Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a34303a3a2f34382d3438203d3e203237373230.roa
File:                     323830343a6461343a34303a3a2f34382d3438203d3e203237373230.roa (raw, json)
Hash identifier:          t0MfYwVtrsk5BAmQ3OI807o4QoqOQj0zV9MPlfi0XAM=
Subject key identifier:   87:87:B1:74:22:9F:21:26:FA:56:6B:C5:67:62:C6:89:B0:4B:EA:36
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       619DA935268A5BC5E594BF0CAD9D161E93B908F3
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a34303a3a2f34382d3438203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 20:08:03 +0000
ROA not before:           Thu 10 Sep 2026 20:03:03 +0000
ROA not after:            Thu 09 Sep 2027 20:08:03 +0000
asID:                     27720
IP address blocks:        2804:da4:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9d:a9:35:26:8a:5b:c5:e5:94:bf:0c:ad:9d:16:1e:93:b9:08:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 20:03:03 2026 GMT
            Not After : Sep  9 20:08:03 2027 GMT
        Subject: CN=8787B174229F2126FA566BC56762C689B04BEA36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:73:54:7d:44:56:03:09:b2:d0:d4:7c:b5:87:
                    b2:69:ef:18:5a:f7:4a:42:0b:29:5d:85:18:f1:7c:
                    37:11:56:56:6b:f5:21:f5:85:37:5a:29:2b:77:0d:
                    89:a1:42:84:8d:c9:5b:86:8a:4a:2a:21:30:0e:d1:
                    b7:7f:41:37:81:42:38:58:e1:76:17:74:c3:35:3b:
                    99:0f:2d:ea:8e:85:be:de:2f:7a:3c:6e:89:f1:bd:
                    c5:58:c1:c0:2b:a6:1d:42:c6:14:85:62:43:c7:9b:
                    fe:a2:2f:5b:16:a7:14:28:8b:6b:d8:5b:e3:45:8a:
                    d5:61:76:54:26:54:f1:4e:76:a1:31:9e:8d:c0:c2:
                    88:07:7f:dc:b2:9e:89:99:c0:32:64:3d:e1:f6:b8:
                    0c:75:a6:b0:79:4e:c6:98:2e:82:b6:ce:42:87:a5:
                    ff:e1:4b:fb:c8:a8:68:5e:f5:f9:1e:8a:9b:03:db:
                    21:58:1f:b6:c3:b4:d6:95:01:57:0f:78:76:eb:90:
                    dd:5a:bd:8f:3f:f0:59:3b:ab:44:1a:6e:15:92:a0:
                    8d:d1:2f:77:fb:a0:cd:a3:69:8e:77:10:65:87:a5:
                    6f:7a:45:93:cd:9d:0a:33:d0:bd:3b:57:e3:40:01:
                    1d:cf:d4:bd:e3:d5:38:6c:93:8f:d2:3a:fa:4a:d8:
                    a8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:87:B1:74:22:9F:21:26:FA:56:6B:C5:67:62:C6:89:B0:4B:EA:36
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a34303a3a2f34382d3438203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:da4:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:e9:54:70:50:6c:76:5a:fc:18:1c:66:0a:e7:30:13:5a:9f:
         7a:a4:65:2e:99:94:0c:69:6f:90:71:07:ea:05:bc:e8:f3:3c:
