Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a313330303a3a2f34302d3430203d3e20323634303235.roa
File:                     323830343a323939633a313330303a3a2f34302d3430203d3e20323634303235.roa (raw, json)
Hash identifier:          Mu8EXR4boQIL/64NvNG4Po9UcB2ZFNkIIOHszLTbKmI=
Subject key identifier:   F6:33:EA:28:26:D1:BA:CF:B8:61:3F:61:D8:8D:E1:3B:F6:0B:63:15
Certificate issuer:       /CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
Certificate serial:       25E7E597DFAE62FD928AB0A5755918F08300C073
Authority key identifier: 64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a313330303a3a2f34302d3430203d3e20323634303235.roa
Signing time:             Thu 30 Jul 2026 17:59:28 +0000
ROA not before:           Thu 30 Jul 2026 17:54:28 +0000
ROA not after:            Thu 29 Jul 2027 17:59:28 +0000
asID:                     264025
IP address blocks:        2804:299c:1300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl
                          rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 22:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e7:e5:97:df:ae:62:fd:92:8a:b0:a5:75:59:18:f0:83:00:c0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
        Validity
            Not Before: Jul 30 17:54:28 2026 GMT
            Not After : Jul 29 17:59:28 2027 GMT
        Subject: CN=F633EA2826D1BACFB8613F61D88DE13BF60B6315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7c:7c:ff:f9:d5:7f:53:d7:d1:48:d0:c0:38:
                    13:5b:71:12:71:6b:9a:d7:3d:2f:44:d5:8b:12:2f:
                    21:29:18:a0:2d:7d:77:20:73:4f:69:17:e0:a9:6b:
                    ee:10:5d:e4:6f:3d:c6:0e:51:ec:9c:b5:2e:4b:9d:
                    5a:e0:2e:b1:bd:11:28:ea:09:51:79:81:08:81:ab:
                    31:e5:cd:17:20:ae:0e:59:f2:98:06:78:0a:4f:d2:
                    49:00:01:bd:a4:de:75:31:f0:95:fc:9d:3e:26:4a:
                    ef:2a:ce:43:dc:77:15:6d:c6:d1:ef:39:1d:e9:1b:
                    af:41:e1:cb:6b:17:c3:04:1b:1b:7d:42:30:d1:f7:
                    b5:a3:52:28:4b:91:53:98:8d:55:f7:19:28:b2:d0:
                    a1:83:d4:7b:0c:4c:9d:5b:6c:ce:65:c4:d8:13:55:
                    41:1f:bd:11:5a:87:22:72:be:3f:37:20:cd:a9:47:
                    53:c0:dc:42:b3:f3:83:19:32:0a:17:95:f3:aa:7e:
                    de:d1:5c:80:1e:31:0a:c8:13:72:75:a5:19:95:53:
                    5d:f8:4f:c5:f9:bf:fd:d3:92:c9:d9:7d:2f:92:4d:
                    bc:6c:33:e2:18:69:4b:e4:08:4c:85:a9:6a:1d:82:
                    34:e7:c1:71:f1:0b:af:88:aa:1d:29:c5:0e:d6:50:
                    78:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:33:EA:28:26:D1:BA:CF:B8:61:3F:61:D8:8D:E1:3B:F6:0B:63:15
            X509v3 Authority Key Identifier:
                keyid:64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a313330303a3a2f34302d3430203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:299c:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:61:f4:16:e9:69:c7:08:ed:cf:6a:7a:91:ac:e3:76:c9:7d:
         50:0a:5b:a5:72:a7:b7:b5:cd:01:d8:9a:14:2c:04:ef:8d:8c:
         c1:83:42:ac:92:7c:53:46:74:d0:c2:d9:18:6c:1f:42:d1:5c:
         ef:d7:a9:83:9c:4e:11:79:18:14:7f:22:c0:f2:92:dc:e8:c1:
         fd:19:07:f7:28:71:3d:4c:2b:04:34:c7:e4:f5:83:ef:55:69:
         18:40:69:6f:5c:d2:b6:23:e2:d6:ae:90:fa:f0:ca:0b:e9:4a:
         3e:93:21:da:c2:66:23:b1:57:d7:9b:38:3b:06:17:e2:31:41:
         ec:bf:f2:38:9d:2f:fd:98:d7:ba:5c:31:10:e0:06:21:16:88:
         7e:75:b3:03:ba:88:11:39:48:39:b9:d6:74:f4:1e:d1:40:a5:
         d7:dc:1b:21:43:a7:68:d5:da:28:64:fa:35:dc:5a:21:40:0f:
         da:3a:ab:2f:5b:d8:72:c2:62:2b:96:83:b4:b3:c0:b3:a5:ac:
         44:2d:1a:91:32:a2:ad:72:ff:57:66:8a:66:0a:d9:58:ca:7c:
         ee:7b:91:61:58:29:6d:ca:43:7b:dc:92:83:ed:9f:ed:7b:82:
         ea:1e:3e:e7:72:16:6a:2c:26:3e:3a:75:38:26:2e:c7:11:95:
         2f:6c:70:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:46:09 2026 by rpki-client