Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3133382e35392e39372e302f32342d3234203d3e203237373230.roa
File:                     3133382e35392e39372e302f32342d3234203d3e203237373230.roa (raw, json)
Hash identifier:          UDgXwGZfw6ps+egb47hAF2HU0EGtdlGfazyG41mEotE=
Subject key identifier:   C6:D6:6B:CE:97:51:2F:EC:05:38:EA:2E:14:66:41:D7:17:7B:CC:CC
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       635596720B880D9822DBA8E063D6C5FA3E0899A7
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3133382e35392e39372e302f32342d3234203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 19:37:56 +0000
ROA not before:           Thu 10 Sep 2026 19:32:56 +0000
ROA not after:            Thu 09 Sep 2027 19:37:56 +0000
asID:                     27720
IP address blocks:        138.59.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Sep 2026 17:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:55:96:72:0b:88:0d:98:22:db:a8:e0:63:d6:c5:fa:3e:08:99:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 19:32:56 2026 GMT
            Not After : Sep  9 19:37:56 2027 GMT
        Subject: CN=C6D66BCE97512FEC0538EA2E146641D7177BCCCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:67:ba:58:d5:96:19:bd:d6:e5:98:f5:1c:d5:
                    c5:c8:d3:72:fa:48:5f:95:c4:51:28:37:ce:96:de:
                    07:45:57:c9:84:11:18:cf:89:13:5c:2a:42:bd:5c:
                    f0:be:42:db:59:61:d2:6d:2e:58:4b:9d:17:ab:f6:
                    fe:cc:ec:b0:bf:50:9d:50:05:46:75:3f:80:dd:77:
                    00:66:f2:2b:8a:41:aa:da:39:2f:5c:b2:17:19:1e:
                    bd:02:44:a8:88:a5:87:3b:06:fd:be:fb:d1:96:e8:
                    7e:58:a9:e5:08:34:77:20:b4:f0:9b:e4:c8:d3:c3:
                    08:b8:71:bf:bf:9e:e9:b7:eb:3f:64:73:22:d7:cd:
                    f4:ac:40:cf:23:fc:b4:6c:d9:27:7e:6e:6d:e0:32:
                    6a:25:86:bd:a5:8e:20:01:6e:ab:4f:8a:12:b2:93:
                    00:21:25:56:4f:ac:d5:72:3c:f0:44:e0:d2:53:13:
                    fc:2d:f5:58:39:d4:89:be:f9:d2:00:a8:64:18:8f:
                    d3:97:f4:4b:9f:f2:25:b1:d9:c8:10:7f:c9:78:99:
                    3a:04:cf:34:9f:75:1d:ee:9f:94:4a:c6:41:81:64:
                    b1:24:5c:58:b8:a7:9e:78:f2:d0:5f:ac:fd:5a:37:
                    93:95:bd:51:65:48:3e:59:1b:3a:49:35:8c:6e:57:
                    be:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D6:6B:CE:97:51:2F:EC:05:38:EA:2E:14:66:41:D7:17:7B:CC:CC
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3133382e35392e39372e302f32342d3234203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:40:b6:ee:15:72:41:ba:4f:4d:fc:15:1e:0c:d7:ff:ea:75:
