Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa
File:                     3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa (raw, json)
Hash identifier:          NGixxQ5l7MyGDeYPfpObFBTQUrUD1eigKjrGnOHmNL4=
Subject key identifier:   3E:33:FE:BB:63:6F:06:C0:02:80:7F:3E:DD:45:B8:F6:26:CA:68:FF
Certificate issuer:       /CN=77C292648278AA40C4563B37957C48B73FEDD477
Certificate serial:       253AD817730F720FC0AF0437AF47E6ACD9469FAF
Authority key identifier: 77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa
Signing time:             Tue 06 Oct 2026 20:37:08 +0000
ROA not before:           Tue 06 Oct 2026 20:32:08 +0000
ROA not after:            Tue 05 Oct 2027 20:37:08 +0000
asID:                     272228
IP address blocks:        189.126.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl
                          rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 07:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3a:d8:17:73:0f:72:0f:c0:af:04:37:af:47:e6:ac:d9:46:9f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C292648278AA40C4563B37957C48B73FEDD477
        Validity
            Not Before: Oct  6 20:32:08 2026 GMT
            Not After : Oct  5 20:37:08 2027 GMT
        Subject: CN=3E33FEBB636F06C002807F3EDD45B8F626CA68FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:f9:89:15:cd:02:36:dc:15:96:d8:6a:4a:
                    a1:b1:7e:5e:50:6f:50:84:e9:6a:bd:8e:af:be:d3:
                    73:f8:61:c8:4e:dc:77:4c:60:b1:17:db:aa:39:34:
                    a7:80:78:21:d7:b8:f4:7a:a8:51:62:10:00:30:00:
                    ef:71:25:4a:3a:b0:71:16:29:0e:a3:a7:62:77:40:
                    99:88:d3:a6:ee:56:3b:4f:ca:8e:82:c9:6f:6c:97:
                    b5:b3:d1:3f:17:20:2b:a6:db:2e:52:90:b5:e7:a6:
                    bf:1c:83:a9:55:f9:fa:c7:ad:59:cd:c5:d8:6d:77:
                    20:3d:4b:d1:e5:36:16:4e:f7:79:5b:c2:17:f6:2d:
                    be:bb:34:7d:e2:78:e7:9c:29:39:0a:96:9c:f1:27:
                    69:e2:d5:11:bb:e1:51:cc:5c:37:8b:3f:38:cb:b2:
                    43:5f:78:65:5f:7a:06:eb:42:63:ec:ca:02:fa:bc:
                    ea:cc:3b:44:de:e7:7d:94:47:9b:9b:7f:90:85:4c:
                    64:70:c7:3b:00:6e:62:6f:76:44:23:95:fb:d8:d3:
                    a7:6c:f4:1d:13:f0:37:35:26:a1:a4:19:7f:f0:c1:
                    9c:f6:35:b1:1e:a9:ea:13:6e:9a:38:4c:b5:cd:ce:
                    4b:50:f9:0e:cd:f1:2d:0b:ee:90:fe:d0:81:0a:20:
                    9d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:33:FE:BB:63:6F:06:C0:02:80:7F:3E:DD:45:B8:F6:26:CA:68:FF
            X509v3 Authority Key Identifier:
                keyid:77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3133302e302f32342d3234203d3e20323732323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:61:2d:33:00:2d:ec:4b:ec:db:90:55:c3:54:fd:31:b7:db:
         c3:85:77:10:1b:63:79:71:a5:da:6e:2f:3c:f0:c4:71:fe:ed:
         a8:5f:19:95:08:88:ec:81:33:42:1b:68:50:2f:6f:1f:d0:c5:
         52:75:18:19:5a:5c:18:2b:5e:46:c6:ab:1b:13:54:ab:aa:a0:
         7c:e9:66:14:d7:c3:e7:fd:94:1e:1c:98:05:79:ba:39:28:da:
         b0:99:e2:2c:35:a4:5c:c3:b7:c0:15:9b:b0:f4:7f:98:9f:ff:
         3d:42:25:24:56:b5:9f:f0:11:16:ef:6c:34:c7:38:5d:c0:b0:
         de:f2:da:fe:43:03:30:1e:29:b6:17:86:cf:64:13:f9:2b:77:
         bc:fa:a9:d2:30:52:3a:ec:33:93:93:db:f4:ff:9d:b4:a9:33:
         71:f5:ea:1f:88:d3:34:29:32:97:1a:b5:c6:c7:6a:ed:ab:f1:
         fa:ea:a4:c9:0f:bb:8a:56:3f:ab:a7:2a:27:ef:c0:0c:a4:92:
         6e:66:29:d5:79:79:83:a9:1d:34:d9:97:44:1e:66:24:be:25:
         f1:a7:21:49:d1:df:d0:50:f5:e0:de:68:77:2e:2d:07:57:08:
         2c:22:66:16:d1:3f:c7:8d:c6:b1:c5:a3:74:ef:68:3b:6a:7c:
         9c:02:68:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:09:33 2026 by rpki-client