Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3133382e35392e39382e302f32342d3234203d3e203237373230.roa
File:                     3133382e35392e39382e302f32342d3234203d3e203237373230.roa (raw, json)
Hash identifier:          7lKSkbwY3qPo733fd6m2pg3fsKmsowEcxLSP49KTCoc=
Subject key identifier:   52:04:B9:BC:F2:B8:C1:2F:BF:C9:58:17:D6:31:48:34:A9:5C:AF:8C
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       12CABCFB0F4AB92442EA9C08284228D8FCC6C5DA
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3133382e35392e39382e302f32342d3234203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 19:38:07 +0000
ROA not before:           Thu 10 Sep 2026 19:33:07 +0000
ROA not after:            Thu 09 Sep 2027 19:38:07 +0000
asID:                     27720
IP address blocks:        138.59.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ca:bc:fb:0f:4a:b9:24:42:ea:9c:08:28:42:28:d8:fc:c6:c5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 19:33:07 2026 GMT
            Not After : Sep  9 19:38:07 2027 GMT
        Subject: CN=5204B9BCF2B8C12FBFC95817D6314834A95CAF8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:06:96:dd:94:8c:53:d6:f4:a7:b8:df:0b:11:
                    29:21:f7:b7:e8:41:06:fd:c1:d5:b0:fe:36:ba:3a:
                    08:38:90:f9:d2:61:0b:bc:3f:12:6d:33:60:dc:82:
                    8b:b0:ce:ce:f2:eb:55:16:e5:27:8c:cb:3a:5b:c1:
                    ce:9a:7a:3e:6f:1e:10:41:b6:4b:7f:9c:ae:8c:22:
                    5e:e0:6c:d3:e9:a2:07:4f:8d:4b:d1:35:f4:04:35:
                    1f:f6:3a:b4:d5:29:b7:27:78:47:25:1f:21:42:35:
                    ff:63:ad:54:99:03:1c:b3:5a:87:70:da:fe:72:d2:
                    6a:06:1f:b0:2e:b7:5a:0e:80:67:de:60:4b:00:81:
                    9e:f2:6f:ee:4e:e0:94:81:cf:28:e8:da:b2:0c:da:
                    67:02:53:b7:90:42:53:81:9f:86:f2:b5:39:20:e1:
                    57:01:b1:31:99:22:f5:a8:70:9c:d8:72:c6:00:8e:
                    80:18:90:10:92:2a:76:a2:5b:df:b3:e7:b4:a8:55:
                    f4:90:30:42:71:67:0d:35:57:5a:ec:06:07:cc:cf:
                    1e:01:28:11:b6:85:fb:03:be:b4:8d:78:47:53:1a:
                    90:85:96:a5:1b:6b:90:03:4a:2e:e1:77:eb:71:67:
                    41:8a:0b:9f:3b:83:c4:75:ae:83:57:f1:69:8b:24:
                    52:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:04:B9:BC:F2:B8:C1:2F:BF:C9:58:17:D6:31:48:34:A9:5C:AF:8C
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3133382e35392e39382e302f32342d3234203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:29:3f:d1:2a:5a:37:21:16:3a:60:ee:99:a6:3e:8e:36:da:
         17:d5:a2:0a:29:19:cb:95:8c:c6:1f:45:f9:96:bd:18:99:78:
