Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3132382e302f32302d3230203d3e203533303138.roa
File:                     3137372e37322e3132382e302f32302d3230203d3e203533303138.roa (raw, json)
Hash identifier:          w4746miPWnuoBqSZR9nBVTum9fa8NiVAJP4JQRwK8RY=
Subject key identifier:   20:AE:4C:26:E0:3E:23:3A:EB:62:54:18:48:18:05:A9:97:6A:91:23
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       6B0EF372D25E9D6C3A047D3E08952E027AC4D36B
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3132382e302f32302d3230203d3e203533303138.roa
Signing time:             Wed 10 Jun 2026 10:39:41 +0000
ROA not before:           Wed 10 Jun 2026 10:34:41 +0000
ROA not after:            Wed 09 Jun 2027 10:39:41 +0000
asID:                     53018
IP address blocks:        177.72.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 05:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:0e:f3:72:d2:5e:9d:6c:3a:04:7d:3e:08:95:2e:02:7a:c4:d3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Jun 10 10:34:41 2026 GMT
            Not After : Jun  9 10:39:41 2027 GMT
        Subject: CN=20AE4C26E03E233AEB625418481805A9976A9123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:75:00:cb:b9:c5:17:24:8c:f2:aa:67:70:
                    e9:12:e7:61:56:b2:47:11:55:b7:e5:8f:4d:db:ec:
                    a7:59:e9:11:7d:c8:f1:7a:38:26:25:94:b5:87:76:
                    93:bc:f0:4d:0d:ed:96:1d:64:24:9c:b4:34:3c:61:
                    56:8c:6f:f6:fb:28:a6:e6:50:6f:f6:ef:95:5a:a0:
                    82:cf:3d:3e:23:3f:b2:cc:a6:00:5f:96:dc:84:7a:
                    6c:2b:af:b2:c1:9c:08:62:71:64:a8:57:38:cd:37:
                    21:60:ee:1b:77:8a:f9:b6:fa:f6:3a:15:1f:a7:cb:
                    94:23:0d:4c:1e:38:f9:ed:aa:ef:4b:5e:65:4f:2f:
                    ac:b3:11:91:e1:9e:30:f9:49:02:64:0d:ee:24:c4:
                    a4:df:a9:39:2e:45:a3:b5:ef:99:5c:41:f5:a2:4e:
                    04:b5:98:41:6b:ef:05:b7:42:71:58:8c:23:18:3f:
                    b9:99:fb:63:7e:bf:d5:1d:ac:5d:77:6f:36:b1:6a:
                    3c:dc:16:1e:9b:50:a6:ec:bf:e8:b5:ba:17:f0:3d:
                    a4:e7:d3:f4:5d:54:9b:fc:7c:09:e3:c0:43:94:c0:
                    8d:6a:78:e3:44:30:2e:af:47:d6:3c:70:61:26:90:
                    9e:b1:10:d9:79:c4:65:6a:9a:00:ce:d5:81:45:7d:
                    65:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AE:4C:26:E0:3E:23:3A:EB:62:54:18:48:18:05:A9:97:6A:91:23
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3132382e302f32302d3230203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:94:a1:94:aa:e7:2a:60:8e:aa:e5:32:3a:e9:1a:2a:93:d8:
         88:8f:b3:c2:90:40:73:c0:75:51:98:4b:3d:5d:50:dc:eb:79:
         f2:6d:d6:ec:a9:76:ea:e1:0a:16:27:48:ab:ea:24:03:b5:94:
         cf:2a:7a:ff:f6:68:1d:86:91:3f:c5:d7:20:24:72:1f:c1:6b:
         0e:c8:40:5a:ed:3c:67:09:e8:f5:54:e2:eb:c1:ab:31:78:26:
         41:ac:04:84:c4:55:a6:d4:22:eb:1c:8a:45:d9:bb:15:67:7a:
         b2:34:82:20:8b:76:cc:52:30:d2:68:e9:4f:e9:8a:0e:04:12:
         09:d6:26:b1:1d:de:a2:fd:d1:ce:20:4c:7b:cf:91:41:dd:9f:
         1b:b2:ce:fb:c1:e4:aa:c5:6c:df:60:0e:1d:89:d2:f9:ea:3f:
         82:d0:07:65:a9:b4:39:9f:14:62:4f:e4:6a:cf:f6:8c:8e:da:
         9d:f6:4a:84:a2:e4:c6:21:c3:47:6f:bc:03:e1:ff:4c:64:3a:
         af:26:54:be:6c:6d:81:b1:6f:1d:12:35:19:cc:93:e2:50:af:
         ec:c3:92:88:ea:32:ba:ab:48:c1:1c:11:a4:03:6b:ed:cc:52:
         7b:0b:f1:3e:f9:b5:c3:64:c6:ea:9d:3d:80:e9:f1:44:a0:8f:
         b2:4d:eb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:07:48 2026 by rpki-client