Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a61343a3a2f34382d3438203d3e203237373230.roa
File:                     323830343a6461343a61343a3a2f34382d3438203d3e203237373230.roa (raw, json)
Hash identifier:          548zMtAiyBno8ZOTwvlWLuJChYqOl2+3NSmMbbrF5oQ=
Subject key identifier:   F6:9C:07:42:CC:E9:F1:F7:D9:FA:A6:14:0A:66:CD:AE:CB:C8:CA:9C
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       252A1402FC40CD5A0AECACE83902A7D1460DBEDE
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a61343a3a2f34382d3438203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 20:09:58 +0000
ROA not before:           Thu 10 Sep 2026 20:04:58 +0000
ROA not after:            Thu 09 Sep 2027 20:09:58 +0000
asID:                     27720
IP address blocks:        2804:da4:a4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2a:14:02:fc:40:cd:5a:0a:ec:ac:e8:39:02:a7:d1:46:0d:be:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 20:04:58 2026 GMT
            Not After : Sep  9 20:09:58 2027 GMT
        Subject: CN=F69C0742CCE9F1F7D9FAA6140A66CDAECBC8CA9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:f0:c7:22:b3:ca:79:3d:fc:b6:f7:ea:ff:57:
                    cb:e6:34:98:9b:6d:ca:de:ad:d6:97:e1:01:58:d7:
                    9a:2f:d0:42:4d:df:d1:7a:57:ca:b7:41:2e:4a:ec:
                    bc:99:cf:a5:97:6e:6e:74:7e:26:c3:31:13:35:55:
                    f8:ba:9b:e1:cc:7a:f1:22:32:97:60:66:3b:f7:be:
                    26:95:3f:74:8d:c1:4b:75:3c:ff:2e:e8:f8:ec:35:
                    65:1d:14:75:a8:3d:c8:54:47:85:c8:20:dc:74:2d:
                    e1:86:33:fb:cb:08:52:d4:fe:38:f4:ea:00:ca:94:
                    42:ce:d1:f6:1e:53:fa:23:7a:92:ed:47:60:02:9f:
                    1e:9c:ea:fe:aa:38:33:5d:c8:a8:f0:93:38:49:7a:
                    06:1d:70:76:35:34:ae:39:e5:bb:b2:0d:b7:89:9e:
                    12:1f:df:06:04:f0:eb:18:9a:4e:86:a5:5d:d9:33:
                    4d:da:27:85:da:b9:50:f3:da:ae:93:28:f9:43:35:
                    13:ec:f4:d5:86:29:eb:ae:1a:c4:40:c5:5d:09:e3:
                    92:2d:7d:42:71:6b:48:1e:31:3b:9a:d5:d4:80:c7:
                    7a:cf:ab:ea:ee:8e:8a:00:94:7e:8b:54:94:3e:30:
                    eb:0a:2c:61:04:f3:e8:d0:b3:9b:7e:49:ce:cd:86:
                    16:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9C:07:42:CC:E9:F1:F7:D9:FA:A6:14:0A:66:CD:AE:CB:C8:CA:9C
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a61343a3a2f34382d3438203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:da4:a4::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:eb:ec:ad:64:be:de:9e:46:5c:43:8d:43:f3:88:5d:7d:64:
         6a:8e:86:40:23:69:8b:84:3d:bc:93:59:06:6b:a9:0c:20:e3:
         2b:dd:94:58:4e:18:d3:7d:78:a0:99:f5:bf:4f:30:ed:b7:bd:
         6c:2c:e5:b4:a6:f1:d1:1f:15:cb:e1:45:ef:5f:17:ac:61:88:
         8a:85:66:8d:f5:a6:96:17:a6:f5:06:f5:4e:b8:2f:3b:06:b5:
         52:56:62:90:dc:2f:ba:50:81:ed:b4:d0:ce:3a:3f:d2:52:50:
         6e:95:c7:45:44:a1:23:c5:ae:d3:2c:0e:d3:28:a7:64:03:9d:
         b8:75:35:91:ed:28:db:8b:98:b8:f1:f0:9d:aa:de:a6:c8:23:
         b6:2e:29:55:ae:ca:54:a2:fd:ce:cf:0c:da:6a:e5:8c:07:71:
         9d:55:a4:b2:74:d3:92:5b:ee:03:23:c3:9a:fc:e2:1a:5e:8e:
         8a:e0:c8:97:e0:bb:2d:44:b3:4b:32:db:5b:32:93:b2:24:c8:
         73:03:40:10:ad:27:6f:35:6b:d9:8c:c3:36:95:7f:f3:1f:3a:
         b8:12:87:6d:de:cc:a5:fd:ad:c8:27:7b:73:6a:f0:58:ea:a3:
         a0:93:34:ca:53:9a:04:68:90:cf:c2:af:66:61:50:a3:19:47:
         2b:69:fb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:27:15 2026 by rpki-client