Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a3a2f33342d3334203d3e20323733373430.roa
File:                     323830343a386238633a3a2f33342d3334203d3e20323733373430.roa (raw, json)
Hash identifier:          zN/PBsbiJCP404Fn6CBfZ40hLI4Tj8Qf8u4IPc5Jyg0=
Subject key identifier:   E6:22:9E:49:87:F4:D8:1C:E2:0A:F5:DE:60:FC:FF:FD:14:5C:C1:DA
Certificate issuer:       /CN=8C2701B7080D1081AAECCD107A57E11F3AEB77BA
Certificate serial:       2DF83C26D0F118DCCA8BB5141DE52E5CA0D2A226
Authority key identifier: 8C:27:01:B7:08:0D:10:81:AA:EC:CD:10:7A:57:E1:1F:3A:EB:77:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a3a2f33342d3334203d3e20323733373430.roa
Signing time:             Fri 06 Feb 2026 15:17:54 +0000
ROA not before:           Fri 06 Feb 2026 15:12:54 +0000
ROA not after:            Fri 05 Feb 2027 15:17:54 +0000
asID:                     273740
IP address blocks:        2804:8b8c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.crl
                          rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 00:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f8:3c:26:d0:f1:18:dc:ca:8b:b5:14:1d:e5:2e:5c:a0:d2:a2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C2701B7080D1081AAECCD107A57E11F3AEB77BA
        Validity
            Not Before: Feb  6 15:12:54 2026 GMT
            Not After : Feb  5 15:17:54 2027 GMT
        Subject: CN=E6229E4987F4D81CE20AF5DE60FCFFFD145CC1DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:56:fd:c1:8f:ab:f7:d1:88:6e:41:49:15:76:
                    3f:90:b9:95:12:a9:56:a7:65:0f:3e:ba:07:0e:4d:
                    d4:fe:59:39:b2:98:02:de:fe:0d:2a:df:3b:b3:03:
                    e6:ef:72:c8:f2:d6:ed:d0:b4:44:e0:07:71:d8:00:
                    72:99:8a:f2:5a:d5:82:2e:60:e1:bb:2e:93:1a:4f:
                    da:f3:4d:b0:e9:fe:4a:9a:c9:24:8f:b7:28:48:fa:
                    30:8c:c9:fb:9d:89:de:7e:1c:7e:ec:c0:1c:8b:53:
                    db:3c:1a:4f:f6:d7:82:0d:b4:0e:9a:f0:20:12:bb:
                    b4:7b:76:6c:44:b2:f9:17:7a:9b:e5:eb:f2:f6:a0:
                    6f:75:d8:7b:b7:bb:47:76:63:6e:80:ea:fe:1e:a0:
                    4c:38:59:8e:b2:97:93:af:d5:fa:08:62:b3:5e:fb:
                    e0:fc:a4:c8:ca:af:9e:ca:7a:9a:2c:e7:22:95:e3:
                    c1:e1:da:5a:37:69:31:ea:ed:44:f2:54:0c:7c:ec:
                    8f:4d:30:16:30:48:4b:5a:9d:1d:f2:cb:aa:e8:22:
                    62:67:69:76:1f:f4:cc:fe:98:7f:37:87:17:d1:af:
                    ec:0d:1f:b3:d3:6d:62:b7:01:b6:f5:51:37:ea:70:
                    02:ea:27:77:13:e0:fe:98:d0:16:4c:c9:37:da:fb:
                    dc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:22:9E:49:87:F4:D8:1C:E2:0A:F5:DE:60:FC:FF:FD:14:5C:C1:DA
            X509v3 Authority Key Identifier:
                keyid:8C:27:01:B7:08:0D:10:81:AA:EC:CD:10:7A:57:E1:1F:3A:EB:77:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a3a2f33342d3334203d3e20323733373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b8c::/34

    Signature Algorithm: sha256WithRSAEncryption
         51:49:b3:84:13:47:fe:9e:1f:1b:1c:7e:b3:79:32:c7:cb:1e:
         28:ad:1e:44:fd:96:be:2f:52:9b:78:b3:d0:34:87:9f:b6:1a:
         fb:7a:ee:dc:b5:d8:85:ba:14:57:36:23:e1:28:bd:d3:aa:07:
         fa:bc:03:74:34:11:d0:fd:96:1f:77:f2:8c:5a:f8:63:5c:b7:
         d6:68:79:4c:e0:68:b3:8a:81:9a:e1:f8:e1:91:c9:2a:13:09:
         9e:42:82:71:ed:a6:4d:05:06:11:4b:18:26:b9:53:f0:a3:f7:
         77:87:95:cc:91:8c:28:35:56:0c:5b:e3:be:c9:ff:3e:2f:e7:
         11:9a:2e:ef:f3:08:24:92:74:48:3e:81:12:8e:cf:ee:15:1e:
         3f:ca:91:16:8e:e8:66:34:a0:c8:c8:47:e6:8b:8b:4e:29:64:
         71:a1:33:7c:14:22:88:09:1c:db:f0:38:d0:b6:e1:b9:1d:4e:
         dd:36:1e:c3:e7:ae:ce:bc:06:3f:c3:82:72:25:3c:4f:e9:8d:
         27:fb:7f:09:d8:8b:f8:ac:cf:b4:6f:c1:9b:68:80:e8:b8:71:
         ae:62:61:54:f9:dc:25:77:30:60:72:75:6b:88:3e:f1:1c:33:
         c4:ae:be:40:17:a3:93:2a:4d:47:ab:06:2b:db:0f:b4:ac:0f:
         d6:45:9f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:03:47 2026 by rpki-client