Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a36303a3a2f34382d3438203d3e203237373230.roa
File:                     323830343a6461343a36303a3a2f34382d3438203d3e203237373230.roa (raw, json)
Hash identifier:          uK232hNxBArg11mAuqPhYWNhbNJ2Eh+XcMhWYo/Hdv8=
Subject key identifier:   9C:42:1A:83:F3:3F:4F:58:8C:9E:89:C1:18:BA:02:65:EA:C7:31:E3
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       34B86A9D6EB640EB23D69BC20DC1FD690F0704ED
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a36303a3a2f34382d3438203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 20:09:38 +0000
ROA not before:           Thu 10 Sep 2026 20:04:38 +0000
ROA not after:            Thu 09 Sep 2027 20:09:38 +0000
asID:                     27720
IP address blocks:        2804:da4:60::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b8:6a:9d:6e:b6:40:eb:23:d6:9b:c2:0d:c1:fd:69:0f:07:04:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 20:04:38 2026 GMT
            Not After : Sep  9 20:09:38 2027 GMT
        Subject: CN=9C421A83F33F4F588C9E89C118BA0265EAC731E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d6:36:c1:a4:28:6c:e3:78:b4:91:e9:30:23:
                    4c:6c:eb:48:be:50:b1:f4:a2:68:19:28:22:f7:5c:
                    bc:3a:29:1f:4d:95:16:3b:05:57:7b:0f:d8:29:64:
                    a9:48:b3:5b:ce:f9:f0:11:7f:b9:a8:38:45:e7:04:
                    9f:fb:f2:6a:aa:d8:67:1f:8b:56:93:99:bf:a9:30:
                    d5:23:11:28:0f:30:aa:6b:82:dd:3f:a3:8e:d3:8e:
                    6e:80:d1:c4:85:45:9f:f4:92:92:7b:de:bf:03:c4:
                    70:d1:eb:2a:9d:67:62:b6:5f:c7:36:d4:f1:67:0e:
                    cb:9b:32:59:5a:f7:52:59:ed:7b:0e:5c:6c:fb:ff:
                    86:66:55:2f:42:47:9f:4c:05:f4:9c:6f:b1:3f:dd:
                    a3:10:43:09:4b:69:4f:46:4d:e1:52:0f:3f:e7:e2:
                    27:51:eb:30:e1:fc:a0:70:9d:36:8a:a0:da:1b:8f:
                    43:8d:36:da:c0:99:8a:9c:d9:ef:f8:ef:c4:00:f6:
                    91:29:bc:e4:4c:5c:95:38:7c:e4:72:f9:47:35:a7:
                    1d:56:a2:e9:c7:9e:53:3e:2e:f0:dc:f4:ae:03:1f:
                    b9:02:e0:10:4d:78:88:f4:68:08:e8:a3:18:c3:e3:
                    3b:b8:cc:3c:a6:9a:67:53:a0:87:2f:d2:9b:48:0e:
                    a0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:42:1A:83:F3:3F:4F:58:8C:9E:89:C1:18:BA:02:65:EA:C7:31:E3
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a36303a3a2f34382d3438203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:da4:60::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:39:62:15:d8:1d:ac:59:de:c2:74:89:e2:f3:17:a5:fa:d0:
         45:1c:64:42:d2:7d:89:93:1c:b9:53:e4:b6:f7:2d:87:cc:9d:
         3f:8d:5a:eb:2b:ca:09:8e:d3:67:3d:94:60:fd:ab:0e:b8:c9:
         22:f7:9a:7d:ad:14:69:4c:64:a2:ea:f3:9d:11:3d:b9:38:bd:
         0c:e3:f0:76:1c:30:de:92:49:6b:48:48:6b:97:c3:c5:bb:99:
         af:62:8b:fc:a6:3c:2c:58:57:bf:ea:9a:23:ba:f6:07:d3:5f:
         42:69:61:5c:63:a3:a9:b5:8b:3c:b1:ca:1e:14:aa:55:41:51:
         81:cb:6a:06:2f:19:54:cb:4b:d7:69:81:d8:5e:3e:d1:93:1e:
         e9:17:d6:48:20:c8:d6:ad:42:bf:2a:25:a2:85:c7:bb:a1:82:
         65:89:30:25:b0:64:ac:7c:56:72:0f:c2:3e:47:95:31:a1:15:
         f0:07:f0:47:a8:09:ef:9e:2b:98:ed:f6:bc:72:cc:7c:62:11:
         a8:c7:2c:77:63:b8:a5:1e:cd:b5:d7:20:a0:39:a9:ff:26:fb:
         57:06:79:cd:96:93:0a:20:c9:58:d1:57:c6:ac:4b:fb:5e:db:
         9e:01:79:47:bd:03:a3:65:61:33:83:09:a5:ab:de:b6:3b:af:
         2f:5c:32:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:27:28 2026 by rpki-client