Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3132382e302f32332d3233203d3e20323732323238.roa
File:                     3138392e3132362e3132382e302f32332d3233203d3e20323732323238.roa (raw, json)
Hash identifier:          D9eBFHHGvqa6mMuZLnW08SgaJAbRxIIjkqeahMgmTjw=
Subject key identifier:   6E:79:A7:B8:F7:41:AA:15:CA:EC:C6:91:1F:04:82:3F:82:52:01:25
Certificate issuer:       /CN=77C292648278AA40C4563B37957C48B73FEDD477
Certificate serial:       045EB96081D7C6B30E3A91698676DDBE9C8C218D
Authority key identifier: 77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3132382e302f32332d3233203d3e20323732323238.roa
Signing time:             Tue 06 Oct 2026 20:37:06 +0000
ROA not before:           Tue 06 Oct 2026 20:32:06 +0000
ROA not after:            Tue 05 Oct 2027 20:37:06 +0000
asID:                     272228
IP address blocks:        189.126.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl
                          rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 15:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5e:b9:60:81:d7:c6:b3:0e:3a:91:69:86:76:dd:be:9c:8c:21:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C292648278AA40C4563B37957C48B73FEDD477
        Validity
            Not Before: Oct  6 20:32:06 2026 GMT
            Not After : Oct  5 20:37:06 2027 GMT
        Subject: CN=6E79A7B8F741AA15CAECC6911F04823F82520125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:48:e6:3b:cb:9b:7b:79:8a:ec:94:96:df:
                    d7:cc:1e:f4:15:d0:1a:8e:04:ca:05:50:14:a5:fc:
                    c2:ca:8f:3d:a3:f4:cf:2a:3d:bf:02:ba:91:8d:66:
                    1b:c1:a1:2f:54:bd:06:19:fd:b0:b1:09:22:38:de:
                    88:3c:57:c8:ce:f2:a2:5b:68:cd:48:95:ad:48:d2:
                    0b:db:b3:b6:b0:22:c4:9e:c1:00:bb:3b:86:94:21:
                    69:6e:8c:51:6a:3a:f8:9a:f3:2f:bd:58:da:76:b0:
                    98:76:16:9c:a7:cf:c7:c6:79:e7:92:5a:80:f3:4c:
                    d8:02:8c:ed:79:4a:ed:1f:8d:f9:43:b5:e7:40:bb:
                    2d:f9:18:e2:82:d5:88:42:f2:9a:4a:92:44:57:56:
                    3e:62:0e:a0:8c:87:a3:42:29:3f:9d:8f:e0:9b:bc:
                    75:c3:1f:fb:98:a1:02:29:0e:64:b1:e6:e0:8f:c5:
                    55:4c:d7:a0:b8:73:33:51:ca:69:81:59:bc:ac:1e:
                    79:ab:9c:2c:bd:69:73:6c:22:f2:63:a5:f3:1b:66:
                    01:6f:e1:e5:2d:4d:99:63:9e:8d:cd:04:1c:e9:68:
                    c3:02:4d:63:6f:e3:6a:2c:47:ce:65:2e:db:ee:0d:
                    e1:3d:77:c9:db:f7:a9:ae:d6:01:64:95:f4:a8:09:
                    a5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:79:A7:B8:F7:41:AA:15:CA:EC:C6:91:1F:04:82:3F:82:52:01:25
            X509v3 Authority Key Identifier:
                keyid:77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/3138392e3132362e3132382e302f32332d3233203d3e20323732323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:c1:89:3a:35:77:64:55:6b:20:53:e1:9e:98:cd:af:94:ac:
         f6:bf:c5:60:d2:85:14:04:c9:7e:2c:af:68:3e:57:3f:5b:58:
         60:70:ae:ca:a6:4f:0a:03:3c:6e:eb:94:fe:2e:e2:53:6d:f4:
         11:b6:cd:b4:cb:f0:c0:1e:21:63:c2:de:11:f6:f7:ac:e7:69:
         7a:87:a0:48:d4:2c:a0:d3:fc:77:45:39:ce:a8:dc:0c:0a:45:
         d4:9d:47:76:5f:3f:10:2b:4a:1d:06:f8:92:51:f1:51:5c:a6:
         d4:23:51:7e:bf:08:d0:e2:f7:23:4e:10:62:e5:fc:30:2a:5d:
         d4:c0:de:59:ce:2a:7b:cf:b6:0e:ae:26:81:92:ab:a4:6b:77:
         72:04:f0:c5:94:39:58:24:b1:55:68:3b:a8:1a:fe:dd:85:9e:
         24:cd:6b:f8:9c:35:5b:7c:31:63:67:f1:19:ea:9e:7e:b7:68:
         29:e6:16:fb:7f:22:a5:00:4b:f3:cb:69:95:c9:8a:86:cb:7d:
         49:21:d9:2e:19:bc:26:bf:fc:39:f8:5b:42:a7:19:ad:12:25:
         31:ba:a2:7e:d9:11:88:8c:bb:55:0c:37:fc:64:4b:d2:40:d4:
         44:1a:03:53:9f:6a:9c:83:3c:76:c2:6a:15:dd:aa:79:4d:aa:
         45:89:23:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:52:58 2026 by rpki-client