         39:47:91:dd:95:5c:09:23:33:fa:44:ab:bf:e5:14:84:9c:e4:
         f9:02:9a:ac:26:c5:7a:e1:13:45:64:a3:5c:b4:2f:11:dc:31:
         cb:48:e7:15:b8:2e:b7:f2:b6:19:5e:d4:46:e6:72:dd:43:36:
         bc:ec:7a:98:d7:34:4a:b9:ea:fa:19:82:cd:1e:c8:72:b5:68:
         b0:54:ba:f8:70:1f:a1:a9:cb:a9:05:6a:bc:39:8b:3e:24:1a:
         ce:ab:9b:46:42:13:89:ad:5f:22:06:00:b7:03:e6:66:aa:13:
         fe:ed:bd:d5:52:88:6c:70:80:3d:f4:0b:95:a8:ea:56:c2:73:
         b5:af:b7:dc:0c:bc:81:47:82:9c:74:a3:79:49:38:b6:6f:9f:
         0a:e6:1b:93:ce:52:09:0b:e1:02:18:14:53:2a:a3:43:7f:ed:
         25:6a:b6:5a:3b:8f:b4:b5:5d:0e:84:dc:90:39:43:ff:ec:e6:
         6b:19:e9:d4:b7:30:35:ff:2f:07:fa:b4:4a:8b:01:34:8c:dc:
         4b:26:f4:b2:d3:ac:34:99:d1:8f:6c:5f:66:b3:51:1f:d0:23:
         fe:0b:48:09:5d:d7:90:18:39:a5:4d:e0:85:2c:c4:b8:7a:1f:
         d7:a1:6e:68
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUY1WWcguIDZgi26jgY9bF+j4ImacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZGNUNDRjc1RTgxOTRDOUU2NzFEMkQ5RjU1NzYxMUQy
NzJFMjg1NzAeFw0yNjA5MTAxOTMyNTZaFw0yNzA5MDkxOTM3NTZaMDMxMTAvBgNV
BAMTKEM2RDY2QkNFOTc1MTJGRUMwNTM4RUEyRTE0NjY0MUQ3MTc3QkNDQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcZ7pY1ZYZvdblmPUc1cXI03L6
SF+VxFEoN86W3gdFV8mEERjPiRNcKkK9XPC+QttZYdJtLlhLnRer9v7M7LC/UJ1Q
BUZ1P4DddwBm8iuKQaraOS9cshcZHr0CRKiIpYc7Bv2++9GW6H5YqeUINHcgtPCb
5MjTwwi4cb+/num36z9kcyLXzfSsQM8j/LRs2Sd+bm3gMmolhr2ljiABbqtPihKy
kwAhJVZPrNVyPPBE4NJTE/wt9Vg51Im++dIAqGQYj9OX9Euf8iWx2cgQf8l4mToE
zzSfdR3un5RKxkGBZLEkXFi4p5548tBfrP1aN5OVvVFlSD5ZGzpJNYxuV75VAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUxtZrzpdRL+wFOOouFGZB1xd7zMwwHwYDVR0j
BBgwFoAUdvXM916BlMnmcdLZ9VdhHScuKFcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjc2S2lGN05jRTdnQTJBOFdudUE2NWt6Nmc3Y1laaEt1cHd0c1B0bU13
elUvMC83NkY1Q0NGNzVFODE5NEM5RTY3MUQyRDlGNTU3NjExRDI3MkUyODU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2RjVDQ0Y3NUU4MTk0QzlF
NjcxRDJEOUY1NTc2MTFEMjcyRTI4NTcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3NktpRjdOY0U3Z0EyQThXbnVBNjVrejZnN2NZWmhLdXB3dHNQdG1Nd3pVLzAv
MzEzMzM4MmUzNTM5MmUzOTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3
MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAIo7YTANBgkqhkiG9w0BAQsFAAOCAQEARkC27hVyQbpP
TfwVHgzX/+p1OUeR3ZVcCSMz+kSrv+UUhJzk+QKarCbFeuETRWSjXLQvEdwxy0jn
Fbgut/K2GV7URuZy3UM2vOx6mNc0Srnq+hmCzR7IcrVosFS6+HAfoanLqQVqvDmL
PiQazqubRkITia1fIgYAtwPmZqoT/u291VKIbHCAPfQLlajqVsJzta+33Ay8gUeC
nHSjeUk4tm+fCuYbk85SCQvhAhgUUyqjQ3/tJWq2WjuPtLVdDoTckDlD/+zmaxnp
1LcwNf8vB/q0SosBNIzcSyb0stOsNJnRj2xfZrNRH9Aj/gtICV3XkBg5pU3ghSzE
uHof16FuaA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 10:57:26 2026 by rpki-client