Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a323030303a3a2f33352d3335203d3e20323732323238.roa
File:                     323830343a383365383a323030303a3a2f33352d3335203d3e20323732323238.roa (raw, json)
Hash identifier:          CroI83Miah0tX7U/TaabFYWkePm7h4zan3TkLFf2uD4=
Subject key identifier:   8B:C3:6A:59:F1:1D:F9:B5:A6:1A:F4:59:17:66:09:78:5A:A0:27:8B
Certificate issuer:       /CN=77C292648278AA40C4563B37957C48B73FEDD477
Certificate serial:       2F6D8D1BF63547C9D2487DB845C3FC494422865A
Authority key identifier: 77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a323030303a3a2f33352d3335203d3e20323732323238.roa
Signing time:             Tue 06 Oct 2026 20:37:05 +0000
ROA not before:           Tue 06 Oct 2026 20:32:05 +0000
ROA not after:            Tue 05 Oct 2027 20:37:05 +0000
asID:                     272228
IP address blocks:        2804:83e8:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl
                          rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 16:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:6d:8d:1b:f6:35:47:c9:d2:48:7d:b8:45:c3:fc:49:44:22:86:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C292648278AA40C4563B37957C48B73FEDD477
        Validity
            Not Before: Oct  6 20:32:05 2026 GMT
            Not After : Oct  5 20:37:05 2027 GMT
        Subject: CN=8BC36A59F11DF9B5A61AF459176609785AA0278B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:31:47:8c:68:76:f0:c5:71:93:e1:b9:57:3b:
                    39:f6:1c:b9:d1:ef:54:8b:bd:38:d5:9c:d3:61:51:
                    25:18:a7:16:fe:53:96:2d:b9:8b:66:d6:3c:76:97:
                    9f:9e:9c:4f:11:b8:af:59:78:9e:cd:01:ad:3f:be:
                    db:6a:fc:77:b0:d0:b7:2b:02:df:bb:6e:16:b7:1f:
                    54:e9:6d:a6:85:f0:5e:d6:9b:93:c5:90:c0:c5:cc:
                    1c:29:e9:cc:c2:b1:19:cb:7c:2b:0c:c3:64:d3:9c:
                    e7:eb:42:d8:7e:03:cc:45:db:32:ed:98:3d:68:19:
                    09:f1:e0:c1:19:5c:c9:f9:31:b7:66:db:60:68:d0:
                    00:a9:25:82:f0:46:e8:6b:a7:58:58:3d:9e:98:3f:
                    3a:44:40:f0:fa:e8:44:42:54:75:df:64:92:f7:e3:
                    73:19:7d:ae:fd:92:78:d4:76:d3:8e:b2:59:d8:4d:
                    da:44:eb:1d:b3:c6:47:8e:5e:3b:68:56:0e:22:1d:
                    24:09:a8:2a:6c:1d:dd:f4:fd:ea:a2:86:82:63:75:
                    6e:01:3c:35:dd:75:f8:15:25:41:5f:6c:b0:d7:de:
                    9a:e8:f7:9c:a9:05:d0:88:11:eb:fc:59:43:8b:6c:
                    19:19:6d:9b:87:a1:7d:20:92:b6:a9:04:90:78:6f:
                    ae:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C3:6A:59:F1:1D:F9:B5:A6:1A:F4:59:17:66:09:78:5A:A0:27:8B
            X509v3 Authority Key Identifier:
                keyid:77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a323030303a3a2f33352d3335203d3e20323732323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83e8:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         9c:fb:95:bf:14:af:a1:08:70:73:55:43:a5:6d:05:4d:36:49:
         f2:6a:38:93:76:77:2c:de:2e:42:fd:e1:5f:3c:5d:d9:7a:e2:
         70:95:26:e2:83:85:87:ae:8c:8f:9b:22:d6:3c:06:08:0b:d2:
         e4:01:d4:85:16:d9:46:47:e8:dd:a2:8d:19:fa:e9:b3:fe:51:
         aa:38:9b:7a:26:b7:0b:5b:86:a8:92:55:b2:08:1d:35:b7:b5:
         a7:03:20:15:2e:53:e1:9e:51:30:86:6e:5f:7e:6e:b9:cb:b3:
         87:ae:f8:7f:15:2f:20:0e:9e:3e:39:a2:0b:99:bc:fb:cd:2b:
         e6:f7:53:f6:d3:a3:e1:48:a4:33:12:40:eb:6c:1f:22:f4:ae:
         72:64:67:95:ee:e7:bb:c6:43:1d:2f:fe:d5:4c:30:d6:ca:ab:
         1d:b0:aa:ce:22:d4:05:20:09:e3:6c:48:6e:4c:3a:b0:67:49:
         dd:6a:4a:3d:b8:58:bd:b8:15:9f:f2:92:26:9f:b3:ab:b9:29:
         98:26:2d:36:8f:5e:e7:73:a2:d9:26:1d:93:64:0e:64:c5:3d:
         ab:a7:a9:e7:9e:72:ce:38:15:b5:26:67:b0:cf:13:55:dc:83:
         a7:f8:08:b7:67:c5:4e:fe:42:dd:46:88:a8:c4:0c:87:f0:3b:
         8f:ae:2e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:57:42 2026 by rpki-client