Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a383030303a3a2f33342d3334203d3e20323733373430.roa
File:                     323830343a386238633a383030303a3a2f33342d3334203d3e20323733373430.roa (raw, json)
Hash identifier:          URqoD+MaYFWmvWAdlopT+XP+QvzW/1/Nf+vDkSzwIOg=
Subject key identifier:   33:7E:92:54:5C:7C:D6:71:F2:9A:32:1F:EC:2B:43:DA:9E:1C:76:3B
Certificate issuer:       /CN=8C2701B7080D1081AAECCD107A57E11F3AEB77BA
Certificate serial:       4E03BF5BB96FD5D185DD7925D9A9E218EDE7E4FA
Authority key identifier: 8C:27:01:B7:08:0D:10:81:AA:EC:CD:10:7A:57:E1:1F:3A:EB:77:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a383030303a3a2f33342d3334203d3e20323733373430.roa
Signing time:             Fri 06 Feb 2026 15:17:55 +0000
ROA not before:           Fri 06 Feb 2026 15:12:55 +0000
ROA not after:            Fri 05 Feb 2027 15:17:55 +0000
asID:                     273740
IP address blocks:        2804:8b8c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.crl
                          rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 00:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:03:bf:5b:b9:6f:d5:d1:85:dd:79:25:d9:a9:e2:18:ed:e7:e4:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C2701B7080D1081AAECCD107A57E11F3AEB77BA
        Validity
            Not Before: Feb  6 15:12:55 2026 GMT
            Not After : Feb  5 15:17:55 2027 GMT
        Subject: CN=337E92545C7CD671F29A321FEC2B43DA9E1C763B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c9:d3:73:a7:9c:cc:de:40:31:e7:10:c2:98:
                    2c:ff:24:9a:0d:3d:a2:99:d7:8e:db:c4:ff:33:50:
                    69:c2:15:d9:a2:2c:4e:95:31:27:4f:8a:1c:93:10:
                    71:4c:88:eb:30:00:79:96:13:27:cc:57:c4:a4:8a:
                    69:3e:39:bc:46:ec:08:90:f1:1a:25:46:1b:97:f6:
                    2d:6a:2e:1f:c3:ad:f1:bd:0c:e4:05:25:7e:8d:4e:
                    ed:05:db:63:a6:06:71:19:f7:cc:f3:56:11:51:7a:
                    83:93:09:b6:72:95:a4:f6:d5:fb:ca:82:17:49:03:
                    0d:c7:07:95:e4:30:a5:ee:e8:ae:5e:ca:18:1b:bf:
                    33:8c:27:bc:a8:62:23:8c:24:8c:56:bc:e3:45:0a:
                    70:de:cd:e3:cf:85:7f:68:73:22:e8:03:ff:fa:46:
                    77:5b:ba:34:ce:3f:e5:72:c4:f7:02:8a:4f:35:47:
                    9b:c9:d3:2b:22:60:5e:80:34:c9:ac:f4:b0:28:a4:
                    61:e8:4a:fb:e9:ec:54:fe:fe:60:d7:65:70:f5:3b:
                    4f:ba:69:9d:12:41:66:76:53:50:65:25:3a:4e:21:
                    0a:cb:34:06:f0:41:90:18:4f:1d:17:23:d3:41:31:
                    50:20:3f:b3:58:ff:ab:4f:4c:ee:d2:8d:1f:c2:9e:
                    7a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7E:92:54:5C:7C:D6:71:F2:9A:32:1F:EC:2B:43:DA:9E:1C:76:3B
            X509v3 Authority Key Identifier:
