Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3137372e3132392e382e302f32312d3231203d3e203237373230.roa
File:                     3137372e3132392e382e302f32312d3231203d3e203237373230.roa (raw, json)
Hash identifier:          6f6GL1sZ9QMlvloV6kGhk3YQLlJ3aZEUbTmoBJo1k14=
Subject key identifier:   E3:D5:C4:CD:69:32:BC:DD:8F:38:C7:51:8B:F4:22:3C:51:79:64:0A
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       086908F61B105BF05A66FB06DCC96DEAAE6C4FD0
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3137372e3132392e382e302f32312d3231203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 19:42:23 +0000
ROA not before:           Thu 10 Sep 2026 19:37:23 +0000
ROA not after:            Thu 09 Sep 2027 19:42:23 +0000
asID:                     27720
IP address blocks:        177.129.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Sep 2026 17:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:69:08:f6:1b:10:5b:f0:5a:66:fb:06:dc:c9:6d:ea:ae:6c:4f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 19:37:23 2026 GMT
            Not After : Sep  9 19:42:23 2027 GMT
        Subject: CN=E3D5C4CD6932BCDD8F38C7518BF4223C5179640A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:12:c2:e6:cb:80:a1:5b:e6:b6:88:e8:c1:
                    83:a3:db:3a:31:f3:4c:be:df:9b:57:72:b4:8c:03:
                    33:2c:34:c1:7c:17:38:1c:48:45:af:c5:35:22:b9:
                    2a:51:16:86:e0:1e:ce:c6:e5:00:f3:c9:54:e8:eb:
                    ca:8c:fd:47:cb:c0:2b:9d:57:03:9c:b7:b5:b4:fa:
                    6c:58:de:1a:a4:35:76:2e:b5:bf:f6:56:38:8c:ed:
                    ba:b4:56:3e:1d:0d:32:82:d1:35:fc:2b:6c:01:3e:
                    fe:b4:4d:ea:6d:b9:a3:12:9c:cd:19:44:31:b2:d8:
                    9c:bd:16:5c:1f:eb:df:4b:a5:4b:f1:48:e4:18:c6:
                    4d:a9:b6:c1:df:00:de:f6:b9:f9:cd:2a:f8:95:80:
                    99:88:a5:7c:70:69:b8:e6:ae:b1:42:52:ed:c3:d9:
                    78:64:bf:07:0c:af:27:83:34:14:1f:d8:fd:b7:73:
                    28:3b:30:9d:28:1e:05:e4:7a:a6:0a:84:4f:38:dd:
                    69:b0:cb:7b:32:6c:68:75:16:dd:e8:84:2e:8d:81:
                    df:21:64:11:27:f9:ac:dd:80:e3:f6:70:0d:67:9a:
                    99:5f:0d:88:70:78:e4:b2:ec:b0:7c:da:59:6d:b3:
                    f6:8d:82:93:06:28:1c:a5:7e:bd:76:01:b4:60:84:
                    30:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D5:C4:CD:69:32:BC:DD:8F:38:C7:51:8B:F4:22:3C:51:79:64:0A
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3137372e3132392e382e302f32312d3231203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:e3:af:44:10:b4:af:f1:2b:4a:05:bc:30:24:86:69:88:9a:
         dc:5e:00:26:1c:83:ef:ee:e6:2b:d6:cf:4a:c1:aa:7c:a1:6c:
         31:c9:45:c6:05:51:7b:59:43:99:93:c2:b6:20:b6:12:38:87:
         74:f0:a2:97:09:dd:41:c6:e0:86:43:e0:9b:dd:12:de:fe:f6:
         b7:90:e9:b1:4c:47:2d:d8:70:fb:96:2d:b4:90:b1:f1:56:e4:
         7a:1c:78:fc:12:cc:83:5c:17:58:14:0c:1b:04:b0:2d:7a:54:
         bd:6c:80:4c:8b:2c:13:7e:97:c3:b1:94:a9:98:4d:1f:5e:9f:
         53:4f:8b:92:5f:d7:99:05:a1:e6:df:a9:d7:f3:40:c6:d5:f2:
         51:eb:4b:a2:b7:00:03:09:5e:c3:78:cf:51:84:ac:43:e8:04:
         6f:44:13:2a:27:65:ae:7a:7b:ff:07:84:4c:cf:40:02:dc:18:
         31:71:91:b9:0c:0a:48:de:7f:3f:2b:2f:7e:13:22:18:78:29:
         96:59:8d:69:05:28:65:e9:10:fe:5c:51:45:37:d2:fc:27:a3:
         10:90:b6:a5:b0:51:7b:18:7f:6f:46:b7:32:57:80:e1:db:ab:
         99:1e:51:08:a8:e5:a9:da:ee:af:6c:8e:4f:ab:77:c8:c1:f1:
         33:a2:b2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:57:08 2026 by rpki-client