Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a31623a3a2f34382d3438203d3e203237373230.roa
File:                     323830343a6461343a31623a3a2f34382d3438203d3e203237373230.roa (raw, json)
Hash identifier:          O+pSiJuhBpYSPs1cZ840RRITSx05qZ14GaBropnn5pY=
Subject key identifier:   D4:D4:59:A2:CF:D5:3D:1D:BB:82:0D:09:BB:75:8E:54:DB:E0:61:68
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       664583850E55E4699044A6CBC9EFD6817ED5A1FD
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a31623a3a2f34382d3438203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 20:07:32 +0000
ROA not before:           Thu 10 Sep 2026 20:02:32 +0000
ROA not after:            Thu 09 Sep 2027 20:07:32 +0000
asID:                     27720
IP address blocks:        2804:da4:1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:45:83:85:0e:55:e4:69:90:44:a6:cb:c9:ef:d6:81:7e:d5:a1:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 20:02:32 2026 GMT
            Not After : Sep  9 20:07:32 2027 GMT
        Subject: CN=D4D459A2CFD53D1DBB820D09BB758E54DBE06168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:90:a6:c6:90:ca:15:b6:d0:09:44:a0:b5:
                    77:8f:d3:49:cd:19:2f:4f:0f:57:11:e5:99:2e:ce:
                    d5:66:79:b3:21:0e:ae:06:03:00:83:00:3a:ff:75:
                    ff:b9:94:be:d9:bc:12:1a:6e:ff:bb:d4:9c:49:84:
                    6e:7f:a0:10:bb:f7:e3:d9:9c:91:2f:bc:2d:93:25:
                    11:c6:7c:86:ba:3b:6d:38:28:ae:8d:f8:c2:cc:1f:
                    bd:30:d3:26:98:46:f1:73:bd:4d:e8:fc:a2:1a:27:
                    70:23:bf:b9:dd:7e:d6:6d:50:1f:15:1b:02:91:af:
                    37:0c:db:6c:93:3c:e9:25:b6:b5:12:58:2d:ce:3b:
                    ef:94:2d:cb:38:48:6a:0f:48:9a:da:c7:4c:7b:d8:
                    ad:02:6d:00:45:cf:2a:4e:08:70:bf:09:e2:3e:a6:
                    f1:b5:4c:f0:7a:d7:d5:e6:4e:03:56:ac:2f:88:53:
                    70:8c:58:09:e4:2a:24:f3:d4:34:10:88:99:f2:bf:
                    28:72:1b:8d:04:51:a4:d9:7d:60:20:89:a1:38:ae:
                    62:2a:52:2e:13:3d:3f:40:3d:63:63:5b:f2:a4:89:
                    6f:f6:1c:bc:9a:11:3d:14:01:4e:d8:99:f3:c0:b1:
                    46:28:f9:7f:9b:80:6a:a9:1b:e1:77:4a:11:e5:d3:
                    10:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D4:59:A2:CF:D5:3D:1D:BB:82:0D:09:BB:75:8E:54:DB:E0:61:68
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a31623a3a2f34382d3438203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:da4:1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:d4:d6:ca:1f:19:2b:13:fb:88:34:a0:f4:3b:f6:66:54:a8:
         30:4c:fc:2d:0b:9b:61:3b:4c:cb:6d:df:7d:bb:26:68:41:62:
         5e:ea:35:e1:b3:fa:20:e6:d6:61:a3:fa:8d:2f:77:b0:c2:49:
         3d:91:e7:61:c7:4d:1f:e9:27:65:69:7b:cd:ee:17:25:cc:08:
         2c:cc:db:8e:cf:6d:82:2b:82:e5:19:f0:f3:44:f1:9a:39:65:
         ec:c8:27:e9:3a:af:b9:52:4c:17:90:e7:8b:8f:0f:66:9f:f9:
         bd:87:4f:0a:8e:13:6b:69:11:45:29:6d:38:e4:01:e3:4f:1d:
         ed:9b:89:d0:99:4d:e7:68:35:bf:62:39:4b:37:92:75:3c:d4:
         0d:db:2e:a6:f5:49:ab:16:7c:c4:fd:cb:a4:33:6e:46:2b:1d:
         53:f2:9b:d4:ec:8c:4f:55:50:c9:18:8f:96:64:5b:53:ef:29:
         3a:ff:5d:eb:34:57:d9:51:c7:32:39:97:8f:84:96:a4:be:d2:
         61:8f:ef:81:3a:99:c9:f3:b9:a5:f1:66:fc:be:42:64:9d:51:
         01:b7:f3:fc:7a:b1:e5:77:e5:00:08:02:7d:e3:c1:c5:0c:ea:
         5c:2d:85:81:c0:1f:00:7f:1b:92:2b:06:f4:bc:59:67:83:44:
         29:4e:a5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:27:52 2026 by rpki-client