Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a35633a3a2f34382d3438203d3e203237373230.roa
File:                     323830343a6461343a35633a3a2f34382d3438203d3e203237373230.roa (raw, json)
Hash identifier:          99wHIdsHUEuBG2tb7cn4pp6siw3zk6Gvm+f70m5NBIE=
Subject key identifier:   D2:19:C3:55:36:C3:AC:6C:31:BD:E0:CA:1A:51:CA:FD:AF:56:CB:6E
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       3896C0F7523E142E4CD472778EDAC25FAED55AB7
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a35633a3a2f34382d3438203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 20:09:17 +0000
ROA not before:           Thu 10 Sep 2026 20:04:17 +0000
ROA not after:            Thu 09 Sep 2027 20:09:17 +0000
asID:                     27720
IP address blocks:        2804:da4:5c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 06:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:96:c0:f7:52:3e:14:2e:4c:d4:72:77:8e:da:c2:5f:ae:d5:5a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 20:04:17 2026 GMT
            Not After : Sep  9 20:09:17 2027 GMT
        Subject: CN=D219C35536C3AC6C31BDE0CA1A51CAFDAF56CB6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:98:41:0d:92:ab:a1:af:57:1c:52:90:f1:bc:
                    2d:ad:0b:23:1c:d1:45:a4:49:46:57:0a:68:b2:d2:
                    46:9f:1a:94:67:a4:67:92:6d:cc:7c:89:22:fd:a2:
                    fe:86:5b:06:a4:10:ba:e0:44:de:c3:70:82:60:73:
                    0b:b5:b4:60:ab:44:0a:a8:e9:72:79:6d:0b:01:99:
                    22:ce:13:7f:2f:e2:de:98:61:c5:8c:cd:c1:ae:f1:
                    c5:39:62:65:3c:b8:55:c2:22:42:43:b5:d8:71:b9:
                    bb:8f:38:71:3e:54:6a:55:95:02:2c:1b:69:f6:4e:
                    70:65:1f:71:7a:ec:46:9b:fd:64:5c:02:4c:7f:9e:
                    ac:87:dc:11:f8:15:cb:0a:24:dd:59:2d:f6:b3:3a:
                    ff:0a:da:98:3b:24:ee:ab:78:e5:90:d0:94:5f:01:
                    7a:9f:09:1a:f1:9e:e5:0c:b7:36:69:4c:59:a0:00:
                    a2:08:f0:84:70:3a:20:a3:eb:39:d1:b3:8e:2f:8a:
                    b0:97:76:3f:1c:db:07:e3:c1:a5:f1:56:3d:c1:de:
                    0e:9e:10:49:1c:5e:42:4c:ae:8a:4e:6e:49:ef:27:
                    ef:1d:ba:e8:f7:b7:12:b9:e8:3e:8f:43:68:5a:4f:
                    ac:94:4c:bf:d2:e2:dd:98:3b:4b:36:8a:b9:e1:65:
                    85:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:19:C3:55:36:C3:AC:6C:31:BD:E0:CA:1A:51:CA:FD:AF:56:CB:6E
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a35633a3a2f34382d3438203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:da4:5c::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:5c:7b:cb:bf:3d:1d:bf:e5:43:01:cc:a7:f6:1d:1e:7b:2f:
         9d:78:92:04:35:aa:91:e9:d6:83:71:1b:c9:49:26:cf:48:47:
         2c:ac:ed:88:5b:15:36:31:5d:c2:68:da:ed:18:5f:f4:2a:64:
         4a:14:9d:cb:38:86:7a:39:1f:d8:58:1f:c0:4a:c1:03:2d:bd:
         9d:79:7a:18:43:20:4c:20:61:13:30:82:54:27:ae:01:d3:9b:
         ab:5a:c7:af:fc:6e:6c:65:be:98:dd:54:fb:b9:75:34:75:4b:
         de:55:12:2e:16:69:fb:ae:4d:1f:3a:b2:d8:42:5e:ea:b4:1d:
         43:48:5b:06:e5:d1:1a:0f:40:f2:6c:b6:5c:a5:ac:ec:70:65:
         19:6e:33:4f:e4:d6:96:2a:0b:f9:6f:fc:32:30:94:4a:47:0d:
         36:cf:28:00:aa:55:eb:dd:c9:d4:ca:04:00:30:54:36:80:6a:
         a5:fd:13:24:79:16:49:b4:89:0d:6d:a2:d6:60:ee:d8:24:04:
         15:5c:33:a1:bc:92:13:9e:9c:ae:e6:f3:ff:b3:20:e4:82:94:
         32:bc:6c:2e:c1:df:56:e1:95:56:96:de:8d:4f:70:f7:b6:d4:
         a8:50:a8:c0:d8:de:c3:b6:2c:38:cf:63:62:86:d5:83:dd:3b:
         74:b6:44:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:06:49 2026 by rpki-client