Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3230302e39352e3137322e302f32322d3232203d3e203237373230.roa
File:                     3230302e39352e3137322e302f32322d3232203d3e203237373230.roa (raw, json)
Hash identifier:          Q6+PDoNS4PZdV4O/y1bDcKS++Qky5qp+rcYwf4Vf5Q0=
Subject key identifier:   1D:E5:A3:32:F3:96:86:8B:09:3B:0C:7B:E1:14:38:23:DE:C5:1C:A5
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       1469C534AA8AE6DCD468D9DD0431020D8D737108
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3230302e39352e3137322e302f32322d3232203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 19:45:45 +0000
ROA not before:           Thu 10 Sep 2026 19:40:45 +0000
ROA not after:            Thu 09 Sep 2027 19:45:45 +0000
asID:                     27720
IP address blocks:        200.95.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Sep 2026 17:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:69:c5:34:aa:8a:e6:dc:d4:68:d9:dd:04:31:02:0d:8d:73:71:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 19:40:45 2026 GMT
            Not After : Sep  9 19:45:45 2027 GMT
        Subject: CN=1DE5A332F396868B093B0C7BE1143823DEC51CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:26:de:c0:d7:ec:89:26:ab:38:0a:36:cd:f7:
                    a6:5d:0e:4f:45:d1:69:d6:58:28:ef:d2:1a:61:79:
                    1f:48:ee:06:bc:47:b7:de:90:70:2e:c7:91:39:68:
                    62:c9:c4:6f:92:dc:d6:b3:1c:44:ee:68:80:5c:0e:
                    18:16:68:33:fe:6d:24:69:b7:06:b4:b9:f4:7c:fc:
                    3b:dd:0c:8b:74:6a:59:68:29:45:23:ff:a3:a5:7a:
                    bb:9f:87:97:d3:de:fc:89:41:10:3e:99:59:3b:85:
                    7a:28:07:3e:06:b9:e7:22:0b:0f:6d:dc:b3:7d:f1:
                    c7:ef:9f:60:7e:85:35:17:00:c1:44:4d:cd:9b:bd:
                    01:90:9e:44:11:f4:25:33:e2:0d:56:70:c0:58:5d:
                    f6:55:aa:18:0c:cc:49:8f:88:b5:12:8f:9a:9a:21:
                    0d:ce:f5:21:93:98:b0:c7:59:b5:b4:96:e9:e5:f6:
                    3d:f0:9a:57:57:04:b4:99:fc:dd:23:65:fb:e1:50:
                    9c:7d:5f:a8:ee:d1:e0:6f:09:6e:01:f9:ff:7a:d5:
                    de:d6:5b:1f:1f:5e:c9:f9:f3:f6:4b:99:8d:60:57:
                    08:4d:97:3a:bd:5e:60:6c:64:fb:96:6a:ca:7d:ee:
                    45:cd:aa:a1:a2:e3:19:7a:48:72:3f:ae:92:f8:98:
                    97:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E5:A3:32:F3:96:86:8B:09:3B:0C:7B:E1:14:38:23:DE:C5:1C:A5
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/3230302e39352e3137322e302f32322d3232203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:06:e5:5e:17:19:bd:e2:c9:1f:82:fe:c1:90:cd:93:13:85:
