Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a633030303a3a2f33342d3334203d3e20323732323238.roa
File:                     323830343a383365383a633030303a3a2f33342d3334203d3e20323732323238.roa (raw, json)
Hash identifier:          pLLlRuc7j255ZN7Ww3MF7+0QbEDz6pdVcZTDJklTipo=
Subject key identifier:   DA:99:6A:C5:21:83:B5:75:71:A7:F6:45:AC:5D:28:E8:3E:FE:FB:33
Certificate issuer:       /CN=77C292648278AA40C4563B37957C48B73FEDD477
Certificate serial:       356362E69EA39D4992D6E8FF9E12E060F8C1993A
Authority key identifier: 77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a633030303a3a2f33342d3334203d3e20323732323238.roa
Signing time:             Tue 06 Oct 2026 20:37:10 +0000
ROA not before:           Tue 06 Oct 2026 20:32:10 +0000
ROA not after:            Tue 05 Oct 2027 20:37:10 +0000
asID:                     272228
IP address blocks:        2804:83e8:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl
                          rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 15:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:63:62:e6:9e:a3:9d:49:92:d6:e8:ff:9e:12:e0:60:f8:c1:99:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C292648278AA40C4563B37957C48B73FEDD477
        Validity
            Not Before: Oct  6 20:32:10 2026 GMT
            Not After : Oct  5 20:37:10 2027 GMT
        Subject: CN=DA996AC52183B57571A7F645AC5D28E83EFEFB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d6:cc:71:78:f7:3c:ae:ba:3a:90:d3:6e:5b:
                    a9:58:78:38:76:cf:ec:3b:21:91:11:c6:4b:82:f7:
                    5e:3e:94:8b:3c:9c:f2:50:bd:3a:fe:63:f4:c7:2d:
                    66:0c:c8:c6:80:ff:5e:b4:f1:5c:9c:41:d2:37:7c:
                    14:b6:c3:13:df:e3:40:17:39:ac:4a:3d:a5:f1:e4:
                    34:06:c4:d2:dc:82:9f:06:d9:4b:7a:cc:0f:0e:6c:
                    a2:e4:02:b7:ad:c3:bb:01:b5:09:3c:49:19:f8:19:
                    3e:58:00:1f:4d:bd:68:6c:91:0e:6c:f6:a5:a8:42:
                    31:f3:f2:cf:a1:fc:b1:f8:9c:5e:ce:5d:8b:9f:1d:
                    87:92:ad:b8:f1:8d:c2:93:fe:f5:12:a7:6a:42:24:
                    41:ef:12:4b:58:20:73:7b:fe:8c:86:f6:9a:8e:07:
                    3b:34:da:0b:98:30:50:4c:e0:89:89:e2:35:a5:03:
                    14:72:9e:2b:26:78:df:98:eb:8a:80:9f:d4:dc:1b:
                    8e:df:c2:36:82:ea:cb:88:14:cb:7b:8c:ce:60:be:
                    9e:48:29:05:4c:90:61:90:41:40:73:d0:10:28:07:
                    f3:fb:e2:69:0d:5d:1c:bf:2f:23:f2:fe:5a:ca:6c:
                    1d:ce:75:a3:9f:20:1d:7a:f5:4d:78:c9:5f:e2:2f:
                    1f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:99:6A:C5:21:83:B5:75:71:A7:F6:45:AC:5D:28:E8:3E:FE:FB:33
            X509v3 Authority Key Identifier:
                keyid:77:C2:92:64:82:78:AA:40:C4:56:3B:37:95:7C:48:B7:3F:ED:D4:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/77C292648278AA40C4563B37957C48B73FEDD477.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77C292648278AA40C4563B37957C48B73FEDD477.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/0/323830343a383365383a633030303a3a2f33342d3334203d3e20323732323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83e8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         23:cf:79:72:1a:24:aa:e4:bd:78:48:78:e9:0b:5e:c5:27:73:
         0f:6d:b6:ab:dc:9c:1d:2a:16:af:ee:68:b5:63:f6:77:09:24:
         13:d0:a9:4e:cf:60:23:b1:87:ab:54:64:10:28:68:73:03:ab:
         8a:fc:94:f5:ce:ff:b6:fa:18:f0:52:75:ba:a4:3a:32:0c:83:
         66:b2:03:c6:82:9a:7c:72:b6:39:7b:bd:5c:76:15:e6:4b:bf:
         1b:6a:58:f3:f0:78:72:fb:0d:84:c4:3f:26:ee:b0:10:33:a0:
         47:4c:dc:c4:80:e8:d8:a3:44:1a:3d:6f:b3:ff:b1:2d:b4:f7:
         be:64:10:38:3e:e2:3f:77:a6:cd:c5:c3:84:e3:f8:09:15:b4:
         2e:17:32:a2:31:89:bd:3d:93:5c:48:10:d7:03:1f:c8:77:20:
         9d:89:1d:1b:d5:4d:06:2c:30:1a:eb:b8:c8:62:c2:3f:11:8e:
         b9:d8:33:3d:a7:6b:9c:12:16:f0:dd:10:69:0c:77:97:b1:6f:
         ad:18:c8:7b:78:f1:49:82:64:76:3c:b8:bc:fb:55:e1:dd:89:
         cf:1c:6b:d7:fa:55:bf:5e:26:3a:9e:4a:94:28:33:8b:00:5d:
         ff:ac:e2:1b:50:0b:0b:59:17:b7:5b:ee:42:4b:ce:78:18:6f:
         60:53:f4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:18:37 2026 by rpki-client