Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3133382e35392e39362e302f32332d3233203d3e203237373230.roa
File:                     3133382e35392e39362e302f32332d3233203d3e203237373230.roa (raw, json)
Hash identifier:          l2XVpZiYgo4gweW/Ccf+yS9T/3XVxjjFVXETWTbdg/4=
Subject key identifier:   76:D0:33:29:6D:DF:3B:44:E3:91:50:98:7C:60:85:6F:1D:51:F4:4A
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       2C0359CB88461BBE71CE4DCE2B394B9EE05FA46E
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3133382e35392e39362e302f32332d3233203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 19:37:40 +0000
ROA not before:           Thu 10 Sep 2026 19:32:40 +0000
ROA not after:            Thu 09 Sep 2027 19:37:40 +0000
asID:                     27720
IP address blocks:        138.59.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Sep 2026 17:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:03:59:cb:88:46:1b:be:71:ce:4d:ce:2b:39:4b:9e:e0:5f:a4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 19:32:40 2026 GMT
            Not After : Sep  9 19:37:40 2027 GMT
        Subject: CN=76D033296DDF3B44E39150987C60856F1D51F44A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:f6:e1:cd:28:96:57:74:68:b9:9b:fb:2f:
                    99:1a:db:13:c5:4e:ad:8f:eb:4d:d7:b7:40:fd:56:
                    b0:07:8a:b2:e5:d0:f4:60:93:75:0f:4f:54:70:a9:
                    64:93:79:71:07:ac:a4:cb:76:a9:b8:25:29:23:00:
                    04:e1:51:87:7f:73:75:dc:73:f1:fa:1e:7f:da:f9:
                    8a:43:aa:dd:ea:df:f9:3e:f5:1f:9b:a7:a6:3e:5c:
                    d1:08:81:a2:b0:ec:8e:97:01:31:76:b9:df:96:0e:
                    6d:a5:d0:af:29:4e:86:f1:95:43:38:a0:56:59:3c:
                    3d:1d:c7:83:b5:5f:88:08:6d:0a:4f:9f:58:2e:7e:
                    1a:c4:85:49:8b:7e:4d:5d:de:76:8a:b8:21:1f:10:
                    2c:61:07:57:bf:21:69:55:51:6a:12:f6:5a:2b:9b:
                    04:ee:76:8f:c1:29:a0:ba:bb:ed:a9:1d:48:0e:58:
                    2c:03:30:8b:ac:18:f2:6f:a4:e2:03:68:a2:f9:b0:
                    85:9d:6a:90:5d:fd:c5:84:54:5d:89:9c:38:0c:f4:
                    d3:17:ff:80:e6:2b:bf:14:06:ed:99:03:cc:82:bc:
                    eb:c6:c1:80:84:ff:5f:4e:d4:19:32:a1:d8:2f:8a:
                    f3:78:c9:a3:68:28:21:d8:01:f6:5b:0d:fc:02:ae:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D0:33:29:6D:DF:3B:44:E3:91:50:98:7C:60:85:6F:1D:51:F4:4A
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3133382e35392e39362e302f32332d3233203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:8c:d2:7c:7c:f3:7e:37:ab:b0:45:77:4b:cf:fc:e7:95:e1:
         40:fa:78:5d:79:d1:7c:0a:ed:c4:d5:2c:de:b2:c5:77:53:14:
         86:f7:f7:57:9e:8b:ce:bb:38:28:b2:99:98:fa:6a:3f:d8:34:
         40:30:3d:9f:4c:67:29:09:20:65:d2:4f:52:94:30:56:83:46:
         ed:26:52:45:ea:57:5d:00:e3:68:cd:e0:2a:99:f4:22:08:ea:
         a8:20:ba:30:f9:71:c9:22:e4:34:93:00:16:01:ac:62:a9:a0:
         3a:8d:af:79:d9:84:93:18:25:fc:50:52:01:11:59:fe:5c:3a:
         7f:2b:52:32:0c:ed:0e:1f:3b:03:22:09:aa:f6:9c:cb:29:6e:
         ca:9b:d5:01:31:01:83:2f:01:e8:8c:3c:ab:92:3f:44:ec:7b:
         03:25:3a:c3:ad:aa:d1:d9:86:00:f8:de:8d:57:82:a7:9f:db:
         45:1d:cf:cf:e5:9c:4b:14:d5:ae:93:52:fa:8b:1a:e9:17:f3:
         d2:f3:53:94:df:8e:63:85:c0:99:b7:51:fc:00:03:a7:c1:85:
         dd:40:78:0b:38:6f:62:82:a8:c6:5b:52:69:85:94:da:d9:81:
         1e:3d:dc:fe:4f:b2:91:81:a8:0c:de:35:82:96:53:60:54:4e:
         cf:18:7d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:56:58 2026 by rpki-client