                keyid:8C:27:01:B7:08:0D:10:81:AA:EC:CD:10:7A:57:E1:1F:3A:EB:77:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a383030303a3a2f33342d3334203d3e20323733373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b8c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         71:47:56:b1:03:ea:1e:0d:0f:0f:c6:80:68:1e:8c:b9:b7:e6:
         67:2b:90:69:d7:54:5b:89:d5:38:f9:16:da:a1:95:14:2e:77:
         a0:00:5f:b6:91:b9:87:70:5c:51:52:55:c3:20:de:0c:fb:b9:
         3b:49:fd:bd:81:93:dd:5f:68:9c:75:3f:3d:35:d5:fc:3b:6a:
         fb:74:14:57:bd:f1:9d:29:ce:17:d2:c4:05:72:ba:4e:09:68:
         8a:81:e7:e1:b4:d7:f4:34:bb:62:f7:81:a7:0b:05:a0:df:18:
         88:1f:88:21:56:00:73:3e:c7:91:2e:19:58:1e:90:7a:21:0d:
         e9:b0:4b:60:4b:0f:3e:fb:36:18:c8:90:55:e1:a1:a7:cc:81:
         43:c9:dc:0e:56:d1:3d:26:e8:d7:f6:47:25:e6:57:66:a6:40:
         93:83:ac:ab:a7:b6:00:2c:a9:59:0e:c5:d8:d3:af:92:10:59:
         89:4e:9d:f2:e8:fe:b6:61:10:35:7b:21:e0:3e:d1:c6:35:aa:
         89:76:60:77:10:0a:40:2c:de:57:20:fe:72:16:cc:be:ea:36:
         b6:c3:3f:44:5c:b4:78:b5:61:57:b6:3f:6b:cf:d6:34:21:15:
         02:d8:24:d9:1f:70:73:e8:bf:76:02:ad:54:20:27:26:5b:ef:
         b9:62:b0:03
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTgO/W7lv1dGF3Xkl2aniGO3n5PowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMyNzAxQjcwODBEMTA4MUFBRUNDRDEwN0E1N0UxMUYz
QUVCNzdCQTAeFw0yNjAyMDYxNTEyNTVaFw0yNzAyMDUxNTE3NTVaMDMxMTAvBgNV
BAMTKDMzN0U5MjU0NUM3Q0Q2NzFGMjlBMzIxRkVDMkI0M0RBOUUxQzc2M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxydNzp5zM3kAx5xDCmCz/JJoN
PaKZ147bxP8zUGnCFdmiLE6VMSdPihyTEHFMiOswAHmWEyfMV8Skimk+ObxG7AiQ
8RolRhuX9i1qLh/DrfG9DOQFJX6NTu0F22OmBnEZ98zzVhFReoOTCbZylaT21fvK
ghdJAw3HB5XkMKXu6K5eyhgbvzOMJ7yoYiOMJIxWvONFCnDezePPhX9ocyLoA//6
RndbujTOP+VyxPcCik81R5vJ0ysiYF6ANMms9LAopGHoSvvp7FT+/mDXZXD1O0+6
aZ0SQWZ2U1BlJTpOIQrLNAbwQZAYTx0XI9NBMVAgP7NY/6tPTO7SjR/CnnrFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUM36SVFx81nHymjIf7CtD2p4cdjswHwYDVR0j
BBgwFoAUjCcBtwgNEIGq7M0QelfhHzrrd7owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG1Kclo4ODkyaXRxRkdYYVh6Y2NxdkoybnBkWEJnc3FzRDhpMVFiMm5W
c3UvMC84QzI3MDFCNzA4MEQxMDgxQUFFQ0NEMTA3QTU3RTExRjNBRUI3N0JBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDMjcwMUI3MDgwRDEwODFB
QUVDQ0QxMDdBNTdFMTFGM0FFQjc3QkEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhtSnJaODg5Mml0cUZHWGFYemNjcXZKMm5wZFhCZ3Nxc0Q4aTFRYjJuVnN1LzAv
MzIzODMwMzQzYTM4NjIzODYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMzM3MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEi4yAMA0GCSqGSIb3DQEBCwUA
A4IBAQBxR1axA+oeDQ8PxoBoHoy5t+ZnK5Bp11RbidU4+RbaoZUULnegAF+2kbmH
cFxRUlXDIN4M+7k7Sf29gZPdX2icdT89NdX8O2r7dBRXvfGdKc4X0sQFcrpOCWiK
gefhtNf0NLti94GnCwWg3xiIH4ghVgBzPseRLhlYHpB6IQ3psEtgSw8++zYYyJBV
4aGnzIFDydwOVtE9JujX9kcl5ldmpkCTg6yrp7YALKlZDsXY06+SEFmJTp3y6P62
YRA1eyHgPtHGNaqJdmB3EApALN5XIP5yFsy+6ja2wz9EXLR4tWFXtj9rz9Y0IRUC
2CTZH3Bz6L92Aq1UICcmW++5YrAD
-----END CERTIFICATE-----
Generated at Mon Feb 23 06:51:22 2026 by rpki-client