtmBbG1xHpw8JmoeJ9wJMRR6sjbVLTz1sCSqpy/0/80ED3309A50DE7241429532A7DCA29F9B0C75D6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80ED3309A50DE7241429532A7DCA29F9B0C75D6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 19:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c5:cd:e0:a3:51:96:4b:68:c6:72:91:97:00:be:da:76:10:e7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ED3309A50DE7241429532A7DCA29F9B0C75D6C
        Validity
            Not Before: Jun 30 12:48:56 2026 GMT
            Not After : Jun 29 12:53:56 2027 GMT
        Subject: CN=009B7242AA923F7FDC36DF331BA69B2CB8EC72FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:05:dc:70:6c:7c:9b:95:4a:15:56:86:f8:27:
                    07:59:0b:fd:c4:6c:57:bf:89:65:69:cf:72:c6:8e:
                    3e:f7:81:ad:94:56:9e:4f:15:b7:5c:b7:d1:b0:58:
                    b5:2e:6f:6d:46:7f:b8:8c:21:24:7f:b8:4c:f6:ee:
                    0d:d8:95:ed:74:d5:28:12:0f:4e:3a:1f:a2:f3:08:
                    25:e8:81:76:99:6a:76:7f:6e:7a:22:0a:c4:a1:87:
                    e8:83:8d:94:6e:a5:34:e2:ec:8c:2e:18:00:6b:ae:
                    90:a6:5f:b8:96:d7:e1:38:5c:0d:b7:ca:c4:b9:6d:
                    c6:48:99:7b:b1:9f:bb:cb:c8:d8:80:9b:ce:a8:aa:
                    6f:20:e2:a2:d7:b4:a1:3d:60:5e:cd:bc:e7:ba:68:
                    9b:63:5d:f1:12:23:84:67:cd:00:10:5c:71:fd:9a:
                    e7:67:2a:65:a0:03:75:90:13:4f:4b:aa:cf:4a:d0:
                    23:4c:90:55:6b:bd:fb:48:e0:4b:3b:f1:ac:12:57:
                    83:f1:d0:44:8a:c6:47:b0:25:dc:65:40:b5:b3:44:
                    70:59:a1:cb:01:c7:0f:5f:87:b4:2c:a0:52:c1:8b:
                    0a:87:50:ae:b2:73:bd:95:ff:51:ed:36:84:8b:2d:
                    2e:34:a4:c7:35:f5:3d:a8:44:9b:db:c2:4d:97:35:
                    85:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9B:72:42:AA:92:3F:7F:DC:36:DF:33:1B:A6:9B:2C:B8:EC:72:FB
            X509v3 Authority Key Identifier:
                keyid:80:ED:33:09:A5:0D:E7:24:14:29:53:2A:7D:CA:29:F9:B0:C7:5D:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GfErsgtmBbG1xHpw8JmoeJ9wJMRR6sjbVLTz1sCSqpy/0/80ED3309A50DE7241429532A7DCA29F9B0C75D6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80ED3309A50DE7241429532A7DCA29F9B0C75D6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GfErsgtmBbG1xHpw8JmoeJ9wJMRR6sjbVLTz1sCSqpy/0/323830343a336662383a3a2f33322d313238203d3e20323635393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:9c:cc:99:cf:43:01:44:e3:dd:5d:83:96:6c:2b:ef:32:03:
         88:cd:28:c2:56:dc:c9:41:64:46:f8:37:db:03:01:f8:7e:2a:
         d0:a9:81:4e:09:53:54:54:78:ea:30:b4:2c:39:4f:d0:fd:30:
         1a:55:bb:9e:a6:35:9c:78:6e:92:23:40:49:96:dd:98:f0:ba:
         01:59:ff:02:02:3e:30:25:28:45:71:d5:74:8c:9e:98:65:7b:
         ff:10:f5:e9:f1:04:6b:d2:5c:41:a9:07:26:ba:6c:f5:2d:45:
         1b:56:25:c1:8e:bf:d9:fa:2e:99:2d:62:74:f4:aa:08:9f:7c:
         c4:0c:d4:ae:64:97:c3:db:74:a5:ac:8a:dd:51:e2:85:76:ae:
         e7:1e:9a:55:cb:83:5e:73:e5:cd:bb:f9:8c:9e:a4:fa:cc:4e:
         11:87:7a:13:05:3e:19:fd:e6:08:45:26:1e:35:e6:a6:10:b5:
         e0:c7:eb:5c:66:2a:a8:4f:12:c3:87:48:1f:63:86:64:7f:3b:
         b8:08:93:d7:31:a9:e0:ed:7f:26:3a:17:cc:15:3c:73:3e:97:
         30:54:e6:98:a3:45:8e:39:de:61:89:08:b0:9a:07:66:fb:8f:
         93:ec:75:45:18:06:bd:45:65:62:27:4a:9b:44:a6:7a:d7:28:
         2d:86:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:38 2026 by rpki-client