Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3137372e3132392e31322e302f32342d3234203d3e203237373230.roa
File:                     3137372e3132392e31322e302f32342d3234203d3e203237373230.roa (raw, json)
Hash identifier:          1metNonyKbFPTj8HVB30/PtYKpJ/rUs8tPirzFfibd8=
Subject key identifier:   C2:65:F3:05:CD:53:87:73:26:E5:EF:C1:7B:10:8C:85:C1:7F:54:F1
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       8956E5388ED94EDCD001B2D5621C7F9A41902F
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3137372e3132392e31322e302f32342d3234203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 19:42:50 +0000
ROA not before:           Thu 10 Sep 2026 19:37:50 +0000
ROA not after:            Thu 09 Sep 2027 19:42:50 +0000
asID:                     27720
IP address blocks:        177.129.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            89:56:e5:38:8e:d9:4e:dc:d0:01:b2:d5:62:1c:7f:9a:41:90:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 19:37:50 2026 GMT
            Not After : Sep  9 19:42:50 2027 GMT
        Subject: CN=C265F305CD53877326E5EFC17B108C85C17F54F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:c8:24:95:9e:4c:3f:fa:96:7e:79:5b:f9:
                    13:b5:be:91:e2:92:ec:47:b6:4a:69:3b:7d:b6:69:
                    0e:37:42:f5:ad:99:cc:db:10:57:db:a4:6d:e5:b5:
                    37:15:c2:fa:66:9a:4e:e9:23:0a:1f:5d:2d:44:d0:
                    8b:e7:ab:a1:85:d6:fb:bf:c0:76:38:15:9e:cd:b8:
                    dc:2a:12:15:8c:fd:0b:e9:59:f1:69:b3:4d:eb:f2:
                    97:67:85:1b:6d:50:2a:9a:f5:d2:3b:30:3a:8e:e7:
                    5d:28:5e:59:60:3e:a7:2d:1c:6c:08:73:e4:cb:08:
                    9e:00:e8:1a:76:03:cf:e2:66:39:06:74:f0:d2:5b:
                    3c:7a:fa:6a:2b:5f:c2:83:10:5d:f6:5a:77:0b:22:
                    de:35:a9:11:52:97:cb:57:90:66:59:6f:9d:6e:16:
                    fb:22:59:96:73:62:4a:06:16:19:42:cc:f8:82:50:
                    90:72:c2:25:6c:a2:f6:56:c7:e4:bb:43:65:8a:ef:
                    80:96:1a:c5:88:14:54:4a:d6:a0:86:a6:2d:db:55:
                    b6:eb:5f:97:f3:3d:c5:03:24:9f:e3:01:1f:54:69:
                    c2:58:83:00:53:6a:06:45:cd:9e:14:56:98:fd:f0:
                    1c:62:7f:56:5c:66:0b:53:de:06:cf:5a:eb:73:e2:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:65:F3:05:CD:53:87:73:26:E5:EF:C1:7B:10:8C:85:C1:7F:54:F1
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3137372e3132392e31322e302f32342d3234203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:8d:57:73:65:7f:b7:c5:ed:d6:36:6a:ed:b9:b2:1e:21:ff:
         2b:86:67:7f:48:5b:26:97:2e:30:b9:d6:b3:85:5a:89:9e:21:
         27:97:e3:17:b6:bf:dd:7f:08:31:4e:0b:0e:38:24:a8:22:4f:
         e8:08:04:1b:41:bb:f9:49:3e:7b:68:34:e1:10:72:2d:22:e1:
         22:23:36:1a:e9:69:29:af:3c:04:80:0e:58:0d:0a:7c:ca:c5:
         91:3d:f2:8c:67:5c:7b:a8:9f:de:f8:91:6b:a5:f2:79:47:f8:
         77:e0:65:35:89:97:6e:a5:be:e3:6b:ed:91:86:7f:4c:83:fe:
         72:17:ff:f4:e3:aa:8a:45:49:a0:d1:4f:d7:1c:33:6c:6d:19:
         29:65:fb:fe:2e:14:9e:98:0f:67:46:eb:1a:59:7b:13:44:a7:
         7b:7c:b2:13:2a:bb:75:05:d2:46:2f:2f:26:c4:d8:95:e3:f7:
         ee:61:3e:6f:43:5c:b4:84:65:18:22:bb:88:3e:8e:09:10:c1:
         f4:8f:67:94:8f:bb:3e:df:1c:e8:91:f8:98:37:51:f7:5b:da:
         55:8c:59:1b:01:fa:a3:49:43:4e:5d:95:eb:02:d0:e8:a3:49:
         3a:eb:71:4e:eb:be:ae:b2:02:43:ef:e6:95:3c:e0:4a:3e:2a:
         a4:36:a5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:55:44 2026 by rpki-client