Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a383030303a3a2f33332d3333203d3e20323732323238.roa
File:                     323830343a383365383a383030303a3a2f33332d3333203d3e20323732323238.roa (raw, json)
Hash identifier:          GB7tJq4SgyofCPRnEnEF3yBj7lm4LT20XdUbUHHCaa4=
Subject key identifier:   2C:54:BD:55:62:02:A1:49:6F:70:67:17:D1:A3:1C:53:D5:87:3C:4D
Certificate issuer:       /CN=77C292648278AA40C4563B37957C48B73FEDD477
Certificate serial:       1310354BB04E3E1EF7328E0C8C54E9CB126A0C49
Authority key identifier: 77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a383030303a3a2f33332d3333203d3e20323732323238.roa
Signing time:             Tue 06 Oct 2026 20:37:09 +0000
ROA not before:           Tue 06 Oct 2026 20:32:09 +0000
ROA not after:            Tue 05 Oct 2027 20:37:09 +0000
asID:                     272228
IP address blocks:        2804:83e8:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl
                          rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Oct 2026 19:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:10:35:4b:b0:4e:3e:1e:f7:32:8e:0c:8c:54:e9:cb:12:6a:0c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C292648278AA40C4563B37957C48B73FEDD477
        Validity
            Not Before: Oct  6 20:32:09 2026 GMT
            Not After : Oct  5 20:37:09 2027 GMT
        Subject: CN=2C54BD556202A1496F706717D1A31C53D5873C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:25:9b:dc:80:8e:0f:1b:e3:c9:13:01:e6:c4:
                    79:b0:bd:0a:3d:f0:89:4f:4d:dd:47:37:98:4e:77:
                    4a:f0:3e:7a:7a:02:f5:de:0c:24:5b:5f:c0:0a:b1:
                    c2:b1:c5:e8:23:74:1d:c8:ff:f5:42:cb:4d:4e:54:
                    fd:b6:69:ea:db:5c:51:ac:9e:d4:ab:d4:53:36:5a:
                    ed:f2:80:f2:39:c9:a4:a5:6c:0b:84:5d:3b:01:7d:
                    1d:43:62:7c:a2:86:74:f1:d1:43:ce:8f:0f:85:61:
                    be:98:7b:f5:0a:97:2e:d6:68:ec:15:2d:ba:db:20:
                    de:07:33:f7:94:a9:1c:b7:00:94:fe:ca:da:79:9e:
                    d6:46:86:22:36:f8:e3:6a:d7:e7:06:57:d0:e9:fe:
                    06:35:19:e2:e9:17:82:39:00:c5:4b:92:a4:6a:61:
                    49:09:37:18:9f:f0:70:ac:71:6d:63:31:de:a4:86:
                    c7:aa:90:cf:d0:a5:d3:6c:e7:99:ee:ee:54:27:f5:
                    12:47:6d:e9:5f:0b:52:18:4b:e6:d3:6b:da:fc:7d:
                    b6:c3:56:9a:c0:62:49:8c:32:c5:35:ee:d3:c5:ee:
                    53:6e:4f:01:d1:03:6b:04:9a:46:e3:e5:78:43:f4:
                    5f:c6:c1:b5:5c:f8:5e:d2:28:ac:d1:51:ce:78:8c:
                    3c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:54:BD:55:62:02:A1:49:6F:70:67:17:D1:A3:1C:53:D5:87:3C:4D
            X509v3 Authority Key Identifier:
                keyid:77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a383030303a3a2f33332d3333203d3e20323732323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83e8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         92:0d:c6:48:98:b8:fb:ff:06:12:39:82:7d:b9:c6:3f:23:07:
         7c:51:88:1f:43:55:d4:00:1d:de:f9:0a:47:bf:35:ec:4b:46:
         81:be:31:dc:52:ad:5a:6b:a1:29:8e:0a:23:3b:ee:c8:e5:3b:
         e2:ba:f6:18:7f:77:38:70:47:e2:f6:da:4a:31:28:b4:b3:93:
         e3:3f:50:2e:3d:d1:70:47:a6:ba:2b:35:d4:5b:a1:ea:83:9a:
         e4:ee:b3:8f:0a:6c:24:f5:13:5e:33:88:59:b1:bd:46:6d:22:
         fc:19:d3:f7:08:04:b2:cd:80:a2:75:f9:4b:69:b0:e9:56:6b:
         18:7a:33:fc:82:28:8b:a5:2b:90:85:b1:87:0a:5b:f6:05:19:
         e6:ab:63:b6:61:02:d2:ec:00:4b:de:ae:98:48:33:00:f9:42:
         39:29:59:8b:32:31:1d:d3:81:bb:88:52:9d:c9:12:2b:2f:b7:
         93:7a:76:73:cc:c6:85:6f:b2:cc:c2:ec:05:26:fc:f5:cb:1e:
         7b:ab:32:ad:a4:4f:8d:3a:0e:b3:79:12:bb:e0:55:68:73:f8:
         4b:b9:38:4f:fb:57:02:51:c5:cc:33:f1:11:38:4a:1f:04:1b:
         bf:97:ba:4f:00:02:64:da:a3:b8:7f:42:a1:52:81:aa:c2:ca:
         ee:57:2e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 21:40:56 2026 by rpki-client