Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3134332e3230382e3135392e302f32342d3234203d3e203237373230.roa
File:                     3134332e3230382e3135392e302f32342d3234203d3e203237373230.roa (raw, json)
Hash identifier:          rb59kvlmPZtWdUHTAjnOQNXu+Qyib5UxDC8O+ADDgKE=
Subject key identifier:   EE:B8:94:3C:35:CA:31:D6:28:80:73:E4:0C:A9:B1:44:44:61:9A:A3
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       6F030296F3946C6324FE8474C78F9709EFD518A0
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3134332e3230382e3135392e302f32342d3234203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 19:41:25 +0000
ROA not before:           Thu 10 Sep 2026 19:36:25 +0000
ROA not after:            Thu 09 Sep 2027 19:41:25 +0000
asID:                     27720
IP address blocks:        143.208.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 06:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:03:02:96:f3:94:6c:63:24:fe:84:74:c7:8f:97:09:ef:d5:18:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 19:36:25 2026 GMT
            Not After : Sep  9 19:41:25 2027 GMT
        Subject: CN=EEB8943C35CA31D6288073E40CA9B14444619AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:e9:70:cd:6f:b4:29:72:68:1c:31:7f:89:
                    fb:b7:12:a1:c5:74:09:fc:1e:50:b9:8c:85:7c:f1:
                    1d:2a:29:e2:4f:54:70:04:50:f4:96:8c:ba:24:96:
                    15:3f:8b:d4:c9:a1:1d:94:85:a1:29:36:f1:8b:74:
                    77:70:93:2b:67:b5:0e:a9:d3:d8:13:10:34:c3:6d:
                    e7:7d:16:16:19:38:ac:24:16:b7:11:59:f5:9a:dc:
                    6c:8b:19:f1:0e:5d:9a:54:45:8f:3f:dd:3b:ed:65:
                    30:8f:74:ff:51:ab:87:04:e8:68:b3:37:fb:47:72:
                    f7:e2:2c:c0:a0:be:1b:be:20:d7:ba:9d:c3:1c:29:
                    33:b9:6f:4e:9c:ef:94:3a:51:71:0f:f9:9c:6a:94:
                    5d:3c:61:54:46:75:77:01:7f:51:fb:52:b8:13:34:
                    15:c0:39:9c:99:a7:18:53:90:4d:67:f6:42:db:ec:
                    bc:5d:98:b6:64:4f:55:63:da:2f:5b:80:cb:3c:90:
                    a9:a0:cc:a9:8d:5a:77:25:b3:d0:7d:39:88:ff:80:
                    fe:be:29:88:fb:40:dc:b1:85:84:ad:d7:33:6d:0e:
                    3b:99:5f:98:29:8e:2d:ea:7b:4f:1e:2e:af:d1:d3:
                    c6:0e:2e:45:22:06:a0:3f:0b:92:57:96:ba:2c:2b:
                    cb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B8:94:3C:35:CA:31:D6:28:80:73:E4:0C:A9:B1:44:44:61:9A:A3
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3134332e3230382e3135392e302f32342d3234203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:50:35:66:35:71:2e:e5:b5:6e:15:b1:35:62:2d:fe:24:a8:
         52:d1:f0:d2:96:b5:88:4e:08:93:c0:70:a7:70:01:e2:4a:18:
         c9:d5:f5:9b:48:5e:4a:44:76:57:06:84:4a:3c:54:42:3b:a2:
         7e:56:b5:c2:d4:0c:1d:99:65:fe:24:b2:91:25:e8:4a:91:86:
         3f:aa:70:34:30:7c:d3:93:d8:9b:c7:a7:c2:bc:88:1e:33:63:
         63:fd:eb:81:9f:ab:67:9d:58:a9:29:b9:f2:60:ed:0c:b0:3a:
         68:92:29:68:d4:94:c2:d9:a3:0d:a7:00:27:98:4e:d7:e1:18:
         11:40:5b:15:85:8d:4f:be:ef:44:f7:50:c3:fe:d1:5c:2b:dd:
         6e:4c:50:54:f9:18:38:1f:67:4c:4d:d8:d4:18:ef:00:15:af:
         07:25:04:29:6f:5a:c2:5e:84:fa:26:58:26:6d:d0:f1:7d:c4:
         dd:f9:ca:3d:50:7c:ef:39:84:b0:2e:5d:db:1a:b1:d0:cc:b2:
         12:96:86:24:46:20:c1:d4:ad:d5:8b:57:dd:f6:a6:93:04:8f:
         64:b1:0c:35:77:fe:fa:16:5b:c0:bc:d1:18:34:75:f9:be:87:
         68:9d:8f:bb:21:52:9d:7d:0e:c9:d0:2e:63:5e:5b:c5:f7:aa:
         e8:8a:5e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:41:45 2026 by rpki-client