Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/323830343a313035303a633030303a3a2f33342d3334203d3e20323632383234.roa
File:                     323830343a313035303a633030303a3a2f33342d3334203d3e20323632383234.roa (raw, json)
Hash identifier:          vjnxS6jBZxKeEIaxS/2UysTiVO49eJBYCWCJn+OhjT8=
Subject key identifier:   C2:75:83:FF:E5:14:8C:11:69:3B:0F:F0:41:D5:B3:A4:FF:A5:F1:12
Certificate issuer:       /CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
Certificate serial:       565A31181E26A8F1D94BC1B35F8A0F25D648A9E2
Authority key identifier: 84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/323830343a313035303a633030303a3a2f33342d3334203d3e20323632383234.roa
Signing time:             Sun 05 Jul 2026 23:58:59 +0000
ROA not before:           Sun 05 Jul 2026 23:53:59 +0000
ROA not after:            Sun 04 Jul 2027 23:58:59 +0000
asID:                     262824
IP address blocks:        2804:1050:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl
                          rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 12:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:5a:31:18:1e:26:a8:f1:d9:4b:c1:b3:5f:8a:0f:25:d6:48:a9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
        Validity
            Not Before: Jul  5 23:53:59 2026 GMT
            Not After : Jul  4 23:58:59 2027 GMT
        Subject: CN=C27583FFE5148C11693B0FF041D5B3A4FFA5F112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ce:da:de:24:a5:7d:7d:c9:02:95:8b:ba:8d:
                    a4:a2:68:68:8c:ad:6b:67:7c:ec:13:4f:21:f1:61:
                    a2:f2:95:81:ae:72:30:c7:39:a2:72:c4:61:d2:d1:
                    cc:14:1b:07:f3:85:a2:b9:15:75:6a:91:15:6c:d2:
                    af:22:47:16:5c:5c:c0:82:64:5e:d8:01:f2:a8:fe:
                    dd:e6:d9:7f:f7:3d:84:72:0e:a6:fa:4e:a4:4b:cc:
                    bc:e3:75:4a:ab:87:99:d3:3b:7b:9d:64:e6:e8:0a:
                    b0:48:cd:4f:b7:7f:00:fb:87:c5:33:f7:c8:c6:f1:
                    c1:36:14:54:39:72:74:24:c4:7d:69:48:b6:23:c9:
                    7c:e1:99:9b:ec:8a:cc:39:83:f8:3c:94:57:75:f8:
                    5f:f9:63:cd:f7:b7:f9:90:3f:05:36:fd:cd:3c:c9:
                    55:af:d2:ec:8b:5f:27:75:a5:0f:4a:70:2e:d5:cd:
                    7c:cf:8b:53:79:35:01:54:32:6e:95:0c:4e:66:f3:
                    34:f6:99:10:d7:2b:bb:19:1c:34:12:ae:fb:b1:5e:
                    0b:81:d0:00:d2:a3:c1:29:aa:77:f4:e0:bf:35:b5:
                    9f:5b:4b:8c:59:f6:35:75:07:7d:64:59:6d:6e:32:
                    eb:80:d3:bf:ba:1b:bc:ee:63:4d:de:78:e0:be:47:
                    c7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:75:83:FF:E5:14:8C:11:69:3B:0F:F0:41:D5:B3:A4:FF:A5:F1:12
            X509v3 Authority Key Identifier:
                keyid:84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/323830343a313035303a633030303a3a2f33342d3334203d3e20323632383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1050:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         12:21:ae:5d:2f:57:26:22:81:6b:f8:0e:6b:10:cd:72:ed:e9:
         ed:16:8c:eb:30:ee:e9:16:4e:2c:d7:11:46:6b:6b:7e:d6:f2:
         43:a9:61:f5:16:a1:26:f9:82:ae:5f:a2:5d:8a:76:1d:93:e6:
         ee:37:35:a3:41:91:16:ef:11:a7:a3:33:ca:d3:12:0a:31:eb:
         16:cf:5c:4a:29:8d:49:61:bb:78:f1:32:0c:45:6f:9d:72:7c:
         9c:c1:76:72:70:75:43:65:7c:7f:cc:0a:b5:65:21:80:c0:cd:
         31:a8:d3:aa:54:db:c6:0c:9f:67:b9:20:16:b9:2f:7b:6f:82:
         5c:c8:34:38:dd:75:a7:22:98:96:87:21:d5:b9:3c:e2:8d:ca:
         93:55:f6:9a:40:6c:b6:61:18:f4:01:8e:53:36:49:c3:e2:ce:
         7b:74:56:1b:41:9e:63:78:8e:5a:1e:15:63:88:e6:fa:c5:81:
         e2:2a:f9:24:c2:0b:c7:6a:41:f5:ae:b1:34:8b:a0:55:7e:8b:
         54:c9:fe:e6:bb:1b:0b:14:b7:1c:80:c1:bd:5e:3d:90:97:db:
         a8:cb:5c:95:87:35:b5:61:9e:4c:69:6b:21:8f:ad:5a:f9:2d:
         65:aa:0c:0e:30:72:eb:2a:d5:a0:cb:c6:4c:60:b9:5d:eb:c4:
         2d:2b:d6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:05:09 2026 by rpki-client