Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3132382e302f32332d3233203d3e203533303138.roa
File:                     3137372e37322e3132382e302f32332d3233203d3e203533303138.roa (raw, json)
Hash identifier:          71K64BGEnD5nFNVuOR5H8Yxt/9mW0HE5VlAWgZhkMaM=
Subject key identifier:   7E:0D:76:27:EF:36:66:4B:F1:6C:EC:CD:89:4B:E5:32:C3:81:E6:BA
Certificate issuer:       /CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
Certificate serial:       479F1D3962F42CB57EAF1556BF9FE1A44F0918B1
Authority key identifier: A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3132382e302f32332d3233203d3e203533303138.roa
Signing time:             Wed 10 Jun 2026 10:33:17 +0000
ROA not before:           Wed 10 Jun 2026 10:28:17 +0000
ROA not after:            Wed 09 Jun 2027 10:33:17 +0000
asID:                     53018
IP address blocks:        177.72.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl
                          rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 05:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9f:1d:39:62:f4:2c:b5:7e:af:15:56:bf:9f:e1:a4:4f:09:18:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A544DD2AA52098BFB87BA57914AB9400EAEE4FC0
        Validity
            Not Before: Jun 10 10:28:17 2026 GMT
            Not After : Jun  9 10:33:17 2027 GMT
        Subject: CN=7E0D7627EF36664BF16CECCD894BE532C381E6BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:58:71:d3:d9:3d:f8:38:d1:fc:c9:17:bd:ea:
                    22:89:f7:ec:2c:f1:18:d1:82:1b:5c:d8:f9:1b:8c:
                    d2:e3:55:e1:55:c3:f0:4c:ef:a2:f6:53:4c:8e:77:
                    71:44:2d:e5:fc:bc:c9:4d:f4:31:4c:51:c2:5a:ab:
                    dd:81:c7:d5:b8:03:e0:65:cd:03:50:15:80:94:be:
                    60:ff:00:ba:db:27:38:86:5f:93:fe:bf:31:ff:1b:
                    d9:46:a5:69:6a:a8:00:f8:4f:c5:2d:8a:b6:75:76:
                    89:e9:cf:59:ef:c0:aa:9d:ee:cd:23:7c:26:05:56:
                    8c:f9:9b:f8:74:0d:1d:a1:6c:ee:26:93:6f:67:ad:
                    3e:7a:1c:8a:b1:1f:cd:33:29:f7:df:2e:c3:ce:61:
                    1c:6d:08:dc:95:ec:fb:46:39:38:d4:7c:aa:10:1b:
                    49:5b:a3:f8:10:8d:c7:d0:9c:19:2a:7b:32:2a:a1:
                    62:fc:94:48:4e:e3:6f:ca:71:51:99:39:ee:7d:9e:
                    dd:2b:9c:97:54:b4:d3:12:77:47:bc:b5:b8:61:c6:
                    7c:03:b9:81:17:a0:b8:5f:eb:eb:99:a6:43:46:34:
                    bd:ff:51:5f:b0:de:12:7b:c6:cd:43:75:2e:73:15:
                    e0:8b:8a:77:7e:71:2c:3a:d3:73:33:4a:68:54:ea:
                    f0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0D:76:27:EF:36:66:4B:F1:6C:EC:CD:89:4B:E5:32:C3:81:E6:BA
            X509v3 Authority Key Identifier:
