Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3230302e3232392e3232342e302f32322d3232203d3e203238313635.roa
File:                     3230302e3232392e3232342e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          i3mDQCA4xKtvbzqaDiCxDMsTJKHFHgHq7cIJjMaw+nE=
Subject key identifier:   A8:49:57:86:6E:11:21:90:1B:03:08:BC:AC:F1:A2:F4:A0:14:69:43
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       7DC894FA60A9F2CDBC50C816CC123A98225E75E1
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3230302e3232392e3232342e302f32322d3232203d3e203238313635.roa
Signing time:             Tue 30 Jun 2026 14:12:40 +0000
ROA not before:           Tue 30 Jun 2026 14:07:40 +0000
ROA not after:            Tue 29 Jun 2027 14:12:40 +0000
asID:                     28165
IP address blocks:        200.229.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 03:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c8:94:fa:60:a9:f2:cd:bc:50:c8:16:cc:12:3a:98:22:5e:75:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jun 30 14:07:40 2026 GMT
            Not After : Jun 29 14:12:40 2027 GMT
        Subject: CN=A84957866E1121901B0308BCACF1A2F4A0146943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:87:bc:70:05:1a:1f:92:34:f2:2c:1b:0a:
                    3d:2f:74:07:58:ad:2a:86:85:6a:cb:7b:28:6d:64:
                    6c:a5:f6:7e:3d:4a:dd:dd:c7:6a:2a:1c:63:61:35:
                    56:60:37:8d:25:ea:f8:95:8e:f9:ed:2c:81:2d:10:
                    15:36:81:0b:87:07:48:46:2e:bb:5c:54:69:76:06:
                    f6:91:5e:48:ef:69:ee:57:33:db:27:9e:a6:90:0c:
                    53:32:c3:fc:f2:3a:d0:7d:66:49:87:8f:11:c4:4c:
                    3b:44:52:12:35:dc:ba:fe:b9:d1:13:d4:e1:d9:b1:
                    65:27:59:ef:eb:f0:fe:f1:91:77:4f:bd:45:6a:41:
                    57:2f:39:70:0e:4e:d0:1b:b6:60:ee:c6:0c:bd:c2:
                    e6:5f:48:95:31:b1:5e:d0:b4:dc:9b:4e:5f:2b:d2:
                    4b:bb:10:b2:86:25:b1:a9:a1:48:81:31:47:71:b8:
                    25:c6:ea:01:a9:c2:94:64:60:93:a4:8a:c4:3a:28:
                    3d:92:a4:f4:a9:a5:6c:4f:91:8a:b7:22:fb:8d:f5:
                    2e:7a:ea:e7:e8:e2:9c:cb:80:bb:46:d3:0f:2d:c4:
                    cf:aa:a4:02:7f:6a:9c:90:fa:39:b3:91:ec:ee:a5:
                    2a:85:6f:b1:cc:05:26:fc:1e:71:68:20:3c:c1:04:
                    1b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:49:57:86:6E:11:21:90:1B:03:08:BC:AC:F1:A2:F4:A0:14:69:43
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3230302e3232392e3232342e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:ff:6e:7e:0b:ba:f7:3b:af:81:32:1d:6c:4b:3d:e7:06:7d:
         7d:58:c9:77:4b:25:d8:3b:62:dc:b8:42:1a:44:db:a4:86:ae:
         de:05:4e:ad:f3:b2:a6:db:82:20:71:5d:c8:ef:7c:d5:c9:6a:
         96:94:40:c0:19:52:4e:54:c4:83:dc:4e:87:a0:90:c3:8e:f0:
         5d:65:de:35:b6:2f:21:aa:cc:a9:37:3b:d5:03:32:48:fb:ad:
         0c:0f:0f:0b:f3:e2:c6:7f:b3:d3:20:8f:70:c3:0e:49:bf:84:
         e2:48:8f:8e:10:93:86:9b:80:58:55:80:58:66:4f:97:36:6c:
         96:f0:c9:7a:c5:50:d4:f8:22:39:80:79:39:e8:46:a1:51:5e:
         c4:4b:76:02:0f:74:b1:ec:bb:95:04:f9:5a:3c:6b:33:ad:12:
         30:f5:6b:05:5e:0a:28:cc:bb:c5:cb:a8:96:57:f7:d5:79:26:
         71:c8:de:4d:47:6c:6b:9a:f5:ce:46:06:fe:aa:64:e3:12:75:
         d9:49:1a:71:d3:80:0e:cc:15:80:5b:84:f7:b6:16:e7:83:63:
         0d:4b:ec:bc:78:92:77:60:4b:72:04:8f:a4:99:41:d9:2e:61:
         91:aa:0d:96:b0:e6:61:be:02:ab:6a:a3:e9:ea:ab:a3:05:33:
         67:5c:a3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:05:24 2026 by rpki-client