Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/323830343a346331633a383030303a3a2f33342d3334203d3e20323637333530.roa
File:                     323830343a346331633a383030303a3a2f33342d3334203d3e20323637333530.roa (raw, json)
Hash identifier:          gPRN1PiE4hKS95HTYb5THWXUdyfO0TOoeYyLM7n5OMg=
Subject key identifier:   08:D4:18:D5:21:A2:17:9D:D7:72:03:FF:83:FF:F8:86:05:37:3A:D1
Certificate issuer:       /CN=5A40D3E78C135512BC4447988687E789A73E2C20
Certificate serial:       7F40AAF4AE59C288B29FA1BA229B2B25D2D40B10
Authority key identifier: 5A:40:D3:E7:8C:13:55:12:BC:44:47:98:86:87:E7:89:A7:3E:2C:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/323830343a346331633a383030303a3a2f33342d3334203d3e20323637333530.roa
Signing time:             Thu 16 Jul 2026 18:44:46 +0000
ROA not before:           Thu 16 Jul 2026 18:39:46 +0000
ROA not after:            Thu 15 Jul 2027 18:44:46 +0000
asID:                     267350
IP address blocks:        2804:4c1c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.crl
                          rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 14:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:40:aa:f4:ae:59:c2:88:b2:9f:a1:ba:22:9b:2b:25:d2:d4:0b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A40D3E78C135512BC4447988687E789A73E2C20
        Validity
            Not Before: Jul 16 18:39:46 2026 GMT
            Not After : Jul 15 18:44:46 2027 GMT
        Subject: CN=08D418D521A2179DD77203FF83FFF88605373AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:dd:c0:d9:29:74:c6:b1:4c:e6:26:4c:01:0b:
                    ae:fd:ba:db:78:f0:65:8a:57:c7:fb:69:eb:17:25:
                    42:32:63:87:8c:01:66:9c:c4:d0:9a:2f:15:f8:09:
                    df:66:45:ee:f7:80:3d:03:02:38:2e:07:65:e2:62:
                    28:a8:fc:21:d5:6f:a6:7d:2a:eb:38:d8:20:05:9e:
                    03:16:dc:cf:48:35:4a:0e:56:57:22:68:99:7b:7d:
                    31:84:45:1a:db:57:8c:79:c1:67:47:30:0c:6d:57:
                    ba:64:a7:32:89:4d:55:9b:f6:9a:7e:15:1c:31:18:
                    b7:40:75:eb:b3:b3:66:f6:e9:86:b5:5b:ef:00:ae:
                    bc:c3:0d:e4:1d:3c:93:74:93:aa:b2:2d:53:3d:96:
                    45:f7:e5:91:d4:3a:f6:a2:f2:6e:e8:f4:ed:59:1a:
                    ca:df:8d:9e:68:90:cb:c3:9e:f5:3d:99:05:23:e6:
                    3b:47:a9:5b:cb:33:47:8a:36:17:83:3a:95:13:71:
                    93:9e:fa:69:29:70:14:59:91:06:6a:57:82:56:ea:
                    0d:87:2c:55:d8:e6:ec:fb:fe:61:31:7d:ec:8f:49:
                    29:57:c4:b4:cf:d0:11:3e:21:35:c6:f5:c4:b9:a8:
                    d3:25:83:66:47:5d:5b:d2:31:20:2e:a6:81:83:cb:
                    0f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D4:18:D5:21:A2:17:9D:D7:72:03:FF:83:FF:F8:86:05:37:3A:D1
            X509v3 Authority Key Identifier:
                keyid:5A:40:D3:E7:8C:13:55:12:BC:44:47:98:86:87:E7:89:A7:3E:2C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/5A40D3E78C135512BC4447988687E789A73E2C20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A40D3E78C135512BC4447988687E789A73E2C20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/1/323830343a346331633a383030303a3a2f33342d3334203d3e20323637333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c1c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8e:6e:00:e7:3e:4a:11:6c:92:b6:9c:39:03:87:9d:7e:2a:17:
         75:22:02:08:64:40:89:73:3c:7c:ad:1d:9f:db:97:cc:85:d4:
         97:f9:23:a0:61:ab:b2:a8:6e:d4:d2:7f:80:86:73:ab:f2:b9:
         4c:49:66:05:27:6d:43:3e:c4:53:25:7a:57:bf:25:81:e7:82:
         ff:94:56:18:e3:d4:6d:b4:9a:fe:cc:a1:27:ad:54:96:ab:06:
         97:9e:00:de:0a:8b:af:4e:e3:78:4b:74:90:be:88:cc:55:c7:
         4f:ab:3c:5e:9f:5f:22:18:9e:de:7c:22:a6:f5:41:51:4c:bb:
         6e:6d:16:e4:de:7d:bb:cf:c5:aa:c6:39:e7:7f:16:e8:81:c6:
         d1:0c:03:16:90:6f:5f:4c:65:3c:d2:6e:7b:df:8c:fe:8c:0f:
         74:32:1c:6b:4a:61:51:70:b4:7b:d1:68:81:d0:ea:50:4f:d5:
         49:4c:89:4d:1d:03:aa:9c:a4:72:73:24:7d:e7:22:08:09:7d:
         61:18:fb:06:39:a4:22:ea:f0:c3:b6:1d:de:e9:ea:76:b1:2c:
         7c:dd:d2:94:be:aa:cd:22:61:b3:10:2d:35:2a:f2:4b:52:f1:
         27:87:93:fc:55:d3:11:20:25:f5:86:92:fc:57:e5:b8:56:dd:
         3a:80:1a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:51:35 2026 by rpki-client