Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3137372e3132392e31322e302f32322d3232203d3e203237373230.roa
File:                     3137372e3132392e31322e302f32322d3232203d3e203237373230.roa (raw, json)
Hash identifier:          BfRafMOXEWBHaFNldyCmZ4/1A6sMqeXXi3iGTaQ+aHE=
Subject key identifier:   D0:C9:E9:6A:D3:FE:31:C5:6F:02:A5:32:99:D5:40:CD:50:9D:BF:3F
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       5883B581DC800FF4ACFD0F8EDD89F9A665B89AF3
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3137372e3132392e31322e302f32322d3232203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 19:42:45 +0000
ROA not before:           Thu 10 Sep 2026 19:37:45 +0000
ROA not after:            Thu 09 Sep 2027 19:42:45 +0000
asID:                     27720
IP address blocks:        177.129.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:83:b5:81:dc:80:0f:f4:ac:fd:0f:8e:dd:89:f9:a6:65:b8:9a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 19:37:45 2026 GMT
            Not After : Sep  9 19:42:45 2027 GMT
        Subject: CN=D0C9E96AD3FE31C56F02A53299D540CD509DBF3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f3:cb:3e:17:bd:48:c4:21:60:45:79:30:b4:
                    32:4f:e1:3d:de:6e:fa:28:15:45:7d:b3:7a:84:95:
                    3f:24:62:43:0e:79:45:d8:59:46:52:50:0a:7e:f3:
                    18:0e:be:bb:4f:8b:0a:a1:38:d0:7a:07:da:ba:78:
                    59:c9:e0:39:cd:a2:f7:b2:28:f7:d5:e0:6c:0b:c4:
                    f8:c6:25:b2:9f:c4:37:f8:11:5b:b1:f9:ee:de:91:
                    33:09:90:99:05:69:e0:66:2b:3b:96:c1:bf:2f:b9:
                    16:72:2f:c4:21:99:ba:19:67:49:3a:3f:94:40:60:
                    34:d2:60:a7:06:0e:76:2e:89:00:df:3f:61:fc:fb:
                    6b:f4:3f:be:46:03:c2:ed:5d:eb:c7:27:33:04:1a:
                    07:d4:09:8a:63:b4:c9:ca:89:00:63:cf:99:84:06:
                    b6:94:72:21:60:6d:45:2e:6b:76:64:c4:a0:0d:c2:
                    20:42:4d:98:e4:e0:4c:73:b7:c9:fd:3a:e5:dc:9c:
                    21:55:53:f6:a3:7a:1f:5f:67:54:b9:a5:4e:7e:56:
                    23:42:5b:7f:a3:47:05:1c:66:ec:11:e4:3b:e9:57:
                    13:ee:0c:62:6b:b7:dd:e7:32:64:a9:93:53:24:bb:
                    09:9f:c2:f5:96:19:81:1b:2c:b4:d5:05:2f:9b:6f:
                    1e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C9:E9:6A:D3:FE:31:C5:6F:02:A5:32:99:D5:40:CD:50:9D:BF:3F
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3137372e3132392e31322e302f32322d3232203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:66:26:5c:ef:91:2e:65:a4:a2:4d:d1:e7:53:21:57:60:0e:
         47:7f:cf:bd:34:cd:89:18:90:df:f1:b0:e1:3d:90:3f:50:40:
         63:de:6b:0f:68:26:26:0b:48:1f:49:a9:3b:f4:d6:5f:df:97:
         e0:d5:12:78:91:5e:05:d7:6d:f4:24:52:3d:b1:7a:c8:87:af:
         2e:6e:11:5c:a6:76:ed:50:8b:66:e4:fa:93:8c:aa:01:5a:68:
         d4:29:1b:11:b3:ee:e3:23:c1:b2:78:b1:bc:1a:fa:89:82:f7:
         c5:a0:f3:ab:33:aa:b2:0f:86:57:1c:4d:8a:ab:e6:44:47:c0:
         48:88:7f:fd:44:37:ca:23:a8:9a:54:fb:43:01:43:2d:31:c2:
         8e:4e:7c:45:38:45:fb:dd:7f:13:6e:1e:f3:80:4a:3a:23:8b:
         9d:13:41:de:d7:55:74:a5:4e:55:c7:90:6b:ec:6a:45:ae:e5:
         97:d1:33:a2:96:53:ee:b4:f5:4d:fa:26:6e:73:7e:d9:bf:b9:
         a3:e1:16:09:f0:e7:1e:6c:31:b5:85:d8:ed:b6:9a:8d:02:b3:
         1a:2f:c9:1d:b6:da:37:a5:53:f0:76:0d:42:ef:bc:32:f3:63:
         26:ba:83:40:98:03:f7:4f:01:1f:84:66:f3:02:a2:a7:1a:32:
         8e:55:76:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:29:29 2026 by rpki-client