Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a3a2f33362d3336203d3e20323732323238.roa
File:                     323830343a383365383a3a2f33362d3336203d3e20323732323238.roa (raw, json)
Hash identifier:          zvCxVoRb61f5XEfaZ6NNj/FXBKj/auryV8H16KLIvIM=
Subject key identifier:   05:49:87:59:E0:D0:EA:91:3A:69:79:36:1F:DC:17:76:53:01:70:9F
Certificate issuer:       /CN=77C292648278AA40C4563B37957C48B73FEDD477
Certificate serial:       64DC1B9AA2AE5892E3C9C62E04684C1046A377DC
Authority key identifier: 77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a3a2f33362d3336203d3e20323732323238.roa
Signing time:             Tue 06 Oct 2026 20:37:04 +0000
ROA not before:           Tue 06 Oct 2026 20:32:04 +0000
ROA not after:            Tue 05 Oct 2027 20:37:04 +0000
asID:                     272228
IP address blocks:        2804:83e8::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl
                          rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 23:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:dc:1b:9a:a2:ae:58:92:e3:c9:c6:2e:04:68:4c:10:46:a3:77:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C292648278AA40C4563B37957C48B73FEDD477
        Validity
            Not Before: Oct  6 20:32:04 2026 GMT
            Not After : Oct  5 20:37:04 2027 GMT
        Subject: CN=05498759E0D0EA913A6979361FDC17765301709F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:eb:d3:54:a2:10:fe:9f:1d:9b:9b:e3:56:7a:
                    30:f0:59:49:88:01:f3:c8:5c:28:42:02:ea:10:9d:
                    37:2d:a4:86:13:54:26:28:a3:04:d5:11:fc:0c:d4:
                    6e:71:75:7c:26:8c:83:d4:8a:10:19:ed:51:ae:5e:
                    69:c5:91:f2:ed:cb:77:5c:b2:2d:32:25:b6:26:4b:
                    27:32:5f:ce:f6:18:88:0e:79:92:6f:30:9d:d7:ae:
                    a4:6e:1c:0b:db:5b:7f:6f:e9:cf:16:cb:6d:36:1d:
                    ff:51:4c:13:ea:39:e7:e1:d6:9e:b6:b9:0f:63:26:
                    28:18:62:d2:5a:62:0b:08:07:7c:8a:88:51:43:10:
                    78:c3:f8:c2:d0:91:07:2d:9f:bb:a5:83:fd:d2:a1:
                    11:4d:89:99:f9:5f:26:38:b7:52:a1:cd:65:7c:ec:
                    d4:f1:87:b3:be:b0:3f:3d:26:d8:a5:09:5b:e1:1e:
                    33:6f:e3:1f:5f:b0:fa:0d:a5:a7:64:a3:58:4e:68:
                    8f:93:6c:33:3f:11:92:5c:11:76:8c:d9:c3:87:8a:
                    19:e5:05:1c:f8:f2:7d:5d:29:7a:8d:ea:1e:01:2d:
                    af:64:61:66:73:f8:18:24:16:c0:1f:9c:1f:36:99:
                    d6:83:21:eb:ba:ca:69:cc:c1:f1:a2:3b:00:1c:80:
                    90:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:49:87:59:E0:D0:EA:91:3A:69:79:36:1F:DC:17:76:53:01:70:9F
            X509v3 Authority Key Identifier:
                keyid:77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a3a2f33362d3336203d3e20323732323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83e8::/36

    Signature Algorithm: sha256WithRSAEncryption
         62:86:37:89:44:8f:22:b4:60:0b:3f:6d:c7:c5:44:a1:4f:a4:
         9a:ad:48:aa:21:58:46:8b:4e:56:64:32:55:5b:a2:55:fc:be:
         0f:77:54:59:75:3d:ca:9c:16:b5:c6:71:a0:a3:e0:f9:a3:91:
         8c:70:07:7b:a9:3d:13:a7:3a:d4:f0:98:17:61:22:53:2c:4a:
         e0:53:6c:49:68:38:9b:12:8f:3d:74:67:55:43:a2:01:bd:08:
         9f:94:51:76:82:ef:94:50:88:6e:24:16:26:f7:11:48:20:a2:
         ad:e6:32:ef:e7:f5:d4:aa:ef:c0:6b:4c:50:3d:48:4b:03:2b:
         22:c1:d6:e0:df:87:48:a1:91:ae:9c:51:78:17:56:0b:aa:00:
         fb:ae:bf:6d:d0:1f:b1:4a:0e:d6:51:53:4e:ad:d7:37:0a:26:
         14:9c:e1:79:0c:76:56:1b:50:b4:58:1c:75:74:bc:4d:fd:1c:
         0c:dd:32:37:53:b6:96:60:8f:f8:c9:a3:4a:1c:db:09:c9:eb:
         9c:8d:8e:c4:2d:5e:0d:cd:cc:ca:db:f9:bc:80:8f:77:9c:91:
         f7:69:fb:2e:00:5a:f4:f7:4c:91:63:cd:12:c6:62:a7:01:23:
         a0:5e:65:5f:b8:5f:b2:ca:a3:4d:f6:a0:4c:1c:23:0f:14:0a:
         10:7a:ac:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:17:37 2026 by rpki-client