Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a31303a3a2f34382d3438203d3e20323634343039.roa
File:                     323830343a316532303a31303a3a2f34382d3438203d3e20323634343039.roa (raw, json)
Hash identifier:          X9JEBpULtKbvPIzkStgH5c98d6E7JhilCa8ro0sVYQk=
Subject key identifier:   2C:89:7E:47:ED:9F:C0:BB:CA:B6:52:C8:2B:17:05:73:64:F9:76:DA
Certificate issuer:       /CN=B8E1FBCBFD060182A72581B4A3C682A4CB14BC92
Certificate serial:       7E514A74B222A3EEF5E18BDE7CF48E1CCFC3A682
Authority key identifier: B8:E1:FB:CB:FD:06:01:82:A7:25:81:B4:A3:C6:82:A4:CB:14:BC:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a31303a3a2f34382d3438203d3e20323634343039.roa
Signing time:             Wed 09 Sep 2026 18:55:38 +0000
ROA not before:           Wed 09 Sep 2026 18:50:38 +0000
ROA not after:            Wed 08 Sep 2027 18:55:38 +0000
asID:                     264409
IP address blocks:        2804:1e20:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.crl
                          rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 07:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:51:4a:74:b2:22:a3:ee:f5:e1:8b:de:7c:f4:8e:1c:cf:c3:a6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E1FBCBFD060182A72581B4A3C682A4CB14BC92
        Validity
            Not Before: Sep  9 18:50:38 2026 GMT
            Not After : Sep  8 18:55:38 2027 GMT
        Subject: CN=2C897E47ED9FC0BBCAB652C82B17057364F976DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8f:b2:f6:c4:3b:fd:93:87:c5:13:bf:0d:1a:
                    66:7d:15:b0:e0:95:2a:15:f0:bf:a2:47:19:e5:36:
                    dd:e9:e9:0b:87:e6:27:9b:f2:a5:9c:06:3f:cc:a1:
                    17:ee:c8:9b:6f:32:a5:b4:2f:2d:46:eb:12:a7:70:
                    9d:24:17:43:d0:73:c1:ed:b6:5d:3d:f9:30:32:a2:
                    21:6b:a2:34:c7:18:fe:80:54:aa:05:82:e2:8c:14:
                    24:ac:01:25:0a:1b:73:70:7f:d7:f2:45:72:37:8d:
                    a3:6f:b9:f4:2c:91:46:cd:ab:00:9e:ba:79:16:39:
                    33:08:f5:d2:48:11:06:a8:bf:e8:16:ae:65:de:72:
                    13:fa:de:b5:65:5b:1f:49:aa:14:0f:28:c0:d4:17:
                    7f:18:b8:29:34:27:f2:01:1f:da:60:0a:b4:77:e4:
                    6b:d9:fa:f2:7c:b5:93:dc:98:1b:65:4f:69:ff:b1:
                    09:8a:b3:8b:36:f0:77:d5:da:4b:fc:7e:b5:ee:b8:
                    f0:d4:57:3f:c4:7a:b9:66:c4:9c:ea:3b:b8:70:a0:
                    6f:16:59:57:18:ea:ca:dd:0d:d8:a6:da:77:c1:0c:
                    57:b3:15:1b:1b:e0:da:7d:e6:8d:fc:aa:44:38:83:
                    1f:1d:1f:74:a7:3c:03:4a:a1:87:87:cc:d1:42:ea:
                    1e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:89:7E:47:ED:9F:C0:BB:CA:B6:52:C8:2B:17:05:73:64:F9:76:DA
            X509v3 Authority Key Identifier:
                keyid:B8:E1:FB:CB:FD:06:01:82:A7:25:81:B4:A3:C6:82:A4:CB:14:BC:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a31303a3a2f34382d3438203d3e20323634343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e20:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:58:1a:6c:93:4e:6f:63:00:fa:1c:3d:16:97:20:ff:af:5c:
         8f:91:2b:b1:8a:ff:f5:1d:bb:fd:59:8a:72:9e:51:ba:79:a5:
         32:52:99:00:dd:9e:51:44:51:15:c9:8c:0e:49:a7:da:c1:1d:
         52:ff:4d:c0:42:f6:9e:67:d4:42:b3:58:5f:04:46:ef:1d:37:
         c5:45:0d:4d:64:28:f5:b4:9e:03:b5:aa:d4:18:ea:cc:66:80:
         8f:54:fb:e7:49:e4:99:18:37:d0:48:af:c0:c8:8a:8e:0e:0d:
         7b:36:d7:d4:e7:53:b6:51:09:b6:84:7c:bc:d3:c8:a0:82:5f:
         64:6e:21:28:79:16:a4:c5:95:f6:5a:43:a2:97:ae:01:0d:17:
         5b:83:3c:93:e2:31:a4:b1:26:99:2f:b3:14:0b:70:2d:ab:d3:
         5d:41:b9:b5:cd:c8:d5:10:bd:d4:c4:8b:ba:26:a3:4a:8e:39:
         87:b1:14:5a:c2:77:be:83:25:db:ca:d7:5d:c7:4a:35:33:f2:
         c1:db:ac:f4:9a:7f:ed:98:a4:00:63:36:a7:e9:35:8c:d4:62:
         6c:ca:d1:d8:39:e6:c4:2f:c0:8c:92:1b:14:38:df:75:f6:ce:
         5b:5a:4f:73:74:d5:8a:a5:be:a1:8f:11:37:77:c8:f2:a0:05:
         63:61:6f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:22:56 2026 by rpki-client