Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a3a2f33342d3334203d3e20323732323238.roa
File:                     323830343a383365383a3a2f33342d3334203d3e20323732323238.roa (raw, json)
Hash identifier:          WvVGYByNZjpHedI6A4Hz1Zv8KY5FmrWe2x23l6AT/hM=
Subject key identifier:   8E:8F:78:09:83:66:F1:2C:C9:6B:4C:91:75:62:E6:58:64:4B:69:A8
Certificate issuer:       /CN=77C292648278AA40C4563B37957C48B73FEDD477
Certificate serial:       2FE0F57B5719511E5636CF3A331C888302FCEF53
Authority key identifier: 77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a3a2f33342d3334203d3e20323732323238.roa
Signing time:             Tue 06 Oct 2026 20:37:07 +0000
ROA not before:           Tue 06 Oct 2026 20:32:07 +0000
ROA not after:            Tue 05 Oct 2027 20:37:07 +0000
asID:                     272228
IP address blocks:        2804:83e8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl
                          rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 22:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e0:f5:7b:57:19:51:1e:56:36:cf:3a:33:1c:88:83:02:fc:ef:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C292648278AA40C4563B37957C48B73FEDD477
        Validity
            Not Before: Oct  6 20:32:07 2026 GMT
            Not After : Oct  5 20:37:07 2027 GMT
        Subject: CN=8E8F78098366F12CC96B4C917562E658644B69A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:85:d4:9f:9c:0e:96:8b:61:4f:d6:7b:f6:
                    78:38:d1:b2:46:78:c2:eb:81:5b:09:81:75:8f:dd:
                    06:36:fa:53:ed:bd:8d:30:5e:07:eb:8f:0d:15:08:
                    20:25:8f:eb:47:ae:2b:0e:95:6b:05:78:62:8a:91:
                    47:58:56:ef:cb:39:b2:3f:cb:82:87:84:78:2a:d6:
                    c9:aa:21:80:a1:34:12:6d:d3:68:ab:bf:0f:87:6e:
                    2d:59:e5:a6:0a:7a:02:bc:be:be:89:e0:72:10:16:
                    b5:72:08:1c:5c:b0:e3:5d:6d:e5:61:48:63:ec:6d:
                    2b:a1:8e:4b:bf:7b:e8:b8:5e:95:5c:36:e5:a3:22:
                    ad:57:ef:f8:11:e9:2b:bc:3a:05:24:dc:a3:7a:f9:
                    7f:b2:47:2c:80:8f:62:84:4f:27:7d:20:0c:63:ff:
                    4e:a1:de:1d:e1:2d:4e:10:c0:9a:2c:e4:52:21:d4:
                    36:0d:e3:3a:cb:fb:15:e5:86:3e:6b:c8:ed:3e:33:
                    13:a6:dc:b3:39:8a:12:60:89:54:c7:d6:c2:6a:ad:
                    1a:e7:41:5a:81:46:66:d4:28:b4:b3:91:5a:ff:61:
                    e7:46:52:b5:3f:90:56:4d:75:f8:7a:75:ba:23:c9:
                    b4:c8:d5:32:03:db:88:f1:ca:25:d1:76:e9:39:9e:
                    74:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8F:78:09:83:66:F1:2C:C9:6B:4C:91:75:62:E6:58:64:4B:69:A8
            X509v3 Authority Key Identifier:
                keyid:77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a3a2f33342d3334203d3e20323732323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83e8::/34

    Signature Algorithm: sha256WithRSAEncryption
         33:01:57:15:5b:dc:4c:db:ca:65:49:90:a3:2d:43:2a:60:da:
         08:9b:f6:41:c8:b6:f5:33:8f:d2:25:e0:82:5e:21:38:44:6f:
         8c:83:91:51:b2:09:d4:ec:a5:db:e0:f0:27:b9:46:57:55:34:
         e8:2a:25:e9:d0:0a:6b:f6:1d:42:4b:1a:22:fb:a0:ae:d3:19:
         92:93:0a:e1:7c:fd:8a:45:9f:0e:1f:d5:84:57:be:66:a0:43:
         46:94:3d:bc:32:98:6b:c4:c2:45:3f:02:48:92:f5:fd:fa:2d:
         77:0c:7c:32:97:a9:9e:44:12:fd:23:c7:79:c5:f9:76:d9:3a:
         8b:11:bc:4b:27:ee:9a:24:12:e5:85:d3:98:ec:a0:52:48:2b:
         eb:f6:91:ec:ac:d8:71:85:69:be:7a:9c:82:a4:d0:93:d4:8f:
         06:3b:a9:e8:a8:8b:e3:f9:a2:9b:1b:0d:81:b9:57:b4:2f:4c:
         a7:7d:a9:6c:00:d9:2c:fd:c5:41:bc:16:ca:9d:0a:93:7f:68:
         21:3e:29:b1:ab:f8:a4:2b:02:13:fe:3f:1a:eb:ba:1f:03:ac:
         4d:7c:5d:9b:b0:42:18:1b:f9:9c:ac:36:11:1f:fd:cc:99:01:
         b1:c3:cc:a8:1a:e4:26:b7:4a:b0:01:e7:90:72:ef:81:97:fe:
         56:2f:d9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:26:17 2026 by rpki-client