Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/323830343a3334303a3a2f33322d3332203d3e203238313635.roa
File:                     323830343a3334303a3a2f33322d3332203d3e203238313635.roa (raw, json)
Hash identifier:          oIYRntwRscTCllk3jS2jpmS1l0P1AdsRgHTj21E9Q84=
Subject key identifier:   F0:99:8A:C7:4B:2E:1E:26:44:91:A0:1F:EB:B6:CE:24:0E:73:FB:0D
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       34DA1A06D4C6D9717F4B3F55D64427693AE2345D
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/323830343a3334303a3a2f33322d3332203d3e203238313635.roa
Signing time:             Tue 30 Jun 2026 14:12:41 +0000
ROA not before:           Tue 30 Jun 2026 14:07:41 +0000
ROA not after:            Tue 29 Jun 2027 14:12:41 +0000
asID:                     28165
IP address blocks:        2804:340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 03:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:da:1a:06:d4:c6:d9:71:7f:4b:3f:55:d6:44:27:69:3a:e2:34:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jun 30 14:07:41 2026 GMT
            Not After : Jun 29 14:12:41 2027 GMT
        Subject: CN=F0998AC74B2E1E264491A01FEBB6CE240E73FB0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:43:6f:4f:d7:10:b8:4d:58:9c:2d:2a:80:ac:
                    d3:9d:ec:0b:0b:9e:3d:d6:26:77:c2:09:49:f5:a5:
                    17:93:bd:3a:91:11:a8:6c:a4:d8:a0:ca:52:64:4a:
                    49:9a:01:2e:a9:0b:5e:3d:52:40:50:75:7b:c5:53:
                    0f:70:55:fe:64:68:40:9e:52:14:4e:df:a0:21:55:
                    d0:d7:46:3d:77:93:43:e0:c8:07:c7:23:7c:6c:1c:
                    0a:3d:af:89:18:4c:0c:14:19:cf:2d:57:60:10:3b:
                    de:b2:68:fc:3b:b3:84:bb:c1:d6:08:87:18:66:bd:
                    d5:e7:2c:5c:d4:4e:38:93:54:1a:69:16:7d:e2:78:
                    a1:20:a6:67:ec:b5:6c:06:b5:2d:70:a0:d6:0d:aa:
                    fe:76:1c:1d:e3:d7:56:12:9e:fe:82:0b:09:93:b5:
                    86:f6:c3:20:94:0d:92:b7:86:92:d7:15:4d:04:de:
                    cd:f3:ee:6c:e6:e3:55:95:42:c8:1c:31:9d:66:69:
                    b6:0e:31:ac:13:dc:8f:2c:37:8e:f8:0a:a1:91:3b:
                    c0:be:c9:23:fc:0d:9b:94:16:8c:90:23:46:ce:7d:
                    71:f8:fb:87:93:51:5b:96:48:df:32:c3:53:7d:2c:
                    c8:17:e7:ff:11:76:06:67:a4:19:10:b8:ca:f2:a3:
                    50:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:99:8A:C7:4B:2E:1E:26:44:91:A0:1F:EB:B6:CE:24:0E:73:FB:0D
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/323830343a3334303a3a2f33322d3332203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:340::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:77:9b:de:ab:19:ad:d1:5d:08:1b:e9:85:b1:b8:e8:06:b2:
         58:6c:d8:ca:b3:e0:45:7a:66:f9:28:ee:15:af:23:97:f0:85:
         84:89:55:fd:18:8d:1b:42:cc:61:24:dd:d0:ed:65:c4:0a:f4:
         b5:a0:ce:3e:72:18:4d:a1:97:3d:d0:45:b8:be:f0:45:df:63:
         a0:e1:41:52:ed:3d:02:5d:f2:53:50:9f:39:51:d3:67:b7:1c:
         4c:29:ce:3e:58:ca:0c:00:52:de:68:08:8e:72:22:f7:37:5b:
         49:5a:a4:c7:b1:b6:05:aa:9b:71:73:b0:4d:56:89:dc:e9:6f:
         df:e6:fe:e7:89:38:84:41:24:80:6e:35:bd:f6:39:29:d8:74:
         dc:b3:d0:12:15:05:e6:49:3c:13:6a:c8:91:d7:18:54:0c:ec:
         e9:d7:9b:3a:ee:3b:d5:6a:82:63:01:91:d0:f9:9b:e1:93:7d:
         93:ea:4d:56:19:ab:42:60:43:48:93:8f:58:09:4d:45:b4:75:
         e2:e6:f0:e7:8e:2a:ec:ce:69:c5:93:a9:ce:77:f4:b2:01:d4:
         5d:3b:53:a7:a1:78:bb:d5:e0:22:59:48:fa:02:ef:2f:b8:36:
         be:26:40:40:44:ab:f1:a4:cb:ae:bd:7c:27:28:06:60:5b:19:
         f0:96:57:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:06:12 2026 by rpki-client