         f9:eb:f0:6c:e2:24:ca:f1:66:bd:e6:36:68:a0:13:a8:ee:ba:
         a9:8f:97:5a:44:ac:09:6a:63:00:67:f4:0e:c0:08:d9:a5:de:
         b4:56:6f:ba:99:4d:04:e8:13:35:a4:3d:bf:51:02:60:a5:4e:
         dc:26:16:bc:2b:25:72:30:05:3f:88:f1:37:4d:b8:ec:2c:56:
         61:58:cd:3c:2a:0e:1f:2f:1a:e3:83:70:ea:d9:03:68:c2:85:
         1f:f8:dc:bc:55:c0:92:7d:f4:02:fa:aa:62:ea:de:6d:7f:a5:
         e6:af:ea:60:e7:92:a1:19:6a:b7:49:c6:ef:74:0c:ef:a1:ea:
         77:c0:26:10:d3:7d:e2:7d:b9:32:f7:bb:f8:37:00:59:20:31:
         2c:08:20:df:c6:d7:c1:40:79:7f:83:8e:4d:84:9a:7e:c4:29:
         16:45:3e:b5:ae:10:eb:4a:88:c1:12:2a:71:ae:44:1a:63:d1:
         5a:0f:b5:f0:50:6d:a1:9f:f8:4d:14:89:16:04:f9:db:12:4b:
         71:56:d5:6d:1a:cf:de:54:aa:a1:8f:9e:7f:21:2c:be:2f:91:
         8f:dc:b6:d7
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEsq8+w9KuSRC6pwIKEIo2PzGxdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZGNUNDRjc1RTgxOTRDOUU2NzFEMkQ5RjU1NzYxMUQy
NzJFMjg1NzAeFw0yNjA5MTAxOTMzMDdaFw0yNzA5MDkxOTM4MDdaMDMxMTAvBgNV
BAMTKDUyMDRCOUJDRjJCOEMxMkZCRkM5NTgxN0Q2MzE0ODM0QTk1Q0FGOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0BpbdlIxT1vSnuN8LESkh97fo
QQb9wdWw/ja6Ogg4kPnSYQu8PxJtM2Dcgouwzs7y61UW5SeMyzpbwc6aej5vHhBB
tkt/nK6MIl7gbNPpogdPjUvRNfQENR/2OrTVKbcneEclHyFCNf9jrVSZAxyzWodw
2v5y0moGH7Aut1oOgGfeYEsAgZ7yb+5O4JSBzyjo2rIM2mcCU7eQQlOBn4bytTkg
4VcBsTGZIvWocJzYcsYAjoAYkBCSKnaiW9+z57SoVfSQMEJxZw01V1rsBgfMzx4B
KBG2hfsDvrSNeEdTGpCFlqUba5ADSi7hd+txZ0GKC587g8R1roNX8WmLJFJ1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUUgS5vPK4wS+/yVgX1jFINKlcr4wwHwYDVR0j
BBgwFoAUdvXM916BlMnmcdLZ9VdhHScuKFcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjc2S2lGN05jRTdnQTJBOFdudUE2NWt6Nmc3Y1laaEt1cHd0c1B0bU13
elUvMC83NkY1Q0NGNzVFODE5NEM5RTY3MUQyRDlGNTU3NjExRDI3MkUyODU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2RjVDQ0Y3NUU4MTk0QzlF
NjcxRDJEOUY1NTc2MTFEMjcyRTI4NTcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3NktpRjdOY0U3Z0EyQThXbnVBNjVrejZnN2NZWmhLdXB3dHNQdG1Nd3pVLzAv
MzEzMzM4MmUzNTM5MmUzOTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3
MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAIo7YjANBgkqhkiG9w0BAQsFAAOCAQEAeSk/0SpaNyEW
OmDumaY+jjbaF9WiCikZy5WMxh9F+Za9GJl4+evwbOIkyvFmveY2aKATqO66qY+X
WkSsCWpjAGf0DsAI2aXetFZvuplNBOgTNaQ9v1ECYKVO3CYWvCslcjAFP4jxN024
7CxWYVjNPCoOHy8a44Nw6tkDaMKFH/jcvFXAkn30AvqqYurebX+l5q/qYOeSoRlq
t0nG73QM76Hqd8AmENN94n25Mve7+DcAWSAxLAgg38bXwUB5f4OOTYSafsQpFkU+
ta4Q60qIwRIqca5EGmPRWg+18FBtoZ/4TRSJFgT52xJLcVbVbRrP3lSqoY+efyEs
vi+Rj9y21w==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:55:14 2026 by rpki-client