Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a37623a3a2f34382d3438203d3e203237373230.roa
File:                     323830343a6461343a37623a3a2f34382d3438203d3e203237373230.roa (raw, json)
Hash identifier:          W//os+K2Ayjr+q3E27wD3EIyh0hvQogO2X4nzmVPW3Q=
Subject key identifier:   E0:C2:4C:F3:58:E1:F0:7D:42:76:E2:E8:28:28:27:1E:07:3D:50:EB
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       72F44AD4AEFAE5A948365130B35C8EF3DD7F1330
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a37623a3a2f34382d3438203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 20:09:48 +0000
ROA not before:           Thu 10 Sep 2026 20:04:48 +0000
ROA not after:            Thu 09 Sep 2027 20:09:48 +0000
asID:                     27720
IP address blocks:        2804:da4:7b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 23:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f4:4a:d4:ae:fa:e5:a9:48:36:51:30:b3:5c:8e:f3:dd:7f:13:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 20:04:48 2026 GMT
            Not After : Sep  9 20:09:48 2027 GMT
        Subject: CN=E0C24CF358E1F07D4276E2E82828271E073D50EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:da:d4:b4:94:ce:db:06:8a:74:02:db:31:
                    5d:66:f7:bf:9e:82:8c:8e:29:98:cd:dc:85:19:1b:
                    a8:d1:83:89:ad:36:8e:4a:a8:ab:ae:2e:95:dd:9d:
                    12:aa:a9:08:78:b1:57:ab:0f:ab:91:d4:2a:50:52:
                    ef:44:7d:81:7c:32:5d:49:c7:98:8a:a3:f5:92:f6:
                    10:7f:aa:75:4b:72:a2:f6:ce:e4:88:c5:69:fa:96:
                    1a:da:b5:d4:6a:bd:28:4f:2b:5b:9a:3c:b1:ff:6e:
                    e9:9e:90:a2:21:a8:55:c6:39:77:8e:e6:e1:c1:06:
                    2d:01:8c:e6:12:2b:27:57:17:8a:d9:46:ff:3a:1a:
                    c2:8b:d4:ac:01:46:3b:d6:2e:1c:92:7e:9d:4d:b7:
                    b3:dd:03:6e:91:50:62:ce:6b:50:58:dd:66:af:be:
                    a5:c7:91:c6:7e:c8:67:77:00:38:25:be:54:bb:d5:
                    d4:6f:a9:da:8e:b0:95:44:d6:26:eb:99:aa:f9:31:
                    86:c6:7e:cf:f7:73:b0:bf:f8:f9:8a:ca:36:16:ef:
                    99:1d:02:0b:b6:f7:0a:3a:2e:ad:bb:d2:ac:07:f6:
                    80:59:60:03:85:a5:48:bf:7b:8f:7e:2a:aa:3a:4c:
                    8b:5e:03:03:1c:24:ee:45:2f:f4:4e:df:77:0e:16:
                    0c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C2:4C:F3:58:E1:F0:7D:42:76:E2:E8:28:28:27:1E:07:3D:50:EB
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a37623a3a2f34382d3438203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:da4:7b::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:5c:8b:b7:9a:db:3b:8b:a9:1c:85:b1:9e:ac:99:b9:0e:67:
         b1:2a:a3:5e:d5:a4:34:49:5b:0c:f1:14:0e:9e:7a:e6:ab:f4:
         56:41:88:11:6f:67:56:6a:3d:06:79:80:99:df:c9:52:e3:a0:
         4e:41:7c:ad:b4:6a:ac:3b:c2:4d:c8:80:39:3d:02:86:13:99:
         18:8c:3f:e4:0d:b8:01:18:da:3b:e8:e5:3f:c3:4c:c7:04:8a:
         fa:37:13:88:69:2b:56:9d:59:c7:26:a5:bb:5a:fd:9a:1b:b2:
         4a:00:dd:db:b9:9a:85:39:8e:17:a7:c4:58:6f:ca:ab:0a:d7:
         93:cd:06:4c:fb:d7:5c:b0:c0:d0:41:4f:5e:a0:78:7f:87:29:
         e3:fe:ed:27:42:2f:08:92:c9:be:95:07:4c:0b:57:6b:ac:6d:
         fe:60:34:71:02:6a:a3:55:c5:93:ac:58:31:bb:44:a5:c5:a5:
         fb:ff:e0:20:c9:04:3e:19:ed:b9:51:ac:a4:8e:4d:be:b6:15:
         62:1c:1f:7d:10:82:e0:72:04:2d:46:d4:d6:2a:f6:e6:88:d0:
         4c:66:ed:8e:d5:7c:b4:e6:8b:75:4d:40:c9:84:08:eb:d0:1a:
         a8:3b:83:61:4a:f8:16:49:11:fb:d3:27:7d:d6:39:e5:13:e8:
         a1:98:a4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:06:47 2026 by rpki-client