         d0:c7:4a:49:ca:73:ca:9a:46:c3:5e:57:18:0c:3c:b8:e5:8f:
         f5:64:3c:bf:59:18:0c:84:a7:ed:d2:c2:bf:84:88:96:00:bb:
         78:8c:c3:e8:cc:da:5c:77:20:3f:9e:c3:87:77:a1:cf:bd:11:
         7d:a4:c0:32:a4:b6:19:da:f6:84:40:f5:5a:93:c7:ae:a1:bd:
         5e:fd:dc:dc:aa:3c:ef:c5:cf:51:f8:ac:5d:4d:e5:8a:a8:10:
         60:2a:ae:70:81:ff:f4:d0:cd:d2:85:33:44:2c:39:68:8e:be:
         1b:e3:cb:17:5a:fa:75:49:3d:08:83:d6:93:fe:75:0c:1a:e2:
         29:4b:7d:bb:82:d2:74:a5:4d:80:9a:d8:4f:c2:78:bc:d5:cd:
         44:99:a1:6c:ef:6c:c7:fc:84:81:28:19:9f:a4:bd:28:c0:44:
         c2:19:d0:d8:83:7d:d1:22:6a:0d:fc:08:65:30:39:d6:ed:bf:
         6d:21:94:1f:ed:d9:c3:14:ca:22:4c:d0:57:1a:35:a3:74:74:
         bb:47:39:86:14:93:20:9e:5e:9a:31:43:21:a4:ac:a0:2d:f2:
         8d:a6:8d:40:09:f6:3a:70:1d:70:7c:e8:63:09:07:d9:36:03:
         f7:7b:c4:dc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFGnFNKqK5tzUaNndBDECDY1zcQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZGNUNDRjc1RTgxOTRDOUU2NzFEMkQ5RjU1NzYxMUQy
NzJFMjg1NzAeFw0yNjA5MTAxOTQwNDVaFw0yNzA5MDkxOTQ1NDVaMDMxMTAvBgNV
BAMTKDFERTVBMzMyRjM5Njg2OEIwOTNCMEM3QkUxMTQzODIzREVDNTFDQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqJt7A1+yJJqs4CjbN96ZdDk9F
0WnWWCjv0hpheR9I7ga8R7fekHAux5E5aGLJxG+S3NazHETuaIBcDhgWaDP+bSRp
twa0ufR8/DvdDIt0alloKUUj/6Olerufh5fT3vyJQRA+mVk7hXooBz4GueciCw9t
3LN98cfvn2B+hTUXAMFETc2bvQGQnkQR9CUz4g1WcMBYXfZVqhgMzEmPiLUSj5qa
IQ3O9SGTmLDHWbW0lunl9j3wmldXBLSZ/N0jZfvhUJx9X6ju0eBvCW4B+f961d7W
Wx8fXsn58/ZLmY1gVwhNlzq9XmBsZPuWasp97kXNqqGi4xl6SHI/rpL4mJf/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUHeWjMvOWhosJOwx74RQ4I97FHKUwHwYDVR0j
BBgwFoAUdvXM916BlMnmcdLZ9VdhHScuKFcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjc2S2lGN05jRTdnQTJBOFdudUE2NWt6Nmc3Y1laaEt1cHd0c1B0bU13
elUvMC83NkY1Q0NGNzVFODE5NEM5RTY3MUQyRDlGNTU3NjExRDI3MkUyODU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2RjVDQ0Y3NUU4MTk0QzlF
NjcxRDJEOUY1NTc2MTFEMjcyRTI4NTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3NktpRjdOY0U3Z0EyQThXbnVBNjVrejZnN2NZWmhLdXB3dHNQdG1Nd3pVLzAv
MzIzMDMwMmUzOTM1MmUzMTM3MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzczMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyF+sMA0GCSqGSIb3DQEBCwUAA4IBAQA6BuVeFxm9
4skfgv7BkM2TE4XQx0pJynPKmkbDXlcYDDy45Y/1ZDy/WRgMhKft0sK/hIiWALt4
jMPozNpcdyA/nsOHd6HPvRF9pMAypLYZ2vaEQPVak8euob1e/dzcqjzvxc9R+Kxd
TeWKqBBgKq5wgf/00M3ShTNELDlojr4b48sXWvp1ST0Ig9aT/nUMGuIpS327gtJ0
pU2AmthPwni81c1EmaFs72zH/ISBKBmfpL0owETCGdDYg33RImoN/AhlMDnW7b9t
IZQf7dnDFMoiTNBXGjWjdHS7RzmGFJMgnl6aMUMhpKygLfKNpo1ACfY6cB1wfOhj
CQfZNgP3e8Tc
-----END CERTIFICATE-----
Generated at Sun Sep 20 10:56:59 2026 by rpki-client