Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3133312e37322e3231392e302f32342d3234203d3e20323632333532.roa
File:                     3133312e37322e3231392e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          WaWcjXHjcmOF0eixqJWBcR3NczVyNdiANGFxlseSomw=
Subject key identifier:   EB:07:86:25:40:3D:13:8A:B0:87:BE:38:1F:52:60:85:D9:5F:D2:DA
Certificate issuer:       /CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
Certificate serial:       0F74A3E5DBDDE8D65FBCCD286129090870B3F46E
Authority key identifier: E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3133312e37322e3231392e302f32342d3234203d3e20323632333532.roa
Signing time:             Tue 11 Aug 2026 12:25:36 +0000
ROA not before:           Tue 11 Aug 2026 12:20:36 +0000
ROA not after:            Tue 10 Aug 2027 12:25:36 +0000
asID:                     262352
IP address blocks:        131.72.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 15:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:74:a3:e5:db:dd:e8:d6:5f:bc:cd:28:61:29:09:08:70:b3:f4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
        Validity
            Not Before: Aug 11 12:20:36 2026 GMT
            Not After : Aug 10 12:25:36 2027 GMT
        Subject: CN=EB078625403D138AB087BE381F526085D95FD2DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:c4:9b:0f:39:e8:6f:14:49:83:04:81:12:
                    d0:2c:87:c3:ab:ba:b4:5f:e9:76:35:2c:29:33:7c:
                    3b:ab:dd:0e:87:4b:d7:c7:67:d9:fb:00:43:32:74:
                    31:93:ee:0c:d0:f7:7d:da:14:16:36:e6:72:44:e0:
                    7c:a1:11:3d:d9:a2:b3:90:c3:5d:ae:1b:5d:42:2c:
                    b1:9a:82:2e:f4:2e:0b:15:bb:4d:7c:db:b8:92:f3:
                    b1:b4:19:ed:e3:2f:66:99:7e:a2:02:91:57:77:27:
                    1b:1c:cc:7f:f2:4d:87:16:41:34:c8:dd:e8:59:0f:
                    e2:0e:24:81:ce:25:73:92:44:69:3b:4e:d7:8d:6e:
                    7c:a0:33:ec:e2:1b:07:b4:27:7d:4f:15:11:e1:9d:
                    4a:a2:82:4d:60:3a:82:c5:7f:c9:38:71:7a:05:c3:
                    9d:76:9a:ae:03:9d:f8:4b:4d:b7:7d:c9:b0:94:91:
                    35:7a:20:fc:fd:3b:8b:6d:cd:1c:9f:0f:9b:13:8e:
                    15:56:79:9d:64:e4:12:4b:35:15:a0:76:e1:c8:b4:
                    3d:89:c1:3f:dc:ca:d6:5d:d3:ba:fb:11:01:78:2f:
                    7a:34:c4:f9:41:91:35:a6:f2:d6:18:a1:cd:25:e5:
                    22:5e:57:73:26:fa:11:0f:7d:10:ac:f9:52:c6:a4:
                    78:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:07:86:25:40:3D:13:8A:B0:87:BE:38:1F:52:60:85:D9:5F:D2:DA
            X509v3 Authority Key Identifier:
                keyid:E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3133312e37322e3231392e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:47:f6:7e:44:c2:43:5d:94:df:79:97:51:96:99:d7:fa:bd:
         0c:9e:5c:c2:1e:4f:13:db:3a:21:0c:f9:73:bb:4d:6a:6d:15:
         8b:29:e6:ca:e4:d4:e9:76:e5:a1:d1:f7:5a:e5:97:6b:42:76:
         e9:40:bd:91:1e:8e:e0:41:78:22:25:b8:01:17:35:c8:66:14:
         ff:2a:ce:18:ec:f9:91:93:99:d3:a9:b8:60:70:f1:21:6f:64:
         1a:96:f8:eb:fe:37:7a:49:7f:cc:6a:0a:7d:0f:72:81:d5:21:
         06:7c:a1:13:37:33:27:6d:e3:cc:89:3e:c2:8c:c1:64:a8:22:
         3e:8d:19:59:f5:75:61:fb:4d:3b:3a:63:cb:7a:5d:3c:da:0c:
         4a:90:8a:c8:44:b5:08:c4:7a:33:20:39:5c:4e:37:31:9f:08:
         ab:e0:bc:f6:fa:97:19:dd:04:c4:a9:d4:df:2f:ff:d4:1b:55:
         74:ee:d0:64:39:db:f6:45:74:a8:12:d6:eb:05:5b:b1:16:7f:
         e5:eb:4e:1b:dc:66:08:17:15:61:20:8f:9b:58:a9:5f:06:7d:
         b8:a4:01:08:cb:86:29:f3:37:36:ad:ca:54:a0:c7:b1:93:82:
         f7:ac:fa:cb:a1:24:0b:3b:7c:2f:15:7f:de:2a:69:82:92:82:
         cf:fe:0c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 07:34:44 2026 by rpki-client