Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a3a2f33352d3335203d3e20323732323238.roa
File:                     323830343a383365383a3a2f33352d3335203d3e20323732323238.roa (raw, json)
Hash identifier:          s6Ez7WFHMS7xeRVdsfNgHriTIhW9Pk6Gfs+BHyBV3FM=
Subject key identifier:   22:78:27:CE:1D:86:DF:43:2B:5A:E1:81:EC:35:97:4E:97:4A:6F:FD
Certificate issuer:       /CN=77C292648278AA40C4563B37957C48B73FEDD477
Certificate serial:       3896974DEA9D13A72DDDF05BDF7CE6D2E0ADED70
Authority key identifier: 77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a3a2f33352d3335203d3e20323732323238.roa
Signing time:             Tue 06 Oct 2026 20:37:07 +0000
ROA not before:           Tue 06 Oct 2026 20:32:07 +0000
ROA not after:            Tue 05 Oct 2027 20:37:07 +0000
asID:                     272228
IP address blocks:        2804:83e8::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl
                          rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 22:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:96:97:4d:ea:9d:13:a7:2d:dd:f0:5b:df:7c:e6:d2:e0:ad:ed:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C292648278AA40C4563B37957C48B73FEDD477
        Validity
            Not Before: Oct  6 20:32:07 2026 GMT
            Not After : Oct  5 20:37:07 2027 GMT
        Subject: CN=227827CE1D86DF432B5AE181EC35974E974A6FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:71:a1:81:d6:6c:97:74:3b:c9:bd:73:b0:
                    55:96:ea:fc:4e:5c:dd:0f:e8:91:3d:4d:b2:47:bc:
                    2a:a7:2f:f5:64:4e:88:27:fa:61:29:65:87:c7:82:
                    59:4a:15:78:ef:3a:85:ee:0b:1f:01:39:a7:76:39:
                    4b:f7:ff:4c:a5:65:6a:d7:1d:de:98:55:1f:98:90:
                    d0:74:e1:43:39:6d:60:77:60:1c:cf:9b:0b:2b:58:
                    bc:b1:22:4f:09:22:3a:fc:6e:05:26:6c:66:1b:27:
                    24:01:95:e1:25:b8:09:c8:a2:8c:96:95:d3:a8:1a:
                    3e:dc:11:5a:4c:56:0d:38:92:2e:c4:a9:12:17:a5:
                    27:65:60:29:53:01:56:13:e8:6c:d7:ed:39:60:fb:
                    55:8d:f5:c1:0c:d8:74:18:06:17:a6:14:40:17:79:
                    3e:cc:22:ff:0c:49:35:30:1c:64:5d:b9:61:30:92:
                    a1:b5:87:c2:5e:9f:ed:da:19:4a:a8:c2:21:11:a3:
                    c8:88:fc:1f:37:ea:e1:b9:e1:a0:e3:24:82:d1:96:
                    be:2e:75:89:31:dd:af:c0:12:0a:61:9f:a8:68:51:
                    0c:1f:ef:ae:b8:ac:8f:2c:10:bf:ac:bd:69:16:86:
                    f1:c2:bf:9a:46:68:28:d1:a4:52:c6:bf:84:11:a3:
                    d8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:78:27:CE:1D:86:DF:43:2B:5A:E1:81:EC:35:97:4E:97:4A:6F:FD
            X509v3 Authority Key Identifier:
                keyid:77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a3a2f33352d3335203d3e20323732323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83e8::/35

    Signature Algorithm: sha256WithRSAEncryption
         0e:f8:0e:e4:25:f6:bb:df:12:96:90:b7:9f:29:89:57:d0:ad:
         a7:75:e7:c3:de:27:50:aa:29:7c:6d:25:70:89:19:1b:2c:41:
         f0:ac:90:0e:8e:4a:4a:cc:de:b7:c4:cd:6e:48:09:97:b0:b9:
         60:ad:85:a1:12:2e:21:c7:5e:d2:f3:15:05:93:c6:bc:08:da:
         4f:75:43:36:0f:d7:df:32:c1:e9:30:c8:4b:59:94:fc:fd:1e:
         f2:ed:30:d0:49:ab:dd:dc:fa:09:0d:15:3d:8b:91:1e:73:85:
         1b:73:95:bb:72:44:0b:76:b9:b2:1c:7d:60:75:1c:4b:fc:51:
         7a:a0:ce:75:c4:92:73:b3:e9:d1:c0:b5:54:70:42:74:86:db:
         fd:c3:c0:6c:7b:49:d2:16:80:77:fd:bb:0c:8d:ad:db:0d:ad:
         39:dc:6d:6d:93:9c:71:b4:63:ab:f2:d5:8e:aa:12:d2:d7:27:
         b7:3e:e0:b5:80:f3:58:47:88:8d:2a:bd:d8:f3:cf:77:a5:63:
         49:45:8e:a4:44:9a:c9:60:58:0c:ca:12:bd:e5:57:d5:bf:2e:
         27:94:0e:0a:a7:62:f9:bd:15:cf:9a:4a:38:fa:c7:4d:6e:f3:
         f2:e8:bf:f7:2f:fa:22:7e:23:12:f3:5a:78:90:8b:96:b7:e0:
         9e:38:e6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:26:17 2026 by rpki-client