Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3133382e35392e39362e302f32322d3232203d3e203237373230.roa
File:                     3133382e35392e39362e302f32322d3232203d3e203237373230.roa (raw, json)
Hash identifier:          N8qulfqJkGz21FQNWWOtenE+QQ/97sLgMVoMKCd4yIU=
Subject key identifier:   07:8E:25:0D:B0:B7:A3:EA:39:3A:D6:2F:FE:5E:B4:26:E9:02:0B:1D
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       2EC8D7E580CCC2E9119C064196ABAB45655B8737
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3133382e35392e39362e302f32322d3232203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 19:37:21 +0000
ROA not before:           Thu 10 Sep 2026 19:32:21 +0000
ROA not after:            Thu 09 Sep 2027 19:37:21 +0000
asID:                     27720
IP address blocks:        138.59.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Sep 2026 17:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c8:d7:e5:80:cc:c2:e9:11:9c:06:41:96:ab:ab:45:65:5b:87:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 19:32:21 2026 GMT
            Not After : Sep  9 19:37:21 2027 GMT
        Subject: CN=078E250DB0B7A3EA393AD62FFE5EB426E9020B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:2e:64:da:97:da:20:a7:ee:13:0c:ae:75:
                    f2:74:49:9e:de:dd:15:0d:b9:06:9e:6c:a6:95:43:
                    07:b9:53:43:6f:ea:68:6e:6e:ed:87:c1:1d:5f:15:
                    ba:cd:d7:d6:84:2a:64:13:af:84:23:b9:f5:68:f4:
                    f2:97:9b:ef:be:20:fc:50:20:cc:29:a6:48:09:42:
                    2e:30:db:c1:b5:36:0d:db:73:df:8d:12:9b:8b:50:
                    c9:5a:65:d6:47:65:a1:4a:1d:b5:49:97:d2:e0:82:
                    c3:28:e6:d6:a7:72:ba:b0:c2:88:26:a1:04:f8:10:
                    68:50:15:ef:59:b2:dc:d9:f8:ba:9f:24:a4:15:87:
                    30:44:30:30:07:ea:c4:e8:cd:cb:f4:4b:97:33:5b:
                    31:c0:80:27:8a:5a:79:7a:30:06:ff:ff:a7:63:71:
                    15:b2:12:cd:52:fe:c8:e5:68:79:f1:24:7d:da:d6:
                    0e:90:d3:0a:d5:95:78:62:70:4d:4b:80:bc:20:ae:
                    a5:a0:28:ee:06:5f:18:e3:4b:d9:68:b1:18:2c:27:
                    df:64:1a:fa:2b:ca:b4:12:f2:f2:c3:f3:58:0e:c7:
                    17:be:57:e7:95:de:7f:c2:59:8b:2e:e1:a8:02:4e:
                    57:b8:a1:5f:0b:f9:40:0c:f2:b7:82:1b:5e:76:01:
                    20:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8E:25:0D:B0:B7:A3:EA:39:3A:D6:2F:FE:5E:B4:26:E9:02:0B:1D
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3133382e35392e39362e302f32322d3232203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:c7:dd:98:39:db:b4:db:fb:f1:00:09:5d:64:0a:40:f7:bb:
