Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3134332e3230382e3135372e302f32342d3234203d3e203237373230.roa
File:                     3134332e3230382e3135372e302f32342d3234203d3e203237373230.roa (raw, json)
Hash identifier:          18PUiy+ekD88wqbw8n/9inouP0afKMwRMUFm+kmYST8=
Subject key identifier:   34:74:B8:C8:FF:71:05:F7:32:51:A4:EA:8A:62:8C:26:9F:A6:2F:A2
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       521537E77526749D69602BDED9A8102EA1FE595E
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3134332e3230382e3135372e302f32342d3234203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 19:41:15 +0000
ROA not before:           Thu 10 Sep 2026 19:36:15 +0000
ROA not after:            Thu 09 Sep 2027 19:41:15 +0000
asID:                     27720
IP address blocks:        143.208.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:15:37:e7:75:26:74:9d:69:60:2b:de:d9:a8:10:2e:a1:fe:59:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 19:36:15 2026 GMT
            Not After : Sep  9 19:41:15 2027 GMT
        Subject: CN=3474B8C8FF7105F73251A4EA8A628C269FA62FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:64:aa:6f:3c:34:8b:1b:a0:ec:ca:e3:7c:
                    4d:ef:05:c4:cb:4e:24:6c:23:33:6a:43:4c:b4:26:
                    d8:18:5f:44:da:73:9b:28:bc:c8:b2:9c:96:e8:c4:
                    40:c4:b8:b0:f2:07:72:92:2f:91:d0:4c:b9:ad:41:
                    c2:a8:c6:8b:5a:54:be:d8:b3:b4:54:dd:e9:20:05:
                    9c:e2:ab:66:a8:5c:75:23:24:1c:09:fb:a8:7d:16:
                    a6:78:be:f5:ea:d6:14:d9:9e:bd:00:15:ed:ed:d7:
                    e2:bd:9a:13:e7:5c:0a:aa:23:de:d2:e9:d9:e8:32:
                    c1:5d:98:4e:d9:34:45:74:0b:f1:ad:83:2d:df:2f:
                    6c:33:99:95:eb:0d:99:45:23:7d:10:78:2c:eb:1f:
                    94:44:d8:e7:62:6f:9c:75:d4:64:c9:e8:b3:d4:8f:
                    48:1e:cf:d6:7a:e1:61:76:6b:50:ea:54:df:36:e8:
                    62:39:f2:9f:cb:62:72:99:3c:f0:fb:1d:ad:7b:61:
                    18:95:14:78:bd:c1:91:b2:24:50:7b:ec:0c:e9:09:
                    b5:73:58:94:f6:d7:25:23:70:7d:be:24:fc:96:9f:
                    57:00:55:a8:b3:71:20:bc:29:97:13:d8:ed:5a:b1:
                    cc:35:64:37:3c:b2:5a:2f:3c:18:13:06:f6:bc:f2:
                    8c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:74:B8:C8:FF:71:05:F7:32:51:A4:EA:8A:62:8C:26:9F:A6:2F:A2
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3134332e3230382e3135372e302f32342d3234203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:c3:24:b7:c4:d6:be:2d:8c:16:ee:21:32:a9:7d:01:59:32:
         5d:50:6f:a4:2f:f0:78:50:a7:49:37:aa:9b:d4:ef:4d:78:02:
         16:25:1f:bb:7a:3c:3f:60:8b:83:f5:f0:81:00:20:4e:e7:7e:
         e6:91:74:3e:c9:5b:82:a7:aa:4b:9f:9f:97:46:f3:d8:0d:9f:
         27:af:58:93:88:d6:04:99:1a:85:49:42:79:f9:38:d4:c3:2f:
         58:9a:f8:ab:19:ea:06:e2:98:d9:2e:dc:81:4c:64:a2:bb:3b:
         e0:b5:a1:93:ac:10:67:08:29:1b:95:e4:6a:6d:22:43:38:40:
         2a:ad:f5:1e:60:f8:c0:a3:8b:df:74:f3:8c:4d:55:d8:29:21:
         ae:a1:05:d3:a7:06:a2:cb:a6:be:d6:fc:92:02:fd:80:3e:34:
         ee:b6:21:2b:56:38:f2:16:8f:52:c6:8c:7b:46:37:8c:8f:56:
         71:b7:86:8f:2a:3b:51:30:17:b0:14:fc:ab:3d:6f:b8:e8:61:
         95:e5:02:6d:fa:03:6b:3c:dc:ab:68:d8:f9:45:80:54:16:c3:
         ec:f5:ea:03:c0:9b:56:3a:7c:06:48:88:17:01:f5:23:57:a3:
         56:96:c5:80:38:fd:34:c1:1f:e9:c1:f1:43:da:94:6c:ad:83:
         d5:77:23:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:56:38 2026 by rpki-client