Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a35613a3a2f34382d3438203d3e203237373230.roa
File:                     323830343a6461343a35613a3a2f34382d3438203d3e203237373230.roa (raw, json)
Hash identifier:          tysj0E/773AqFhLoD3mj/MbKBQskVf613GpiPtSe0Ww=
Subject key identifier:   5C:4A:F9:99:7A:B4:96:C7:D9:90:88:2C:7A:FD:6D:74:67:D4:02:91
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       22C178808C1982EB9B8D8C9E1899212B58681DC5
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a35613a3a2f34382d3438203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 20:09:12 +0000
ROA not before:           Thu 10 Sep 2026 20:04:12 +0000
ROA not after:            Thu 09 Sep 2027 20:09:12 +0000
asID:                     27720
IP address blocks:        2804:da4:5a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c1:78:80:8c:19:82:eb:9b:8d:8c:9e:18:99:21:2b:58:68:1d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 20:04:12 2026 GMT
            Not After : Sep  9 20:09:12 2027 GMT
        Subject: CN=5C4AF9997AB496C7D990882C7AFD6D7467D40291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1a:72:56:cd:89:a4:08:c8:84:36:10:a6:04:
                    92:4e:e3:57:44:9a:f5:6c:9c:9f:46:82:9b:5c:06:
                    b0:41:b9:c2:55:0b:41:c1:83:07:82:d8:2b:8e:73:
                    d5:f2:2e:7a:cf:f7:92:af:39:03:96:10:93:0f:00:
                    6e:7c:33:9a:eb:93:22:dc:79:39:d1:f9:2f:33:39:
                    14:d6:65:9b:2b:38:94:43:70:58:c1:5a:4d:86:4e:
                    57:a0:09:4c:6c:ab:6f:a0:b1:4d:63:4a:ee:98:59:
                    45:b9:fa:20:f5:60:0e:d1:7d:61:a8:4f:66:f1:37:
                    64:30:65:72:02:28:69:82:6b:af:e4:6b:64:af:2e:
                    c5:0f:b0:40:29:95:27:9e:8d:69:79:86:30:2e:63:
                    4d:31:ce:d7:5a:78:f1:41:86:8e:5a:83:95:64:f2:
                    d9:fa:64:fd:c9:7b:db:e3:17:24:db:a9:d6:2e:7d:
                    a7:70:1c:3f:c3:18:79:4d:6d:5d:e5:59:59:97:91:
                    f8:31:ca:85:68:c7:28:ca:3a:e7:c7:96:75:d9:2b:
                    1e:bc:df:df:cc:6a:18:32:18:39:23:0f:9f:1e:0b:
                    59:db:23:f3:dd:4f:95:65:04:ed:60:b1:6b:3f:65:
                    5b:71:65:5e:59:50:4f:18:73:fe:8b:c0:2f:d7:c2:
                    8c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4A:F9:99:7A:B4:96:C7:D9:90:88:2C:7A:FD:6D:74:67:D4:02:91
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a35613a3a2f34382d3438203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:da4:5a::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:9a:d4:a7:9a:a9:2e:ba:e2:3b:fc:44:96:2e:01:e8:9c:11:
         de:5a:fd:7a:6e:1f:22:e2:f9:1b:8f:61:98:86:a0:e5:4c:20:
         6c:fa:e3:8e:21:31:8e:35:cc:2c:41:4f:37:66:21:81:17:e6:
         e0:c1:9d:3b:b0:61:c7:85:9a:10:ff:69:10:18:01:22:7d:02:
         34:64:7d:4d:de:7d:5c:ce:75:33:48:fc:dc:7f:1f:fc:86:f5:
         5a:3b:3a:d3:d2:f4:f6:9b:14:26:52:41:96:cf:52:f8:3c:0e:
         a3:08:2d:3e:9b:a3:b3:0a:ec:ff:b8:37:ed:61:69:c2:19:e5:
         c6:a4:21:e8:ed:65:a0:75:a7:e2:92:e6:88:a7:ee:ca:a0:b9:
         df:bd:3d:a4:73:6f:81:2c:42:38:56:1d:88:fc:64:29:cd:d0:
         36:0e:78:88:e8:e3:db:80:ab:91:d3:c8:8f:a1:bc:c8:99:fc:
         5b:e4:6f:01:da:99:04:3e:9a:58:d6:2c:b4:f3:34:9f:3f:bb:
         87:23:fa:52:f3:30:62:13:c9:5c:06:55:6f:79:10:83:aa:f4:
         c0:1c:18:a5:10:e9:77:cd:2a:c8:1e:28:df:9e:9e:f5:01:0b:
         4e:ea:72:41:de:10:cf:d9:e2:a8:6e:1f:76:b2:27:f2:98:29:
         98:8d:8a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:27:56 2026 by rpki-client