                keyid:A5:44:DD:2A:A5:20:98:BF:B8:7B:A5:79:14:AB:94:00:EA:EE:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A544DD2AA52098BFB87BA57914AB9400EAEE4FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/1/3137372e37322e3132382e302f32332d3233203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:f4:86:d7:58:33:1f:48:db:7d:c1:5d:13:7d:2c:c8:c2:d6:
         9e:e5:50:5f:bb:4d:e0:e3:20:e2:b9:66:58:9e:5c:43:f0:f9:
         cb:e5:12:62:bb:65:8c:24:b2:d7:d1:73:5d:41:ce:77:a5:6d:
         f6:c2:6e:45:dc:0a:e8:34:55:76:cb:e5:88:71:c0:a8:fd:43:
         65:1d:fb:d4:5f:1e:74:a2:81:f9:1f:f8:89:fa:c7:9c:ca:bf:
         c3:36:ca:e4:87:03:0b:83:5b:7f:c2:68:52:3f:e4:91:74:ac:
         ed:69:ba:b4:95:7d:d1:1b:d5:98:18:b3:f3:03:17:56:87:87:
         35:56:10:fa:5c:29:e6:d8:2d:40:8d:03:b5:e9:e4:7b:06:6c:
         10:14:bd:3e:18:b1:cc:a1:a3:06:b4:45:6e:e2:4c:82:80:e7:
         ee:6b:f1:35:86:fc:c6:05:d6:1d:38:21:ae:b2:6d:c4:b9:ef:
         56:ab:cd:db:c4:65:a7:5c:81:3f:be:53:19:f0:90:c2:a9:19:
         66:52:dc:32:88:56:ef:fb:41:eb:d3:fb:3a:df:e3:99:9d:65:
         6d:7b:a8:1e:f7:25:f7:fb:5d:93:2b:8f:56:78:25:72:bf:72:
         39:6e:f4:37:03:a9:a8:da:ac:8f:0e:50:65:3b:58:17:db:a9:
         4e:24:5f:67
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUR58dOWL0LLV+rxVWv5/hpE8JGLEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU0NEREMkFBNTIwOThCRkI4N0JBNTc5MTRBQjk0MDBF
QUVFNEZDMDAeFw0yNjA2MTAxMDI4MTdaFw0yNzA2MDkxMDMzMTdaMDMxMTAvBgNV
BAMTKDdFMEQ3NjI3RUYzNjY2NEJGMTZDRUNDRDg5NEJFNTMyQzM4MUU2QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhWHHT2T34ONH8yRe96iKJ9+ws
8RjRghtc2PkbjNLjVeFVw/BM76L2U0yOd3FELeX8vMlN9DFMUcJaq92Bx9W4A+Bl
zQNQFYCUvmD/ALrbJziGX5P+vzH/G9lGpWlqqAD4T8UtirZ1donpz1nvwKqd7s0j
fCYFVoz5m/h0DR2hbO4mk29nrT56HIqxH80zKfffLsPOYRxtCNyV7PtGOTjUfKoQ
G0lbo/gQjcfQnBkqezIqoWL8lEhO42/KcVGZOe59nt0rnJdUtNMSd0e8tbhhxnwD
uYEXoLhf6+uZpkNGNL3/UV+w3hJ7xs1DdS5zFeCLind+cSw603MzSmhU6vDRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfg12J+82ZkvxbOzNiUvlMsOB5rowHwYDVR0j
BBgwFoAUpUTdKqUgmL+4e6V5FKuUAOruT8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0U3Tk1BUnBnM2NQYzN0VVprRk1yS3pSdEdiNVJIdHlCR3B6dEZWV011
SmYvMS9BNTQ0REQyQUE1MjA5OEJGQjg3QkE1NzkxNEFCOTQwMEVBRUU0RkMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NDRERDJBQTUyMDk4QkZC
ODdCQTU3OTE0QUI5NDAwRUFFRTRGQzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFN05NQVJwZzNjUGMzdFVaa0ZNckt6UnRHYjVSSHR5QkdwenRGVldNdUpmLzEv
MzEzNzM3MmUzNzMyMmUzMTMyMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsUiAMA0GCSqGSIb3DQEBCwUAA4IBAQBv9IbXWDMf
SNt9wV0TfSzIwtae5VBfu03g4yDiuWZYnlxD8PnL5RJiu2WMJLLX0XNdQc53pW32
wm5F3AroNFV2y+WIccCo/UNlHfvUXx50ooH5H/iJ+secyr/DNsrkhwMLg1t/wmhS
P+SRdKztabq0lX3RG9WYGLPzAxdWh4c1VhD6XCnm2C1AjQO16eR7BmwQFL0+GLHM
oaMGtEVu4kyCgOfua/E1hvzGBdYdOCGusm3Eue9Wq83bxGWnXIE/vlMZ8JDCqRlm
UtwyiFbv+0Hr0/s63+OZnWVte6ge9yX3+12TK49WeCVyv3I5bvQ3A6mo2qyPDlBl
O1gX26lOJF9n
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:53:23 2026 by rpki-client