Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/323830343a313035303a343030303a3a2f33342d3334203d3e20323632383234.roa
File:                     323830343a313035303a343030303a3a2f33342d3334203d3e20323632383234.roa (raw, json)
Hash identifier:          ZkhQ6FaHYLgIXwYkOs1YDvj93OoyRkpTKzeydawn6Dc=
Subject key identifier:   E7:48:D9:9F:8D:8D:ED:DE:83:DB:60:FC:33:43:C3:A5:68:79:BC:EC
Certificate issuer:       /CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
Certificate serial:       4B44F0EB8D40499D0A87D41E4D5979A1F4F57B00
Authority key identifier: 84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/323830343a313035303a343030303a3a2f33342d3334203d3e20323632383234.roa
Signing time:             Sun 05 Jul 2026 23:58:37 +0000
ROA not before:           Sun 05 Jul 2026 23:53:37 +0000
ROA not after:            Sun 04 Jul 2027 23:58:37 +0000
asID:                     262824
IP address blocks:        2804:1050:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl
                          rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 12:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:44:f0:eb:8d:40:49:9d:0a:87:d4:1e:4d:59:79:a1:f4:f5:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
        Validity
            Not Before: Jul  5 23:53:37 2026 GMT
            Not After : Jul  4 23:58:37 2027 GMT
        Subject: CN=E748D99F8D8DEDDE83DB60FC3343C3A56879BCEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:32:4d:f6:89:04:70:df:a3:d9:34:49:3a:b1:
                    6e:48:91:cc:e8:70:3a:4b:16:c8:99:fc:68:bd:db:
                    6a:31:bf:34:93:b5:2f:0a:f4:61:fe:1e:1b:4c:2c:
                    0b:8b:ae:0e:ad:89:f6:29:13:87:f4:f7:bc:a2:1b:
                    10:fa:b0:88:2a:2a:4a:c9:19:e0:13:d6:69:b7:e4:
                    13:52:da:66:87:7e:43:5b:3a:da:c1:38:10:66:45:
                    5d:37:0e:15:0c:fa:52:f2:56:75:28:0e:ff:96:4e:
                    dd:22:9c:db:fe:ea:76:15:cb:a0:7c:b5:59:2f:ee:
                    a9:6c:d8:e9:27:f9:ae:c5:a1:eb:71:44:c0:60:35:
                    2d:1f:11:0d:d4:24:01:41:98:92:39:90:f4:66:76:
                    cf:51:a8:ce:38:e3:ee:c0:c5:ad:39:a0:52:4a:6a:
                    a9:7f:ad:2c:23:a5:d1:12:10:2c:13:ea:d2:a0:c6:
                    05:bc:3d:d7:93:3b:8d:87:ca:85:c1:4f:e6:af:e6:
                    32:a3:3c:98:eb:7b:2d:62:3a:16:41:74:b8:34:3c:
                    60:5a:5d:9e:4e:2f:df:b8:55:7f:59:18:17:f8:54:
                    8c:ac:b1:d9:15:8e:dc:3f:fb:0c:4c:44:ad:00:99:
                    43:74:fa:07:c3:56:fd:19:72:78:f4:9a:04:a3:fd:
                    1a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:48:D9:9F:8D:8D:ED:DE:83:DB:60:FC:33:43:C3:A5:68:79:BC:EC
            X509v3 Authority Key Identifier:
                keyid:84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/323830343a313035303a343030303a3a2f33342d3334203d3e20323632383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1050:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4e:47:7f:83:b3:21:c2:6f:46:d8:33:c5:93:3f:a2:39:1f:fb:
         1b:0b:b0:29:61:71:d3:55:8d:ff:ab:a8:75:4c:b8:7c:5f:6d:
         d6:12:b1:4c:db:4d:74:40:ee:ef:72:e4:06:3e:ce:a2:96:a5:
         d2:f0:e1:36:87:93:5b:80:69:11:7b:15:d8:0a:7a:f2:3a:04:
         a4:52:fb:af:83:0c:15:00:12:f9:0a:99:04:33:e3:66:7a:03:
         8a:1a:c0:e5:41:15:18:eb:c0:72:8b:17:09:f3:76:5f:69:e9:
         7c:68:60:7a:94:42:6a:49:c1:73:2f:3d:05:56:ae:d2:e0:87:
         b5:61:70:2e:25:e5:36:7a:49:f6:2c:a5:45:ed:4d:cf:74:d5:
         09:fa:b7:1c:28:b0:81:12:7a:25:f6:3d:e1:53:e0:b6:38:0e:
         07:e4:38:52:a7:f8:a2:29:17:45:04:ee:20:4c:88:0e:44:3c:
         c1:8b:97:83:87:13:03:d3:29:65:fa:e5:80:5f:08:b0:ef:49:
         7a:b9:28:ad:e2:29:62:0b:31:05:fa:f0:71:30:71:69:53:de:
         a5:6d:5e:dd:c6:33:a8:0d:39:16:da:93:3d:2a:fb:80:69:31:
         4d:f8:d5:40:9d:87:50:64:8d:72:bd:27:ec:8e:98:17:f5:ec:
         3c:5c:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:05:08 2026 by rpki-client