Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a31343a3a2f34382d3438203d3e203237373230.roa
File:                     323830343a6461343a31343a3a2f34382d3438203d3e203237373230.roa (raw, json)
Hash identifier:          56JG2D57EYMeW/JF6dwadNm/KKgjyQT9h+7Yon4Fpm4=
Subject key identifier:   94:BA:E7:1B:08:78:4F:92:32:79:4C:BD:69:E8:33:F9:D5:D8:88:BA
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       1B088B89E07B71AC86116BDC8B8F316303C33827
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a31343a3a2f34382d3438203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 20:07:05 +0000
ROA not before:           Thu 10 Sep 2026 20:02:05 +0000
ROA not after:            Thu 09 Sep 2027 20:07:05 +0000
asID:                     27720
IP address blocks:        2804:da4:14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 06:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:08:8b:89:e0:7b:71:ac:86:11:6b:dc:8b:8f:31:63:03:c3:38:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 20:02:05 2026 GMT
            Not After : Sep  9 20:07:05 2027 GMT
        Subject: CN=94BAE71B08784F9232794CBD69E833F9D5D888BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:9b:9b:15:58:83:3e:5d:ec:c8:0d:54:95:
                    f5:e0:c2:9d:5a:70:b2:f3:b8:60:cf:f2:84:05:07:
                    5b:74:b8:4a:9e:b1:f1:b7:5a:bc:d6:0a:b0:04:da:
                    97:23:fb:9f:d4:fd:6d:de:7b:67:7c:02:8b:a9:e0:
                    b9:d2:2b:68:42:e0:32:5e:46:2e:d9:2b:23:a3:85:
                    d9:9c:2e:81:f6:5f:53:48:62:97:3d:b5:a3:b0:a6:
                    50:6f:fb:bb:1f:8c:ce:9c:29:cb:d7:83:82:eb:80:
                    a3:79:a4:0f:ba:38:8c:82:45:65:36:12:69:7d:86:
                    bd:04:61:07:fc:28:e3:9d:37:81:33:d9:5f:ba:e5:
                    71:ee:8b:ad:63:9d:ee:1b:f1:7d:ae:39:89:26:9a:
                    7e:e5:bc:f5:4e:e3:82:fd:0c:6f:76:43:03:1c:85:
                    3b:75:b6:01:5b:8d:62:c2:aa:22:6f:06:74:d9:d5:
                    ca:97:6a:45:d9:c6:f1:36:35:10:66:06:5d:5a:29:
                    b7:d2:68:a0:04:23:0a:6f:b2:dc:fb:06:90:72:d1:
                    e3:40:e6:9a:65:ef:d3:60:89:a8:04:86:ac:64:75:
                    94:fe:ca:20:93:54:4f:69:17:06:5e:bc:98:4e:49:
                    e9:7d:3d:5a:d6:32:7d:28:a5:d9:85:f0:b0:df:46:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BA:E7:1B:08:78:4F:92:32:79:4C:BD:69:E8:33:F9:D5:D8:88:BA
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a31343a3a2f34382d3438203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:da4:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:75:1c:51:dc:4e:fd:bc:d3:f3:3c:c6:47:75:02:bc:d0:29:
         c9:39:bb:a2:56:d6:6e:e7:b0:f0:48:48:1d:07:03:4d:5b:07:
         2c:51:30:cf:13:90:c5:41:d9:53:32:52:fc:8f:fb:39:8e:ad:
         f5:5e:d6:dc:f0:ee:eb:42:14:30:8b:3f:36:74:8c:0c:bc:1a:
         8d:aa:7b:16:35:c1:90:46:12:3d:ad:a4:a3:aa:b2:4b:7e:05:
         be:09:e3:39:db:cb:60:32:4e:09:60:f2:3b:4c:fa:95:f2:6b:
         b9:ef:25:82:82:51:de:b3:a6:4a:81:ca:d7:b4:a3:b4:aa:b5:
         36:9d:d6:f8:61:f6:9f:8f:3f:a9:08:88:7b:9d:26:08:22:6b:
         57:29:2b:cb:2d:d9:a2:5d:bd:61:d3:a7:70:5b:2d:33:de:52:
         88:37:ce:5a:49:dd:b6:3b:3e:c6:62:a0:ec:95:47:0d:20:b1:
         6d:0b:c8:89:a9:14:ac:55:84:d9:1d:a4:2d:a5:e9:10:6b:13:
         08:6a:ef:e1:be:bf:53:b1:ff:4d:6a:d8:67:76:2b:70:5f:3f:
         d1:b7:ab:59:e8:88:4d:57:22:0a:f6:58:0d:b2:a9:58:63:f9:
         15:83:c8:f6:be:88:db:7f:35:e1:5f:87:80:a2:49:f0:00:6e:
         48:6c:57:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:07:02 2026 by rpki-client