         15:3a:b4:e2:aa:53:bc:dd:3a:6d:44:7a:f9:f6:29:4f:90:cf:
         78:ac:51:39:a4:30:b3:d4:1e:25:38:49:ce:ce:ba:52:5d:c9:
         f3:f0:e5:09:f5:c6:e8:a5:06:8c:69:7f:cf:39:a5:18:09:ea:
         a7:67:52:3f:1c:d8:9a:41:88:19:1e:91:86:93:b7:c3:3d:5b:
         73:7c:bc:47:e0:ee:80:b7:8d:81:bc:8d:a4:69:02:e5:75:04:
         60:7b:bc:2f:d2:55:70:5e:89:c7:63:68:63:7b:86:c1:f7:db:
         b8:9b:a3:3f:34:86:2a:30:57:d5:71:4c:5e:92:a0:a5:fa:5d:
         94:7a:39:3c:48:6e:31:34:b6:b2:d0:8f:34:29:2a:be:5b:05:
         7d:32:f6:17:06:dc:b2:00:a5:d5:f1:15:ee:26:bb:15:77:5d:
         5f:66:b7:cd:de:fd:b8:ef:f3:ad:39:19:4c:52:28:51:e3:4c:
         52:f5:df:bc:4c:2d:5c:76:69:65:77:78:dc:0c:fe:90:71:7a:
         20:94:4c:9a:16:ee:f3:4d:8e:2e:0d:25:33:e4:2c:d3:12:5d:
         b3:e8:59:46:52:82:fb:a6:d6:8f:21:33:af:39:27:75:0c:95:
         d5:8a:ee:eb
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIULsjX5YDMwukRnAZBlqurRWVbhzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZGNUNDRjc1RTgxOTRDOUU2NzFEMkQ5RjU1NzYxMUQy
NzJFMjg1NzAeFw0yNjA5MTAxOTMyMjFaFw0yNzA5MDkxOTM3MjFaMDMxMTAvBgNV
BAMTKDA3OEUyNTBEQjBCN0EzRUEzOTNBRDYyRkZFNUVCNDI2RTkwMjBCMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBS5k2pfaIKfuEwyudfJ0SZ7e
3RUNuQaebKaVQwe5U0Nv6mhubu2HwR1fFbrN19aEKmQTr4QjufVo9PKXm+++IPxQ
IMwppkgJQi4w28G1Ng3bc9+NEpuLUMlaZdZHZaFKHbVJl9LggsMo5tancrqwwogm
oQT4EGhQFe9ZstzZ+LqfJKQVhzBEMDAH6sTozcv0S5czWzHAgCeKWnl6MAb//6dj
cRWyEs1S/sjlaHnxJH3a1g6Q0wrVlXhicE1LgLwgrqWgKO4GXxjjS9losRgsJ99k
GvoryrQS8vLD81gOxxe+V+eV3n/CWYsu4agCTle4oV8L+UAM8reCG152ASApAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUB44lDbC3o+o5OtYv/l60JukCCx0wHwYDVR0j
BBgwFoAUdvXM916BlMnmcdLZ9VdhHScuKFcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjc2S2lGN05jRTdnQTJBOFdudUE2NWt6Nmc3Y1laaEt1cHd0c1B0bU13
elUvMC83NkY1Q0NGNzVFODE5NEM5RTY3MUQyRDlGNTU3NjExRDI3MkUyODU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2RjVDQ0Y3NUU4MTk0QzlF
NjcxRDJEOUY1NTc2MTFEMjcyRTI4NTcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3NktpRjdOY0U3Z0EyQThXbnVBNjVrejZnN2NZWmhLdXB3dHNQdG1Nd3pVLzAv
MzEzMzM4MmUzNTM5MmUzOTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzM3
MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAoo7YDANBgkqhkiG9w0BAQsFAAOCAQEAcMfdmDnbtNv7
8QAJXWQKQPe7FTq04qpTvN06bUR6+fYpT5DPeKxROaQws9QeJThJzs66Ul3J8/Dl
CfXG6KUGjGl/zzmlGAnqp2dSPxzYmkGIGR6RhpO3wz1bc3y8R+DugLeNgbyNpGkC
5XUEYHu8L9JVcF6Jx2NoY3uGwffbuJujPzSGKjBX1XFMXpKgpfpdlHo5PEhuMTS2
stCPNCkqvlsFfTL2FwbcsgCl1fEV7ia7FXddX2a3zd79uO/zrTkZTFIoUeNMUvXf
vEwtXHZpZXd43Az+kHF6IJRMmhbu802OLg0lM+Qs0xJds+hZRlKC+6bWjyEzrzkn
dQyV1Yru6w==
-----END CERTIFICATE-----
Generated at Sun Sep 20 10:57:15 2026 by rpki-client