         8c:3d:c4:06:de:1e:e8:49:21:6e:69:95:48:8e:3a:1d:71:d3:
         93:dc:2c:36:67:3d:28:02:b6:db:79:ba:56:a1:bb:83:40:b8:
         9d:43:e0:56:d2:b6:60:b0:1f:f1:2c:9c:c0:e4:a6:f2:89:e6:
         2f:95:ca:67:e0:c5:75:2b:69:05:c5:c6:ff:52:01:e6:8e:43:
         3a:bd:33:43:2c:62:80:3e:ea:29:0c:e9:e1:76:eb:56:5d:29:
         2e:96:f1:6e:11:fa:ba:78:37:e9:dc:a8:e7:43:cd:d3:f4:8f:
         a5:8a:fd:12:71:d3:e8:90:39:88:aa:f0:e9:65:6b:65:70:85:
         ae:9a:b6:45:c1:e8:0f:22:bb:e9:eb:75:f8:db:e6:69:15:99:
         2d:4a:39:80:3e:1a:c6:16:cd:a3:14:32:49:13:8f:9f:4c:86:
         ba:d8:b1:4f:e7:d1:e6:fa:40:36:d1:3f:ba:35:b2:ea:93:27:
         b7:d2:15:12:c5:61:f0:e4:84:db:c0:4b:e4:83:c8:fd:9e:c8:
         a1:0a:e5:5b:16:56:37:93:9f:67:2b:e2:26:e1:c4:f7:4c:e1:
         1a:df:13:c0
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUYZ2pNSaKW8XllL8MrZ0WHpO5CPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZGNUNDRjc1RTgxOTRDOUU2NzFEMkQ5RjU1NzYxMUQy
NzJFMjg1NzAeFw0yNjA5MTAyMDAzMDNaFw0yNzA5MDkyMDA4MDNaMDMxMTAvBgNV
BAMTKDg3ODdCMTc0MjI5RjIxMjZGQTU2NkJDNTY3NjJDNjg5QjA0QkVBMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxc1R9RFYDCbLQ1Hy1h7Jp7xha
90pCCyldhRjxfDcRVlZr9SH1hTdaKSt3DYmhQoSNyVuGikoqITAO0bd/QTeBQjhY
4XYXdMM1O5kPLeqOhb7eL3o8bonxvcVYwcArph1CxhSFYkPHm/6iL1sWpxQoi2vY
W+NFitVhdlQmVPFOdqExno3AwogHf9yynomZwDJkPeH2uAx1prB5TsaYLoK2zkKH
pf/hS/vIqGhe9fkeipsD2yFYH7bDtNaVAVcPeHbrkN1avY8/8Fk7q0QabhWSoI3R
L3f7oM2jaY53EGWHpW96RZPNnQoz0L07V+NAAR3P1L3j1Thsk4/SOvpK2KiDAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUh4exdCKfISb6VmvFZ2LGibBL6jYwHwYDVR0j
BBgwFoAUdvXM916BlMnmcdLZ9VdhHScuKFcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjc2S2lGN05jRTdnQTJBOFdudUE2NWt6Nmc3Y1laaEt1cHd0c1B0bU13
elUvMC83NkY1Q0NGNzVFODE5NEM5RTY3MUQyRDlGNTU3NjExRDI3MkUyODU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2RjVDQ0Y3NUU4MTk0QzlF
NjcxRDJEOUY1NTc2MTFEMjcyRTI4NTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3NktpRjdOY0U3Z0EyQThXbnVBNjVrejZnN2NZWmhLdXB3dHNQdG1Nd3pVLzAv
MzIzODMwMzQzYTY0NjEzNDNhMzQzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzczNzMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBA2kAEAwDQYJKoZIhvcNAQELBQADggEBAGfp
VHBQbHZa/BgcZgrnMBNan3qkZS6ZlAxpb5BxB+oFvOjzPIw9xAbeHuhJIW5plUiO
Oh1x05PcLDZnPSgCttt5ulahu4NAuJ1D4FbStmCwH/EsnMDkpvKJ5i+VymfgxXUr
aQXFxv9SAeaOQzq9M0MsYoA+6ikM6eF261ZdKS6W8W4R+rp4N+ncqOdDzdP0j6WK
/RJx0+iQOYiq8Olla2Vwha6atkXB6A8iu+nrdfjb5mkVmS1KOYA+GsYWzaMUMkkT
j59MhrrYsU/n0eb6QDbRP7o1suqTJ7fSFRLFYfDkhNvAS+SDyP2eyKEK5VsWVjeT
n2cr4ibhxPdM4RrfE8A=
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:27:41 2026 by rpki-client