Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a35643a3a2f34382d3438203d3e203237373230.roa
File:                     323830343a6461343a35643a3a2f34382d3438203d3e203237373230.roa (raw, json)
Hash identifier:          79zZb21fEvqirqSqcIOmcDj3O09A72uOitoSqtOS/vw=
Subject key identifier:   4F:D2:70:CC:F8:3A:20:2F:DB:5B:EE:50:C7:6D:8C:B8:2E:48:AD:D7
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       486A4B00D82C56D511982D036BBBEB8C3C6ED2B5
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a35643a3a2f34382d3438203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 20:09:21 +0000
ROA not before:           Thu 10 Sep 2026 20:04:21 +0000
ROA not after:            Thu 09 Sep 2027 20:09:21 +0000
asID:                     27720
IP address blocks:        2804:da4:5d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 06:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6a:4b:00:d8:2c:56:d5:11:98:2d:03:6b:bb:eb:8c:3c:6e:d2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 20:04:21 2026 GMT
            Not After : Sep  9 20:09:21 2027 GMT
        Subject: CN=4FD270CCF83A202FDB5BEE50C76D8CB82E48ADD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:20:82:66:90:20:6b:60:c1:9e:e7:a9:81:
                    9a:00:34:34:83:bb:bb:ca:02:4d:95:c6:b2:00:8b:
                    c7:33:1d:27:b1:b6:5c:94:35:81:eb:f5:66:5b:55:
                    ea:2b:3e:88:f3:a9:37:8d:35:0e:57:af:ce:ed:e6:
                    04:9d:d4:a7:0f:ea:8a:1c:5a:78:b6:5b:bb:59:b0:
                    ca:60:6a:cf:98:16:c1:11:30:6e:cf:ad:79:23:dc:
                    25:37:a1:63:4a:f0:14:5a:87:7e:b3:fd:7d:b8:60:
                    34:9e:35:1c:9e:a8:3c:17:0a:95:5b:1c:bd:10:c8:
                    4e:00:d7:dd:a0:c9:d9:57:cc:2f:53:ae:e7:ab:14:
                    2d:41:d1:ea:98:e7:39:6e:61:ee:ef:78:81:19:c6:
                    1b:1c:c6:7f:b7:49:26:53:0c:93:10:14:8b:e1:de:
                    a0:15:2a:d5:9f:fd:e3:91:6f:37:95:59:a9:7f:06:
                    20:d5:e3:61:77:cb:f6:f1:98:28:79:71:a4:8d:0c:
                    18:40:f4:cc:bd:b2:38:0f:52:27:d6:10:2f:a8:52:
                    db:64:66:2b:8a:0d:8e:88:8e:ab:13:90:77:6c:1d:
                    fb:85:9b:ff:4a:7f:51:1d:4b:1d:57:0e:92:04:38:
                    cf:6b:64:68:36:12:3a:13:38:ff:0b:bc:13:45:1f:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D2:70:CC:F8:3A:20:2F:DB:5B:EE:50:C7:6D:8C:B8:2E:48:AD:D7
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a35643a3a2f34382d3438203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:da4:5d::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:63:d1:9e:e9:e6:5f:87:59:d2:1f:cf:2d:39:70:c7:16:3b:
