Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/3137392e34382e3233322e302f32322d3332203d3e20323731303538.roa
File:                     3137392e34382e3233322e302f32322d3332203d3e20323731303538.roa (raw, json)
Hash identifier:          Lg3xGEd1KMqctw6SIUy0B0TCEaMEj3AOQGRSciOhfnw=
Subject key identifier:   9B:1B:16:90:CD:0B:B5:FD:D8:FA:0C:E1:0A:8B:78:1E:51:AF:B1:AF
Certificate issuer:       /CN=76C9AD29AF345889E00DEDC9FDEE575F3022F6DC
Certificate serial:       75A1AF44E54296F6DCFD4EA2B140905F17AD687F
Authority key identifier: 76:C9:AD:29:AF:34:58:89:E0:0D:ED:C9:FD:EE:57:5F:30:22:F6:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76C9AD29AF345889E00DEDC9FDEE575F3022F6DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/3137392e34382e3233322e302f32322d3332203d3e20323731303538.roa
Signing time:             Thu 08 Oct 2026 14:18:35 +0000
ROA not before:           Thu 08 Oct 2026 14:13:35 +0000
ROA not after:            Thu 07 Oct 2027 14:18:35 +0000
asID:                     271058
IP address blocks:        179.48.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/76C9AD29AF345889E00DEDC9FDEE575F3022F6DC.crl
                          rsync://rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/76C9AD29AF345889E00DEDC9FDEE575F3022F6DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76C9AD29AF345889E00DEDC9FDEE575F3022F6DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 10:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a1:af:44:e5:42:96:f6:dc:fd:4e:a2:b1:40:90:5f:17:ad:68:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76C9AD29AF345889E00DEDC9FDEE575F3022F6DC
        Validity
            Not Before: Oct  8 14:13:35 2026 GMT
            Not After : Oct  7 14:18:35 2027 GMT
        Subject: CN=9B1B1690CD0BB5FDD8FA0CE10A8B781E51AFB1AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0d:52:c8:90:56:04:78:b5:8c:8e:ae:ac:25:
                    57:65:26:b9:dd:b3:32:dd:4f:6a:9c:04:73:cd:88:
                    e8:ff:e6:df:21:31:fe:9f:c6:4b:96:0b:06:5d:fb:
                    c0:78:01:7c:3d:d5:bd:60:08:07:d8:ab:f1:a8:c6:
                    76:c0:30:e3:83:19:21:eb:e2:5c:0b:e1:08:3c:05:
                    11:79:a3:03:b4:33:f7:0d:13:02:c4:71:e5:4d:9d:
                    62:fa:99:b7:d2:1d:d1:bb:17:f3:fe:0a:f8:12:ac:
                    66:d8:a1:b1:68:c2:4a:b7:47:95:88:26:7c:6a:17:
                    3c:89:d6:48:46:ed:b8:54:e6:b6:ee:c5:3f:a5:8e:
                    e3:65:0d:89:e3:d6:7e:e2:e9:90:2c:d4:d6:f3:32:
                    54:72:8c:d7:8e:7b:7d:6c:de:16:f6:05:24:12:3c:
                    a4:b1:23:30:f1:29:9f:f9:3f:9a:1f:44:fc:cd:6a:
                    74:3a:ff:26:0f:93:01:0d:96:13:2d:25:fa:1d:ba:
                    3d:0a:92:04:14:1a:c2:86:f1:25:1b:68:5a:d3:a8:
                    d8:22:6d:39:7e:a1:5d:09:35:2d:cc:76:6a:b3:d8:
                    c5:d0:7b:0b:a7:21:7e:b3:bc:8e:c4:9d:a1:fb:f2:
                    e9:c0:94:7c:a2:cd:b5:a5:8e:a2:bd:0a:f4:93:63:
                    be:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1B:16:90:CD:0B:B5:FD:D8:FA:0C:E1:0A:8B:78:1E:51:AF:B1:AF
            X509v3 Authority Key Identifier:
                keyid:76:C9:AD:29:AF:34:58:89:E0:0D:ED:C9:FD:EE:57:5F:30:22:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/76C9AD29AF345889E00DEDC9FDEE575F3022F6DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76C9AD29AF345889E00DEDC9FDEE575F3022F6DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8w6EGuBfH5J6k9EGUPWkvTpkT9DJN4cuzLAh8no5tdjm/0/3137392e34382e3233322e302f32322d3332203d3e20323731303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:53:d8:46:bd:93:8e:5b:f3:06:19:04:5f:ae:6c:44:0f:0a:
         d4:ab:3c:92:6d:68:64:fc:cd:99:76:5f:d0:73:e1:62:2f:25:
         c4:83:0c:4b:65:37:bc:5c:d9:05:e6:04:2d:1b:db:ab:7c:da:
         db:eb:b0:a6:3e:3a:86:7e:da:d8:38:65:12:bc:bf:20:3a:fb:
         5d:f8:78:c1:84:43:d4:08:91:1f:31:2c:fe:98:4e:11:93:e1:
         bb:27:f2:db:ae:1b:83:55:ba:13:6e:fd:57:2f:46:b6:7b:be:
         04:e8:34:81:92:8f:9d:8b:81:8a:b4:13:76:60:89:1b:4b:09:
         99:06:ff:a7:d0:5e:d2:3c:48:78:ec:bb:a2:d3:d4:53:14:2a:
         8c:c7:84:e9:92:17:52:66:61:d3:2a:ed:b4:95:c7:18:85:4a:
         ec:5b:8e:f1:35:a4:6e:e1:d0:4d:1a:40:37:f7:a4:fe:47:3c:
         e6:e8:18:d1:da:37:76:96:05:0a:b3:2a:d7:3f:3d:27:8f:c4:
         cc:b7:60:b2:8c:02:f8:74:e8:7b:7c:2c:27:bb:3d:21:9c:59:
         7a:21:0a:13:ba:32:b5:0c:86:5a:61:10:f9:25:f8:6c:bd:b7:
         1c:e0:62:7c:06:e7:ed:8c:7b:a2:66:38:76:d5:15:ff:1b:c3:
         1d:eb:37:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:59:42 2026 by rpki-client