Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/323830343a313035303a383030303a3a2f33342d3334203d3e20323632383234.roa
File:                     323830343a313035303a383030303a3a2f33342d3334203d3e20323632383234.roa (raw, json)
Hash identifier:          pEA8/moioTeuSfxuDDlbyNGa8pDMNsHnFKb9vT/8Z+I=
Subject key identifier:   15:C7:AE:79:E3:3F:0D:1B:64:45:57:44:28:D0:03:A6:33:66:AF:69
Certificate issuer:       /CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
Certificate serial:       0D7A25002B90D900353C6ACC2C84B4557FD36BD9
Authority key identifier: 84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/323830343a313035303a383030303a3a2f33342d3334203d3e20323632383234.roa
Signing time:             Sun 05 Jul 2026 23:58:48 +0000
ROA not before:           Sun 05 Jul 2026 23:53:48 +0000
ROA not after:            Sun 04 Jul 2027 23:58:48 +0000
asID:                     262824
IP address blocks:        2804:1050:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl
                          rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 12:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7a:25:00:2b:90:d9:00:35:3c:6a:cc:2c:84:b4:55:7f:d3:6b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
        Validity
            Not Before: Jul  5 23:53:48 2026 GMT
            Not After : Jul  4 23:58:48 2027 GMT
        Subject: CN=15C7AE79E33F0D1B6445574428D003A63366AF69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:c6:5b:a7:b5:81:7f:88:74:17:fb:a6:d0:
                    a9:6f:13:f3:85:3a:19:2b:d4:08:82:78:17:93:ad:
                    6d:1e:ac:df:f0:4f:46:71:63:12:95:39:0e:91:28:
                    df:41:4d:2d:42:47:e2:42:fb:39:5f:c4:c4:e8:02:
                    1b:5d:95:49:d3:89:70:df:85:15:7c:8f:88:c0:d5:
                    0b:92:11:71:7d:86:e0:26:d7:4c:26:67:3a:26:7b:
                    8f:37:81:9c:dc:ff:a7:34:64:27:ab:c6:e8:3b:ed:
                    32:dd:17:37:50:42:c8:e3:bb:4e:f6:a6:78:6f:83:
                    98:fc:eb:94:76:5f:c3:0d:00:48:cf:bc:28:33:4e:
                    1d:61:ed:9d:aa:58:90:5c:29:bd:4e:97:3c:39:34:
                    0a:2e:9e:c8:24:06:41:dc:d8:d7:50:47:9f:c7:3d:
                    4f:b3:1b:8b:48:3d:9d:c7:ae:4f:fa:51:12:56:d1:
                    af:d5:c4:b9:05:63:df:48:5c:8b:47:b5:de:ff:80:
                    ae:4d:3f:77:19:45:2a:2d:54:78:94:99:c3:ef:f7:
                    b7:18:1e:c0:d5:46:b9:e8:27:27:66:32:50:d7:ea:
                    12:3f:bc:92:5a:06:df:78:30:ed:21:ae:1c:8e:b0:
                    df:8a:12:b9:32:6a:1c:5d:4c:3c:28:e7:8d:34:42:
                    4a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C7:AE:79:E3:3F:0D:1B:64:45:57:44:28:D0:03:A6:33:66:AF:69
            X509v3 Authority Key Identifier:
                keyid:84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/323830343a313035303a383030303a3a2f33342d3334203d3e20323632383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1050:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         04:16:cc:f0:b9:f9:7a:ff:f9:5d:2a:27:7c:d4:51:a8:d4:ae:
         32:e1:47:19:5f:30:1f:b8:7f:bd:ec:03:a9:b3:83:ec:07:e3:
         ca:49:35:02:ae:6a:03:fa:22:3d:59:8e:ca:19:d8:43:59:6d:
         20:ca:3b:a5:cc:55:b8:41:45:00:98:a6:60:0b:4f:2f:c1:e6:
         9b:b3:1e:a5:d4:95:96:fc:a2:aa:aa:f4:67:6d:aa:f4:c6:5c:
         58:8e:d9:23:a8:54:20:da:41:9d:15:39:c4:67:6d:51:45:aa:
         7a:a3:80:ad:ac:a3:03:54:3e:23:f0:34:d8:e0:44:93:74:25:
         51:bf:b9:19:32:06:68:2a:49:e6:de:ab:47:93:25:98:77:53:
         c2:1b:e8:d8:37:0a:c4:e0:90:58:64:b7:16:b2:74:8b:4b:1e:
         c8:11:c4:49:6b:c3:b9:67:cb:87:c7:38:b0:c5:9b:5d:d6:70:
         93:11:a7:dd:c7:cc:76:c3:a5:46:e8:69:eb:b8:3f:28:fd:39:
         dd:a3:b1:5a:b2:72:3b:32:56:25:b0:3f:0f:10:5c:63:44:2e:
         41:bf:60:8a:53:03:17:92:aa:b8:dd:dd:ce:a6:12:5c:62:0f:
         36:18:dd:fb:8c:32:82:3f:50:71:4c:5d:ae:cb:54:0d:6a:8f:
         55:fc:2d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:05:08 2026 by rpki-client