         ea:f7:77:dc:bf:35:b6:63:e8:84:75:0e:48:d7:0a:b5:ad:24:
         1e:94:4e:2b:cb:07:76:3e:46:dd:45:88:b1:a3:19:af:86:26:
         a3:84:78:ef:7c:04:25:a9:b6:20:1a:34:1f:3f:eb:79:4f:0b:
         79:fa:4f:f4:1c:78:68:7b:49:15:1d:b9:d0:d7:7b:63:1d:5c:
         44:81:80:33:40:58:db:ba:24:7d:6d:27:bb:c9:a6:26:c2:09:
         e1:27:68:98:09:10:a9:9c:79:5a:80:bf:c9:8e:70:4e:40:80:
         e8:66:1c:da:c0:a2:97:64:33:a1:d6:92:b2:15:6c:f0:43:90:
         53:f8:be:2d:c2:45:7a:11:06:90:c5:c2:22:79:f2:bb:25:28:
         35:04:64:ac:b8:24:09:be:ed:15:66:81:28:f9:98:42:cd:bd:
         4a:de:96:19:bc:eb:4b:07:bb:0e:60:16:e1:1c:51:15:4e:1b:
         0e:de:fd:6c:e5:58:85:7f:81:c0:a5:52:d7:13:d6:c3:cb:6f:
         0e:c1:52:5f:42:7a:33:b2:91:c3:ab:42:96:ae:99:55:a0:d3:
         40:67:78:56:f1:dc:0e:83:58:44:3e:cc:50:2d:3b:d2:e6:f9:
         06:42:e2:a4
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUSGpLANgsVtURmC0Da7vrjDxu0rUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZGNUNDRjc1RTgxOTRDOUU2NzFEMkQ5RjU1NzYxMUQy
NzJFMjg1NzAeFw0yNjA5MTAyMDA0MjFaFw0yNzA5MDkyMDA5MjFaMDMxMTAvBgNV
BAMTKDRGRDI3MENDRjgzQTIwMkZEQjVCRUU1MEM3NkQ4Q0I4MkU0OEFERDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/SCCZpAga2DBnuepgZoANDSD
u7vKAk2VxrIAi8czHSextlyUNYHr9WZbVeorPojzqTeNNQ5Xr87t5gSd1KcP6ooc
Wni2W7tZsMpgas+YFsERMG7PrXkj3CU3oWNK8BRah36z/X24YDSeNRyeqDwXCpVb
HL0QyE4A192gydlXzC9TruerFC1B0eqY5zluYe7veIEZxhscxn+3SSZTDJMQFIvh
3qAVKtWf/eORbzeVWal/BiDV42F3y/bxmCh5caSNDBhA9My9sjgPUifWEC+oUttk
ZiuKDY6IjqsTkHdsHfuFm/9Kf1EdSx1XDpIEOM9rZGg2EjoTOP8LvBNFH0UZAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUT9JwzPg6IC/bW+5Qx22MuC5IrdcwHwYDVR0j
BBgwFoAUdvXM916BlMnmcdLZ9VdhHScuKFcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjc2S2lGN05jRTdnQTJBOFdudUE2NWt6Nmc3Y1laaEt1cHd0c1B0bU13
elUvMC83NkY1Q0NGNzVFODE5NEM5RTY3MUQyRDlGNTU3NjExRDI3MkUyODU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2RjVDQ0Y3NUU4MTk0QzlF
NjcxRDJEOUY1NTc2MTFEMjcyRTI4NTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3NktpRjdOY0U3Z0EyQThXbnVBNjVrejZnN2NZWmhLdXB3dHNQdG1Nd3pVLzAv
MzIzODMwMzQzYTY0NjEzNDNhMzU2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzczNzMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBA2kAF0wDQYJKoZIhvcNAQELBQADggEBAChj
0Z7p5l+HWdIfzy05cMcWO+r3d9y/NbZj6IR1DkjXCrWtJB6UTivLB3Y+Rt1FiLGj
Ga+GJqOEeO98BCWptiAaNB8/63lPC3n6T/QceGh7SRUdudDXe2MdXESBgDNAWNu6
JH1tJ7vJpibCCeEnaJgJEKmceVqAv8mOcE5AgOhmHNrAopdkM6HWkrIVbPBDkFP4
vi3CRXoRBpDFwiJ58rslKDUEZKy4JAm+7RVmgSj5mELNvUrelhm860sHuw5gFuEc
URVOGw7e/WzlWIV/gcClUtcT1sPLbw7BUl9CejOykcOrQpaumVWg00BneFbx3A6D
WEQ+zFAtO9Lm+QZC4qQ=
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:46:22 2026 by rpki-client